$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: RvhZ7c8gN1MvLmGgRZoXlHNe0lNY2ruhXHqzjzNhaxM= Subject key identifier: 1B:76:C7:64:46:3D:94:8E:16:79:E0:8D:D6:F3:A8:36:AA:FD:7A:C4 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 02AB Signing time: Wed 23 Sep 2026 01:26:44 +0000 Manifest this update: Wed 23 Sep 2026 01:26:43 +0000 Manifest next update: Wed 30 Sep 2026 01:26:43 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: r0uS+qR5BfShL8iftDfaIh7/IoyIt4XRv9JLTI5S80w=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) 3: 74FD4FD494BE11F1AFD2F6E63611F970.roa (hash: 0DKws/TZBwHKlP6bywafbYvjIkHk0Zh/vEoLGguK7rM=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Sep 23 01:26:43 2026 GMT Not After : Sep 30 01:26:43 2026 GMT Subject: CN=6ab32ad4-d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:c9:e6:fc:0a:23:f1:44:83:1b:54:bc:82: d4:20:7a:93:7d:44:21:39:66:4e:95:06:76:ce:42: c4:0c:ee:c3:f9:f2:3f:54:31:6f:35:3b:49:c7:90: 12:30:ac:18:a9:c4:1b:f4:ff:93:db:aa:9a:f8:35: d7:f2:c8:9c:6e:53:c6:95:8e:0a:93:1b:df:cc:08: 3a:7a:3c:17:c7:10:2c:39:64:d7:af:fe:c8:95:a3: 23:05:9e:48:4f:68:1a:95:bf:c8:a3:93:54:b2:74: 96:88:05:e7:c9:f4:df:37:57:c0:00:d5:fd:e6:1c: 50:cf:52:a9:c4:27:5a:b8:12:40:fa:1f:7a:3c:2a: 08:c1:0f:06:8c:fc:0e:ca:00:29:20:48:28:4f:23: 7e:30:8e:82:e5:8f:4d:72:42:5f:79:69:c9:8e:c9: f0:e9:da:ad:61:6f:3d:01:58:d2:e0:8c:78:f7:e5: 44:72:98:dd:63:ce:98:03:59:ea:89:ea:ae:30:fa: fa:d6:97:ff:88:19:ca:d4:4b:80:45:96:73:eb:6f: f2:c4:73:40:85:61:9c:a6:05:2f:ff:80:35:0a:0f: 6b:35:82:ed:c2:bf:ab:21:e2:9b:00:c4:7c:3a:1b: e0:0b:ba:15:73:64:7f:1b:21:bb:d4:03:59:5f:9b: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:C7:64:46:3D:94:8E:16:79:E0:8D:D6:F3:A8:36:AA:FD:7A:C4 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:76:80:1a:cc:21:c6:a9:75:22:df:9f:d3:59:db:cb:ca:ed: 90:09:57:52:71:62:34:89:c5:ad:7d:d1:8f:bb:53:bf:56:8d: 52:30:6b:1b:84:8a:a4:75:1a:46:6b:19:15:5e:4e:d4:d9:30: 77:e4:c2:04:88:e3:74:56:56:5a:8e:9a:60:cc:f2:16:3c:20: 7a:4d:49:16:3a:a7:23:0b:10:b2:02:46:f8:83:67:84:c6:9b: 2a:7b:47:b2:4b:9a:aa:d3:a0:77:c0:8b:db:6f:c2:a8:d9:32: 65:2b:2b:7e:9d:25:ff:36:2a:96:c2:f2:3f:5f:f4:55:ac:4c: 68:1a:03:03:04:1f:6e:ce:8c:96:fe:6f:53:0e:ff:28:e5:11: 60:9d:8f:c2:9d:eb:84:7c:3e:c3:f0:bf:db:5c:79:ef:99:af: 49:54:7c:16:86:75:23:b2:ab:af:7e:57:4b:46:98:bb:32:e6: a1:35:02:b4:fb:aa:90:8c:a4:b3:5c:ed:7e:73:b1:fe:1a:9d: f0:62:2a:16:3a:c6:c5:df:a3:70:94:fc:58:bc:25:ac:33:a5: 4c:82:51:85:9f:75:5e:b8:15:a6:43:b9:14:f0:c8:e1:09:3e: e9:c5:1d:5a:0a:43:38:82:68:21:aa:23:0a:cf:d1:77:63:00: 1b:05:ed:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwOTIzMDEyNjQzWhcNMjYwOTMwMDEyNjQzWjAYMRYwFAYD VQQDEw02YWIzMmFkNC1kN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bPJ5vwKI/FEgxtUvILUIHqTfUQhOWZOlQZ2zkLEDO7D+fI/VDFvNTtJx5AS MKwYqcQb9P+T26qa+DXX8sicblPGlY4KkxvfzAg6ejwXxxAsOWTXr/7IlaMjBZ5I T2galb/Io5NUsnSWiAXnyfTfN1fAANX95hxQz1KpxCdauBJA+h96PCoIwQ8GjPwO ygApIEgoTyN+MI6C5Y9NckJfeWnJjsnw6dqtYW89AVjS4Ix49+VEcpjdY86YA1nq iequMPr61pf/iBnK1EuARZZz62/yxHNAhWGcpgUv/4A1Cg9rNYLtwr+rIeKbAMR8 OhvgC7oVc2R/GyG71ANZX5voSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBt2x2RG PZSOFnngjdbzqDaq/XrEMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXaAGswhxql1It+f01nby8rtkAlXUnFiNInFrX3Rj7tTv1aNUjBrG4SKpHUa RmsZFV5O1Nkwd+TCBIjjdFZWWo6aYMzyFjwgek1JFjqnIwsQsgJG+INnhMabKntH skuaqtOgd8CL22/CqNkyZSsrfp0l/zYqlsLyP1/0VaxMaBoDAwQfbs6Mlv5vUw7/ KOURYJ2Pwp3rhHw+w/C/21x575mvSVR8FoZ1I7Krr35XS0aYuzLmoTUCtPuqkIyk s1ztfnOx/hqd8GIqFjrGxd+jcJT8WLwlrDOlTIJRhZ91XrgVpkO5FPDI4Qk+6cUd WgpDOIJoIaojCs/Rd2MAGwXtZw== -----END CERTIFICATE-----Generated at Thu Sep 24 00:52:54 2026 by rpki-client