$ rpki-client -vvvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: 11QQZ8haVNMQQ3h8ej9X1dDe/Y6znO+hTL1VR0XVfIY= Subject key identifier: 36:AC:89:EB:A5:D3:62:F4:D1:2D:A8:4F:FD:88:3E:01:55:89:FE:F2 Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 1158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 1148 Signing time: Sun 20 Sep 2026 17:13:08 +0000 Manifest this update: Sun 20 Sep 2026 17:13:08 +0000 Manifest next update: Sun 27 Sep 2026 17:13:08 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: mzWwXqLKHvAPdUaIaJtG5NcLHh04dJKa6OUNoCFakRw=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: IG0t1VHluhfPiafs+6si8BI2lajDC2N00y2Pwi8hIl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4440 (0x1158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Sep 20 17:13:08 2026 GMT Not After : Sep 27 17:13:08 2026 GMT Subject: CN=6ab01424-4286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:a4:32:36:1b:4f:0c:f0:da:73:9f:7d:94: 30:29:b7:96:50:2e:20:33:70:a1:85:03:d0:71:c7: df:fb:28:01:26:08:95:d0:93:48:f9:5a:ac:e6:77: 9d:da:85:ee:48:93:3c:d6:c1:8e:b1:ab:71:d1:d6: 5f:4b:f1:bb:d0:71:0f:71:b3:b0:90:79:cd:da:12: 14:bf:6d:f7:15:db:63:1c:11:97:2c:8f:8e:23:b6: 7c:94:91:82:b4:89:17:8e:b1:b0:87:e6:6a:60:c3: 2b:39:58:6c:01:d0:3f:4c:f3:d3:28:ce:d7:00:70: 38:e1:b7:16:27:bd:c9:5f:fb:40:fa:00:ad:d6:5b: f5:75:8a:da:43:da:46:88:ae:d6:9f:d6:2b:b5:c2: 49:56:1e:bf:47:dc:7b:a7:2a:5e:b2:9e:6e:47:df: f8:33:ef:8f:7a:b9:ce:28:c0:77:a2:75:b7:6d:c9: b8:59:fc:82:16:7a:8e:0f:da:4e:3f:35:aa:2d:ea: e1:89:cd:fd:4f:c1:c6:55:79:cc:e3:e3:ec:66:a8: be:2b:50:9c:41:46:9e:68:25:b2:53:6a:a2:91:26: 35:b3:09:35:7e:69:4c:01:f4:1f:79:81:e9:c5:19: a5:41:a4:45:bf:c7:46:7c:02:31:b5:97:8e:87:ab: 13:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AC:89:EB:A5:D3:62:F4:D1:2D:A8:4F:FD:88:3E:01:55:89:FE:F2 X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f6:8d:1a:77:44:a7:f7:c7:49:6a:77:b5:07:32:a6:0a:97: a7:da:76:13:14:92:57:e2:f4:f1:02:d5:f5:51:41:05:a7:64: f2:b0:9d:d9:23:a4:5e:ab:52:b1:8d:cd:39:47:4e:b9:f0:9f: 4e:71:eb:ba:c9:1c:f1:b7:2f:e7:69:ec:78:d1:65:f4:a1:b4: 15:3a:a8:12:b1:3d:99:ae:c5:88:0b:1c:17:fa:b7:34:06:49: c7:10:f3:35:df:ee:68:0c:c2:99:3f:f2:e4:35:be:7e:51:fa: d2:57:79:95:5b:51:f5:fd:41:d8:09:b1:83:9e:28:70:76:7a: 1a:b8:84:08:b7:b8:7d:7b:66:8e:c9:19:6a:39:07:3e:e5:db: 17:ea:a1:23:29:51:88:a4:8a:16:30:97:9e:97:f9:bc:27:93: ce:35:e6:3c:04:76:a1:fe:8e:cb:9d:7e:3c:24:89:10:11:cf: ec:91:d4:69:7d:bb:2c:b8:c9:9a:14:a6:6f:f7:86:06:d2:62: ae:9c:c2:4c:0a:d1:d8:ad:5d:ea:76:d5:72:2a:2e:20:af:3c: 38:aa:7f:f6:39:2c:0f:57:1c:e3:40:6c:87:21:60:6a:66:94: 60:dc:47:14:52:83:f1:d0:32:86:68:ee:d3:4a:ba:98:ae:c5: 41:ad:9c:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjYwOTIwMTcxMzA4WhcNMjYwOTI3MTcxMzA4WjAYMRYwFAYD VQQDEw02YWIwMTQyNC00Mjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySikMjYbTwzw2nOffZQwKbeWUC4gM3ChhQPQccff+ygBJgiV0JNI+Vqs5ned 2oXuSJM81sGOsatx0dZfS/G70HEPcbOwkHnN2hIUv233FdtjHBGXLI+OI7Z8lJGC tIkXjrGwh+ZqYMMrOVhsAdA/TPPTKM7XAHA44bcWJ73JX/tA+gCt1lv1dYraQ9pG iK7Wn9YrtcJJVh6/R9x7pypesp5uR9/4M++PernOKMB3onW3bcm4WfyCFnqOD9pO PzWqLerhic39T8HGVXnM4+PsZqi+K1CcQUaeaCWyU2qikSY1swk1fmlMAfQfeYHp xRmlQaRFv8dGfAIxtZeOh6sTowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDasieul 02L00S2oT/2IPgFVif7yMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACvaNGndEp/fHSWp3tQcypgqXp9p2ExSSV+L08QLV9VFBBadk8rCd2SOkXqtS sY3NOUdOufCfTnHruskc8bcv52nseNFl9KG0FTqoErE9ma7FiAscF/q3NAZJxxDz Nd/uaAzCmT/y5DW+flH60ld5lVtR9f1B2Amxg54ocHZ6GriECLe4fXtmjskZajkH PuXbF+qhIylRiKSKFjCXnpf5vCeTzjXmPAR2of6Oy51+PCSJEBHP7JHUaX27LLjJ mhSmb/eGBtJirpzCTArR2K1d6nbVciouIK88OKp/9jksD1cc40BshyFgamaUYNxH FFKD8dAyhmju00q6mK7FQa2cuQ== -----END CERTIFICATE-----Generated at Tue Sep 22 12:42:53 2026 by rpki-client