$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json) Hash identifier: zNzSDhgkJ8MP2TsQeF7KklOC3YCqkKHkytH39S3w8aA= Subject key identifier: 7C:BB:73:1D:5A:A5:0A:2E:E4:50:32:54:03:CA:5A:A6:3D:E2:06:83 Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft Manifest number: 01A3 Signing time: Mon 21 Sep 2026 04:11:50 +0000 Manifest this update: Mon 21 Sep 2026 04:11:50 +0000 Manifest next update: Mon 28 Sep 2026 04:11:50 +0000 Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: aTqCn3s+dJP2XSnLBiLYBoWYne/GEvAv0XhydPSu3Gk=) 2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: rN+KK3jryyT29WxMz6TJQKyL9vxdeXLa8TTLUuh8DZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Validity Not Before: Sep 21 04:11:50 2026 GMT Not After : Sep 28 04:11:50 2026 GMT Subject: CN=6ab0ae86-cbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:3f:74:c4:62:56:14:d5:71:5e:ef:36:81: 18:63:ed:0a:88:6c:28:22:1c:1c:53:0b:c7:eb:b2: ff:09:77:d0:09:c1:aa:0a:b5:c2:a0:64:5c:e5:06: f2:79:19:7f:45:ef:f1:20:78:7c:3e:f5:94:43:c4: d2:1d:e9:0a:7a:90:b1:1f:63:97:dc:30:be:e2:55: 72:7b:29:b9:72:0e:5f:01:2e:a3:d0:82:ed:a5:9c: 85:b4:cd:f1:15:a2:9c:29:5e:a4:4f:62:de:9c:96: 23:d5:0c:96:d7:4e:74:a4:a8:00:c8:54:42:2c:13: 75:b2:24:22:5c:fc:eb:31:0f:fc:b4:b7:45:ce:74: 16:66:67:38:a4:6f:14:71:03:57:70:95:85:19:6d: 49:03:c4:4c:fc:7b:fd:c0:2e:5c:44:91:66:82:f8: 0c:ad:96:f2:9f:44:78:e2:34:a7:82:f3:97:5d:9d: cb:4c:bd:6c:bf:c6:6e:9b:7c:ed:c4:f0:24:92:f7: 6e:c4:bd:2c:1b:3f:4f:b1:0f:a7:2c:52:63:b6:de: d9:4d:0a:23:6c:80:23:f3:59:24:3f:62:96:03:db: 12:39:b8:44:87:76:be:a0:29:cc:07:de:2e:46:f7: 55:a4:cc:2b:95:ab:f7:40:3a:e7:8e:ad:a1:61:b7: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BB:73:1D:5A:A5:0A:2E:E4:50:32:54:03:CA:5A:A6:3D:E2:06:83 X509v3 Authority Key Identifier: keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ed:a1:00:96:3c:b2:b8:45:36:8f:99:01:76:4c:82:c8:c3: dc:c2:3d:bf:36:76:7a:0b:20:27:9e:71:42:cc:37:47:28:4f: e9:b9:36:b0:7c:57:f2:8f:53:19:f4:e6:00:c7:77:89:e6:9e: 3b:dc:41:76:13:dc:89:77:68:53:63:50:c6:95:1d:1b:ef:aa: c7:7b:88:a6:86:98:7f:bb:75:1a:f9:4d:68:d4:87:d7:93:e8: 19:e0:0a:2f:80:08:7e:12:1a:c3:1b:18:42:b3:2f:ca:47:44: 7b:2f:20:70:11:b8:fb:b0:02:de:e6:27:6a:9c:95:3b:38:ba: 83:f3:75:ee:8f:36:cc:d1:b5:d3:ad:6b:8f:e6:e3:74:39:f2: 88:29:94:e6:a3:6f:4b:aa:73:3d:92:90:0b:70:cb:de:41:1c: 12:26:e0:3a:a7:d5:f0:91:58:9f:0a:47:58:73:c6:1c:31:e9: 09:3d:94:31:94:8d:7f:fe:d1:be:87:9f:2b:1b:69:af:f9:c4: cb:9e:3e:64:3f:67:75:32:0b:d3:62:b3:fc:a4:1a:ba:15:fc: 9b:73:52:59:74:01:22:8a:f4:53:79:2c:36:38:0a:7e:0b:c6: 89:81:e4:bf:68:a9:a4:0f:45:c3:ae:34:d9:25:47:7d:c4:98: 33:19:e7:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKEU1QjQ0QzY5RThERTczM0RGNjE5NjYwNTZFN0U0MTVF QzdDNzBEMkEwHhcNMjYwOTIxMDQxMTUwWhcNMjYwOTI4MDQxMTUwWjAYMRYwFAYD VQQDEw02YWIwYWU4Ni1jYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yE/dMRiVhTVcV7vNoEYY+0KiGwoIhwcUwvH67L/CXfQCcGqCrXCoGRc5Qby eRl/Re/xIHh8PvWUQ8TSHekKepCxH2OX3DC+4lVyeym5cg5fAS6j0ILtpZyFtM3x FaKcKV6kT2LenJYj1QyW1050pKgAyFRCLBN1siQiXPzrMQ/8tLdFznQWZmc4pG8U cQNXcJWFGW1JA8RM/Hv9wC5cRJFmgvgMrZbyn0R44jSngvOXXZ3LTL1sv8Zum3zt xPAkkvduxL0sGz9PsQ+nLFJjtt7ZTQojbIAj81kkP2KWA9sSObhEh3a+oCnMB94u RvdVpMwrlav3QDrnjq2hYbeHDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHy7cx1a pQou5FAyVAPKWqY94gaDMB8GA1UdIwQYMBaAFOW0TGno3nM99hlmBW5+QV7Hxw0q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My80RTI1QzhCQzM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6MzJHV1lGYm41QlhzZkhE U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzViUk1hZWplY3ozMkdXWUZibjVCWHNmSERTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My80RTI1QzhCQzM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6 MzJHV1lGYm41QlhzZkhEU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAu2hAJY8srhFNo+ZAXZMgsjD3MI9vzZ2egsgJ55xQsw3RyhP6bk2sHxX8o9T GfTmAMd3ieaeO9xBdhPciXdoU2NQxpUdG++qx3uIpoaYf7t1GvlNaNSH15PoGeAK L4AIfhIawxsYQrMvykdEey8gcBG4+7AC3uYnapyVOzi6g/N17o82zNG1061rj+bj dDnyiCmU5qNvS6pzPZKQC3DL3kEcEibgOqfV8JFYnwpHWHPGHDHpCT2UMZSNf/7R voefKxtpr/nEy54+ZD9ndTIL02Kz/KQauhX8m3NSWXQBIor0U3ksNjgKfgvGiYHk v2ippA9Fw6402SVHfcSYMxnnLw== -----END CERTIFICATE-----Generated at Mon Sep 21 08:10:51 2026 by rpki-client