$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: cCnzBIDtvyIjY+1IhNR2qcvgTNiWWl62C2ePZadJDjs= Subject key identifier: D1:70:3D:30:49:0B:30:1C:53:BC:EC:8A:F4:17:FF:64:89:80:90:29 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 05AE Signing time: Tue 22 Sep 2026 22:50:05 +0000 Manifest this update: Tue 22 Sep 2026 22:50:04 +0000 Manifest next update: Tue 29 Sep 2026 22:50:04 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: RBZWKEXhXbyaY/AlPutvDxH87Mtx+kUTgR/GBZzFkmg=) 2: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) 3: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) 4: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Sep 22 22:50:04 2026 GMT Not After : Sep 29 22:50:04 2026 GMT Subject: CN=6ab3061c-1a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:a5:82:fb:e1:e7:7b:3d:7b:db:aa:b6:12: 73:f3:ce:f6:39:fc:cf:cb:14:93:69:5e:86:12:b0: ac:14:86:22:53:68:89:d8:a7:b4:b8:c6:9f:db:14: b1:bc:34:0c:1a:90:4c:59:d2:90:31:80:9c:6e:28: 6f:9c:a1:5c:da:6b:d7:e0:60:e4:02:9c:25:d2:3d: c8:35:66:6e:39:8d:17:e1:36:bf:c8:9d:49:14:a6: 00:bf:d3:07:32:02:f5:cb:3c:95:61:df:da:cd:c3: c2:c1:f8:62:6c:e8:dd:d9:f9:e1:a7:ee:7c:4f:b3: 66:dd:8a:40:d6:11:71:dc:a2:fd:c0:3a:8d:7b:0c: 6a:59:b2:51:25:a5:8b:2f:4a:8d:77:75:b3:3e:a5: 53:f7:48:5b:4a:ef:0e:5a:52:40:a4:36:46:ee:5f: 8e:67:6f:8e:e3:38:4a:c1:5f:80:b4:59:ec:a4:9f: 48:00:d2:83:d5:10:0f:b6:64:1c:a0:89:17:68:84: bc:2c:e0:b9:a7:9e:22:b8:15:58:25:ec:d7:24:0e: e4:55:0f:06:a2:88:d8:15:4c:74:b9:8a:11:43:17: 23:65:32:7b:65:05:c2:23:2e:12:9d:71:f2:ac:19: b7:19:f4:f3:34:a4:89:1a:14:1a:a3:c7:34:b0:5e: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:3D:30:49:0B:30:1C:53:BC:EC:8A:F4:17:FF:64:89:80:90:29 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3d:30:e5:88:e8:b1:cc:9f:4e:e5:e4:9a:34:cf:5c:9a:69: f6:01:ff:3f:1a:12:8d:0c:52:43:53:eb:a5:20:59:cb:79:89: ec:02:89:30:59:00:be:e9:d0:85:4f:e8:77:36:4c:c7:e9:2d: 2b:38:9c:8f:5e:df:0b:d5:ce:84:da:17:8c:04:4a:94:23:8c: a5:e4:df:56:51:59:26:1b:4e:f8:5f:a0:b8:36:98:ab:a3:b1: 41:8a:0c:fa:91:77:51:ad:f1:5c:fa:e2:a3:93:1f:f6:22:9c: c4:8b:f5:7d:0d:f8:09:76:d9:94:ae:10:60:18:ba:b3:91:03: 10:91:58:1c:7a:ab:5f:91:c3:1a:67:ed:ec:4d:1d:56:75:d0: 6c:ee:cd:57:13:81:42:74:ff:15:ba:5e:4f:dc:f5:11:e1:bd: 46:3b:5b:e0:43:b5:f1:b8:dd:33:dc:da:8e:56:d4:0b:bf:8c: eb:d2:f4:4d:ff:30:a8:f8:4b:09:3b:e3:aa:fd:f3:b7:8b:c4: 0d:5c:d1:18:56:88:e3:80:d1:b8:1b:fd:82:62:43:48:ab:96: e8:e6:fc:0f:b3:bc:b9:82:50:e8:5e:91:a2:f9:66:08:d4:c4: 52:61:11:1c:e4:f3:b5:55:a8:89:41:09:ee:a9:2e:c7:1a:e9: ff:8a:b4:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYwOTIyMjI1MDA0WhcNMjYwOTI5MjI1MDA0WjAYMRYwFAYD VQQDEw02YWIzMDYxYy0xYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJalgvvh53s9e9uqthJz8872OfzPyxSTaV6GErCsFIYiU2iJ2Ke0uMaf2xSx vDQMGpBMWdKQMYCcbihvnKFc2mvX4GDkApwl0j3INWZuOY0X4Ta/yJ1JFKYAv9MH MgL1yzyVYd/azcPCwfhibOjd2fnhp+58T7Nm3YpA1hFx3KL9wDqNewxqWbJRJaWL L0qNd3WzPqVT90hbSu8OWlJApDZG7l+OZ2+O4zhKwV+AtFnspJ9IANKD1RAPtmQc oIkXaIS8LOC5p54iuBVYJezXJA7kVQ8GoojYFUx0uYoRQxcjZTJ7ZQXCIy4SnXHy rBm3GfTzNKSJGhQao8c0sF4wXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFwPTBJ CzAcU7zsivQX/2SJgJApMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMT0w5YjoscyfTuXkmjTPXJpp9gH/PxoSjQxSQ1PrpSBZy3mJ7AKJMFkAvunQ hU/odzZMx+ktKzicj17fC9XOhNoXjARKlCOMpeTfVlFZJhtO+F+guDaYq6OxQYoM +pF3Ua3xXPrio5Mf9iKcxIv1fQ34CXbZlK4QYBi6s5EDEJFYHHqrX5HDGmft7E0d VnXQbO7NVxOBQnT/FbpeT9z1EeG9Rjtb4EO18bjdM9zajlbUC7+M69L0Tf8wqPhL CTvjqv3zt4vEDVzRGFaI44DRuBv9gmJDSKuW6Ob8D7O8uYJQ6F6RovlmCNTEUmER HOTztVWoiUEJ7qkuxxrp/4q0zw== -----END CERTIFICATE-----Generated at Wed Sep 23 09:59:12 2026 by rpki-client