$ rpki-client -vvvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft File: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json) Hash identifier: QRZkvMIELm4FdFppw5m8VenJwK2WfXlI1nQKgrMIvDA= Subject key identifier: 0D:4C:62:6F:42:63:38:2A:2B:38:61:B7:67:85:C9:56:A4:99:F4:17 Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73 Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft Manifest number: D3 Signing time: Wed 23 Sep 2026 06:33:35 +0000 Manifest this update: Wed 23 Sep 2026 06:33:34 +0000 Manifest next update: Wed 30 Sep 2026 06:33:34 +0000 Files and hashes: 1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: uwv+ryo1fvUV4JzYNM0WZI94NusaFQrnIMcHYy9E3Ak=) 2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173 Validity Not Before: Sep 23 06:33:34 2026 GMT Not After : Sep 30 06:33:34 2026 GMT Subject: CN=6ab372bf-21a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:28:2e:67:b8:c2:44:d5:79:63:75:4b:d8: 4a:ad:b7:32:69:1b:9b:2b:24:11:4b:24:a4:4a:78: 2d:f8:02:f8:62:2c:ae:f1:c2:9a:db:18:9b:62:af: 3d:c1:3a:2c:7a:98:47:1e:76:6b:5b:2f:bf:1d:66: 4f:42:0c:6c:2c:11:f4:bd:18:31:e0:33:f2:e7:f5: 26:62:f3:1c:fc:2b:de:e7:b0:b3:9c:bf:97:63:e0: 17:78:bb:cc:2f:f3:a5:30:26:6b:23:ee:70:1e:cd: 23:8f:e2:2c:eb:1f:2b:6c:75:2f:87:f5:0e:60:c6: 97:6f:50:00:ee:c0:3d:ba:6d:73:24:a9:d7:12:63: 21:30:57:7f:2e:9b:b7:cf:eb:94:c7:3d:f8:17:41: 1a:47:70:c9:1c:eb:4a:21:de:b4:fe:b5:da:a5:09: 5c:fd:86:20:18:18:65:ad:ee:0c:76:f3:d0:3a:68: 4f:63:5c:f3:78:a8:e5:d8:c0:fb:79:7f:2d:c7:c9: 6f:a4:ac:37:a0:df:a0:e8:c3:b9:48:48:c1:42:06: 28:8a:dc:03:71:a9:4e:54:34:7a:06:b5:9e:70:25: af:89:40:57:72:d3:13:f2:03:7f:a2:61:a9:64:80: 42:f4:0b:5d:cd:e5:55:f6:d7:ed:e2:2f:f6:07:09: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:62:6F:42:63:38:2A:2B:38:61:B7:67:85:C9:56:A4:99:F4:17 X509v3 Authority Key Identifier: keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:5b:de:e0:f0:c0:1b:bd:c1:f6:37:34:76:6b:27:5e:04:f5: f4:49:fa:3c:b3:24:3e:a9:b6:b5:78:1b:42:70:c8:66:e8:0d: b2:3f:5b:2b:7f:c6:23:8c:20:d0:cc:a3:e3:c9:d1:e2:61:81: 46:86:34:bf:8a:5b:0d:68:55:76:3a:6a:75:fc:3e:42:ff:1c: 48:51:98:13:21:55:c7:42:44:80:76:73:42:1e:80:1e:ae:fd: 7d:1d:67:43:be:2d:7f:e2:3c:55:71:c0:07:3d:f9:81:6e:dc: 52:58:17:a1:e3:3b:66:8f:5b:53:82:d2:02:8c:71:26:56:21: 4c:04:c9:60:58:21:2e:94:bb:6f:6c:32:3b:6b:af:7f:89:43: a1:e6:23:98:72:e5:4b:f6:07:1d:45:41:5d:09:9a:1c:5c:16: 0e:88:99:f8:0c:79:7a:d5:c6:e1:e6:53:80:63:3a:e9:84:da: 59:c9:7f:53:fb:e6:5a:f6:09:4c:e6:41:19:5d:a8:f0:43:8e: 19:3b:ab:a9:c8:ea:36:8e:c2:a8:4c:77:29:ef:f5:79:82:4f: aa:fe:88:4a:e8:e9:bf:80:75:60:ef:6a:a8:e8:79:0e:e9:df: 9e:ee:c8:36:e1:d6:9d:fa:af:0c:be:5e:21:58:6f:16:80:12: 24:e8:45:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QjMxMTAvBgNVBAUTKEU1NzI2MUZGQzgxMDcxNDA3OTM0QjY1MDRBMjJCQkEz QzE1MEUxNzMwHhcNMjYwOTIzMDYzMzM0WhcNMjYwOTMwMDYzMzM0WjAYMRYwFAYD VQQDEw02YWIzNzJiZi0yMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDgoLme4wkTVeWN1S9hKrbcyaRubKyQRSySkSngt+AL4Yiyu8cKa2xibYq89 wTosephHHnZrWy+/HWZPQgxsLBH0vRgx4DPy5/UmYvMc/Cve57CznL+XY+AXeLvM L/OlMCZrI+5wHs0jj+Is6x8rbHUvh/UOYMaXb1AA7sA9um1zJKnXEmMhMFd/Lpu3 z+uUxz34F0EaR3DJHOtKId60/rXapQlc/YYgGBhlre4MdvPQOmhPY1zzeKjl2MD7 eX8tx8lvpKw3oN+g6MO5SEjBQgYoitwDcalOVDR6BrWecCWviUBXctMT8gN/omGp ZIBC9AtdzeVV9tft4i/2BwmcrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1MYm9C YzgqKzhht2eFyVakmfQXMB8GA1UdIwQYMBaAFOVyYf/IEHFAeTS2UEoiu6PBUOFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlCMy83NTcwMDE0Mjgz QUMxMUYwQUQ1NDBEMUJDNEY5QUUwMi81WEpoXzhnUWNVQjVOTFpRU2lLN284RlE0 WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVYSmhfOGdRY1VCNU5MWlFTaUs3bzhGUTRYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlCMy83NTcwMDE0MjgzQUMxMUYwQUQ1NDBEMUJDNEY5QUUwMi81WEpoXzhnUWNV QjVOTFpRU2lLN284RlE0WE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu1ve4PDAG73B9jc0dmsnXgT19En6PLMkPqm2tXgbQnDIZugNsj9bK3/GI4wg 0Myj48nR4mGBRoY0v4pbDWhVdjpqdfw+Qv8cSFGYEyFVx0JEgHZzQh6AHq79fR1n Q74tf+I8VXHABz35gW7cUlgXoeM7Zo9bU4LSAoxxJlYhTATJYFghLpS7b2wyO2uv f4lDoeYjmHLlS/YHHUVBXQmaHFwWDoiZ+Ax5etXG4eZTgGM66YTaWcl/U/vmWvYJ TOZBGV2o8EOOGTurqcjqNo7CqEx3Ke/1eYJPqv6ISujpv4B1YO9qqOh5Dunfnu7I NuHWnfqvDL5eIVhvFoASJOhFmw== -----END CERTIFICATE-----Generated at Thu Sep 24 11:22:52 2026 by rpki-client