$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: ufnGU4Ee1SWKAVCufUFqaVvPPrJmia79s2WlW0gb3xc= Subject key identifier: 9C:E0:2F:9A:6C:8E:C0:35:12:51:22:E4:49:31:FA:56:CA:58:D5:B3 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0572 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 054C Signing time: Tue 22 Sep 2026 16:54:47 +0000 Manifest this update: Tue 22 Sep 2026 16:54:47 +0000 Manifest next update: Tue 29 Sep 2026 16:54:47 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: y3IxDKZorYxl2YNrg/8tTc334URiparbDu9u0pVWYi8=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: 5Z7fKb2b95O7xf2REenK7dbH8KrSrAmTwTpVkXBeeOI=) 3: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=) 4: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: 76p1LWBSiAURuIgRIP/lu1qZCJd79sZFpOsF7Mk4V7g=) 5: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY=) 6: 1479C514596A11ECB1394271C4F9AE02.roa (hash: wpAJJYnFAicDNwa71hcmrPmPcdiAdvkl0r/mHo7+0do=) 7: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Ylv7wHI65XMnQYhoDyQSygUwHrURYMjzNieL/UaPiGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Sep 22 16:54:47 2026 GMT Not After : Sep 29 16:54:47 2026 GMT Subject: CN=6ab2b2d7-e941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:51:fd:02:d9:94:46:db:d2:e6:c4:a5:53: f0:31:96:cf:7f:77:e4:7e:c3:57:d0:35:54:6f:ad: 9d:c3:24:0e:be:fe:ec:4c:23:21:a7:66:81:ba:5a: c8:dd:59:4a:85:3f:a0:47:bd:c6:44:6e:99:29:ee: 5e:4c:db:4a:97:2b:bc:26:78:0e:3b:5b:52:cc:8e: 7a:4d:15:10:6e:56:9d:a2:66:4c:31:36:ff:71:1d: d2:6a:74:77:de:21:40:d0:84:dd:a8:4a:1d:3c:15: d2:f6:9e:71:bf:e2:d9:99:83:7c:dd:4b:89:04:d5: d1:e6:94:23:40:59:6c:93:7d:dd:34:0d:94:d9:ba: 16:34:c6:c0:4d:64:09:3e:e9:7e:7e:21:5a:76:bf: 9d:7d:29:2c:97:6c:31:31:17:5a:67:62:8f:c5:ee: bb:17:20:34:19:40:20:7d:e6:f1:2b:04:9f:48:c1: 0a:f4:50:cb:b1:bb:2f:f0:15:12:2c:3e:0c:3f:59: 15:93:97:f5:7b:a2:0b:a7:da:32:05:ad:bb:0b:37: a2:74:10:72:d4:2f:5f:b3:5a:2a:fc:0a:06:fa:3b: aa:37:de:ae:c5:cc:a3:9d:71:a7:13:84:24:f4:dc: db:25:e4:e2:fc:bf:35:11:1e:db:c3:85:8b:72:8b: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:2F:9A:6C:8E:C0:35:12:51:22:E4:49:31:FA:56:CA:58:D5:B3 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:43:1f:0a:14:31:35:66:e2:2b:0f:3c:39:f8:96:1a:f2:00: 6b:34:43:12:60:bc:a4:46:26:9f:0f:90:e4:df:9c:2e:ff:2b: 8d:8e:df:69:6f:33:d8:78:d8:5a:9d:10:41:68:43:84:ef:63: e7:2c:d7:1a:64:ea:34:99:d4:75:1b:10:ee:0c:b3:ce:a1:8c: 26:6f:19:b0:df:51:61:bb:d7:4a:4c:06:f9:37:7e:7b:66:8a: 1a:81:71:41:71:4e:1c:91:94:c1:d0:03:34:c7:3f:6a:58:66: 43:bc:b3:31:6a:1a:da:42:42:94:4f:d5:af:ee:d3:98:e7:13: 15:e6:80:87:bc:25:26:1b:82:43:3e:21:80:ae:46:88:03:a5: 1d:9f:6b:63:a6:19:21:a8:7b:41:23:1e:f9:23:51:68:66:6c: ad:8d:b5:55:b2:cc:84:33:ab:9e:94:ad:e4:6f:ca:90:c9:ec: 6d:4c:1b:74:61:f1:fe:ec:34:30:46:41:15:5b:21:46:e7:eb: fd:ac:65:2d:d7:3b:74:8e:ce:b3:f7:7c:ff:f8:6a:df:b5:d2: 25:e5:23:e9:42:50:c0:12:ca:d5:bb:33:92:46:24:13:a4:0d: 37:03:6d:f7:82:12:b8:0e:06:2b:70:38:3e:fa:fe:18:69:5d: 87:5b:5c:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjYwOTIyMTY1NDQ3WhcNMjYwOTI5MTY1NDQ3WjAYMRYwFAYD VQQDEw02YWIyYjJkNy1lOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiD5R/QLZlEbb0ubEpVPwMZbPf3fkfsNX0DVUb62dwyQOvv7sTCMhp2aBulrI 3VlKhT+gR73GRG6ZKe5eTNtKlyu8JngOO1tSzI56TRUQbladomZMMTb/cR3SanR3 3iFA0ITdqEodPBXS9p5xv+LZmYN83UuJBNXR5pQjQFlsk33dNA2U2boWNMbATWQJ Pul+fiFadr+dfSksl2wxMRdaZ2KPxe67FyA0GUAgfebxKwSfSMEK9FDLsbsv8BUS LD4MP1kVk5f1e6ILp9oyBa27CzeidBBy1C9fs1oq/AoG+juqN96uxcyjnXGnE4Qk 9NzbJeTi/L81ER7bw4WLcotfvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzgL5ps jsA1ElEi5Ekx+lbKWNWzMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQEMfChQxNWbiKw88OfiWGvIAazRDEmC8pEYmnw+Q5N+cLv8rjY7faW8z2HjY Wp0QQWhDhO9j5yzXGmTqNJnUdRsQ7gyzzqGMJm8ZsN9RYbvXSkwG+Td+e2aKGoFx QXFOHJGUwdADNMc/alhmQ7yzMWoa2kJClE/Vr+7TmOcTFeaAh7wlJhuCQz4hgK5G iAOlHZ9rY6YZIah7QSMe+SNRaGZsrY21VbLMhDOrnpSt5G/KkMnsbUwbdGHx/uw0 MEZBFVshRufr/axlLdc7dI7Os/d8//hq37XSJeUj6UJQwBLK1bszkkYkE6QNNwNt 94ISuA4GK3A4Pvr+GGldh1tc3g== -----END CERTIFICATE-----Generated at Thu Sep 24 10:25:56 2026 by rpki-client