$ rpki-client -vvvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft File: a-rQvPbKtf0Em9fNDLveo6UTsG0.mft (raw, json) Hash identifier: xUDClPtSEqf66wXT0Aq8m51eDtJnqnvbfTAh1a+QUHo= Subject key identifier: 3B:CC:DC:B9:63:2B:7A:90:A8:3B:40:AD:DD:FE:CF:BD:18:23:5C:9E Authority key identifier: 6B:EA:D0:BC:F6:CA:B5:FD:04:9B:D7:CD:0C:BB:DE:A3:A5:13:B0:6D Certificate issuer: /CN=A91284EC/serialNumber=6BEAD0BCF6CAB5FD049BD7CD0CBBDEA3A513B06D Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rQvPbKtf0Em9fNDLveo6UTsG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft Manifest number: 0578 Signing time: Thu 24 Sep 2026 23:13:11 +0000 Manifest this update: Thu 24 Sep 2026 23:13:10 +0000 Manifest next update: Thu 01 Oct 2026 23:13:10 +0000 Files and hashes: 1: a-rQvPbKtf0Em9fNDLveo6UTsG0.crl (hash: /AES9b5alV1LgIruH1Wkju3OKMsOMrAi0itDpd0+Tbk=) 2: 87B64E0AB56611F193BCECE2A4EE528E.roa (hash: BW/tMDmQRM02pErAUQDp8owFyBp6gE4+1J5rJ0l2W30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rQvPbKtf0Em9fNDLveo6UTsG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=6BEAD0BCF6CAB5FD049BD7CD0CBBDEA3A513B06D Validity Not Before: Sep 24 23:13:10 2026 GMT Not After : Oct 1 23:13:10 2026 GMT Subject: CN=6ab5ae87-db01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:a8:11:41:50:5b:6b:63:e8:b4:75:ef:2e: 5b:e5:82:e2:87:47:13:41:04:53:b5:44:f1:3c:0f: 14:27:36:43:63:53:68:c2:9a:8a:91:76:b9:fa:d6: 76:59:2d:b6:64:43:7b:d5:41:4d:59:a8:11:90:23: 9c:af:25:46:f1:e3:33:af:45:3e:e1:e3:b8:50:bc: f6:de:55:ae:13:9b:af:d5:89:1f:6a:48:b5:9d:fa: 65:21:ba:33:c1:65:0d:b7:7a:e9:9a:38:4e:7a:15: ff:0f:dd:00:2b:be:e6:9e:bd:ee:79:7a:a6:c4:fa: 56:ad:f3:15:72:b9:b6:9f:1d:18:b7:41:f5:b5:82: ab:41:6e:c1:2d:1f:52:39:7e:6b:3c:5c:e6:80:29: 8c:1f:71:96:92:db:5a:5b:1e:8c:13:08:75:4a:25: 92:ee:17:cb:a4:70:4f:18:8d:ab:73:4c:e7:b5:c1: c1:e7:78:31:e1:17:03:34:73:cf:a7:76:06:2f:56: 6d:0b:1d:49:4b:bb:c9:e6:75:82:2f:dc:ad:3a:df: fd:d6:90:29:06:61:d9:19:99:43:05:5b:d0:de:82: 92:a6:a9:b8:07:7d:b4:c6:3d:a3:9b:83:c1:1a:ad: 60:f7:54:a7:68:ed:65:79:b6:af:15:8c:70:75:4f: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CC:DC:B9:63:2B:7A:90:A8:3B:40:AD:DD:FE:CF:BD:18:23:5C:9E X509v3 Authority Key Identifier: keyid:6B:EA:D0:BC:F6:CA:B5:FD:04:9B:D7:CD:0C:BB:DE:A3:A5:13:B0:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rQvPbKtf0Em9fNDLveo6UTsG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:09:9b:55:05:d7:fd:66:e4:8c:51:19:3f:ef:af:d8:59:69: 