$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: PiyOyZF/VdF9XujHd0w/F6RTJOUTeZyqzg0xz6HWWOY= Subject key identifier: DA:F5:66:0C:90:A0:99:C4:6D:D9:2D:C6:EA:29:77:B6:E1:CE:5A:19 Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 016C Signing time: Mon 21 Sep 2026 04:58:17 +0000 Manifest this update: Mon 21 Sep 2026 04:58:17 +0000 Manifest next update: Mon 28 Sep 2026 04:58:17 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: F9YhcaPkiky2CF3+MyVD2QOciddM2JuevSS62CfM7e8=) 2: qhZ3tYlUNLx4CvsqN-C1p0jr5DI.asa (hash: wis4l1kG1hTGz1dDj73IbjwvA1kqvI9WiQ+qWwiJkF8=) 3: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: uSJSVKQ2eb5T6Rs3qb48PEQhXusBNfHf9wMlJhiue14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Sep 21 04:58:17 2026 GMT Not After : Sep 28 04:58:17 2026 GMT Subject: CN=6ab0b969-0b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:7d:9d:16:d9:22:39:9a:88:8f:a6:b0:50: 9d:9a:fb:1c:9e:12:0c:cb:12:11:6e:3e:a9:18:f2: e8:02:46:3c:72:01:85:7a:db:4f:ea:e0:b5:f4:01: fb:f4:5c:a3:69:b2:b8:90:bf:c1:d7:b0:00:a2:3d: df:a8:8f:87:b0:e4:99:57:94:6d:dd:05:fe:c9:37: 9c:ac:1a:60:d7:fa:d2:c4:e5:ed:6a:8d:38:17:23: c4:12:7d:41:64:36:a3:30:31:0d:aa:ac:a2:c0:b1: 64:fc:f7:11:53:9d:24:5d:48:d7:73:5e:57:d6:fe: b3:31:cd:31:66:5a:72:a8:b9:e5:13:d2:43:3d:c4: 80:1c:ae:fe:4d:71:81:e3:8c:7e:02:a1:6e:d5:c1: c9:be:11:cb:15:a6:16:c5:f0:5b:16:52:4e:5f:92: b6:1e:21:3a:bb:87:ba:7e:c6:fc:aa:66:ff:24:3d: 0d:6e:d6:49:e5:74:6b:09:6e:ff:9a:dd:a4:76:ba: fc:b1:96:ff:a0:73:1a:7b:a1:dc:b4:61:51:1c:06: e8:06:76:4b:ca:e3:77:c3:35:96:9c:3c:fa:6c:ef: 24:ab:3c:ee:2f:4e:26:7f:95:42:f6:ac:42:2c:2a: f7:f4:18:41:3a:a3:cc:aa:c6:78:e6:6c:ce:ae:1c: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F5:66:0C:90:A0:99:C4:6D:D9:2D:C6:EA:29:77:B6:E1:CE:5A:19 X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:4b:cc:76:58:36:b7:3f:eb:b7:b1:7a:a2:59:b4:fe:20:2f: b7:80:51:c8:81:1a:eb:ca:a9:db:f3:58:f8:f7:10:bd:18:b8: ce:1b:b1:76:95:b3:c7:60:35:d6:ef:be:de:5d:fd:74:33:38: ce:88:b8:1f:41:0a:e8:f9:eb:7e:0d:94:1a:3d:36:ae:3d:5b: 69:ab:46:a1:7c:aa:0b:da:e0:cf:80:db:fb:57:3e:ab:b1:21: 58:ac:94:7c:87:4e:e4:88:d3:35:98:5f:a5:61:60:b4:3a:9d: c0:c1:64:4f:03:e1:ae:06:f3:a5:79:8e:7b:a5:ed:c2:f6:dc: 94:1b:89:dc:da:ff:78:16:3c:e3:ac:6c:31:dd:03:c2:c8:79: 20:4a:6b:3b:00:1a:73:e0:96:d1:18:9d:af:4b:b4:d1:96:a2: aa:2a:f3:1d:a2:31:b6:7b:07:43:4f:a5:cd:45:b2:b3:ee:8a: 84:c2:8a:91:c2:fe:e4:6c:41:a2:e4:a7:14:d5:81:99:9a:59: 8a:4a:19:8b:f0:f4:57:89:3b:18:94:0a:67:db:65:c8:98:40: d2:c5:9a:55:c4:fe:a8:d8:84:c9:e0:d1:43:e9:61:e9:83:7b: a0:b8:50:81:85:01:5d:49:f6:6c:0c:3e:bd:04:08:47:bf:0b: a6:42:8b:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjYwOTIxMDQ1ODE3WhcNMjYwOTI4MDQ1ODE3WjAYMRYwFAYD VQQDEw02YWIwYjk2OS0wYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzt9nRbZIjmaiI+msFCdmvscnhIMyxIRbj6pGPLoAkY8cgGFettP6uC19AH7 9FyjabK4kL/B17AAoj3fqI+HsOSZV5Rt3QX+yTecrBpg1/rSxOXtao04FyPEEn1B ZDajMDENqqyiwLFk/PcRU50kXUjXc15X1v6zMc0xZlpyqLnlE9JDPcSAHK7+TXGB 44x+AqFu1cHJvhHLFaYWxfBbFlJOX5K2HiE6u4e6fsb8qmb/JD0NbtZJ5XRrCW7/ mt2kdrr8sZb/oHMae6HctGFRHAboBnZLyuN3wzWWnDz6bO8kqzzuL04mf5VC9qxC LCr39BhBOqPMqsZ45mzOrhxmIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNr1ZgyQ oJnEbdktxuopd7bhzloZMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASEvMdlg2tz/rt7F6olm0/iAvt4BRyIEa68qp2/NY+PcQvRi4zhuxdpWzx2A1 1u++3l39dDM4zoi4H0EK6Pnrfg2UGj02rj1baatGoXyqC9rgz4Db+1c+q7EhWKyU fIdO5IjTNZhfpWFgtDqdwMFkTwPhrgbzpXmOe6XtwvbclBuJ3Nr/eBY846xsMd0D wsh5IEprOwAac+CW0Ridr0u00ZaiqirzHaIxtnsHQ0+lzUWys+6KhMKKkcL+5GxB ouSnFNWBmZpZikoZi/D0V4k7GJQKZ9tlyJhA0sWaVcT+qNiEyeDRQ+lh6YN7oLhQ gYUBXUn2bAw+vQQIR78LpkKLdA== -----END CERTIFICATE-----Generated at Tue Sep 22 19:55:37 2026 by rpki-client