$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: 7uNNV/V/I/jDnumQ/gfRmdc1BNY0oBrme9VX4I2FtzE= Subject key identifier: A2:63:4B:0E:8D:D8:CC:07:28:9D:9E:72:08:EC:A0:06:04:89:AB:63 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 044B Signing time: Tue 22 Sep 2026 23:50:41 +0000 Manifest this update: Tue 22 Sep 2026 23:50:41 +0000 Manifest next update: Tue 29 Sep 2026 23:50:41 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: vA7VLamkuptrVRDrPy0TfCmf+nvA5MDYMxOuKnLH2Hg=) 2: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 3: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Sep 22 23:50:41 2026 GMT Not After : Sep 29 23:50:41 2026 GMT Subject: CN=6ab31451-28b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:5a:0e:49:a1:48:10:68:a8:39:63:e8:a9: 60:a0:54:af:d8:b1:f8:aa:5c:cd:7b:f4:88:17:48: 14:e4:2f:a9:9d:23:7a:0b:fb:71:21:58:d1:b2:47: 88:c3:5c:84:d9:1b:97:57:7c:ea:a2:81:07:92:ff: 52:8c:b4:33:d3:a0:58:d4:92:17:5a:4a:f8:12:7b: 70:a9:a6:d9:c9:ff:73:aa:c2:d5:a9:95:dc:89:6e: 6f:1e:9a:1f:c3:41:b6:86:6f:4c:3b:c0:57:b0:f5: de:59:55:91:f8:f8:6a:48:b8:f5:c9:a3:1f:f4:d6: 93:ad:75:d8:67:f2:da:68:d7:6d:38:ac:06:78:48: c3:59:15:96:1f:4f:d6:71:e1:1d:fe:b4:d7:60:11: fb:f2:2e:91:34:51:43:3e:ff:4b:3b:52:1e:fe:89: d8:b8:aa:3b:a3:05:bf:4d:f6:4f:e0:c6:04:c3:21: 5f:f3:e1:57:64:6d:15:c1:cf:43:04:0a:4f:f8:73: c6:aa:97:7d:f5:bc:b9:73:d8:1e:7f:48:f3:b8:7e: 54:c7:25:66:a0:e0:3e:5c:ce:e6:3f:3d:ec:a1:79: 68:42:8f:ae:a0:49:28:8c:ba:60:8b:bd:a7:99:e0: 14:82:4f:27:e1:78:99:db:61:56:f6:cf:ef:b8:27: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:63:4B:0E:8D:D8:CC:07:28:9D:9E:72:08:EC:A0:06:04:89:AB:63 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f0:61:8c:b9:06:f2:fa:8a:b5:71:77:e7:ad:6a:d4:9e:39: 5c:3f:b3:6c:a4:d3:19:14:e9:e8:1c:7e:0b:95:35:8a:5d:d5: 05:a6:09:00:99:8a:9e:89:36:1f:e8:91:ea:b4:b9:c9:2e:94: db:b5:5c:7c:a0:c1:eb:ba:dd:3a:1b:bf:0b:11:9e:59:c3:74: 2f:e3:7e:3a:ef:4f:7b:99:4f:71:7c:ac:85:91:9e:f1:5c:7f: e6:39:51:91:5f:25:fc:ad:57:90:6e:20:91:d2:dc:cf:b4:fb: 4d:f4:2a:7d:67:6a:3d:24:38:c3:3a:77:67:79:90:11:a6:2f: 54:45:b9:da:5f:09:95:db:dc:ed:17:0b:ef:90:bd:62:0d:dd: f8:32:42:35:74:cf:16:ea:65:e8:71:d9:71:86:46:f3:36:6e: f4:d1:d3:d7:73:e5:e6:43:60:29:98:3c:2f:44:14:96:8a:b8: 8c:10:25:e5:9a:8a:96:1e:75:ef:1b:c0:ef:6e:9a:df:31:6a: 34:6d:a5:50:45:5f:54:23:57:75:c3:b5:58:e9:10:99:69:2d: 45:0c:80:e4:16:73:92:98:60:a2:4d:9a:5e:71:e3:13:40:32: 80:3b:7c:f0:ca:90:0b:d6:50:22:0b:2a:e7:b7:74:f9:33:64: e6:ee:dc:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwOTIyMjM1MDQxWhcNMjYwOTI5MjM1MDQxWjAYMRYwFAYD VQQDEw02YWIzMTQ1MS0yOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MtaDkmhSBBoqDlj6KlgoFSv2LH4qlzNe/SIF0gU5C+pnSN6C/txIVjRskeI w1yE2RuXV3zqooEHkv9SjLQz06BY1JIXWkr4EntwqabZyf9zqsLVqZXciW5vHpof w0G2hm9MO8BXsPXeWVWR+PhqSLj1yaMf9NaTrXXYZ/LaaNdtOKwGeEjDWRWWH0/W ceEd/rTXYBH78i6RNFFDPv9LO1Ie/onYuKo7owW/TfZP4MYEwyFf8+FXZG0Vwc9D BApP+HPGqpd99by5c9gef0jzuH5UxyVmoOA+XM7mPz3soXloQo+uoEkojLpgi72n meAUgk8n4XiZ22FW9s/vuCfGXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJjSw6N 2MwHKJ2ecgjsoAYEiatjMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfBhjLkG8vqKtXF3561q1J45XD+zbKTTGRTp6Bx+C5U1il3VBaYJAJmKnok2 H+iR6rS5yS6U27VcfKDB67rdOhu/CxGeWcN0L+N+Ou9Pe5lPcXyshZGe8Vx/5jlR kV8l/K1XkG4gkdLcz7T7TfQqfWdqPSQ4wzp3Z3mQEaYvVEW52l8Jldvc7RcL75C9 Yg3d+DJCNXTPFupl6HHZcYZG8zZu9NHT13Pl5kNgKZg8L0QUloq4jBAl5ZqKlh51 7xvA726a3zFqNG2lUEVfVCNXdcO1WOkQmWktRQyA5BZzkphgok2aXnHjE0AygDt8 8MqQC9ZQIgsq57d0+TNk5u7c0Q== -----END CERTIFICATE-----Generated at Fri Sep 25 02:33:41 2026 by rpki-client