28:89:8d:57:b1:6b:89:bc:d7:88:5f:c3:77:31:8d:94:e5:39: 44:0d:ba:a8:52:43:88:07:98:b3:73:0e:10:9d:d6:6f:f3:38: ae:e2:92:68:b8:5e:68:71:50:09:e9:97:c7:a6:21:12:f8:14: 8e:99:70:d8:de:a4:cd:b2:a1:53:34:6c:f4:55:e3:5f:d2:13: d3:0c:0e:e9:53:7f:f3:3e:3c:c3:c5:04:33:c7:2f:25:2e:09: 42:e8:27:cd:0e:1a:5a:a5:3a:e4:8e:07:ab:f6:c8:0b:3b:e5: 27:dd:a3:5d:1c:1c:24:28:82:e9:2d:7c:fd:20:52:ff:e8:ae: b5:59:ea:de:eb:1c:a8:47:6b:fd:45:fc:e7:2e:5b:01:27:01: 35:fc:f7:38:91:be:fc:90:45:84:3b:4d:5c:0f:83:ce:1f:39: e0:e9:e0:ed:3e:b9:25:95:3b:49:96:bf:cb:9e:a6:9d:19:5f: bc:7b:dc:30:ef:d7:63:98:c9:5d:58:0a:e8:a8:aa:a2:ea:b6: e8:a8:fb:ea:93:10:25:72:09:6a:51:76:77:ec:a9:12:c0:96: af:2c:9b:a5:29:47:b8:d1:74:7c:da:b4:d5:97:0e:58:b5:52: 48:b0:50:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODRFQzExMC8GA1UEBRMoNkJFQUQwQkNGNkNBQjVGRDA0OUJEN0NEMENCQkRFQTNB NTEzQjA2RDAeFw0yNjA5MjQyMzEzMTBaFw0yNjEwMDEyMzEzMTBaMBgxFjAUBgNV BAMTDTZhYjVhZTg3LWRiMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXiKgRQVBba2PotHXvLlvlguKHRxNBBFO1RPE8DxQnNkNjU2jCmoqRdrn61nZZ LbZkQ3vVQU1ZqBGQI5yvJUbx4zOvRT7h47hQvPbeVa4Tm6/ViR9qSLWd+mUhujPB ZQ23eumaOE56Ff8P3QArvuaeve55eqbE+lat8xVyubafHRi3QfW1gqtBbsEtH1I5 fms8XOaAKYwfcZaS21pbHowTCHVKJZLuF8ukcE8YjatzTOe1wcHneDHhFwM0c8+n dgYvVm0LHUlLu8nmdYIv3K063/3WkCkGYdkZmUMFW9DegpKmqbgHfbTGPaObg8Ea rWD3VKdo7WV5tq8VjHB1Txu7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO8zcuWMr epCoO0Ct3f7PvRgjXJ4wHwYDVR0jBBgwFoAUa+rQvPbKtf0Em9fNDLveo6UTsG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NEVDL0VCRjYwMUZDNDhD RjExRUNBNjY2QjAzRUM0RjlBRTAyL2EtclF2UGJLdGYwRW05Zk5ETHZlbzZVVHNH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYS1yUXZQYkt0ZjBFbTlmTkRMdmVvNlVUc0cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NEVDL0VCRjYwMUZDNDhDRjExRUNBNjY2QjAzRUM0RjlBRTAyL2EtclF2UGJLdGYw RW05Zk5ETHZlbzZVVHNHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoCZtVBdf9ZuSMURk/76/YWWkoiY1XsWuJvNeIX8N3MY2U5TlEDbqoUkOIB5iz cw4QndZv8ziu4pJouF5ocVAJ6ZfHpiES+BSOmXDY3qTNsqFTNGz0VeNf0hPTDA7p U3/zPjzDxQQzxy8lLglC6CfNDhpapTrkjger9sgLO+Un3aNdHBwkKILpLXz9IFL/ 6K61Were6xyoR2v9RfznLlsBJwE1/Pc4kb78kEWEO01cD4POHzng6eDtPrkllTtJ lr/LnqadGV+8e9ww79djmMldWAroqKqi6rboqPvqkxAlcglqUXZ37KkSwJavLJul KUe40XR82rTVlw5YtVJIsFCS -----END CERTIFICATE-----Generated at Sat Sep 26 17:43:09 2026 by rpki-client