$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: opFBBXhscJ9ukPPLnZjT4q1aSC6iQ/scacKIBk7VyT4= Subject key identifier: 62:E4:F5:D5:D8:3C:3C:F4:F2:82:79:B2:74:80:21:E0:55:0A:B6:EF Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 036A Signing time: Mon 21 Sep 2026 00:45:42 +0000 Manifest this update: Mon 21 Sep 2026 00:45:41 +0000 Manifest next update: Mon 28 Sep 2026 00:45:41 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: pQ+vAAtRJz/jE0MUiWxWy1HVcXvnmYW7vDJiPs3Qjes=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Sep 21 00:45:41 2026 GMT Not After : Sep 28 00:45:41 2026 GMT Subject: CN=6ab07e35-45cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:3c:1c:b0:a2:b1:a3:91:31:32:d8:d1:57: 5a:bf:ea:a4:5e:fd:ac:06:d3:39:0d:43:0e:e7:bc: be:28:4e:a0:34:b8:69:12:f4:91:9a:4a:65:29:00: 3b:5a:95:ed:ae:ae:84:e4:69:5a:bf:bc:ce:8b:4b: e6:f5:84:76:de:01:24:24:f5:10:1d:c3:3f:0e:c5: e3:07:93:49:71:10:8f:d0:cd:00:a5:e2:fe:cc:0b: d6:fe:ec:42:ed:ad:ef:2c:86:a1:fb:e1:64:a2:34: 19:41:61:d4:cc:c0:9a:c5:25:c3:98:51:59:b5:ae: ed:e5:2a:b0:d3:f3:9f:81:41:51:6c:d5:a5:99:40: 70:50:7d:6f:b1:0c:7b:69:8b:dc:09:dd:69:61:6a: 9f:19:96:0a:b5:67:5d:a6:f3:5c:9a:d7:bc:15:1e: 45:3b:76:57:88:6a:d9:c8:56:1a:99:4b:b8:4c:75: 5b:11:c4:bd:9b:f5:ac:81:cf:9e:9f:00:6d:64:df: 65:15:5e:50:cd:de:cd:c2:f6:bf:42:fd:9a:f3:f8: 67:28:d3:dc:46:9d:19:b5:7e:ae:ff:9a:f8:1e:f7: f4:2b:27:14:4f:0d:ae:07:1a:33:95:98:60:6d:ab: 76:4a:73:b2:bc:a2:a7:c2:46:2f:f7:d0:b1:21:3e: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E4:F5:D5:D8:3C:3C:F4:F2:82:79:B2:74:80:21:E0:55:0A:B6:EF X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:00:a8:63:26:57:c8:11:22:e5:5f:b1:2a:1f:0d:4e:3d:eb: d9:94:44:a9:d3:7b:22:33:eb:d2:04:8d:fe:3c:db:98:ab:a8: 70:47:05:0f:12:e2:9e:a6:ae:4d:15:6e:7b:3c:8e:44:19:b8: 9e:aa:20:d2:3c:61:1d:bd:9f:6b:68:dc:0a:81:14:1d:c5:b5: ec:af:fa:03:cb:29:18:60:75:96:af:57:e6:6c:a7:76:16:36: 33:f5:29:34:7e:b0:b0:83:eb:c8:45:5c:0d:9d:29:9b:8f:30: e0:f9:4f:7c:83:f7:58:8a:08:9e:8f:d8:9f:e2:01:b1:70:57: 04:64:46:20:ce:f9:8a:27:cc:7f:9f:5c:ff:97:76:5c:29:76: 5b:47:1d:f7:3d:02:72:97:99:6b:e0:d7:26:fc:0e:62:dc:b6: bb:58:d7:56:22:5d:8a:f6:29:6a:c1:d2:2d:12:81:62:fc:c1: 29:2a:81:f4:e8:21:5f:16:72:2b:29:e7:b3:b6:20:ba:16:87: 76:fb:87:1b:68:3a:8b:23:eb:89:61:75:14:22:e9:a3:25:fc: 4c:3d:15:2b:98:52:00:39:a9:a0:93:72:b2:3d:78:36:a6:6a: 35:8f:34:8e:4d:1f:18:01:ca:55:21:3d:30:cb:9d:fc:41:c1: fa:11:bb:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjYwOTIxMDA0NTQxWhcNMjYwOTI4MDA0NTQxWjAYMRYwFAYD VQQDEw02YWIwN2UzNS00NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNo8HLCisaORMTLY0Vdav+qkXv2sBtM5DUMO57y+KE6gNLhpEvSRmkplKQA7 WpXtrq6E5Glav7zOi0vm9YR23gEkJPUQHcM/DsXjB5NJcRCP0M0ApeL+zAvW/uxC 7a3vLIah++FkojQZQWHUzMCaxSXDmFFZta7t5Sqw0/OfgUFRbNWlmUBwUH1vsQx7 aYvcCd1pYWqfGZYKtWddpvNcmte8FR5FO3ZXiGrZyFYamUu4THVbEcS9m/Wsgc+e nwBtZN9lFV5Qzd7Nwva/Qv2a8/hnKNPcRp0ZtX6u/5r4Hvf0KycUTw2uBxozlZhg bat2SnOyvKKnwkYv99CxIT4M5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLk9dXY PDz08oJ5snSAIeBVCrbvMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQgCoYyZXyBEi5V+xKh8NTj3r2ZREqdN7IjPr0gSN/jzbmKuocEcFDxLinqau TRVuezyORBm4nqog0jxhHb2fa2jcCoEUHcW17K/6A8spGGB1lq9X5myndhY2M/Up NH6wsIPryEVcDZ0pm48w4PlPfIP3WIoIno/Yn+IBsXBXBGRGIM75iifMf59c/5d2 XCl2W0cd9z0CcpeZa+DXJvwOYty2u1jXViJdivYpasHSLRKBYvzBKSqB9OghXxZy Kynns7YguhaHdvuHG2g6iyPriWF1FCLpoyX8TD0VK5hSADmpoJNysj14NqZqNY80 jk0fGAHKVSE9MMud/EHB+hG7Qw== -----END CERTIFICATE-----Generated at Tue Sep 22 16:30:18 2026 by rpki-client