$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: ujU+A4khZ4H23YCjM0Bbq3kwigussFtkYGNfe4R+NOY= Subject key identifier: 45:50:FE:FB:CF:93:23:0A:4E:7A:F7:C6:49:A2:52:ED:5E:87:53:FC Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 358A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3582 Signing time: Tue 22 Sep 2026 14:51:25 +0000 Manifest this update: Tue 22 Sep 2026 14:51:25 +0000 Manifest next update: Tue 29 Sep 2026 14:51:25 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: QW5XWZ79fm/fK2+8LRjwR+2InuAFkgoQ8DPnZDOg9Ig=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: k52zzNPlnYvuAvYWIlxb4hsiHOOq9dzm/h/OPeTzfmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13706 (0x358a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Sep 22 14:51:25 2026 GMT Not After : Sep 29 14:51:25 2026 GMT Subject: CN=6ab295ed-762c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:42:27:61:7e:6b:78:7e:b0:a8:b2:72:19: 02:ae:ea:11:cb:ea:37:26:96:61:cc:3f:80:92:ee: 98:7f:3e:33:27:23:50:1a:bc:7a:72:b5:d3:2d:9e: ad:5f:8a:59:67:ae:06:c9:f7:c9:6e:8e:9f:8d:2c: 35:9a:e2:6f:1a:41:97:6e:17:e2:63:4c:93:aa:78: 42:50:42:ad:a0:f2:08:df:f2:31:7b:52:36:93:7c: 06:01:bc:d9:82:39:32:9d:91:17:13:74:77:40:cd: d1:0a:d3:03:16:df:32:33:c5:2b:b2:ed:73:98:9f: 3f:6a:b3:16:21:98:e2:73:53:e6:27:a6:56:79:e2: 42:3c:4c:d6:d5:2e:45:cd:9f:26:ea:5a:7b:b2:2d: c6:02:49:7b:7f:20:42:58:ce:cb:74:7a:bd:12:c0: ea:9c:a3:4d:47:83:ba:f0:c1:67:ed:55:01:a3:39: 78:38:fc:9e:3f:29:f0:a7:3c:98:d6:31:3f:c7:4a: 8f:14:ab:bd:3a:e2:0f:3a:ce:7b:c1:3a:38:82:be: 78:80:ea:6e:c3:b4:85:a3:54:a3:fa:5d:c3:18:bb: 45:fa:c5:c6:fb:e3:eb:91:17:52:41:d8:87:e8:ff: 97:62:a7:91:6b:1b:8d:58:a1:b9:11:a3:7d:3a:c0: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:50:FE:FB:CF:93:23:0A:4E:7A:F7:C6:49:A2:52:ED:5E:87:53:FC X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c5:73:cc:69:b2:4c:1f:58:04:e1:dc:3a:7b:aa:1e:b7:56: ac:ee:91:c7:04:8f:c5:32:0e:0e:52:ed:c6:fb:2c:53:55:0d: 1f:d5:8d:1f:88:84:1b:65:b3:71:77:bb:41:b1:86:7a:d2:ce: 4a:ec:75:8b:6a:21:91:72:81:87:d4:09:2e:fd:57:73:58:e2: ac:5a:3b:b2:e3:9f:53:c7:2a:01:91:b4:a9:3d:c6:71:4b:20: 8b:f1:17:e6:93:c3:87:09:f0:f6:7f:ca:dd:72:5e:82:06:b8: 6b:b8:ab:3d:33:08:62:01:7f:37:af:6e:6b:ff:b9:f7:b4:05: 36:cc:42:fc:ea:52:51:92:55:51:66:89:46:45:7b:e2:e0:47: d2:66:ca:05:9e:1a:83:ce:46:7d:30:f5:b5:92:1c:49:dc:47: c2:55:e4:5b:86:15:ce:59:8f:e3:cb:89:cf:33:bc:41:bc:84: b3:91:bc:1c:4b:76:74:67:f4:5d:77:1a:8a:fc:91:a4:9c:1e: 7b:eb:e3:4b:5e:f3:d7:f8:5b:a6:b5:55:54:ed:5f:9d:d7:c7: 78:5a:35:7a:89:88:f6:ab:e0:25:15:f0:83:a3:e7:08:f8:ed: 85:b3:63:35:e2:bd:7a:0d:9b:df:bc:16:d8:03:01:04:68:ae: 8c:b9:f0:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjYwOTIyMTQ1MTI1WhcNMjYwOTI5MTQ1MTI1WjAYMRYwFAYD VQQDEw02YWIyOTVlZC03NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXJCJ2F+a3h+sKiychkCruoRy+o3JpZhzD+Aku6Yfz4zJyNQGrx6crXTLZ6t X4pZZ64GyffJbo6fjSw1muJvGkGXbhfiY0yTqnhCUEKtoPII3/Ixe1I2k3wGAbzZ gjkynZEXE3R3QM3RCtMDFt8yM8Ursu1zmJ8/arMWIZjic1PmJ6ZWeeJCPEzW1S5F zZ8m6lp7si3GAkl7fyBCWM7LdHq9EsDqnKNNR4O68MFn7VUBozl4OPyePynwpzyY 1jE/x0qPFKu9OuIPOs57wTo4gr54gOpuw7SFo1Sj+l3DGLtF+sXG++PrkRdSQdiH 6P+XYqeRaxuNWKG5EaN9OsCknQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVQ/vvP kyMKTnr3xkmiUu1eh1P8MB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFcVzzGmyTB9YBOHcOnuqHrdWrO6RxwSPxTIODlLtxvssU1UNH9WNH4iEG2Wz cXe7QbGGetLOSux1i2ohkXKBh9QJLv1Xc1jirFo7suOfU8cqAZG0qT3GcUsgi/EX 5pPDhwnw9n/K3XJegga4a7irPTMIYgF/N69ua/+597QFNsxC/OpSUZJVUWaJRkV7 4uBH0mbKBZ4ag85GfTD1tZIcSdxHwlXkW4YVzlmP48uJzzO8QbyEs5G8HEt2dGf0 XXcaivyRpJwee+vjS17z1/hbprVVVO1fndfHeFo1eomI9qvgJRXwg6PnCPjthbNj NeK9eg2b37wW2AMBBGiujLnwMg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:24:16 2026 by rpki-client