$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: huADPy6xbNjJe/dr9oQyhM0j4BaAdN1x0mWYTLRP1ks= Subject key identifier: 65:DE:A0:19:7B:05:81:11:F6:F1:B9:16:1B:09:5C:30:30:62:F2:99 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D75 Signing time: Sun 20 Sep 2026 17:58:13 +0000 Manifest this update: Sun 20 Sep 2026 17:58:13 +0000 Manifest next update: Sun 27 Sep 2026 17:58:13 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: OXniIfv2j/9nND93S2JID0RzB+NWoWxhJL8LjXxPURA=) 2: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=) 3: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Sep 20 17:58:13 2026 GMT Not After : Sep 27 17:58:13 2026 GMT Subject: CN=6ab01eb5-6b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:5f:7b:f7:53:55:7e:1b:93:e6:25:22:5d: cd:d8:d1:2f:af:8c:8e:ac:f0:4b:f8:56:12:df:c5: a9:ea:f7:34:10:59:25:fc:3c:68:c2:89:47:b9:58: 93:e0:87:b9:d5:09:92:96:f4:06:4e:b5:06:56:8d: 71:00:46:d4:bb:63:6b:eb:45:08:c8:48:7f:a4:48: ef:b3:99:c1:f6:19:02:0e:58:b1:42:54:04:26:0f: d8:77:96:4a:88:3f:61:38:67:d4:39:73:d3:d8:09: 9f:09:aa:c5:63:74:48:fa:21:c9:71:6b:28:6d:49: 74:16:c2:77:92:d7:d3:62:a0:81:56:6c:ca:ca:1d: 6f:69:e6:94:ca:01:f3:c9:ac:58:2e:e5:0e:2a:41: d5:2c:3e:ad:29:d7:9b:7d:ab:ad:76:46:5a:1e:e9: 81:e5:c1:a8:48:6a:8c:88:30:96:71:99:32:a7:52: 6f:44:82:42:f4:f2:8e:8e:ed:01:b4:88:fd:6e:3b: 66:9f:c6:da:80:1c:47:64:35:5e:61:c3:84:e8:ef: 65:4b:c1:94:f5:f7:0b:66:2f:1b:04:b9:49:d5:13: df:b9:f6:32:d0:bd:2f:3f:d3:eb:8e:b4:8f:34:80: e9:8c:db:1b:be:01:6a:d6:ce:c7:63:2b:df:36:35: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DE:A0:19:7B:05:81:11:F6:F1:B9:16:1B:09:5C:30:30:62:F2:99 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:89:32:71:8f:08:32:a9:fa:20:c0:dc:c8:59:c7:86:fd:34: ad:39:84:ea:eb:f9:02:4f:78:ed:06:74:67:95:79:bb:41:d0: 41:9c:16:bd:d0:d0:03:b2:cc:8c:b7:03:2a:68:0f:3c:87:41: 45:76:21:99:b8:d2:01:58:d4:31:59:9d:25:36:84:18:d2:ba: 84:ee:83:df:20:3b:f2:77:13:30:e6:dd:be:a5:84:72:e2:c4: f2:ca:1c:4e:83:d7:20:b3:d4:c0:cb:2c:38:01:28:fc:4f:73: bd:8e:01:a0:7b:25:c2:4e:a1:90:a3:d3:6c:be:b2:5b:2d:02: 4d:95:8c:0b:6a:65:84:f5:40:23:c6:e4:00:d8:96:71:b0:67: 4d:98:25:60:29:d6:3f:80:0b:4c:6a:9c:d1:39:99:7d:b8:fa: 07:64:e2:d4:2b:f9:97:02:ee:11:fc:45:50:6c:40:e1:ce:ea: ba:16:f5:1b:ed:fa:ab:e5:3c:fc:b2:f3:33:2b:4d:1f:bd:e6: 75:28:de:27:fb:4b:bd:3e:94:b5:dd:82:14:4f:d8:4a:a4:29: e9:70:98:bd:c1:5f:4d:93:c6:9c:4b:95:89:95:6d:9d:17:10: 80:1e:c5:d6:96:4e:09:4f:af:00:b6:be:56:67:b3:19:e9:62: 0b:7b:ed:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwOTIwMTc1ODEzWhcNMjYwOTI3MTc1ODEzWjAYMRYwFAYD VQQDEw02YWIwMWViNS02YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgxfe/dTVX4bk+YlIl3N2NEvr4yOrPBL+FYS38Wp6vc0EFkl/DxowolHuViT 4Ie51QmSlvQGTrUGVo1xAEbUu2Nr60UIyEh/pEjvs5nB9hkCDlixQlQEJg/Yd5ZK iD9hOGfUOXPT2AmfCarFY3RI+iHJcWsobUl0FsJ3ktfTYqCBVmzKyh1vaeaUygHz yaxYLuUOKkHVLD6tKdebfautdkZaHumB5cGoSGqMiDCWcZkyp1JvRIJC9PKOju0B tIj9bjtmn8bagBxHZDVeYcOE6O9lS8GU9fcLZi8bBLlJ1RPfufYy0L0vP9PrjrSP NIDpjNsbvgFq1s7HYyvfNjUpRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXeoBl7 BYER9vG5FhsJXDAwYvKZMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIkycY8IMqn6IMDcyFnHhv00rTmE6uv5Ak947QZ0Z5V5u0HQQZwWvdDQA7LM jLcDKmgPPIdBRXYhmbjSAVjUMVmdJTaEGNK6hO6D3yA78ncTMObdvqWEcuLE8soc ToPXILPUwMssOAEo/E9zvY4BoHslwk6hkKPTbL6yWy0CTZWMC2plhPVAI8bkANiW cbBnTZglYCnWP4ALTGqc0TmZfbj6B2Ti1Cv5lwLuEfxFUGxA4c7quhb1G+36q+U8 /LLzMytNH73mdSjeJ/tLvT6Utd2CFE/YSqQp6XCYvcFfTZPGnEuViZVtnRcQgB7F 1pZOCU+vALa+VmezGeliC3vtmg== -----END CERTIFICATE-----Generated at Mon Sep 21 16:59:11 2026 by rpki-client