$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft File: -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json) Hash identifier: pSg3ToqX/l4nSZXx0nE1OXYZNBWjy+JaCLrsdUBn6aU= Subject key identifier: B1:0F:9C:76:52:01:CE:A3:E5:61:30:47:A9:63:AA:B6:56:3D:A8:45 Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 Certificate issuer: /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft Manifest number: 0A1F Signing time: Tue 22 Sep 2026 21:04:52 +0000 Manifest this update: Tue 22 Sep 2026 21:04:52 +0000 Manifest next update: Tue 29 Sep 2026 21:04:52 +0000 Files and hashes: 1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: kUEbFZRClzbuMaBf1OtOfoPmCkDM2zN74SAfH6rIg9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Validity Not Before: Sep 22 21:04:52 2026 GMT Not After : Sep 29 21:04:52 2026 GMT Subject: CN=6ab2ed74-164c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:5b:ef:67:94:4c:50:77:59:42:70:d6:90: 90:bc:fb:11:6a:33:fc:9e:fd:55:91:89:34:2a:26: c2:0a:83:ec:7d:e3:6a:07:67:ec:21:e3:4e:97:95: 05:09:95:0a:81:63:16:d0:e5:0d:1d:3c:f1:21:b2: 53:31:80:f5:ab:b9:fa:5b:a9:cb:a6:0a:ce:8c:09: 0c:f1:4f:99:3c:e3:1f:af:fb:50:e3:ff:d0:e9:ba: 1f:91:2e:d4:cc:e7:4e:2a:2b:3a:e8:5a:01:d1:9d: 9b:d4:f0:f5:ef:d5:43:26:9b:0e:b1:78:6d:2e:bd: 37:c8:cb:57:e3:19:a1:13:a6:a5:a8:83:ad:e9:2d: e8:dd:be:15:21:f9:91:57:b1:1a:f8:ee:b7:47:3c: 3f:e7:9c:8b:3d:45:91:9d:9a:d9:f1:f6:6c:f0:a9: 88:07:50:97:af:58:21:ad:99:99:6f:69:a7:b4:5a: 1c:c4:93:a8:03:ee:d6:ff:ab:a4:aa:f8:b5:5f:9a: 7b:c7:5a:93:eb:cc:9b:5f:7c:ab:e6:de:03:24:c5: d0:51:dc:c0:bb:24:39:38:a4:1f:02:1b:bb:d0:28: 3e:10:1e:42:f0:0f:f2:e2:29:38:bc:62:0e:41:a0: 56:4a:e1:c3:72:ca:58:4f:fe:83:2d:85:3a:f4:26: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:9C:76:52:01:CE:A3:E5:61:30:47:A9:63:AA:B6:56:3D:A8:45 X509v3 Authority Key Identifier: keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:17:8e:f6:b1:dc:fb:ea:56:85:35:ed:6e:08:64:ed:54:ef: 09:a6:6a:f3:93:65:ea:e2:69:b8:ec:5c:2a:49:ed:00:41:f4: 12:5a:ae:96:95:59:d9:9e:63:65:e4:15:62:f1:a7:23:ea:65: 78:1e:30:86:0f:93:f2:17:d1:f1:a8:83:78:f0:41:13:6a:67: 4f:97:30:4c:0c:fc:de:de:76:01:15:2c:36:01:0d:7d:dd:d6: 6a:a0:80:38:ae:b9:d9:01:00:df:b8:54:14:b1:d0:e1:17:9a: 55:54:01:a5:c3:35:5c:86:95:56:d7:28:8d:cd:c9:97:af:54: 14:55:0f:5f:32:64:80:72:cf:9b:3f:b7:df:45:e9:56:c1:cb: 49:aa:2b:1a:9e:90:6b:18:fc:18:32:23:ca:48:09:19:d2:07: 54:28:c2:1f:91:0b:0e:77:2a:ac:66:a4:c3:c9:c6:39:c3:64: 5b:8e:3c:25:db:25:79:e7:bd:48:37:44:bd:15:ea:fb:6e:0e: 99:98:2c:d8:76:34:b1:eb:3a:d4:9e:c5:f8:1c:56:15:17:0a: 42:1d:7c:e0:a9:8f:f4:41:cb:ac:01:b4:0d:d7:5e:4d:b7:aa: 2b:17:f8:ae:09:1d:13:02:ae:c5:97:2b:ca:92:b5:54:8e:67: 5e:98:2a:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKEZBRDlCOTM3NzdEMENFQkEyQkI3QTZCNzhENTA3Rjc3 OTA5MjFDMDYwHhcNMjYwOTIyMjEwNDUyWhcNMjYwOTI5MjEwNDUyWjAYMRYwFAYD VQQDEw02YWIyZWQ3NC0xNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/Vb72eUTFB3WUJw1pCQvPsRajP8nv1VkYk0KibCCoPsfeNqB2fsIeNOl5UF CZUKgWMW0OUNHTzxIbJTMYD1q7n6W6nLpgrOjAkM8U+ZPOMfr/tQ4//Q6bofkS7U zOdOKis66FoB0Z2b1PD179VDJpsOsXhtLr03yMtX4xmhE6alqIOt6S3o3b4VIfmR V7Ea+O63Rzw/55yLPUWRnZrZ8fZs8KmIB1CXr1ghrZmZb2mntFocxJOoA+7W/6uk qvi1X5p7x1qT68ybX3yr5t4DJMXQUdzAuyQ5OKQfAhu70Cg+EB5C8A/y4ik4vGIO QaBWSuHDcspYT/6DLYU69CZDkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEPnHZS Ac6j5WEwR6ljqrZWPahFMB8GA1UdIwQYMBaAFPrZuTd30M66K7emt41Qf3eQkhwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG Q0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpyb3J0NmEzalZCX2Q1Q1NI QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10bTVOM2ZRenJvcnQ2YTNqVkJfZDVDU0hBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpy b3J0NmEzalZCX2Q1Q1NIQVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnheO9rHc++pWhTXtbghk7VTvCaZq85Nl6uJpuOxcKkntAEH0ElqulpVZ2Z5j ZeQVYvGnI+pleB4whg+T8hfR8aiDePBBE2pnT5cwTAz83t52ARUsNgENfd3WaqCA OK652QEA37hUFLHQ4ReaVVQBpcM1XIaVVtcojc3Jl69UFFUPXzJkgHLPmz+330Xp VsHLSaorGp6Qaxj8GDIjykgJGdIHVCjCH5ELDncqrGakw8nGOcNkW448Jdsleee9 SDdEvRXq+24OmZgs2HY0ses61J7F+BxWFRcKQh184KmP9EHLrAG0DddeTbeqKxf4 rgkdEwKuxZcrypK1VI5nXpgqCA== -----END CERTIFICATE-----Generated at Wed Sep 23 09:41:21 2026 by rpki-client