$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: 47MDWXQxcVuXdp/7ky2trsLI7GWwZDr/6X9TDPAlkbg= Subject key identifier: 92:F0:34:0D:0A:40:36:5B:15:6B:41:15:9E:D4:96:08:25:D6:4B:46 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 033D Signing time: Wed 23 Sep 2026 00:38:41 +0000 Manifest this update: Wed 23 Sep 2026 00:38:40 +0000 Manifest next update: Wed 30 Sep 2026 00:38:40 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: 24SHJxAeUZbQkKhAJJY9qbifUUhUlAwN0YtP2HnQPGM=) 2: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=) 3: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=) 4: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=) 5: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=) 6: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=) 7: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=) 8: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Sep 23 00:38:40 2026 GMT Not After : Sep 30 00:38:40 2026 GMT Subject: CN=6ab31f91-cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:8d:7b:f2:18:1e:a1:00:63:e3:94:c9:46: b1:92:ca:68:19:82:0d:72:c1:63:f6:8f:c6:b2:98: 01:82:c4:f0:81:8a:42:b7:f1:31:e7:84:50:7f:6f: 5c:0f:c8:af:57:8f:d1:b2:0a:11:2b:b6:1a:15:2c: 49:2f:1a:1e:d1:62:e4:fe:42:c7:f7:0b:cf:8d:59: b5:4f:42:e9:03:20:a1:3a:c0:85:c0:5b:81:a2:e4: e4:35:c6:c0:cb:d5:12:b9:91:e0:b6:91:9c:32:49: a1:6b:55:0b:8f:fb:99:f4:6f:c3:0a:0e:f1:30:98: 2a:47:17:06:7e:9a:d0:a1:03:35:cf:a4:f5:3a:4e: da:0c:d3:ac:ed:2d:00:af:7a:5b:29:01:59:60:f6: 16:77:cd:2e:25:c1:8e:88:ee:0b:53:c3:18:64:a7: 61:fc:40:65:68:e4:9d:0a:a4:2f:37:4f:a6:e4:57: 13:19:15:27:68:ae:86:83:08:66:fd:2c:e3:3f:7c: 92:59:7b:27:13:ac:44:66:ce:57:94:ec:4a:de:d4: 4e:de:41:14:36:56:ea:df:b8:1d:52:0f:9a:6f:c0: b0:01:f0:16:1b:98:37:e6:89:5c:b7:b1:e1:95:fa: fd:72:23:4c:c8:e1:cc:8a:6b:9d:5a:a7:20:d4:68: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F0:34:0D:0A:40:36:5B:15:6B:41:15:9E:D4:96:08:25:D6:4B:46 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e5:80:40:ac:c8:0e:7d:04:e1:d4:50:a3:4f:f6:b4:86:31: a1:47:6b:3a:ef:d3:7e:00:34:c4:fe:c2:ce:0c:3c:79:5b:6a: 52:18:2c:03:ab:63:d3:9d:31:5f:f0:49:cd:b8:64:5d:b2:a5: ff:5f:e7:a0:54:cb:56:24:38:e2:49:3f:7d:47:14:76:07:33: be:6e:26:a3:eb:29:67:6a:0a:47:22:43:d2:92:fe:32:e1:80: 74:66:0b:70:3a:56:e0:48:5e:06:b7:52:51:59:45:80:f6:ff: 70:50:f4:5d:dc:8c:1d:e9:3e:1d:14:3f:08:ea:a0:54:a3:8b: 56:6e:24:6d:0b:8a:41:d1:7c:ad:56:46:98:12:eb:b1:be:cc: f5:75:81:e5:26:88:cb:c2:da:b1:49:5f:14:a5:97:15:0c:f2: ea:b3:b1:dc:12:62:fe:08:18:24:c2:a9:ba:42:66:f3:1b:55: 6b:1e:b7:07:60:aa:68:98:5f:63:12:f2:38:18:01:95:33:78: 41:9c:6b:c5:68:c8:7b:c9:16:9f:fd:c4:60:a4:7d:a5:4e:50: ae:0d:56:26:fa:52:da:cf:90:83:59:94:03:4b:a8:eb:c2:60: 8b:5e:0c:0b:f6:b3:f1:1c:8e:1e:37:06:38:c8:a8:77:be:58: a4:e1:df:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjYwOTIzMDAzODQwWhcNMjYwOTMwMDAzODQwWjAYMRYwFAYD VQQDEw02YWIzMWY5MS1jZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs6Ne/IYHqEAY+OUyUaxkspoGYINcsFj9o/GspgBgsTwgYpCt/Ex54RQf29c D8ivV4/RsgoRK7YaFSxJLxoe0WLk/kLH9wvPjVm1T0LpAyChOsCFwFuBouTkNcbA y9USuZHgtpGcMkmha1ULj/uZ9G/DCg7xMJgqRxcGfprQoQM1z6T1Ok7aDNOs7S0A r3pbKQFZYPYWd80uJcGOiO4LU8MYZKdh/EBlaOSdCqQvN0+m5FcTGRUnaK6Ggwhm /SzjP3ySWXsnE6xEZs5XlOxK3tRO3kEUNlbq37gdUg+ab8CwAfAWG5g35olct7Hh lfr9ciNMyOHMimudWqcg1GgVSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLwNA0K QDZbFWtBFZ7Ulggl1ktGMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOWAQKzIDn0E4dRQo0/2tIYxoUdrOu/TfgA0xP7Czgw8eVtqUhgsA6tj050x X/BJzbhkXbKl/1/noFTLViQ44kk/fUcUdgczvm4mo+spZ2oKRyJD0pL+MuGAdGYL cDpW4EheBrdSUVlFgPb/cFD0XdyMHek+HRQ/COqgVKOLVm4kbQuKQdF8rVZGmBLr sb7M9XWB5SaIy8LasUlfFKWXFQzy6rOx3BJi/ggYJMKpukJm8xtVax63B2CqaJhf YxLyOBgBlTN4QZxrxWjIe8kWn/3EYKR9pU5Qrg1WJvpS2s+Qg1mUA0uo68Jgi14M C/az8RyOHjcGOMiod75YpOHfpw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:59:52 2026 by rpki-client