$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: LvruuYsryiai7PxorsIz5oAYtq71oMoaOLndN49Ydt8= Subject key identifier: ED:40:76:8E:38:3A:BA:69:73:75:C4:9F:36:F1:77:07:71:B3:F1:39 Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 05E5 Signing time: Sun 20 Sep 2026 22:51:51 +0000 Manifest this update: Sun 20 Sep 2026 22:51:51 +0000 Manifest next update: Sun 27 Sep 2026 22:51:51 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: XgPJKjgNhz6AJIR4m6Nzi/wIgMaZdIruHxyQZqsGf1I=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Sep 20 22:51:51 2026 GMT Not After : Sep 27 22:51:51 2026 GMT Subject: CN=6ab06387-a6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:17:21:21:2c:57:be:7d:e0:a2:66:d6:14: 17:f2:95:02:fc:5a:99:1d:ba:e2:78:89:32:a7:93: 69:8e:65:3f:4a:12:b8:65:1f:f0:fb:81:3f:b0:7a: 53:97:dc:9a:3e:54:71:34:ca:2b:99:7d:70:ac:aa: 19:77:20:88:39:a6:69:85:ca:a5:ed:ae:a8:fd:9f: ea:00:d3:18:ad:c5:a3:30:0f:03:83:f8:bc:b5:72: 96:58:cd:95:a6:ce:63:45:08:c0:a6:7e:ee:44:9f: dd:a4:66:95:b4:7e:c2:77:4b:dc:49:56:02:67:1c: 74:16:88:24:b4:00:df:aa:36:3b:ad:b3:7b:69:1b: d6:ff:c4:f0:dd:25:13:1d:95:0a:bb:08:de:01:b8: c3:07:36:36:90:db:5a:fe:15:ed:c5:f4:c7:ee:73: 0f:b1:ac:d7:78:1a:47:64:a5:63:04:7e:9c:8d:a5: 1d:6d:15:f6:a8:fc:74:a6:61:4f:37:e0:27:d6:b9: bc:0b:24:11:6a:e7:95:d1:3b:7d:05:5c:43:8e:4a: 04:45:c6:55:84:f6:0f:1d:df:08:72:0e:66:59:5f: 3d:f7:e7:a5:05:a8:5b:d4:57:e2:03:7d:d7:a1:3a: 03:c4:31:22:fb:8e:24:ee:35:96:61:06:48:18:0e: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:40:76:8E:38:3A:BA:69:73:75:C4:9F:36:F1:77:07:71:B3:F1:39 X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fb:d6:de:51:50:03:42:08:23:3f:73:1a:e1:f6:2a:5b:84: af:71:20:9e:e4:c7:20:19:1c:64:eb:d6:00:94:bc:76:9b:d8: a8:ed:6d:fa:ce:c4:b7:b4:e9:d5:95:f8:9a:e7:a5:e6:54:64: f5:3a:37:3c:52:f4:ff:7f:6f:60:98:22:80:1b:a7:13:b7:3e: da:66:00:74:85:64:9b:2b:6f:01:24:6a:4d:c0:e7:64:82:ce: 1d:c1:99:45:29:ba:fa:ae:fa:20:7c:68:78:93:38:fa:2a:33: d3:74:3a:9a:c0:3b:aa:bd:da:90:09:90:f8:c5:3a:fe:18:14: bd:ad:b5:16:9c:b2:a1:fa:92:a0:e5:3f:46:a5:af:da:54:f1: b2:c0:d0:83:2a:00:62:c2:85:4f:4b:3e:eb:e7:79:34:23:fe: 61:b8:81:64:08:72:10:cb:db:cc:2c:bb:2d:5f:e6:06:d5:75: 80:94:1d:59:d5:80:e8:27:fe:50:a3:ac:c9:d2:dc:03:74:ef: 8d:6b:5a:88:c9:c5:54:5a:2b:9e:da:d2:d5:91:10:f5:97:e6: 19:ce:a6:40:82:61:ce:8e:03:a4:ce:91:96:d1:16:e6:88:6d: 0a:92:a9:9e:8d:f8:d5:2f:22:f2:84:e0:a8:9d:a3:37:dd:a3: 70:54:eb:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYwOTIwMjI1MTUxWhcNMjYwOTI3MjI1MTUxWjAYMRYwFAYD VQQDEw02YWIwNjM4Ny1hNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl8XISEsV7594KJm1hQX8pUC/FqZHbrieIkyp5NpjmU/ShK4ZR/w+4E/sHpT l9yaPlRxNMormX1wrKoZdyCIOaZphcql7a6o/Z/qANMYrcWjMA8Dg/i8tXKWWM2V ps5jRQjApn7uRJ/dpGaVtH7Cd0vcSVYCZxx0FogktADfqjY7rbN7aRvW/8Tw3SUT HZUKuwjeAbjDBzY2kNta/hXtxfTH7nMPsazXeBpHZKVjBH6cjaUdbRX2qPx0pmFP N+An1rm8CyQRaueV0Tt9BVxDjkoERcZVhPYPHd8Icg5mWV899+elBahb1FfiA33X oToDxDEi+44k7jWWYQZIGA4pYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1Ado44 Orppc3XEnzbxdwdxs/E5MB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf/vW3lFQA0IIIz9zGuH2KluEr3EgnuTHIBkcZOvWAJS8dpvYqO1t+s7Et7Tp 1ZX4muel5lRk9To3PFL0/39vYJgigBunE7c+2mYAdIVkmytvASRqTcDnZILOHcGZ RSm6+q76IHxoeJM4+ioz03Q6msA7qr3akAmQ+MU6/hgUva21FpyyofqSoOU/RqWv 2lTxssDQgyoAYsKFT0s+6+d5NCP+YbiBZAhyEMvbzCy7LV/mBtV1gJQdWdWA6Cf+ UKOsydLcA3TvjWtaiMnFVForntrS1ZEQ9ZfmGc6mQIJhzo4DpM6RltEW5ohtCpKp no341S8i8oTgqJ2jN92jcFTrGw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:13:09 2026 by rpki-client