$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft File: D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json) Hash identifier: XFJrcD8+Fxfh6fdDcr4Swd+ulpkfCDiBLRVf0ums3fg= Subject key identifier: 7D:CD:3A:ED:2A:D3:F9:C5:6F:68:3E:E0:71:13:51:D1:B3:B1:BF:22 Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft Manifest number: 029B Signing time: Wed 23 Sep 2026 01:31:33 +0000 Manifest this update: Wed 23 Sep 2026 01:31:33 +0000 Manifest next update: Wed 30 Sep 2026 01:31:33 +0000 Files and hashes: 1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: 4ryNcPrS45KRTENaVln+ysqSd9gFS1bDnkD/Twu/7iI=) 2: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (hash: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg=) 3: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (hash: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Validity Not Before: Sep 23 01:31:33 2026 GMT Not After : Sep 30 01:31:33 2026 GMT Subject: CN=6ab32bf5-6ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:ee:ae:32:8c:56:b2:20:2d:97:37:73:07: 73:b9:c1:c1:d9:d2:6a:d2:dd:ff:32:72:67:c6:65: a2:c2:00:4d:e7:11:6d:cd:c5:29:19:03:d8:b3:02: 8c:3e:0e:68:65:0a:8e:f7:a8:4f:c9:19:4c:20:7a: bd:17:e9:b0:a4:16:28:bf:9d:01:2d:03:b9:86:32: e3:81:16:33:b3:cd:9b:e3:dc:f8:dc:ac:d8:7c:9e: 3c:94:9d:42:7e:d3:1f:87:fc:f4:99:de:14:44:8a: fe:29:96:d9:2a:19:77:60:6c:93:d5:09:c8:0b:34: 20:c0:77:b7:1b:52:a5:a5:c9:70:ce:91:39:1c:ee: 31:9c:41:46:c4:36:41:c4:93:1f:e1:aa:54:0c:ff: 99:f6:f2:f7:2c:ce:33:ff:f2:4f:68:72:c7:f0:c5: ed:ec:4f:d4:c2:08:71:7e:79:7e:fc:23:c4:ca:2b: 72:fa:6e:11:c3:9b:a7:15:73:ba:7f:76:94:47:92: 84:89:50:3f:c3:7f:aa:fa:82:1e:83:d7:32:84:06: 08:8b:f2:b2:fc:2d:17:12:18:f5:c2:c9:25:f8:16: 11:8a:79:0b:22:4b:51:cc:24:66:45:80:25:52:be: 1d:e5:63:83:28:5b:c9:85:9a:41:c5:39:ac:a4:fb: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:3A:ED:2A:D3:F9:C5:6F:68:3E:E0:71:13:51:D1:B3:B1:BF:22 X509v3 Authority Key Identifier: keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:63:3a:ee:78:af:48:d7:ce:ab:2a:f7:e8:32:22:7c:74:a9: eb:ff:11:59:1a:fd:23:d7:04:10:52:29:18:19:94:d2:90:57: e6:5a:bf:41:02:e7:9b:a4:ce:00:8b:1e:2f:57:49:70:d5:9b: bf:01:c7:80:56:66:af:7f:9d:f4:9c:08:a8:6f:57:24:cc:4d: 8f:61:0d:4d:3f:9b:57:47:3e:f0:8a:f9:06:1c:91:0f:cc:f8: a2:ab:bd:46:97:43:a4:a4:b7:d8:c7:31:00:0f:26:84:3a:fa: 9e:ae:de:26:b5:d8:ab:56:25:e5:82:b1:93:2e:d4:21:17:02: a3:0f:25:0a:cf:c3:d4:e7:d9:92:62:c5:b8:6c:8a:80:d0:2e: 61:8b:f7:fb:65:9a:a0:0f:51:a3:94:7b:77:5b:4f:17:d6:94: a2:80:f0:2f:67:a5:48:2a:09:1c:50:71:ab:3a:ca:f7:ce:75: a3:8b:15:88:3a:2a:cd:e4:ac:83:85:84:70:e4:55:b0:86:28: db:cb:97:ec:ad:ca:85:2d:af:c4:17:04:18:32:f7:c1:5d:a3: 5a:23:bc:d8:a7:c5:d6:96:9d:6b:62:c5:d2:8e:3d:7c:e6:b8: 40:65:b1:a2:b3:3f:64:84:65:32:15:c4:cc:83:48:46:2a:bb: 58:18:e9:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKDBGOTA2OTJBMUVFRkU3RjBBMUFDNjhCNUUxQUMwOUY3 MDI2OTcxQ0MwHhcNMjYwOTIzMDEzMTMzWhcNMjYwOTMwMDEzMTMzWjAYMRYwFAYD VQQDEw02YWIzMmJmNS02ZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DDurjKMVrIgLZc3cwdzucHB2dJq0t3/MnJnxmWiwgBN5xFtzcUpGQPYswKM Pg5oZQqO96hPyRlMIHq9F+mwpBYov50BLQO5hjLjgRYzs82b49z43KzYfJ48lJ1C ftMfh/z0md4URIr+KZbZKhl3YGyT1QnICzQgwHe3G1KlpclwzpE5HO4xnEFGxDZB xJMf4apUDP+Z9vL3LM4z//JPaHLH8MXt7E/Uwghxfnl+/CPEyity+m4Rw5unFXO6 f3aUR5KEiVA/w3+q+oIeg9cyhAYIi/Ky/C0XEhj1wskl+BYRinkLIktRzCRmRYAl Ur4d5WODKFvJhZpBxTmspPtZsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3NOu0q 0/nFb2g+4HETUdGzsb8iMB8GA1UdIwQYMBaAFA+QaSoe7+fwoaxoteGsCfcCaXHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9DRkEzNDA5QUJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVfQ2hyR2kxNGF3Sjl3SnBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1QnBLaDd2NV9DaHJHaTE0YXdKOXdKcGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9DRkEzNDA5QUJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVf Q2hyR2kxNGF3Sjl3SnBjY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv2M67nivSNfOqyr36DIifHSp6/8RWRr9I9cEEFIpGBmU0pBX5lq/QQLnm6TO AIseL1dJcNWbvwHHgFZmr3+d9JwIqG9XJMxNj2ENTT+bV0c+8Ir5BhyRD8z4oqu9 RpdDpKS32McxAA8mhDr6nq7eJrXYq1Yl5YKxky7UIRcCow8lCs/D1OfZkmLFuGyK gNAuYYv3+2WaoA9Ro5R7d1tPF9aUooDwL2elSCoJHFBxqzrK9851o4sViDoqzeSs g4WEcORVsIYo28uX7K3KhS2vxBcEGDL3wV2jWiO82KfF1pada2LF0o49fOa4QGWx orM/ZIRlMhXEzINIRiq7WBjpGQ== -----END CERTIFICATE-----Generated at Thu Sep 24 07:25:23 2026 by rpki-client