$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: rz6/3OA8xuH9/Df1wYLPBV9h6fOhQs3BGJ1D73JlLmo= Subject key identifier: 49:5A:6F:7E:EC:2A:D3:12:72:5A:3E:23:67:65:25:3A:01:E6:6B:EF Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: BA Signing time: Sat 19 Sep 2026 07:03:42 +0000 Manifest this update: Sat 19 Sep 2026 07:03:41 +0000 Manifest next update: Sat 26 Sep 2026 07:03:41 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: wH+i8UjNdWAvf9X5dLoQWymIPRKQL2E6IVyjNQAUDxQ=) 2: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=) 3: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=) 4: 7A339E4448F711F1A886AD5191833773.roa (hash: AkLBKnBGnGaPJ8LjzqW9BNXxip/jAPg4ZWxCffjH75k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Sep 19 07:03:41 2026 GMT Not After : Sep 26 07:03:41 2026 GMT Subject: CN=6aae33ce-be9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:ef:8c:20:d5:72:1d:6c:4b:8d:b2:64:2a: f3:b5:61:f3:66:51:6e:55:29:cb:23:51:80:fa:9e: 16:5b:85:84:26:8a:09:50:b7:82:64:38:27:c6:86: cc:6a:31:0c:69:30:57:a5:dc:2b:6b:26:ea:36:8f: f1:08:02:5b:28:4f:60:e5:ef:8b:bc:21:a1:4c:9d: cd:85:05:0f:af:4c:21:74:bf:75:c3:f5:e8:a0:4f: 17:74:54:0d:35:4a:aa:a0:cf:92:6f:c5:af:95:c4: 17:5e:3e:5e:3a:84:1f:ef:3f:d8:92:01:6d:14:39: 1b:22:f1:9d:38:91:0a:a0:3b:4c:1d:e1:01:99:b2: a5:d2:ae:f4:a6:e9:2b:30:01:fb:8d:c8:ba:1e:63: b3:30:d1:e3:0d:3f:d2:92:b3:bc:18:f7:e2:32:d4: 2f:d2:ad:78:13:bc:e2:95:12:48:b8:5d:dc:84:3f: 86:7d:b4:5e:0b:4f:ba:d0:53:c8:0d:8b:a7:f0:4f: 62:44:bc:56:0c:c7:e3:48:17:06:00:41:f7:95:b5: 72:ad:b5:ca:db:a0:5a:7b:1d:03:7f:c4:85:77:f5: 06:08:98:3b:76:a5:e7:5a:42:06:9a:61:26:d7:a3: 93:19:fe:20:78:78:df:8d:19:e2:5e:82:4f:d7:ea: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5A:6F:7E:EC:2A:D3:12:72:5A:3E:23:67:65:25:3A:01:E6:6B:EF X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:21:33:b3:52:84:cd:a0:31:be:e7:b1:fd:5c:51:b6:a8:9d: 55:28:73:8a:54:8a:0d:98:3f:80:14:68:21:c1:53:c1:f3:43: ea:03:3f:19:a9:5a:e4:1f:b3:f7:cf:59:99:d3:a8:45:1d:9b: 78:e1:46:bc:9d:67:d3:ee:e4:85:c1:9f:a5:38:09:a4:7e:a1: 81:b3:42:fc:5e:df:e5:55:5d:3c:de:44:bb:06:dc:d2:a1:25: 9e:e7:41:83:2f:d3:8a:21:98:15:c0:a3:46:e4:e0:4d:a9:3b: fe:76:f8:25:5e:99:04:52:47:bf:3f:6b:c4:7b:cb:df:9c:29: 48:e5:f1:ac:93:7c:8a:24:a3:14:b7:a3:e6:ca:a3:8e:fa:46: 80:ec:94:b6:e3:0e:6f:19:1d:9b:5b:87:25:9f:fc:2e:9b:b9: 82:57:17:19:13:a8:aa:7a:a0:32:83:a3:67:31:95:48:3e:1d: 33:86:a8:1a:7a:a7:66:92:6d:aa:38:12:5a:ba:9b:18:2f:e2: 4b:51:75:76:fd:4b:e0:05:be:e1:d6:f3:c6:9e:90:7a:c9:1e: e1:66:de:72:b3:2d:5d:e9:b7:ba:e3:8c:0c:2b:24:5c:6b:b4: 43:c3:b9:47:b8:7c:38:a5:65:39:cb:b7:f2:77:07:93:7f:bc: dd:c7:c4:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0Q0QxMTAvBgNVBAUTKEU3MDYwMTJBMTA2QkQwOTQ2NThFNjA0QzU2MDMwNTBG MTREQzNGNEMwHhcNMjYwOTE5MDcwMzQxWhcNMjYwOTI2MDcwMzQxWjAYMRYwFAYD VQQDEw02YWFlMzNjZS1iZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjPvjCDVch1sS42yZCrztWHzZlFuVSnLI1GA+p4WW4WEJooJULeCZDgnxobM ajEMaTBXpdwraybqNo/xCAJbKE9g5e+LvCGhTJ3NhQUPr0whdL91w/XooE8XdFQN NUqqoM+Sb8WvlcQXXj5eOoQf7z/YkgFtFDkbIvGdOJEKoDtMHeEBmbKl0q70pukr MAH7jci6HmOzMNHjDT/SkrO8GPfiMtQv0q14E7zilRJIuF3chD+GfbReC0+60FPI DYun8E9iRLxWDMfjSBcGAEH3lbVyrbXK26Baex0Df8SFd/UGCJg7dqXnWkIGmmEm 16OTGf4geHjfjRniXoJP1+oVcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElab37s KtMSclo+I2dlJToB5mvvMB8GA1UdIwQYMBaAFOcGASoQa9CUZY5gTFYDBQ8U3D9M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRDRC8yQ0Q3RkQwRTlF QzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBKUmxqbUJNVmdNRkR4VGNQ MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Awdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8yQ0Q3RkQwRTlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBK UmxqbUJNVmdNRkR4VGNQMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhyEzs1KEzaAxvuex/VxRtqidVShzilSKDZg/gBRoIcFTwfND6gM/Gala5B+z 989ZmdOoRR2beOFGvJ1n0+7khcGfpTgJpH6hgbNC/F7f5VVdPN5Euwbc0qElnudB gy/TiiGYFcCjRuTgTak7/nb4JV6ZBFJHvz9rxHvL35wpSOXxrJN8iiSjFLej5sqj jvpGgOyUtuMObxkdm1uHJZ/8Lpu5glcXGROoqnqgMoOjZzGVSD4dM4aoGnqnZpJt qjgSWrqbGC/iS1F1dv1L4AW+4dbzxp6Qeske4WbecrMtXem3uuOMDCskXGu0Q8O5 R7h8OKVlOcu38ncHk3+83cfEjQ== -----END CERTIFICATE-----Generated at Sun Sep 20 23:26:01 2026 by rpki-client