$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: /eT5w2TCRK/Uf0VrVyqobXHPoba0ZqpDooW0QaKsS20= Subject key identifier: 43:A1:9D:05:09:94:2A:F1:C5:35:71:31:1B:21:12:28:8A:DE:EE:71 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D56 Signing time: Wed 22 Jul 2026 18:16:06 +0000 Manifest this update: Wed 22 Jul 2026 18:16:05 +0000 Manifest next update: Wed 29 Jul 2026 18:16:05 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: IfB4sa+aHCrHYn9H4zbmkaJ/A82ddl2grW2ZdhSeFzY=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Jul 22 18:16:05 2026 GMT Not After : Jul 29 18:16:05 2026 GMT Subject: CN=6a6108e5-e1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:e4:2e:51:a8:6d:74:da:7d:b3:a7:fc:8f: 37:14:8c:fd:e6:8c:21:63:c1:17:31:e2:ec:3d:37: e2:1b:b8:dd:b6:65:fd:d1:6e:7d:1b:fa:90:8f:86: 40:07:be:c9:7b:c9:8d:65:9b:9c:08:e4:dc:84:48: ac:ab:c3:5a:37:02:be:78:6b:aa:7d:7b:22:a2:4a: 0b:a2:65:47:9e:29:33:9f:92:92:34:49:c3:e1:3f: 0b:d2:98:f0:17:06:bf:3f:96:ad:7c:e6:70:d6:8e: fc:f2:fe:b3:ff:00:1d:9d:6b:f6:23:16:cc:d7:ef: 1a:fc:88:91:0f:dd:42:19:99:bf:a4:d0:7f:60:88: 7a:df:72:e4:e1:ca:77:5c:54:c3:2e:03:9b:46:dd: 6e:55:d6:20:ee:d5:4f:8a:34:6e:2f:ff:e0:ef:91: e7:56:1d:cc:96:91:94:60:54:7e:e7:72:1b:fd:2c: 16:21:a2:f0:cb:bc:e5:26:54:42:fe:0e:11:58:a3: c0:e3:4f:06:39:fb:6c:3a:e2:b0:16:2c:6d:b6:2a: 05:59:21:11:e1:48:ca:3e:6f:3a:36:92:e2:19:46: 1a:4c:a8:2c:70:23:fe:6c:07:0e:f1:e4:5c:20:4b: eb:dd:8f:b0:8e:46:9a:4a:cd:43:2a:6e:32:2e:55: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A1:9D:05:09:94:2A:F1:C5:35:71:31:1B:21:12:28:8A:DE:EE:71 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4c:aa:d8:e6:80:17:8c:c8:e1:23:95:f7:17:55:15:7f:75: 7b:b3:31:0a:eb:13:a6:1f:63:b2:e7:15:d2:ae:ce:56:66:9b: 2b:c7:39:19:6e:af:03:e9:09:51:17:e6:bb:64:db:03:fd:5d: ce:4c:37:fd:c7:03:4d:af:4c:0d:09:61:60:bb:2f:eb:f2:dd: 10:6b:06:04:38:4a:83:89:4b:87:c5:02:35:c9:cf:67:03:4e: a6:82:c9:ae:61:02:4d:7b:98:57:4e:7c:6e:bb:f9:c5:bf:b7: 8d:cd:b1:61:3c:30:82:80:42:31:b4:9d:53:b6:28:65:18:8d: 4b:a1:4a:d0:e1:f5:de:27:3a:a9:6b:31:1d:8e:fd:0a:de:39: 8e:a4:13:b0:7d:38:af:a2:d4:e6:85:b3:48:02:c9:68:dd:30: 55:0e:1b:ae:44:89:19:32:93:d7:37:47:fc:e1:bc:f2:f3:04: 87:b6:0c:4f:78:82:e1:84:91:d3:dd:77:4e:f6:8e:5a:9c:dd: 32:b2:d8:5e:09:5b:c9:a5:b8:76:9e:af:af:be:f0:c7:0c:99: 23:2e:3d:d5:8b:44:75:05:55:c3:5d:b8:7a:4a:71:92:8d:4c: db:79:0e:2b:b5:47:e7:d6:ba:f5:46:91:f7:f3:11:dd:49:5b: 36:d1:58:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwNzIyMTgxNjA1WhcNMjYwNzI5MTgxNjA1WjAYMRYwFAYD VQQDEw02YTYxMDhlNS1lMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjzkLlGobXTafbOn/I83FIz95owhY8EXMeLsPTfiG7jdtmX90W59G/qQj4ZA B77Je8mNZZucCOTchEisq8NaNwK+eGuqfXsiokoLomVHnikzn5KSNEnD4T8L0pjw Fwa/P5atfOZw1o788v6z/wAdnWv2IxbM1+8a/IiRD91CGZm/pNB/YIh633Lk4cp3 XFTDLgObRt1uVdYg7tVPijRuL//g75HnVh3MlpGUYFR+53Ib/SwWIaLwy7zlJlRC /g4RWKPA408GOftsOuKwFixttioFWSER4UjKPm86NpLiGUYaTKgscCP+bAcO8eRc IEvr3Y+wjkaaSs1DKm4yLlViNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOhnQUJ lCrxxTVxMRshEiiK3u5xMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEEyq2OaAF4zI4SOV9xdVFX91e7MxCusTph9jsucV0q7OVmabK8c5GW6vA+kJ URfmu2TbA/1dzkw3/ccDTa9MDQlhYLsv6/LdEGsGBDhKg4lLh8UCNcnPZwNOpoLJ rmECTXuYV058brv5xb+3jc2xYTwwgoBCMbSdU7YoZRiNS6FK0OH13ic6qWsxHY79 Ct45jqQTsH04r6LU5oWzSALJaN0wVQ4brkSJGTKT1zdH/OG88vMEh7YMT3iC4YSR 0913TvaOWpzdMrLYXglbyaW4dp6vr77wxwyZIy491YtEdQVVw124ekpxko1M23kO K7VH59a69UaR9/MR3UlbNtFY0g== -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:32 2026 by rpki-client