$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: bTwrX1oQ4hHcw2jTcOK3q1ogUjH2bAn3iw7cQzfzGkw= Subject key identifier: 67:FD:5B:9D:66:D5:7C:C6:F7:97:AC:95:CB:15:97:64:0F:18:00:EE Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 054B Signing time: Sun 20 Sep 2026 16:56:55 +0000 Manifest this update: Sun 20 Sep 2026 16:56:55 +0000 Manifest next update: Sun 27 Sep 2026 16:56:55 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: 7Rga+IrmmOl/46rErP+M+xmYLDIzuFWfWm1oTIPHWgo=) 2: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: 76p1LWBSiAURuIgRIP/lu1qZCJd79sZFpOsF7Mk4V7g=) 3: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: 5Z7fKb2b95O7xf2REenK7dbH8KrSrAmTwTpVkXBeeOI=) 4: 1479C514596A11ECB1394271C4F9AE02.roa (hash: wpAJJYnFAicDNwa71hcmrPmPcdiAdvkl0r/mHo7+0do=) 5: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=) 6: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY=) 7: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Ylv7wHI65XMnQYhoDyQSygUwHrURYMjzNieL/UaPiGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Sep 20 16:56:55 2026 GMT Not After : Sep 27 16:56:55 2026 GMT Subject: CN=6ab01057-1f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:0a:fa:a6:3c:8b:e9:ba:2c:0e:12:83:96: e6:fb:28:20:4e:86:0c:03:d1:b5:55:bf:89:fe:1d: b2:08:b8:41:fd:fb:7b:82:96:1f:9b:0e:b7:e1:58: c7:8b:87:7c:04:6a:26:e2:f8:f2:d7:0e:6a:bf:b2: d7:fc:45:1f:e7:ca:50:66:bf:38:57:32:cc:2f:59: 68:3f:fb:16:c6:78:ff:1f:c3:40:0f:15:9f:3d:ec: 87:f1:05:0a:52:5b:36:99:4a:8f:78:81:02:2e:8a: eb:ab:ec:13:f8:d5:f3:ee:31:91:c6:6d:5d:3f:86: 44:e5:02:9e:ed:21:c0:d5:02:91:2b:9c:7a:af:3c: 2b:46:e3:63:48:50:f8:07:13:77:22:c3:b9:23:86: 51:3e:f0:bd:32:c5:ed:9c:0f:62:4d:01:4c:34:8a: 83:73:83:3d:34:4d:b7:18:86:40:4f:a8:ac:24:fe: 2a:c8:fd:4f:64:75:3f:42:1e:05:1d:be:24:89:2c: 0b:64:36:b3:c8:7b:66:54:86:ce:c0:06:dd:9c:d6: 8e:72:82:c1:4c:37:87:76:91:85:bd:02:04:af:bc: ad:62:92:ed:6b:e4:a5:98:8c:da:e2:81:8e:18:df: d5:2d:53:79:7d:b1:42:c5:a1:ac:40:6a:72:46:89: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:5B:9D:66:D5:7C:C6:F7:97:AC:95:CB:15:97:64:0F:18:00:EE X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:e9:b9:69:51:58:51:67:9d:01:cc:78:3d:29:8f:21:68:16: 70:5a:70:dc:32:e3:85:a1:53:2d:92:47:b9:76:9f:08:99:9c: 7a:9c:bd:e4:cf:9c:12:13:80:78:11:fe:7e:5b:92:aa:28:9b: b6:eb:e8:1f:e8:78:75:1d:75:58:ed:42:41:79:f1:4d:71:0f: 36:48:6c:d9:84:cc:b1:df:b9:35:9d:f6:af:a7:f3:57:23:ec: 3e:29:93:c2:f8:6c:49:ca:10:87:06:f2:48:80:fb:c9:41:bf: 9e:22:a0:3e:71:1b:4d:9a:e5:83:4c:be:21:0b:c3:bb:4c:d0: 52:f1:82:87:64:ce:7b:55:94:a1:1e:52:19:eb:3b:59:14:80: 4b:1c:71:5e:48:8c:9f:f5:75:cb:33:17:c7:dc:fe:34:0e:01: c0:1d:53:bc:fa:d2:31:2f:5d:68:44:56:14:a7:e0:f5:f4:eb: 57:c5:4a:7a:42:3d:06:df:9e:55:f8:2d:bc:c3:9a:31:7d:9e: 3e:97:43:f6:d6:44:79:a6:08:a5:d0:3b:83:8c:93:ad:8a:6d: 3b:2e:50:82:16:5a:b3:54:5d:85:03:7f:96:f9:9e:b1:95:12: f6:f9:2e:0c:bb:61:a0:47:d3:af:f8:e7:8d:e2:97:85:a1:b2: 68:25:dc:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjYwOTIwMTY1NjU1WhcNMjYwOTI3MTY1NjU1WjAYMRYwFAYD VQQDEw02YWIwMTA1Ny0xZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCoK+qY8i+m6LA4Sg5bm+yggToYMA9G1Vb+J/h2yCLhB/ft7gpYfmw634VjH i4d8BGom4vjy1w5qv7LX/EUf58pQZr84VzLML1loP/sWxnj/H8NADxWfPeyH8QUK Uls2mUqPeIECLorrq+wT+NXz7jGRxm1dP4ZE5QKe7SHA1QKRK5x6rzwrRuNjSFD4 BxN3IsO5I4ZRPvC9MsXtnA9iTQFMNIqDc4M9NE23GIZAT6isJP4qyP1PZHU/Qh4F Hb4kiSwLZDazyHtmVIbOwAbdnNaOcoLBTDeHdpGFvQIEr7ytYpLta+SlmIza4oGO GN/VLVN5fbFCxaGsQGpyRokNrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGf9W51m 1XzG95eslcsVl2QPGADuMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzOm5aVFYUWedAcx4PSmPIWgWcFpw3DLjhaFTLZJHuXafCJmcepy95M+cEhOA eBH+fluSqiibtuvoH+h4dR11WO1CQXnxTXEPNkhs2YTMsd+5NZ32r6fzVyPsPimT wvhsScoQhwbySID7yUG/niKgPnEbTZrlg0y+IQvDu0zQUvGCh2TOe1WUoR5SGes7 WRSASxxxXkiMn/V1yzMXx9z+NA4BwB1TvPrSMS9daERWFKfg9fTrV8VKekI9Bt+e VfgtvMOaMX2ePpdD9tZEeaYIpdA7g4yTrYptOy5QghZas1RdhQN/lvmesZUS9vku DLthoEfTr/jnjeKXhaGyaCXcog== -----END CERTIFICATE-----Generated at Mon Sep 21 09:59:10 2026 by rpki-client