$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: c1PQA2JOsF+Tpqe1/DX5PI8SpqPlmeV5rJRJl0OWuzg= Subject key identifier: 30:AE:6B:9D:56:76:0A:13:95:02:54:95:1B:0C:07:38:B6:43:41:44 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 099A Signing time: Sat 26 Sep 2026 20:04:11 +0000 Manifest this update: Sat 26 Sep 2026 20:04:10 +0000 Manifest next update: Sat 03 Oct 2026 20:04:10 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: JT9S4UFB85pbOxntAbhPszTlfkhDEknlEcCAPtAOAqk=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Sep 26 20:04:10 2026 GMT Not After : Oct 3 20:04:10 2026 GMT Subject: CN=6ab8253b-ba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:ef:88:3c:00:6c:23:01:39:28:5a:5a:55: 5f:54:ee:15:d0:b5:fb:9b:85:45:67:3d:98:59:f6: b0:0c:80:b3:15:24:06:03:e2:5f:e4:83:0d:e8:83: cc:9c:08:4f:ab:b7:b6:10:36:b6:f3:1c:20:ad:44: 4f:24:56:5f:e1:9d:8d:a8:65:74:7e:9f:97:00:c9: 2d:08:9b:dc:98:44:dd:57:ab:ac:21:cd:24:9e:0d: 02:c1:13:17:0e:59:73:ce:32:c5:0d:1f:81:04:8f: 8b:43:90:62:48:9a:6a:d4:7c:a7:e0:e5:64:74:93: e1:76:5a:e6:1f:89:98:8b:9e:7d:f4:c9:1e:6f:5b: 99:59:58:f0:8a:00:25:c0:85:4f:42:2d:ae:5b:ac: 96:de:c8:7c:92:bd:b9:93:ec:7d:8b:54:36:8e:be: 34:56:b7:a7:9d:4d:97:56:d0:72:d4:15:53:c9:06: 10:b0:28:42:7e:33:fa:59:09:0f:8a:01:34:11:c2: bb:29:39:a6:79:f6:8e:9f:0c:21:f5:db:ba:a6:0e: 34:34:f8:87:b3:73:38:6d:6e:ff:be:03:e1:87:fc: 80:c0:10:42:f0:dc:8f:8c:95:27:54:1e:04:13:20: 67:16:d6:fc:89:43:a8:c2:b0:71:6c:54:80:83:ae: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:6B:9D:56:76:0A:13:95:02:54:95:1B:0C:07:38:B6:43:41:44 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1e:af:2b:78:41:c7:a6:92:16:16:a8:bb:28:db:b6:d4:e5: de:da:fe:e9:35:1b:e0:5a:46:4c:6d:46:ba:ca:b6:84:ac:20: 81:9c:cc:57:aa:a7:48:d7:62:01:01:53:95:4e:92:89:a9:52: 2b:ff:c5:bf:c3:ed:7e:22:04:07:3f:de:f2:15:41:82:ba:44: b7:14:9d:64:0a:83:48:d0:9f:85:97:6e:fb:54:70:67:d7:da: ea:72:f6:51:32:ef:51:8c:52:fc:9a:6c:17:75:04:38:6d:8e: 83:97:8a:b8:39:65:b1:7e:91:66:f8:9b:7d:5f:e3:45:f7:ae: c9:30:58:52:43:90:d5:51:a0:0e:c0:34:d1:43:99:de:4a:85: 65:cb:7e:c0:07:6d:d0:c2:b7:83:d2:97:4f:21:74:1e:64:ca: 10:8f:19:91:59:b6:2c:30:07:e1:f5:47:d5:00:e8:e6:4e:c4: 87:ec:27:f4:ce:5c:43:d0:1d:49:11:4f:dc:92:a6:3b:b9:a4: 7f:4c:d2:f3:07:3f:87:e2:66:01:e4:98:70:82:c9:11:c0:ab: 6a:7d:27:f7:38:0e:99:c6:fb:08:fb:e4:27:9b:a8:4c:0f:4a: 1d:f5:92:c8:02:59:a8:c0:2b:0e:c0:43:15:ce:73:03:2b:da: b8:5f:b7:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjYwOTI2MjAwNDEwWhcNMjYxMDAzMjAwNDEwWjAYMRYwFAYD VQQDEw02YWI4MjUzYi1iYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB/viDwAbCMBOShaWlVfVO4V0LX7m4VFZz2YWfawDICzFSQGA+Jf5IMN6IPM nAhPq7e2EDa28xwgrURPJFZf4Z2NqGV0fp+XAMktCJvcmETdV6usIc0kng0CwRMX DllzzjLFDR+BBI+LQ5BiSJpq1Hyn4OVkdJPhdlrmH4mYi5599Mkeb1uZWVjwigAl wIVPQi2uW6yW3sh8kr25k+x9i1Q2jr40VrennU2XVtBy1BVTyQYQsChCfjP6WQkP igE0EcK7KTmmefaOnwwh9du6pg40NPiHs3M4bW7/vgPhh/yAwBBC8NyPjJUnVB4E EyBnFtb8iUOowrBxbFSAg65kFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCua51W dgoTlQJUlRsMBzi2Q0FEMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaR6vK3hBx6aSFhaouyjbttTl3tr+6TUb4FpGTG1Gusq2hKwggZzMV6qnSNdi AQFTlU6SialSK//Fv8PtfiIEBz/e8hVBgrpEtxSdZAqDSNCfhZdu+1RwZ9fa6nL2 UTLvUYxS/JpsF3UEOG2Og5eKuDllsX6RZvibfV/jRfeuyTBYUkOQ1VGgDsA00UOZ 3kqFZct+wAdt0MK3g9KXTyF0HmTKEI8ZkVm2LDAH4fVH1QDo5k7Eh+wn9M5cQ9Ad SRFP3JKmO7mkf0zS8wc/h+JmAeSYcILJEcCran0n9zgOmcb7CPvkJ5uoTA9KHfWS yAJZqMArDsBDFc5zAyvauF+3dw== -----END CERTIFICATE-----Generated at Sun Sep 27 10:11:39 2026 by rpki-client