$ rpki-client -vvvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: 1+mwxsq7VakKop2iCLR9v7f9N0weDP4zvB4Mukn4DDw= Subject key identifier: 51:2C:16:7A:84:59:0B:C1:31:83:53:57:37:5E:46:FF:04:EF:B1:22 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1EB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1E9A Signing time: Tue 06 Oct 2026 16:04:39 +0000 Manifest this update: Tue 06 Oct 2026 16:04:38 +0000 Manifest next update: Tue 13 Oct 2026 16:04:38 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: bsVQFLTfmFpv1jqxnZBdDQpYndGd+tPIK0D17XEwPgI=) 2: 1D57FF40A01311E684546521C4F9AE02.roa (hash: lNaIu73lqivuKf4impc1RoL9Iorynr8Oq1i414eOVLY=) 3: 4865DD00A13B11E687921078C4F9AE02.roa (hash: ct9I/aMYPGYqo53jKTnyxK/j3JeT25nkuXtpX13/eJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7861 (0x1eb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Oct 6 16:04:38 2026 GMT Not After : Oct 13 16:04:38 2026 GMT Subject: CN=6ac51c17-a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b9:fa:3f:0b:1d:e4:6d:3f:d3:98:ec:12:5c: 34:ca:d9:6a:33:f3:df:57:a7:f8:de:4d:ee:b3:80: c7:06:00:b1:b7:bd:5a:9d:91:6f:91:78:4f:a9:17: c9:f5:e6:c7:28:b7:19:64:e4:b7:bb:fd:1b:b5:6b: 05:65:9f:ce:75:fd:14:96:47:d5:af:fc:e9:38:87: 8f:df:ff:35:81:08:6f:58:ed:7d:97:da:aa:ed:64: 28:85:00:c2:0a:49:fa:06:ac:33:c5:20:35:f4:c3: af:d2:18:fe:29:b9:b9:cc:f1:be:2c:84:9e:73:63: d4:ba:a4:04:a1:fd:a8:5a:a0:bd:4f:45:0c:a1:d9: cc:26:e2:2e:07:6b:9d:36:2a:1e:4f:00:b5:54:e4: 35:e5:aa:df:27:ea:17:60:a6:54:39:fc:55:85:2c: 57:bf:e6:c2:55:f9:8c:73:f9:49:91:87:9c:19:3f: 56:14:db:7b:31:78:a7:97:63:81:75:bf:40:6e:dd: 1b:35:4b:9e:bc:00:eb:84:4c:08:e9:d4:e2:36:f7: 6e:c8:d8:d5:20:0a:56:7a:de:fb:91:e4:74:24:c0: b3:6d:a4:f5:11:15:48:77:52:e2:7e:49:90:91:ef: 5b:5f:21:37:35:7c:97:f3:e3:50:af:fe:93:31:96: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:16:7A:84:59:0B:C1:31:83:53:57:37:5E:46:FF:04:EF:B1:22 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f0:ac:f0:22:7d:69:c5:f9:a0:f8:9e:eb:21:00:45:d2:80: 34:ac:f8:f7:13:c2:94:14:64:25:7f:3e:3c:21:01:dd:71:23: d4:e4:cf:65:51:40:87:dd:f4:73:ad:fe:27:f2:3f:5f:b3:4c: 79:35:20:5b:4b:24:3d:81:c1:0f:f1:da:9d:66:f3:f4:07:88: 9b:ee:12:cd:a2:00:02:ba:20:b7:5a:91:fe:99:d9:d4:13:17: c9:a2:e3:fa:be:02:3a:10:3f:85:3c:03:1d:43:04:fe:a3:7f: c4:61:f8:01:bb:3b:db:25:be:eb:e7:93:58:69:34:f6:db:a2: 36:88:75:d7:b0:f3:50:85:6b:75:ab:d7:20:3b:7d:17:9f:0f: 1d:55:f7:8f:fa:8c:6a:31:75:1b:b5:52:25:a8:83:8e:4d:3c: 64:d4:32:6e:95:ea:16:ae:f1:2b:c5:26:09:b2:b1:e3:54:1d: 36:6c:3e:21:c4:4a:ae:85:71:8c:a6:c0:89:fc:fc:70:8c:59: a4:39:d3:ef:51:1d:4f:69:07:ee:53:0f:4c:55:c5:c9:a3:34: d9:eb:c4:73:b5:12:88:bb:91:78:8c:a9:b4:9a:26:60:0e:7e: d9:8b:6e:d8:59:4a:e5:47:43:fa:b6:8b:53:50:fc:c8:5c:c0: cb:07:bc:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjYxMDA2MTYwNDM4WhcNMjYxMDEzMTYwNDM4WjAYMRYwFAYD VQQDEw02YWM1MWMxNy1hMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAibn6Pwsd5G0/05jsElw0ytlqM/PfV6f43k3us4DHBgCxt71anZFvkXhPqRfJ 9ebHKLcZZOS3u/0btWsFZZ/Odf0UlkfVr/zpOIeP3/81gQhvWO19l9qq7WQohQDC Ckn6BqwzxSA19MOv0hj+Kbm5zPG+LISec2PUuqQEof2oWqC9T0UModnMJuIuB2ud NioeTwC1VOQ15arfJ+oXYKZUOfxVhSxXv+bCVfmMc/lJkYecGT9WFNt7MXinl2OB db9Abt0bNUuevADrhEwI6dTiNvduyNjVIApWet77keR0JMCzbaT1ERVId1LifkmQ ke9bXyE3NXyX8+NQr/6TMZZVuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEsFnqE WQvBMYNTVzdeRv8E77EiMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAffCs8CJ9acX5oPie6yEARdKANKz49xPClBRkJX8+PCEB3XEj1OTPZVFAh930 c63+J/I/X7NMeTUgW0skPYHBD/HanWbz9AeIm+4SzaIAArogt1qR/pnZ1BMXyaLj +r4COhA/hTwDHUME/qN/xGH4Abs72yW+6+eTWGk09tuiNoh117DzUIVrdavXIDt9 F58PHVX3j/qMajF1G7VSJaiDjk08ZNQybpXqFq7xK8UmCbKx41QdNmw+IcRKroVx jKbAifz8cIxZpDnT71EdT2kH7lMPTFXFyaM02evEc7USiLuReIyptJomYA5+2Ytu 2FlK5UdD+raLU1D8yFzAywe8UQ== -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:58 2026 by rpki-client