$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft File: mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json) Hash identifier: Y/hUGHuixv4uvwEBd/YMzED3XIZzvv6My2mZ8MJkRK8= Subject key identifier: EE:9A:13:92:28:92:03:32:E1:9A:71:90:1D:81:D7:F4:91:12:56:4A Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Certificate serial: 0D2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft Manifest number: 0D23 Signing time: Mon 12 Oct 2026 18:23:49 +0000 Manifest this update: Mon 12 Oct 2026 18:23:49 +0000 Manifest next update: Mon 19 Oct 2026 18:23:49 +0000 Files and hashes: 1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: Ifik0R5wHqjboFNw/V/Chw+v2LdLJQTHg+4Hw63oQzE=) 2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: bVKHxia6aHQtaaNVyyZWVecYBGynbvbR+1XTYbf4Q38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3373 (0xd2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Validity Not Before: Oct 12 18:23:49 2026 GMT Not After : Oct 19 18:23:49 2026 GMT Subject: CN=6acd25b5-2197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:0a:e9:8c:bd:84:ce:87:6a:84:20:b1:55: 24:b5:bf:94:a1:0c:16:e8:c5:71:3f:00:03:67:b4: 79:0d:8a:56:61:8f:9d:3a:b7:25:d6:b9:7d:96:2e: dd:79:99:33:e2:f5:ad:88:0a:33:ea:e4:07:dd:b6: 6b:7e:96:05:59:da:9a:ad:07:d5:04:05:6b:30:8b: 80:75:d5:7a:66:71:ee:b7:05:3e:c8:4e:ac:85:54: ca:c7:06:da:9d:89:9b:73:fc:e1:dd:be:91:90:2a: 04:7a:e3:f6:31:a7:f0:64:1c:3f:14:48:ab:8f:55: 06:36:43:df:dc:3b:6f:09:11:47:26:7c:a9:fe:4c: dd:0c:33:4c:d5:4a:26:0c:54:a7:57:bf:62:3e:d4: c0:9c:ba:a3:d1:d3:28:35:93:93:cd:21:fb:17:6e: 7d:c6:dc:52:ba:b4:64:9b:53:c9:83:51:c8:91:d4: ec:b7:04:f3:ff:db:e5:a8:28:22:46:29:bd:43:41: 00:e3:d8:21:79:53:03:e3:e5:67:85:42:bc:06:38: 44:13:2f:30:ac:fa:51:f2:d7:27:0a:07:a8:5d:9c: 61:ef:62:14:e2:49:b1:3d:f5:9d:58:83:05:3d:b6: 41:bb:3a:33:d0:28:56:0b:72:e6:34:d3:e6:b5:89: 6f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9A:13:92:28:92:03:32:E1:9A:71:90:1D:81:D7:F4:91:12:56:4A X509v3 Authority Key Identifier: keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0b:3f:ca:d0:d5:36:c8:ad:9b:e2:56:6d:9f:04:ff:f6:5f: 79:42:9f:3f:54:f1:a1:4e:0a:60:aa:6b:91:a7:db:67:bb:48: bb:47:bf:26:82:ca:53:dd:11:b7:94:1f:05:d0:ce:da:0d:23: 0a:51:e6:64:eb:51:3c:3e:b0:80:02:48:29:72:30:dd:fc:95: c2:9e:37:79:20:65:28:b0:06:9a:24:63:f7:7d:19:b2:5e:91: 50:1f:65:e4:ae:ea:16:90:f7:ef:e4:67:41:4b:0e:23:d0:c9: e2:c7:f9:6f:54:c1:f5:38:37:6e:a6:07:9e:9c:c6:a0:f0:87: 16:87:f1:7c:c9:a2:16:8a:90:a6:7e:70:b5:6f:c2:77:be:f4: c9:d6:3f:81:05:52:72:90:49:85:46:64:69:fc:7f:ad:59:a1: 64:16:f3:39:64:42:39:a3:b8:8f:ec:b4:4f:b0:c6:98:0a:7e: 72:ce:15:84:d9:ab:3d:68:38:11:0c:d7:80:c1:94:37:d3:9f: d9:01:53:a3:fe:d5:e9:6b:a6:c1:01:fe:66:f1:1b:09:59:c3: e3:dc:0b:c1:68:d4:f0:ce:74:50:59:04:9b:53:9d:6b:d7:b2: 0b:54:2e:83:83:66:04:5c:95:18:24:1c:48:f4:bd:00:7b:c9: d5:77:8c:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDYxMTAvBgNVBAUTKDk4NkU0MTY3RDZCMzgwN0Y0OUY3QzI2MDBENjBGOUMy NjA5QTcwOTYwHhcNMjYxMDEyMTgyMzQ5WhcNMjYxMDE5MTgyMzQ5WjAYMRYwFAYD VQQDEw02YWNkMjViNS0yMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu8K6Yy9hM6HaoQgsVUktb+UoQwW6MVxPwADZ7R5DYpWYY+dOrcl1rl9li7d eZkz4vWtiAoz6uQH3bZrfpYFWdqarQfVBAVrMIuAddV6ZnHutwU+yE6shVTKxwba nYmbc/zh3b6RkCoEeuP2MafwZBw/FEirj1UGNkPf3DtvCRFHJnyp/kzdDDNM1Uom DFSnV79iPtTAnLqj0dMoNZOTzSH7F259xtxSurRkm1PJg1HIkdTstwTz/9vlqCgi Rim9Q0EA49gheVMD4+VnhUK8BjhEEy8wrPpR8tcnCgeoXZxh72IU4kmxPfWdWIMF PbZBuzoz0ChWC3LmNNPmtYlvvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6aE5Io kgMy4ZpxkB2B1/SRElZKMB8GA1UdIwQYMBaAFJhuQWfWs4B/SffCYA1g+cJgmnCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNi9CNDcyRkUyQTBC N0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdIOUo5OEpnRFdENXdtQ2Fj SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21HNUJaOWF6Z0g5Sjk4SmdEV0Q1d21DYWNKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNi9CNDcyRkUyQTBCN0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdI OUo5OEpnRFdENXdtQ2FjSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhAs/ytDVNsitm+JWbZ8E//ZfeUKfP1TxoU4KYKprkafbZ7tIu0e/JoLKU90R t5QfBdDO2g0jClHmZOtRPD6wgAJIKXIw3fyVwp43eSBlKLAGmiRj930Zsl6RUB9l 5K7qFpD37+RnQUsOI9DJ4sf5b1TB9Tg3bqYHnpzGoPCHFofxfMmiFoqQpn5wtW/C d770ydY/gQVScpBJhUZkafx/rVmhZBbzOWRCOaO4j+y0T7DGmAp+cs4VhNmrPWg4 EQzXgMGUN9Of2QFTo/7V6WumwQH+ZvEbCVnD49wLwWjU8M50UFkEm1Oda9eyC1Qu g4NmBFyVGCQcSPS9AHvJ1XeMZg== -----END CERTIFICATE-----Generated at Wed Oct 14 21:05:08 2026 by rpki-client