$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json) Hash identifier: vX3tm9hxV+dx64/EXt2jBLKVL/cVJAe+apf3hUFQ3n4= Subject key identifier: 7E:62:37:09:5F:5F:F6:38:59:2B:BC:6C:E4:39:45:46:79:6E:36:DC Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft Manifest number: 7D Signing time: Tue 13 Oct 2026 08:28:50 +0000 Manifest this update: Tue 13 Oct 2026 08:28:49 +0000 Manifest next update: Tue 20 Oct 2026 08:28:49 +0000 Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: xpHxdVto6bGnMRzMTGxDwrJKJBeXv/eTEvmJ9ea1qVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Validity Not Before: Oct 13 08:28:49 2026 GMT Not After : Oct 20 08:28:49 2026 GMT Subject: CN=6acdebc1-08a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:0b:19:8c:de:26:79:87:31:24:c2:be:18: a9:21:7d:1d:7d:7b:2a:ef:da:14:f9:44:02:64:e5: a4:99:6e:4c:71:3e:3e:64:bc:a7:f7:9a:95:0c:ba: 6d:f4:f6:25:90:1a:e9:11:2b:31:8f:11:4b:07:85: 96:a4:84:9f:f3:2f:1f:e5:d6:f1:b6:81:37:b5:75: 8d:5f:a0:37:10:c3:b9:e5:1e:45:eb:b6:a9:15:a7: 3b:cb:bb:ee:11:cc:e2:72:17:20:1b:a6:c7:a4:ff: 74:bd:69:73:29:06:e5:cc:2f:bc:0a:43:4f:91:a7: 27:43:03:e1:7a:5c:40:36:32:ed:8a:af:ca:f5:8c: 46:11:cd:37:dd:ad:b3:31:7a:a7:93:36:96:3c:be: 4f:f9:32:82:4a:96:fb:0d:89:e6:3e:8d:7d:07:ec: 90:91:72:d0:89:32:f3:d6:ad:15:59:d3:a0:d6:7f: 5c:d0:73:fa:30:2b:d5:8e:29:89:85:e3:38:6d:ed: d0:cf:cf:3f:90:9f:7d:d5:5a:07:79:d7:f3:aa:af: 1e:9e:f7:a4:d7:82:ed:36:27:d1:fd:c1:c0:3e:66: d0:56:e4:ce:52:fd:48:9c:78:ea:2d:4a:34:a8:b6: 77:49:3c:a5:93:d9:3c:18:8e:6b:66:38:47:42:40: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:62:37:09:5F:5F:F6:38:59:2B:BC:6C:E4:39:45:46:79:6E:36:DC X509v3 Authority Key Identifier: keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:41:2e:b2:c7:af:6a:9d:2e:14:ea:d4:e5:1d:4f:dc:62: a0:d9:30:65:45:e0:1e:e4:26:b3:e9:e2:75:32:e3:90:51:69: 71:7c:04:6c:51:8a:44:c9:99:dc:73:26:b9:7e:c3:d4:d1:bc: 27:ce:7f:08:1a:f1:42:76:91:0e:a0:51:6a:0a:e2:e6:b6:70: f3:6d:6a:a4:0a:cf:da:2a:f0:1a:f4:93:fd:07:9e:76:6a:86: 7d:0e:d4:a0:2e:bd:1c:c0:04:d4:87:cd:ee:ed:d2:fa:15:1c: 19:ff:50:55:e7:89:2f:19:f7:ea:ac:b4:89:16:e8:c4:75:4d: d9:0a:8d:f2:70:90:4c:c6:39:d7:b2:86:63:ae:da:d6:d1:ad: fc:e2:b3:61:44:71:c2:47:49:d6:01:20:f4:a8:65:ed:0f:d3: 11:38:d7:d4:b1:32:e5:85:07:f7:99:a6:4e:77:f6:39:ed:1b: 9b:36:72:57:2c:d5:24:69:f0:de:ef:c9:9d:f9:f9:b2:b1:ba: 10:5c:ca:e5:13:fe:87:fc:05:cd:2e:94:64:4e:68:e7:b4:f3: 82:74:65:b6:79:d4:5b:df:05:a5:91:01:a0:10:53:ff:d3:cf: 66:04:51:92:4b:b8:1d:44:cd:4c:25:52:e6:44:0a:6c:c7:a7: 4d:f8:43:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRTVEMzZENTYzQzdCM0Q0NUNEOUM1RjdDNTgxRTlERTdE NkVDMzQzMTAeFw0yNjEwMTMwODI4NDlaFw0yNjEwMjAwODI4NDlaMBgxFjAUBgNV BAMTDTZhY2RlYmMxLTA4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaPAsZjN4meYcxJMK+GKkhfR19eyrv2hT5RAJk5aSZbkxxPj5kvKf3mpUMum30 9iWQGukRKzGPEUsHhZakhJ/zLx/l1vG2gTe1dY1foDcQw7nlHkXrtqkVpzvLu+4R zOJyFyAbpsek/3S9aXMpBuXML7wKQ0+RpydDA+F6XEA2Mu2Kr8r1jEYRzTfdrbMx eqeTNpY8vk/5MoJKlvsNieY+jX0H7JCRctCJMvPWrRVZ06DWf1zQc/owK9WOKYmF 4zht7dDPzz+Qn33VWgd51/Oqrx6e96TXgu02J9H9wcA+ZtBW5M5S/UiceOotSjSo tndJPKWT2TwYjmtmOEdCQKGVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfmI3CV9f 9jhZK7xs5DlFRnluNtwwHwYDVR0jBBgwFoAU5dNtVjx7PUXNnF98WB6d59bsNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0MzNEYxNkZDMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVYTm5GOThXQjZkNTlic05E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWROdFZqeDdQVVhObkY5OFdCNmQ1OWJzTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0MzNEYxNkZDMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVY Tm5GOThXQjZkNTlic05ERS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFnEEussevap0uFOrU5R1P3GKg2TBlReAe5Caz6eJ1MuOQUWlxfARsUYpEyZnc cya5fsPU0bwnzn8IGvFCdpEOoFFqCuLmtnDzbWqkCs/aKvAa9JP9B552aoZ9DtSg Lr0cwATUh83u7dL6FRwZ/1BV54kvGffqrLSJFujEdU3ZCo3ycJBMxjnXsoZjrtrW 0a384rNhRHHCR0nWASD0qGXtD9MRONfUsTLlhQf3maZOd/Y57RubNnJXLNUkafDe 78md+fmysboQXMrlE/6H/AXNLpRkTmjntPOCdGW2edRb3wWlkQGgEFP/089mBFGS S7gdRM1MJVLmRApsx6dN+ENl -----END CERTIFICATE-----Generated at Tue Oct 13 19:39:53 2026 by rpki-client