$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: 6rpq7FjIh68OTEZA+KmFcnh1DNN3wONQbhtGh+Sq1LU= Subject key identifier: E9:61:02:B2:B7:BA:28:3E:0F:00:53:10:CA:B5:0D:B3:87:AC:86:74 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 033C Signing time: Mon 21 Sep 2026 00:50:49 +0000 Manifest this update: Mon 21 Sep 2026 00:50:48 +0000 Manifest next update: Mon 28 Sep 2026 00:50:48 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: g2qBVU2ufh8jrbgaRrxm2xbUxygGub8GidKA5578eok=) 2: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=) 3: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=) 4: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=) 5: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=) 6: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=) 7: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=) 8: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Sep 21 00:50:48 2026 GMT Not After : Sep 28 00:50:48 2026 GMT Subject: CN=6ab07f69-1768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:ea:ce:6c:91:f0:2f:51:dc:5d:29:df:48: 0f:92:48:7b:7e:df:04:50:10:49:80:08:7e:77:3e: 7b:54:ad:9b:4a:53:7a:d9:09:ee:0a:02:18:49:f4: 2c:16:d2:c1:b2:24:96:82:8d:8e:9f:7d:55:6d:6b: e5:60:25:15:70:3c:63:98:6e:c1:33:3f:71:0c:25: 39:0a:65:99:ef:eb:e8:cd:4a:b6:24:7a:0e:64:68: a7:1c:37:bb:50:33:d6:b4:d9:a3:1d:37:4c:5b:5d: 16:57:34:2e:23:86:ed:7e:22:42:db:6a:dd:0c:d3: 36:9f:1f:a5:b3:e7:19:7e:e1:ca:4b:0b:f5:8b:e5: 96:c3:1b:98:bd:e2:db:14:63:a0:bf:36:a8:68:ea: 3b:e6:d4:2e:07:db:0c:28:60:b9:f0:3e:d0:fa:82: 1f:14:98:6b:33:99:97:e8:1a:22:88:68:ef:bd:89: eb:70:b3:c6:1e:70:58:42:ce:d6:07:0f:d2:34:73: b3:b3:b0:6f:e2:29:92:6b:39:88:d9:f7:b4:e4:df: bd:c7:d3:29:97:ef:23:0b:ec:d5:5a:53:b5:38:61: 67:7b:3f:2b:ad:4f:43:7a:a3:04:2a:c5:a9:bf:4a: 71:2b:ed:de:f4:04:59:33:30:b7:7c:59:ec:2b:12: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:61:02:B2:B7:BA:28:3E:0F:00:53:10:CA:B5:0D:B3:87:AC:86:74 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bd:52:f8:aa:d1:e3:ad:68:06:ab:87:52:bd:73:14:e4:d7: 6e:8b:56:8d:ee:ae:91:b8:b7:89:d0:88:62:13:e2:3e:7b:f1: 05:c8:55:4e:95:10:f9:68:a4:69:c5:2f:92:2d:52:82:1c:e4: f9:85:4f:a3:57:91:50:a0:28:39:39:ff:02:9c:a6:60:64:8e: df:ae:fa:cf:fa:00:c9:cf:6b:b6:d1:f2:b3:dd:5e:7e:86:8f: 00:55:4f:db:21:57:40:82:7b:33:ed:82:e3:51:32:e4:08:e7: 9f:bc:c0:c7:05:96:5f:7c:f6:99:71:72:bd:7a:24:dd:65:0a: 27:27:67:73:fb:d3:4d:4c:4c:87:5e:17:32:05:e6:64:a5:d2: 84:49:17:35:58:ee:62:a7:5c:ad:36:a7:38:77:24:b3:8b:49: 49:c0:5e:88:f7:a6:39:cf:96:93:7f:57:39:aa:0a:9d:bb:40: ce:27:39:48:9b:7b:7b:55:79:55:94:33:0a:70:6b:4a:5b:86: 99:bf:9b:58:61:81:b2:02:ad:4c:d6:17:b2:3d:29:f6:61:eb: 78:6f:dd:64:fb:97:18:76:ec:5e:ca:a8:be:3c:3b:ad:f8:85: ab:23:85:e8:7f:fd:7f:4a:6a:8e:d7:ad:03:28:a2:1b:f6:25: f8:35:54:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjYwOTIxMDA1MDQ4WhcNMjYwOTI4MDA1MDQ4WjAYMRYwFAYD VQQDEw02YWIwN2Y2OS0xNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr3qzmyR8C9R3F0p30gPkkh7ft8EUBBJgAh+dz57VK2bSlN62QnuCgIYSfQs FtLBsiSWgo2On31VbWvlYCUVcDxjmG7BMz9xDCU5CmWZ7+vozUq2JHoOZGinHDe7 UDPWtNmjHTdMW10WVzQuI4btfiJC22rdDNM2nx+ls+cZfuHKSwv1i+WWwxuYveLb FGOgvzaoaOo75tQuB9sMKGC58D7Q+oIfFJhrM5mX6BoiiGjvvYnrcLPGHnBYQs7W Bw/SNHOzs7Bv4imSazmI2fe05N+9x9Mpl+8jC+zVWlO1OGFnez8rrU9DeqMEKsWp v0pxK+3e9ARZMzC3fFnsKxJNXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlhArK3 uig+DwBTEMq1DbOHrIZ0MB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK71S+KrR461oBquHUr1zFOTXbotWje6ukbi3idCIYhPiPnvxBchVTpUQ+Wik acUvki1Sghzk+YVPo1eRUKAoOTn/ApymYGSO3676z/oAyc9rttHys91efoaPAFVP 2yFXQIJ7M+2C41Ey5Ajnn7zAxwWWX3z2mXFyvXok3WUKJydnc/vTTUxMh14XMgXm ZKXShEkXNVjuYqdcrTanOHcks4tJScBeiPemOc+Wk39XOaoKnbtAzic5SJt7e1V5 VZQzCnBrSluGmb+bWGGBsgKtTNYXsj0p9mHreG/dZPuXGHbsXsqovjw7rfiFqyOF 6H/9f0pqjtetAyiiG/Yl+DVU2w== -----END CERTIFICATE-----Generated at Mon Sep 21 22:18:07 2026 by rpki-client