$ rpki-client -vvvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: Ng9eHwyh5p/Jj7D437j7ngNcaaIS/9ZHexS5N6BkJ3g= Subject key identifier: 5F:CC:E2:A9:6C:85:EE:73:4C:F4:4B:BE:A7:D9:13:6E:31:6F:7D:BB Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 35B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 3595 Signing time: Tue 22 Sep 2026 14:53:54 +0000 Manifest this update: Tue 22 Sep 2026 14:53:53 +0000 Manifest next update: Tue 29 Sep 2026 14:53:53 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: ajSzbu/Cdq+M9/Q0uSppXDQTePTP1Ft37sOvTr1Q9fk=) 2: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=) 3: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: S2c0dPwfKB8uOTngnalR9yGh9E58M2GB2TBOuFJZKU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13748 (0x35b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Sep 22 14:53:53 2026 GMT Not After : Sep 29 14:53:53 2026 GMT Subject: CN=6ab29682-91be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d9:25:a8:b0:eb:6f:09:8d:c4:7b:53:f3:9f: 68:7f:be:31:64:25:d8:de:67:d5:40:64:69:a0:72: a8:51:d1:83:7d:b1:f3:c1:63:a6:83:73:b2:58:98: 8a:7f:d2:e4:4c:16:37:4c:6b:e7:c1:1b:aa:62:06: a5:23:ff:68:f3:6a:93:8c:28:f7:4e:bc:92:3d:2d: c8:89:e4:1a:78:3c:a5:86:99:50:87:0b:bd:98:a3: c1:7a:6f:4a:69:82:fe:61:db:22:3d:5b:1b:14:8a: 2a:4e:6a:08:cf:6b:b7:76:e7:cd:81:3e:06:bc:49: b2:48:24:33:5c:ee:78:15:e2:3b:3b:f3:54:71:1d: 3f:a2:f9:26:e4:a7:58:3b:20:0b:21:47:4c:89:99: b0:fc:00:e8:3b:ad:fb:2f:de:e1:b8:f9:1f:d6:24: 87:94:d9:ae:67:87:bb:9a:79:46:8e:2b:d7:d1:9b: ac:db:5f:8d:d9:cc:8e:88:68:01:7a:f3:23:58:5a: 89:57:a4:36:a3:b9:b0:df:bc:39:bd:73:16:2f:c5: 20:9c:60:6c:df:2c:b9:44:08:34:47:8a:2c:fe:d4: e7:2b:b8:2e:b3:ef:e7:7c:ef:0b:04:19:32:95:c3: 76:dc:ec:18:ea:0a:77:6a:48:e6:e9:39:e3:f1:5c: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CC:E2:A9:6C:85:EE:73:4C:F4:4B:BE:A7:D9:13:6E:31:6F:7D:BB X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6b:0f:5e:fc:89:c4:78:cd:a9:6c:74:38:ea:79:3e:ed:c2: 36:4a:d0:3e:f5:8a:6a:e3:10:8b:76:d4:1e:0b:03:e5:da:25: 4d:01:5a:ac:c3:68:c9:1b:04:bf:08:13:d3:46:f3:65:a6:c4: 11:69:5d:a9:79:95:17:82:9c:05:20:87:c9:66:aa:b5:60:3c: e7:8f:c6:8a:2f:99:b4:68:ff:ec:4f:28:e1:35:a3:52:da:82: 45:33:33:33:98:f4:3a:7a:67:be:61:98:0f:82:af:8b:e6:f8: 4c:e8:ff:c9:f3:58:db:9e:4d:07:74:60:25:ed:9c:0b:d4:9d: e1:5a:11:98:b6:6a:e9:de:0c:c4:87:3f:63:d7:5a:f0:88:4e: 5f:5c:d2:9d:39:4c:3f:45:c0:ce:1b:0b:79:20:ec:c1:d3:71: b9:12:37:6b:ef:a8:83:ed:66:5b:db:8b:24:4e:96:d6:c0:82: 83:72:97:2f:39:5e:e5:48:e0:0a:c9:60:3f:47:60:a0:32:f7: d9:ae:b9:77:66:e3:2e:8d:04:9d:19:0f:9f:e3:c5:ba:c2:e1: 1a:16:e5:74:7e:f7:c8:8a:0b:28:36:9d:94:71:5e:6a:d2:15: 69:d7:03:25:4e:09:4c:75:4b:48:99:e6:f6:ea:88:6f:40:8e: ab:07:85:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjYwOTIyMTQ1MzUzWhcNMjYwOTI5MTQ1MzUzWjAYMRYwFAYD VQQDEw02YWIyOTY4Mi05MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+9klqLDrbwmNxHtT859of74xZCXY3mfVQGRpoHKoUdGDfbHzwWOmg3OyWJiK f9LkTBY3TGvnwRuqYgalI/9o82qTjCj3TrySPS3IieQaeDylhplQhwu9mKPBem9K aYL+YdsiPVsbFIoqTmoIz2u3dufNgT4GvEmySCQzXO54FeI7O/NUcR0/ovkm5KdY OyALIUdMiZmw/ADoO637L97huPkf1iSHlNmuZ4e7mnlGjivX0Zus21+N2cyOiGgB evMjWFqJV6Q2o7mw37w5vXMWL8UgnGBs3yy5RAg0R4os/tTnK7gus+/nfO8LBBky lcN23OwY6gp3akjm6Tnj8VzhTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/M4qls he5zTPRLvqfZE24xb327MB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfGsPXvyJxHjNqWx0OOp5Pu3CNkrQPvWKauMQi3bUHgsD5dolTQFarMNoyRsE vwgT00bzZabEEWldqXmVF4KcBSCHyWaqtWA854/Gii+ZtGj/7E8o4TWjUtqCRTMz M5j0OnpnvmGYD4Kvi+b4TOj/yfNY255NB3RgJe2cC9Sd4VoRmLZq6d4MxIc/Y9da 8IhOX1zSnTlMP0XAzhsLeSDswdNxuRI3a++og+1mW9uLJE6W1sCCg3KXLzle5Ujg CslgP0dgoDL32a65d2bjLo0EnRkPn+PFusLhGhbldH73yIoLKDadlHFeatIVadcD JU4JTHVLSJnm9uqIb0COqweFFw== -----END CERTIFICATE-----Generated at Wed Sep 23 07:24:28 2026 by rpki-client