$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft File: 5hNv9jcai54OTCI2tT1oHR6G5uE.mft (raw, json) Hash identifier: ppYihr70nFow2V5AF4Ldpxp0accQVqGt0/M3S1p68m8= Subject key identifier: B7:14:3E:20:D6:FB:65:86:E1:5F:56:63:2C:F2:09:AE:18:34:90:73 Authority key identifier: E6:13:6F:F6:37:1A:8B:9E:0E:4C:22:36:B5:3D:68:1D:1E:86:E6:E1 Certificate issuer: /CN=A91CE017/serialNumber=E6136FF6371A8B9E0E4C2236B53D681D1E86E6E1 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft Manifest number: 1C Signing time: Thu 01 Oct 2026 10:21:30 +0000 Manifest this update: Thu 01 Oct 2026 10:21:30 +0000 Manifest next update: Thu 08 Oct 2026 10:21:30 +0000 Files and hashes: 1: 5hNv9jcai54OTCI2tT1oHR6G5uE.crl (hash: T42QU27oPvz2/CL4ipzvySvl7nBvGohwnEDfgcK+R94=) 2: 45686542953611F19AE964455B11F970.roa (hash: Wehi5FpfGokFKUB1RUxdtUYX4xVthD87KZo85iISNWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.crl rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE017, serialNumber=E6136FF6371A8B9E0E4C2236B53D681D1E86E6E1 Validity Not Before: Oct 1 10:21:30 2026 GMT Not After : Oct 8 10:21:30 2026 GMT Subject: CN=6abe342a-0fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:7c:be:ca:d5:24:87:af:99:8f:3b:75:db: f8:b6:54:55:ad:55:e0:35:71:a8:ee:f8:4c:ad:52: 63:f1:57:1c:ea:74:0b:e5:b9:39:b4:78:ca:3c:e6: 5c:6a:04:61:4d:5d:d6:21:ca:ea:04:13:74:d3:99: da:83:b4:d4:e4:1d:99:1b:39:4c:b3:ea:94:bd:f2: 37:c5:d8:93:36:9c:c7:93:2d:3b:ab:b7:b0:cc:a4: 48:d7:d7:c8:7c:df:3d:6d:4f:94:dc:23:09:a2:c2: 8f:67:e5:01:f6:fd:dd:f6:97:f4:cd:eb:d6:2e:9c: 7f:23:82:da:d6:e3:ee:d0:e3:a4:89:9d:a7:6b:68: 01:7c:7e:14:f3:9d:55:54:25:98:84:8f:bb:f7:5b: 01:ca:cb:3a:5d:62:70:56:fb:b4:8e:f7:e7:9b:66: 31:fb:86:38:51:39:ec:f3:c7:41:42:08:a8:f2:cd: 48:a3:39:54:e5:ef:7a:8d:12:72:61:15:7b:7b:d3: 2f:43:3e:ee:57:2a:e4:aa:a7:8d:c9:53:14:f5:49: d8:31:87:6d:35:f9:1f:df:37:9b:cb:3d:30:c6:64: 82:0a:0d:30:40:e8:e0:bc:bd:07:89:c0:46:26:25: 76:ef:df:61:22:87:74:04:82:22:55:aa:ec:01:78: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:3E:20:D6:FB:65:86:E1:5F:56:63:2C:F2:09:AE:18:34:90:73 X509v3 Authority Key Identifier: keyid:E6:13:6F:F6:37:1A:8B:9E:0E:4C:22:36:B5:3D:68:1D:1E:86:E6:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d3:d6:db:09:1e:41:56:9d:50:a6:96:83:67:24:e3:9f:60: 