$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json) Hash identifier: +SbQ0Dis7Ofc9xPyYZA8eJnPv4czBLCy6u9m6Lwgkmk= Subject key identifier: EC:A2:8D:17:29:85:A2:71:19:B3:B5:76:2C:BA:67:51:80:4D:E6:AF Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft Manifest number: 01A5 Signing time: Fri 25 Sep 2026 04:14:11 +0000 Manifest this update: Fri 25 Sep 2026 04:14:10 +0000 Manifest next update: Fri 02 Oct 2026 04:14:10 +0000 Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: 6kf40lBHTz2B50tuKpPxnwbdwFQbp1XLDyC4G8QbjFc=) 2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: rN+KK3jryyT29WxMz6TJQKyL9vxdeXLa8TTLUuh8DZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Validity Not Before: Sep 25 04:14:10 2026 GMT Not After : Oct 2 04:14:10 2026 GMT Subject: CN=6ab5f512-bba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:36:37:c6:67:29:c6:75:cc:18:b4:7c:cd: 27:ea:0a:13:71:f2:9e:a2:d2:c7:bb:de:b8:bc:8e: 14:a6:a3:79:53:14:f2:0d:08:61:38:73:2f:e8:7e: af:4c:42:5f:9a:69:f1:7d:0a:b4:61:7f:24:7c:f1: 73:9b:91:74:1c:26:9a:c8:bd:5c:1d:0b:20:a2:ac: 9a:e1:d4:22:5f:02:e4:e5:c3:3e:6f:64:36:c0:31: 01:ae:70:a2:df:79:47:4d:57:e8:de:2d:5a:99:64: 4a:6f:bd:12:75:07:4b:8a:72:22:a5:d0:6c:0b:fd: 96:39:64:4c:7f:6c:6b:e0:b2:59:eb:79:a6:c7:30: e0:d8:4d:89:60:53:1d:ca:a2:85:22:17:0b:2a:8c: cd:58:dd:de:97:fe:b1:d7:1f:c3:13:4c:6b:af:3c: 1c:4b:64:d1:94:46:ff:67:de:9f:09:ce:eb:b1:79: dd:8d:2e:cf:ee:27:6b:be:81:9a:4b:19:e1:0d:43: d1:b3:42:8f:a4:39:14:d3:05:c8:53:3a:c0:b4:c1: 84:a5:fd:e7:a7:33:db:cf:ad:7a:3c:c8:39:ec:0e: 01:2d:3b:61:3b:84:84:a5:8b:e4:7f:13:16:76:49: f8:2a:5d:c8:11:71:8e:0b:13:71:a9:4a:0a:1a:a9: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A2:8D:17:29:85:A2:71:19:B3:B5:76:2C:BA:67:51:80:4D:E6:AF X509v3 Authority Key Identifier: keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1c:0b:71:df:a6:70:76:34:3e:e4:ab:69:92:ec:ba:15:1e: 55:97:8c:f6:89:8e:66:6d:3c:b1:cb:5a:1d:03:7e:bc:fd:5a: 2d:dc:dd:e7:30:0a:81:75:08:f3:56:e9:e0:4d:c8:f9:6b:25: f5:cc:e8:e4:40:1a:3a:37:fe:81:db:81:f4:7b:29:55:1b:3c: 28:d3:d7:9a:50:47:93:93:6d:61:57:47:93:a3:a2:59:7e:77: 22:ad:78:0e:07:8d:27:17:b0:33:00:00:43:02:d2:0b:c9:25: 82:23:4a:c5:07:3b:3a:8d:5c:14:67:38:4f:f5:cd:5b:63:4d: a1:7c:9e:f4:e1:f5:4b:4f:f3:b3:c3:c2:e4:a8:61:7f:1d:86: 22:e5:1f:84:4b:ac:a5:dd:6d:fb:8d:c6:9b:1b:b9:ab:99:38: 8e:00:8a:4b:55:1c:65:d2:35:b3:b5:0b:3c:29:14:e2:8d:5d: 3d:20:ba:e3:f0:d0:06:e9:18:bd:c8:16:59:d2:f3:c6:47:ed: 9e:0f:09:c4:7e:84:ba:1e:5c:56:5f:3c:69:37:3e:48:c4:fb: 7e:1b:8c:92:50:7a:b7:3b:94:2c:19:75:ed:09:a0:f5:1f:44: b1:c1:2f:74:ce:06:dc:9c:6d:df:88:e4:a1:10:db:d9:d9:75: 4d:67:4a:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKEU1QjQ0QzY5RThERTczM0RGNjE5NjYwNTZFN0U0MTVF QzdDNzBEMkEwHhcNMjYwOTI1MDQxNDEwWhcNMjYxMDAyMDQxNDEwWjAYMRYwFAYD VQQDEw02YWI1ZjUxMi1iYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsek2N8ZnKcZ1zBi0fM0n6goTcfKeotLHu964vI4UpqN5UxTyDQhhOHMv6H6v TEJfmmnxfQq0YX8kfPFzm5F0HCaayL1cHQsgoqya4dQiXwLk5cM+b2Q2wDEBrnCi 33lHTVfo3i1amWRKb70SdQdLinIipdBsC/2WOWRMf2xr4LJZ63mmxzDg2E2JYFMd yqKFIhcLKozNWN3el/6x1x/DE0xrrzwcS2TRlEb/Z96fCc7rsXndjS7P7idrvoGa SxnhDUPRs0KPpDkU0wXIUzrAtMGEpf3npzPbz616PMg57A4BLTthO4SEpYvkfxMW dkn4Kl3IEXGOCxNxqUoKGqlnkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyijRcp haJxGbO1diy6Z1GATeavMB8GA1UdIwQYMBaAFOW0TGno3nM99hlmBW5+QV7Hxw0q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My80RTI1QzhCQzM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6MzJHV1lGYm41QlhzZkhE U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzViUk1hZWplY3ozMkdXWUZibjVCWHNmSERTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My80RTI1QzhCQzM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6 MzJHV1lGYm41QlhzZkhEU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnRwLcd+mcHY0PuSraZLsuhUeVZeM9omOZm08sctaHQN+vP1aLdzd5zAKgXUI 81bp4E3I+Wsl9czo5EAaOjf+gduB9HspVRs8KNPXmlBHk5NtYVdHk6OiWX53Iq14 DgeNJxewMwAAQwLSC8klgiNKxQc7Oo1cFGc4T/XNW2NNoXye9OH1S0/zs8PC5Khh fx2GIuUfhEuspd1t+43Gmxu5q5k4jgCKS1UcZdI1s7ULPCkU4o1dPSC64/DQBukY vcgWWdLzxkftng8JxH6Euh5cVl88aTc+SMT7fhuMklB6tzuULBl17Qmg9R9EscEv dM4G3Jxt34jkoRDb2dl1TWdKYw== -----END CERTIFICATE-----Generated at Fri Sep 25 09:25:05 2026 by rpki-client