$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: nB7WNaVmpTYITiKREWjFttib4XOMxoV+E19HQJZagBI= Subject key identifier: 02:A0:25:1A:93:17:FE:55:0E:AA:90:8B:BB:56:A1:64:60:A5:1C:F0 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 02AA Signing time: Mon 21 Sep 2026 01:36:07 +0000 Manifest this update: Mon 21 Sep 2026 01:36:07 +0000 Manifest next update: Mon 28 Sep 2026 01:36:07 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: +u6s/dRxLShHxcymCNb2uZs+Z8hMZqCQEIIagsAApvk=) 2: 74FD4FD494BE11F1AFD2F6E63611F970.roa (hash: 0DKws/TZBwHKlP6bywafbYvjIkHk0Zh/vEoLGguK7rM=) 3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) 4: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Sep 21 01:36:07 2026 GMT Not After : Sep 28 01:36:07 2026 GMT Subject: CN=6ab08a07-f267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:c6:d5:c2:cd:4a:ad:de:4d:20:50:21:eb: ca:40:c1:a4:32:9c:69:2e:54:6d:3a:65:1a:91:e7: 74:78:70:2a:26:b7:02:c8:24:81:cd:03:52:2f:9e: 9b:92:b2:43:42:d5:30:ad:04:ed:52:63:f3:dc:e9: 68:d5:20:01:7e:88:df:83:8d:7a:93:14:4d:16:14: be:30:a3:2b:a6:cc:de:2e:35:fd:96:c8:3c:37:51: 31:fc:ce:7c:fe:a7:f1:2c:bf:0d:a5:ae:43:0c:51: e4:62:9a:0c:92:7a:b7:47:38:1c:33:51:83:ac:df: 5d:7a:a8:0e:e2:c9:22:d7:f8:ab:65:40:02:ff:1a: be:31:df:f8:8a:44:13:91:20:7f:46:ef:ef:db:f1: 2f:a6:d6:3f:44:a8:fd:af:2c:e2:26:3f:92:59:fc: 94:07:c8:18:2c:9e:81:46:c0:d6:05:6f:0e:fa:7c: 4f:2b:cc:66:8c:8a:4c:12:d8:06:58:45:2e:6d:b1: 71:0b:9d:fd:7e:f5:94:ec:de:a7:74:3a:7c:02:e1: b7:c8:15:92:70:80:f0:5b:e3:61:15:ad:d3:85:11: 2b:b0:c3:ed:1e:fb:99:46:8b:82:1e:10:44:57:a9: 7a:e0:02:54:63:e1:47:35:c8:22:9b:65:6b:39:94: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A0:25:1A:93:17:FE:55:0E:AA:90:8B:BB:56:A1:64:60:A5:1C:F0 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:01:ed:00:1a:b3:4e:99:1c:2b:80:71:38:0e:4d:89:02:78: cc:8d:a4:dc:27:d2:9b:a4:3a:ee:2f:be:e3:2d:f0:ec:32:63: 33:fd:4b:ab:13:7f:b6:db:5b:9e:bf:b3:f6:84:4f:0c:ed:3e: d7:e0:fc:62:af:3d:35:14:c5:6a:13:48:4d:ae:b5:c0:69:a0: f9:08:49:7e:c2:d8:42:88:aa:e3:5a:d3:04:6a:65:4b:b9:5a: a2:0f:02:9c:aa:b9:d6:78:af:31:ef:7b:86:b6:24:0c:4c:75: 38:e8:e3:02:a8:3e:17:9b:b9:a2:da:35:89:71:f0:c6:1d:0b: ca:3f:b2:79:e5:40:45:bb:aa:a4:f8:ad:87:bc:c4:41:fe:7e: b4:65:89:42:a5:a2:56:02:a6:6a:47:3c:71:09:b1:d4:ef:ce: 0f:7d:77:2b:e2:2b:63:98:65:72:35:0b:9d:38:52:aa:02:13: 58:60:ba:d5:15:56:54:c7:00:79:dd:d0:55:7d:62:0b:d3:8b: d7:ca:5d:db:a9:30:96:15:3d:79:81:d9:0e:3b:ae:80:7b:ad: 3b:69:e0:45:02:a1:9d:27:e6:24:44:ff:6a:e6:15:5f:78:53: ca:04:8e:4f:b2:7a:59:59:1a:2f:9d:52:e2:d4:27:73:42:b4: 62:e1:c0:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwOTIxMDEzNjA3WhcNMjYwOTI4MDEzNjA3WjAYMRYwFAYD VQQDEw02YWIwOGEwNy1mMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5vG1cLNSq3eTSBQIevKQMGkMpxpLlRtOmUaked0eHAqJrcCyCSBzQNSL56b krJDQtUwrQTtUmPz3Olo1SABfojfg416kxRNFhS+MKMrpszeLjX9lsg8N1Ex/M58 /qfxLL8Npa5DDFHkYpoMknq3RzgcM1GDrN9deqgO4ski1/irZUAC/xq+Md/4ikQT kSB/Ru/v2/EvptY/RKj9ryziJj+SWfyUB8gYLJ6BRsDWBW8O+nxPK8xmjIpMEtgG WEUubbFxC539fvWU7N6ndDp8AuG3yBWScIDwW+NhFa3ThRErsMPtHvuZRouCHhBE V6l64AJUY+FHNcgim2VrOZRCmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKgJRqT F/5VDqqQi7tWoWRgpRzwMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaQHtABqzTpkcK4BxOA5NiQJ4zI2k3CfSm6Q67i++4y3w7DJjM/1LqxN/tttb nr+z9oRPDO0+1+D8Yq89NRTFahNITa61wGmg+QhJfsLYQoiq41rTBGplS7laog8C nKq51nivMe97hrYkDEx1OOjjAqg+F5u5oto1iXHwxh0Lyj+yeeVARbuqpPith7zE Qf5+tGWJQqWiVgKmakc8cQmx1O/OD313K+IrY5hlcjULnThSqgITWGC61RVWVMcA ed3QVX1iC9OL18pd26kwlhU9eYHZDjuugHutO2ngRQKhnSfmJET/auYVX3hTygSO T7J6WVkaL51S4tQnc0K0YuHARQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:28:34 2026 by rpki-client