$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: cPOPSEMEFvOJr7p+jpWvvzH/ZOrj4hsvlprPFmHNDSw= Subject key identifier: F6:5D:78:C3:B0:64:1E:F5:80:1F:DC:98:BC:BA:B3:9F:4F:A8:AB:63 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0AB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 0AA5 Signing time: Sat 10 Oct 2026 19:36:48 +0000 Manifest this update: Sat 10 Oct 2026 19:36:47 +0000 Manifest next update: Sat 17 Oct 2026 19:36:47 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: cWnQtMB4HTDuOWIgnkKQXN4t1DwWJ6Tu173Tm/tGXAM=) 2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: EUoTZeexjkbb7zufCQtahAm8AEeFMiE7APDK7et0hJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2745 (0xab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Oct 10 19:36:47 2026 GMT Not After : Oct 17 19:36:47 2026 GMT Subject: CN=6aca93d0-e07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:bd:b0:76:ec:fb:1d:97:cb:87:86:40:7e: cc:05:09:19:5e:70:78:aa:59:aa:e9:d6:b8:8c:14: 8b:e9:d7:84:dd:15:77:78:f5:9c:cd:55:c9:ed:27: 93:28:cb:4d:d7:69:b5:e7:64:68:c7:87:0f:65:95: 33:af:0f:43:eb:67:1c:35:6d:bc:b0:14:3e:1c:b6: e8:5a:7e:d3:30:00:35:c2:77:dd:ec:7c:8b:0d:98: cc:af:e2:2a:e4:7d:a2:1e:58:22:69:e4:ac:48:6d: 64:3e:b1:ad:99:d3:7b:37:a2:d4:e6:25:63:8c:79: a9:aa:f5:32:c5:f6:b0:46:ac:cd:89:68:35:7a:df: f5:45:c5:0a:17:da:d6:82:ab:25:cd:53:1f:14:ba: 2a:e3:2b:7c:9c:0a:b4:5c:61:e4:fb:81:18:d3:2a: c2:c2:be:fe:42:dc:25:d7:a4:e4:05:bb:7c:1e:33: 94:07:8d:c2:74:a4:1e:56:96:01:89:ae:b3:07:e5: ed:f2:d7:77:4e:90:ce:73:86:8d:14:8f:f6:1a:64: 19:8c:af:57:c0:01:43:53:7b:f3:b8:39:a9:08:26: e7:49:b7:74:f1:b0:0f:65:4a:21:9f:de:30:f4:e0: 12:3e:e0:cc:e0:8f:1f:58:0f:7d:cd:97:a2:fc:1f: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5D:78:C3:B0:64:1E:F5:80:1F:DC:98:BC:BA:B3:9F:4F:A8:AB:63 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c6:a3:d0:1a:d2:b5:95:99:ff:a4:23:21:2a:6a:19:15:68: 02:c2:c0:bb:75:4b:7c:72:0f:71:e3:12:0f:9d:4e:61:36:23: 49:b4:2e:3d:32:37:1d:e7:fa:a8:2a:b1:41:e1:c3:ec:84:b4: 04:2d:5b:71:50:94:8e:8c:d1:ea:e5:fb:e4:1d:af:4e:0d:63: 90:2b:c4:03:43:f9:84:6f:77:a8:d1:a9:49:19:b3:21:5f:20: 09:21:42:bd:7d:66:ae:a9:63:e3:b5:b7:1e:23:66:fb:42:4f: 08:95:4a:ac:67:df:13:24:74:99:98:28:cd:81:40:85:3a:ab: 44:0a:ad:ef:35:47:ec:15:b3:f0:53:5a:e6:45:cc:26:1e:98: 11:90:4e:1c:25:56:7e:61:22:f9:c6:80:e7:f6:02:7d:6c:4a: 50:5c:3b:69:0f:a4:17:99:f5:99:e5:c2:a3:d7:86:ab:b1:7e: c0:d2:e6:e9:7a:44:f4:e7:76:a6:68:43:15:c2:fb:cd:6e:f5: 7d:24:fc:98:5a:75:04:54:ce:2a:e6:b3:f9:17:97:b4:5e:71: 93:92:cf:b3:c6:f4:f2:b1:95:4f:d7:53:7b:69:78:1d:12:4d: a0:d3:bd:2b:77:0f:ac:b9:c0:d2:90:41:ed:26:b8:48:06:14: c9:c6:23:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjYxMDEwMTkzNjQ3WhcNMjYxMDE3MTkzNjQ3WjAYMRYwFAYD VQQDEw02YWNhOTNkMC1lMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbi9sHbs+x2Xy4eGQH7MBQkZXnB4qlmq6da4jBSL6deE3RV3ePWczVXJ7SeT KMtN12m152Rox4cPZZUzrw9D62ccNW28sBQ+HLboWn7TMAA1wnfd7HyLDZjMr+Iq 5H2iHlgiaeSsSG1kPrGtmdN7N6LU5iVjjHmpqvUyxfawRqzNiWg1et/1RcUKF9rW gqslzVMfFLoq4yt8nAq0XGHk+4EY0yrCwr7+Qtwl16TkBbt8HjOUB43CdKQeVpYB ia6zB+Xt8td3TpDOc4aNFI/2GmQZjK9XwAFDU3vzuDmpCCbnSbd08bAPZUohn94w 9OASPuDM4I8fWA99zZei/B/9qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZdeMOw ZB71gB/cmLy6s59PqKtjMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfMaj0BrStZWZ/6QjISpqGRVoAsLAu3VLfHIPceMSD51OYTYjSbQuPTI3Hef6 qCqxQeHD7IS0BC1bcVCUjozR6uX75B2vTg1jkCvEA0P5hG93qNGpSRmzIV8gCSFC vX1mrqlj47W3HiNm+0JPCJVKrGffEyR0mZgozYFAhTqrRAqt7zVH7BWz8FNa5kXM Jh6YEZBOHCVWfmEi+caA5/YCfWxKUFw7aQ+kF5n1meXCo9eGq7F+wNLm6XpE9Od2 pmhDFcL7zW71fST8mFp1BFTOKuaz+ReXtF5xk5LPs8b08rGVT9dTe2l4HRJNoNO9 K3cPrLnA0pBB7Sa4SAYUycYjAA== -----END CERTIFICATE-----Generated at Sun Oct 11 18:43:01 2026 by rpki-client