$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: dXaR2NnReyAAtCDRWLuVWvuXuRjKX5JXZTHyFkUzoPk= Subject key identifier: 6A:30:DC:C4:DA:A5:04:8B:82:40:6C:07:DB:0E:69:2D:A7:46:D6:52 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 011A Signing time: Sat 19 Sep 2026 06:03:05 +0000 Manifest this update: Sat 19 Sep 2026 06:03:04 +0000 Manifest next update: Sat 26 Sep 2026 06:03:04 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: 8gyM/Gz0H9H6Mjnp7jV3s+2c/j8hB2drMUcxSHITBFQ=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: xJEez0DY8AmNVE2VqhZDR/pkwfuh11Vrc1/2qRF3aqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Sep 19 06:03:04 2026 GMT Not After : Sep 26 06:03:04 2026 GMT Subject: CN=6aae2598-fe8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:b0:5b:34:4a:c5:55:fc:12:7c:dd:2e:83: cb:3c:dd:f6:33:a5:3f:b8:db:18:d9:26:1c:d3:e6: 2b:7a:2e:6a:33:d0:b5:96:0e:11:03:91:39:b2:2b: e0:ab:8d:e3:cf:1d:30:e6:f7:d5:95:07:5a:df:6a: 3e:aa:ca:ab:57:93:22:c0:15:a3:51:b8:3e:32:70: 09:0c:cb:86:41:c8:70:ac:c5:1b:b9:2f:c5:80:e0: 0d:c2:e3:81:f9:7c:2c:10:97:2e:89:b8:45:21:cc: 85:50:7f:c6:c5:6b:b8:2e:1d:90:ba:23:45:d9:24: e5:6a:52:16:75:0e:f7:2b:ec:ba:7c:1a:6a:4d:63: e2:a2:03:b0:5e:8f:8a:47:27:0e:f8:6f:05:2c:fe: 98:e3:30:c1:63:af:c0:af:94:fb:8e:4b:b1:c5:ae: 00:dc:48:ee:db:62:05:47:c2:13:f0:88:6e:2b:1c: a9:d1:e1:86:51:77:ef:4c:21:67:46:7b:61:8f:1f: a9:ea:ee:33:1c:0f:67:99:ac:f4:c2:d2:d0:cc:b4: 4d:b7:2b:fc:64:cb:f9:ac:aa:62:74:3a:9f:f3:b1: e0:4d:ca:d6:18:68:c6:00:8a:13:a3:8a:99:ac:d2: d9:39:ad:47:cf:4a:c5:f6:29:9c:e0:aa:74:a5:ca: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:DC:C4:DA:A5:04:8B:82:40:6C:07:DB:0E:69:2D:A7:46:D6:52 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:da:86:cb:45:f3:5b:b0:a7:33:f9:54:0c:c4:1b:89:db: 4d:b9:9f:1f:92:5d:c9:16:77:3f:98:af:41:50:d0:49:ea:c5: 4a:73:fb:10:e9:78:09:2f:30:6f:1f:fe:0b:f1:0c:a8:bc:21: 01:70:bd:41:ac:95:80:9f:21:12:10:57:42:38:88:d7:eb:48: f7:6e:f5:85:71:4a:67:6b:f5:19:e1:cc:86:98:fb:c4:2f:f1: f4:5d:81:39:cc:fe:f9:89:06:35:f9:e8:57:c0:97:de:bc:7a: 89:f0:07:7a:2b:da:46:b0:0d:b4:0f:3d:7a:65:4a:f9:12:d4: 78:30:0e:9a:c1:2b:52:95:3b:25:5b:7e:56:75:29:c7:a3:0d: 37:c2:5d:76:29:ab:37:b3:8e:82:aa:2a:dc:cc:3e:dc:5f:a2: e5:cf:0b:10:bb:75:5b:a0:0a:81:74:39:d6:cb:9b:cd:53:20: bf:62:97:61:f2:a7:a4:9a:6f:eb:be:25:47:e6:9f:21:c8:7f: 00:f2:4d:67:2f:86:3d:21:1b:6b:ad:1f:79:39:35:18:e0:98: a3:70:42:d5:f7:14:21:13:d9:7f:09:e9:4e:ed:61:32:c7:47: df:e4:42:36:36:d4:4d:16:d6:ad:3f:ad:36:9a:64:39:3b:c5: f8:8d:2e:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwOTE5MDYwMzA0WhcNMjYwOTI2MDYwMzA0WjAYMRYwFAYD VQQDEw02YWFlMjU5OC1mZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2z6wWzRKxVX8EnzdLoPLPN32M6U/uNsY2SYc0+Yrei5qM9C1lg4RA5E5sivg q43jzx0w5vfVlQda32o+qsqrV5MiwBWjUbg+MnAJDMuGQchwrMUbuS/FgOANwuOB +XwsEJcuibhFIcyFUH/GxWu4Lh2QuiNF2STlalIWdQ73K+y6fBpqTWPiogOwXo+K RycO+G8FLP6Y4zDBY6/Ar5T7jkuxxa4A3Eju22IFR8IT8IhuKxyp0eGGUXfvTCFn Rnthjx+p6u4zHA9nmaz0wtLQzLRNtyv8ZMv5rKpidDqf87HgTcrWGGjGAIoTo4qZ rNLZOa1Hz0rF9imc4Kp0pcoYwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGow3MTa pQSLgkBsB9sOaS2nRtZSMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASAvahstF81uwpzP5VAzEG4nbTbmfH5JdyRZ3P5ivQVDQSerFSnP7EOl4CS8w bx/+C/EMqLwhAXC9QayVgJ8hEhBXQjiI1+tI9271hXFKZ2v1GeHMhpj7xC/x9F2B Ocz++YkGNfnoV8CX3rx6ifAHeivaRrANtA89emVK+RLUeDAOmsErUpU7JVt+VnUp x6MNN8JddimrN7OOgqoq3Mw+3F+i5c8LELt1W6AKgXQ51subzVMgv2KXYfKnpJpv 674lR+afIch/APJNZy+GPSEba60feTk1GOCYo3BC1fcUIRPZfwnpTu1hMsdH3+RC NjbUTRbWrT+tNppkOTvF+I0utg== -----END CERTIFICATE-----Generated at Sun Sep 20 21:19:59 2026 by rpki-client