39:4f:5e:04:0a:c6:d5:6f:82:a3:94:c6:f8:10:62:8e:a2:c0: b8:f7:b7:82:bc:8d:b4:0a:4f:2d:df:26:af:dd:5b:87:55:69: db:9a:54:aa:63:75:cf:df:80:2e:04:89:5f:25:48:89:20:4f: 79:62:08:d1:1c:f0:40:06:2f:e2:03:fa:c2:7f:dc:8c:69:74: b5:4e:5f:0d:53:ca:f1:54:8c:09:48:f1:b0:f4:e5:c6:cd:16: de:76:34:11:e2:6c:9e:fa:85:10:80:e4:14:57:78:99:8c:a0: 97:12:81:d0:26:28:de:df:e5:dd:30:c6:0d:05:b2:bc:c5:94: 63:74:e8:3c:1a:56:4e:1f:73:7e:4a:b3:ae:a0:e0:28:5c:58: 95:d6:b9:88:51:10:d6:b9:ea:bb:e1:54:bd:ba:2a:f8:af:23: 1b:36:36:eb:04:37:a2:ed:68:f6:d9:84:26:fc:13:64:41:a2: 09:c4:3e:12:12:ee:1c:c1:e7:b0:82:54:6a:fc:12:ac:eb:fd: b5:71:db:39:97:56:f1:e4:24:d0:ab:a8:9e:bc:b9:ce:c7:1d: 5a:1e:3c:54:54:99:97:8b:d5:c0:28:4c:1c:26:d3:77:91:86: 31:e2:b9:a6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTAxNzExMC8GA1UEBRMoRTYxMzZGRjYzNzFBOEI5RTBFNEMyMjM2QjUzRDY4MUQx RTg2RTZFMTAeFw0yNjEwMDExMDIxMzBaFw0yNjEwMDgxMDIxMzBaMBgxFjAUBgNV BAMTDTZhYmUzNDJhLTBmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCR6ny+ytUkh6+Zjzt12/i2VFWtVeA1caju+EytUmPxVxzqdAvluTm0eMo85lxq BGFNXdYhyuoEE3TTmdqDtNTkHZkbOUyz6pS98jfF2JM2nMeTLTurt7DMpEjX18h8 3z1tT5TcIwmiwo9n5QH2/d32l/TN69YunH8jgtrW4+7Q46SJnadraAF8fhTznVVU JZiEj7v3WwHKyzpdYnBW+7SO9+ebZjH7hjhROezzx0FCCKjyzUijOVTl73qNEnJh FXt70y9DPu5XKuSqp43JUxT1Sdgxh201+R/fN5vLPTDGZIIKDTBA6OC8vQeJwEYm JXbv32Eih3QEgiJVquwBeIwBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtxQ+INb7 ZYbhX1ZjLPIJrhg0kHMwHwYDVR0jBBgwFoAU5hNv9jcai54OTCI2tT1oHR6G5uEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFMDE3LzM3ODhCNTU0OTUz NTExRjE5NjZGQkMxMjVCMTFGOTcwLzVoTnY5amNhaTU0T1RDSTJ0VDFvSFI2RzV1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNWhOdjlqY2FpNTRPVENJMnRUMW9IUjZHNXVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF MDE3LzM3ODhCNTU0OTUzNTExRjE5NjZGQkMxMjVCMTFGOTcwLzVoTnY5amNhaTU0 T1RDSTJ0VDFvSFI2RzV1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA209bbCR5BVp1QppaDZyTjn2A5T14ECsbVb4KjlMb4EGKOosC497eCvI20Ck8t 3yav3VuHVWnbmlSqY3XP34AuBIlfJUiJIE95YgjRHPBABi/iA/rCf9yMaXS1Tl8N U8rxVIwJSPGw9OXGzRbedjQR4mye+oUQgOQUV3iZjKCXEoHQJije3+XdMMYNBbK8 xZRjdOg8GlZOH3N+SrOuoOAoXFiV1rmIURDWueq74VS9uir4ryMbNjbrBDei7Wj2 2YQm/BNkQaIJxD4SEu4cweewglRq/BKs6/21cds5l1bx5CTQq6ievLnOxx1aHjxU VJmXi9XAKEwcJtN3kYYx4rmm -----END CERTIFICATE-----Generated at Sat Oct 3 12:12:45 2026 by rpki-client