$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft File: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json) Hash identifier: CTOUB9bk+GJiz13MhovTxzIqhUnRJsa1+hvQKLC//5o= Subject key identifier: 88:D8:FA:F8:10:80:4A:D9:18:48:66:E8:41:77:E5:77:F1:1C:1D:ED Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 314DB8400E53D40BA8C07C944B9637E1862185B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft Manifest number: 03A0 Signing time: Wed 04 Nov 2026 23:05:16 +0000 Manifest this update: Wed 04 Nov 2026 23:00:16 +0000 Manifest next update: Thu 05 Nov 2026 23:35:16 +0000 Files and hashes: 1: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: 0/jH4xKeyYwrPOJr4U8fqookxEMYIgiHtZ6q+8iFqfw=) 2: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=) 3: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk=) 4: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=) 5: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=) 6: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 23:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4d:b8:40:0e:53:d4:0b:a8:c0:7c:94:4b:96:37:e1:86:21:85:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Nov 4 23:00:16 2026 GMT Not After : Nov 5 23:35:16 2026 GMT Subject: CN=88D8FAF810804AD9184866E84177E577F11C1DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:b8:bb:69:27:2e:70:9b:72:21:d5:a9:e3: 05:a5:75:dc:42:ac:18:35:35:bb:1a:0f:18:e7:f9: fd:e8:b9:62:9e:d0:a8:d5:75:22:53:c9:63:b3:77: 84:2d:0b:56:c8:95:03:3f:58:15:aa:51:aa:c7:9c: c9:81:db:dc:fc:70:05:c5:6d:e2:01:99:21:43:4c: ee:40:6e:b2:67:19:14:e6:c2:8b:c0:9b:33:ce:77: a0:c5:2b:73:38:fb:e5:0d:c2:b8:6e:96:78:d1:07: c2:0b:0c:bf:7d:d8:d4:1d:12:63:b0:96:48:e4:ff: 58:d9:35:cb:ba:41:fa:6d:9d:7b:a7:16:21:8d:ed: 89:3e:0a:90:6a:3c:51:a9:0f:4f:e8:4f:5f:d4:17: e9:e1:fe:99:d5:97:18:69:8a:4a:e2:76:2e:cf:0f: d6:42:8c:c6:03:a8:4b:a2:b8:67:a5:f2:1e:9b:f6: 73:08:fa:ef:89:38:ac:14:e1:58:9a:90:98:4d:c8: 59:4c:e5:e5:97:41:5c:98:a4:92:f6:3c:16:8d:1d: 5f:82:7f:fe:aa:3f:80:2b:bb:f7:ac:08:d9:08:b7: 03:26:3a:e9:99:19:c6:eb:98:00:47:c1:2a:28:40: 73:a4:ec:46:3d:a1:8e:e9:62:b6:f9:ed:47:ae:72: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:FA:F8:10:80:4A:D9:18:48:66:E8:41:77:E5:77:F1:1C:1D:ED X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:61:be:48:32:ba:3b:e1:71:2e:d2:c7:b4:0b:99:13:59:63: 5a:5c:fb:68:d7:0b:74:d4:f0:00:87:82:21:20:6f:df:8f:bf: 9a:b5:ca:17:0a:a1:b6:3a:03:e4:66:bd:b4:35:46:a6:b4:4c: d3:ef:9e:62:e0:44:54:ea:77:16:7f:40:f3:75:0f:56:c9:f7: ee:83:1b:9d:2b:57:8c:e8:d7:fa:0c:fd:f1:42:3e:41:28:14: 7c:1f:56:78:d9:49:77:b5:55:53:ca:2b:00:3a:b3:31:d0:31: 37:3f:0e:8f:20:cd:5d:44:ef:a5:c6:58:93:a6:2e:0a:1e:6d: c9:e2:da:ba:b5:a1:4b:fc:9e:01:88:8c:62:86:70:b6:79:93: b1:8c:c4:3b:42:7c:bf:13:d9:ed:dc:88:ad:cd:3b:93:12:e9: 7c:5d:35:02:57:f9:41:e6:45:a8:34:67:82:a6:0f:9f:d8:c9: 6a:09:fe:8e:65:88:46:ee:be:14:4a:d2:58:3c:89:68:2c:f8: 4d:2d:b0:e0:e2:0b:20:47:3d:c4:fd:69:50:a4:86:18:25:65: 95:f1:50:6b:f4:87:cc:d6:b8:12:07:fb:d7:71:71:9b:36:df: a1:7a:00:41:02:a1:6c:8a:36:12:70:fa:70:ea:17:e1:81:4e: 15:55:0b:a4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMU24QA5T1AuowHyUS5Y34YYhhbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MTEwNDIzMDAxNloX DTI2MTEwNTIzMzUxNlowMzExMC8GA1UEAxMoODhEOEZBRjgxMDgwNEFEOTE4NDg2 NkU4NDE3N0U1NzdGMTFDMURFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJD6uLtpJy5wm3Ih1anjBaV13EKsGDU1uxoPGOf5/ei5Yp7QqNV1IlPJY7N3 hC0LVsiVAz9YFapRqsecyYHb3PxwBcVt4gGZIUNM7kBusmcZFObCi8CbM853oMUr czj75Q3CuG6WeNEHwgsMv33Y1B0SY7CWSOT/WNk1y7pB+m2de6cWIY3tiT4KkGo8 UakPT+hPX9QX6eH+mdWXGGmKSuJ2Ls8P1kKMxgOoS6K4Z6XyHpv2cwj674k4rBTh WJqQmE3IWUzl5ZdBXJikkvY8Fo0dX4J//qo/gCu796wI2Qi3AyY66ZkZxuuYAEfB KihAc6TsRj2hjulitvntR65yYx8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSI2Pr4 EIBK2RhIZuhBd+V38Rwd7TAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUx MDAwMDAvMC81RDcwN0IwRDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAoGG+SDK6O+FxLtLHtAuZE1ljWlz7aNcLdNTwAIeCISBv34+/ mrXKFwqhtjoD5Ga9tDVGprRM0++eYuBEVOp3Fn9A83UPVsn37oMbnStXjOjX+gz9 8UI+QSgUfB9WeNlJd7VVU8orADqzMdAxNz8OjyDNXUTvpcZYk6YuCh5tyeLaurWh S/yeAYiMYoZwtnmTsYzEO0J8vxPZ7dyIrc07kxLpfF01Alf5QeZFqDRngqYPn9jJ agn+jmWIRu6+FErSWDyJaCz4TS2w4OILIEc9xP1pUKSGGCVllfFQa/SHzNa4Egf7 13FxmzbfoXoAQQKhbIo2EnD6cOoX4YFOFVULpA== -----END CERTIFICATE-----Generated at Thu Nov 5 16:47:11 2026 by rpki-client