$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: Awl2GNc3men6ZN0EMNSXUcjHY9VQxKee3iZa81b73nU= Subject key identifier: 2E:B4:C9:95:E4:E6:B4:C5:3F:2C:59:92:5C:97:20:AD:76:4C:80:01 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0239 Signing time: Mon 21 Sep 2026 02:37:02 +0000 Manifest this update: Mon 21 Sep 2026 02:37:02 +0000 Manifest next update: Mon 28 Sep 2026 02:37:02 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: s0viCLkX3QsbnAN/sRe/rYBuz7qdXXn+HGygCMVwgXQ=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Sep 21 02:37:02 2026 GMT Not After : Sep 28 02:37:02 2026 GMT Subject: CN=6ab0984e-5947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:09:f1:70:ee:24:6d:2a:42:ee:c6:13:8d: f9:50:ac:dc:d1:4f:87:6a:41:46:ec:37:c8:3e:b6: 5a:76:41:d0:56:14:7f:12:c4:db:43:ec:1c:72:95: 80:8e:f2:a6:c7:f6:31:44:15:af:eb:6b:8a:fd:fb: 6a:2e:a3:a1:57:25:21:73:7c:35:94:b8:5b:4b:4c: 29:ac:76:29:c4:a8:f7:53:dc:69:28:b0:8b:18:f1: d5:1d:5b:0a:bc:bb:a2:05:d9:7c:4e:c1:85:6c:59: c9:f0:c6:bc:f0:51:05:cb:cb:77:8c:46:b7:1a:3d: 8e:db:70:43:04:6b:4e:6c:a0:79:04:37:81:1c:49: 71:fa:db:94:e8:61:ff:91:21:f2:45:83:c8:65:03: 91:1e:db:f0:73:b6:ce:69:ba:fa:7a:97:65:88:8c: 64:89:a2:9a:a1:63:8f:07:2e:a3:24:58:9d:a9:23: 5c:da:0a:70:28:03:91:5b:4a:de:25:84:03:93:44: c9:3c:5a:5d:d3:52:64:7a:53:1b:00:23:3f:fe:7f: 41:69:ed:53:68:a4:66:66:02:e3:71:7b:e0:21:27: 4b:eb:c7:f3:a8:d6:9f:dc:d1:25:85:3b:b0:3f:13: 9b:ef:3a:f8:52:06:8b:b8:4f:e8:0f:9f:dc:a9:83: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:C9:95:E4:E6:B4:C5:3F:2C:59:92:5C:97:20:AD:76:4C:80:01 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c9:fa:e7:23:29:60:03:87:a8:0a:af:8e:37:1c:86:7e:45: 5a:4d:fc:7e:5c:57:67:a3:4b:33:48:b2:43:93:31:5a:10:11: da:fd:90:16:54:97:20:aa:b0:9a:2a:99:cf:c7:1f:ca:12:de: 77:cc:c9:2c:29:36:6d:e0:a7:90:33:c4:27:1a:fa:00:a8:a4: c5:4b:bb:d2:f8:50:4a:dd:cd:56:c7:d8:e5:bd:79:46:5d:f3: c1:06:5c:f3:37:cc:42:3a:21:4c:61:28:34:e1:b3:cd:73:08: 11:21:da:2b:b4:38:1b:15:dd:4f:fa:e1:b4:aa:b6:0c:18:ab: d7:16:75:08:10:b1:3f:fc:b8:69:8f:34:a9:8f:ff:14:39:49: 50:3a:b5:1f:04:89:a1:01:8e:29:4e:0c:d8:72:91:06:99:18: 01:bb:bc:c5:59:60:be:37:08:dd:10:50:6c:88:ce:6a:77:dc: 99:e6:1c:ff:49:db:01:0c:68:ce:30:b7:6e:f8:13:bc:6a:f9: 0c:24:9d:eb:d5:90:f4:65:18:9c:79:ff:d6:f7:4c:34:51:47: 5b:e7:c3:30:3f:08:0b:1d:fa:4e:22:09:a0:3e:d8:23:56:f4: d6:99:b7:10:bf:7c:80:5e:34:d3:0b:7d:ee:27:14:0b:71:9d: ef:7b:e0:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwOTIxMDIzNzAyWhcNMjYwOTI4MDIzNzAyWjAYMRYwFAYD VQQDEw02YWIwOTg0ZS01OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lAJ8XDuJG0qQu7GE435UKzc0U+HakFG7DfIPrZadkHQVhR/EsTbQ+wccpWA jvKmx/YxRBWv62uK/ftqLqOhVyUhc3w1lLhbS0wprHYpxKj3U9xpKLCLGPHVHVsK vLuiBdl8TsGFbFnJ8Ma88FEFy8t3jEa3Gj2O23BDBGtObKB5BDeBHElx+tuU6GH/ kSHyRYPIZQORHtvwc7bOabr6epdliIxkiaKaoWOPBy6jJFidqSNc2gpwKAORW0re JYQDk0TJPFpd01JkelMbACM//n9Bae1TaKRmZgLjcXvgISdL68fzqNaf3NElhTuw PxOb7zr4UgaLuE/oD5/cqYPoAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC60yZXk 5rTFPyxZklyXIK12TIABMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMcn65yMpYAOHqAqvjjcchn5FWk38flxXZ6NLM0iyQ5MxWhAR2v2QFlSXIKqw miqZz8cfyhLed8zJLCk2beCnkDPEJxr6AKikxUu70vhQSt3NVsfY5b15Rl3zwQZc 8zfMQjohTGEoNOGzzXMIESHaK7Q4GxXdT/rhtKq2DBir1xZ1CBCxP/y4aY80qY// FDlJUDq1HwSJoQGOKU4M2HKRBpkYAbu8xVlgvjcI3RBQbIjOanfcmeYc/0nbAQxo zjC3bvgTvGr5DCSd69WQ9GUYnHn/1vdMNFFHW+fDMD8ICx36TiIJoD7YI1b01pm3 EL98gF400wt97icUC3Gd73vgkg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:32:48 2026 by rpki-client