$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: joB+VaQtgFdzPRrpsjcadZW3JyKnOr3e9TyenfcIkNs= Subject key identifier: 5C:CE:8C:9F:35:23:D6:BD:93:6F:73:0E:76:71:25:A0:C5:10:B7:BA Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 05BC Signing time: Tue 22 Sep 2026 22:52:14 +0000 Manifest this update: Tue 22 Sep 2026 22:52:13 +0000 Manifest next update: Tue 29 Sep 2026 22:52:13 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: mZMjcfW/PCC1UwWegh0ce8Ymea9uxsYrOTfZQpdgcDU=) 2: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (hash: 3r8CxlUZOsQEEWTpjiWsr2BfpeGMKmyHkxU/0NH+Z88=) 3: E6EAAE16B2AA11F19707923F4511F970.roa (hash: r3/bwxU7byB0w512/a7Tfom1ex3aKIMHYstlvnQ4z3s=) 4: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: YKeKH2q636l3KSJMk82cm/+9dzWTPFS/wE3lhbjl9yE=) 5: 9F890910DA3C11F088DF33818DD3641D.roa (hash: CyGCSQ/pp0O9nS30RykGQWMhzlMelMN01TjpiPGbPpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Sep 22 22:52:13 2026 GMT Not After : Sep 29 22:52:13 2026 GMT Subject: CN=6ab3069e-bcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:16:8f:77:a9:a7:82:74:20:50:8a:44:8a:71: 9f:19:15:00:61:8b:f4:e7:fd:f3:61:18:6e:f7:01: 31:ff:4f:ce:41:d6:3d:4c:3e:e9:de:3c:bb:4a:cd: a0:50:a3:92:cf:fa:95:f5:fc:64:2b:ab:89:f6:c3: 9c:bf:92:da:68:f8:ca:81:b4:7c:94:b5:f3:67:cf: 2a:56:ed:27:5b:57:2f:8b:d7:7f:31:06:c0:98:58: 92:62:9c:3b:83:8c:5d:37:4c:47:9f:72:92:d0:93: 1c:a0:84:07:1c:0b:6b:9c:c0:8c:66:75:8f:97:d0: 38:c7:3b:ca:64:f7:c4:61:72:d2:59:85:ac:0e:4c: 7a:a9:a0:28:65:fa:e3:03:2f:18:28:cf:c6:76:c2: 0b:e4:fb:88:19:d8:f2:ec:79:a5:b7:27:41:98:ee: b4:4f:9a:42:2e:75:08:2d:f9:91:65:76:cb:00:b7: 7e:c6:40:17:ae:66:53:60:26:c9:d6:e0:02:4b:13: 53:70:17:33:6b:d6:7f:38:4d:25:fd:30:70:af:11: 25:5e:4f:86:ee:77:7f:d5:2e:d1:f9:2f:c6:aa:e9: b9:3c:2e:e6:0b:d8:5e:d4:2e:cd:36:36:3c:39:16: a3:8d:e9:74:ea:06:98:98:0b:f9:97:e8:dd:44:68: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CE:8C:9F:35:23:D6:BD:93:6F:73:0E:76:71:25:A0:C5:10:B7:BA X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d9:b0:d1:f0:ed:10:be:c6:fc:70:8e:5f:3a:49:8e:24:65: 41:45:e1:bd:e4:bc:7f:8f:af:2a:95:62:7a:a6:ea:c4:af:12: 8f:98:de:6d:89:d2:15:bf:cb:67:f6:91:10:13:91:1b:ca:b7: 35:33:36:11:13:1d:d3:b3:b0:a8:28:bd:48:1a:61:8c:e4:86: 24:c1:ac:cd:48:6e:7b:85:d2:36:e1:2c:3c:6a:54:ce:ac:0e: 80:0a:12:35:f1:29:00:bc:cd:28:3d:ae:08:db:f9:0e:3c:77: 43:de:a4:76:8e:28:42:98:d0:65:a9:47:f4:94:16:29:e0:6d: be:2b:45:8d:54:c3:85:56:ba:98:e2:c8:33:5d:9c:e7:12:d2: c8:3c:c2:f2:f6:d4:bc:11:ca:e7:04:5f:48:90:80:50:c1:f4: f8:6f:f4:40:e4:16:d2:33:3c:61:09:24:fa:17:17:5d:1f:a0: c0:be:fb:c9:d6:1b:04:4b:74:4a:2a:16:e1:56:a8:80:bb:f8: 4c:67:db:88:6a:8d:a3:98:0c:3a:23:1d:c6:38:76:ca:dd:37: 58:a8:2d:07:0c:15:ed:3c:e7:79:1f:60:04:04:75:a8:08:05: e5:23:05:00:8d:6e:ff:00:2c:45:44:31:5a:b7:2f:39:39:11: 4c:ca:2a:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjYwOTIyMjI1MjEzWhcNMjYwOTI5MjI1MjEzWjAYMRYwFAYD VQQDEw02YWIzMDY5ZS1iY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8haPd6mngnQgUIpEinGfGRUAYYv05/3zYRhu9wEx/0/OQdY9TD7p3jy7Ss2g UKOSz/qV9fxkK6uJ9sOcv5LaaPjKgbR8lLXzZ88qVu0nW1cvi9d/MQbAmFiSYpw7 g4xdN0xHn3KS0JMcoIQHHAtrnMCMZnWPl9A4xzvKZPfEYXLSWYWsDkx6qaAoZfrj Ay8YKM/GdsIL5PuIGdjy7HmltydBmO60T5pCLnUILfmRZXbLALd+xkAXrmZTYCbJ 1uACSxNTcBcza9Z/OE0l/TBwrxElXk+G7nd/1S7R+S/Gqum5PC7mC9he1C7NNjY8 ORajjel06gaYmAv5l+jdRGgi4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzOjJ81 I9a9k29zDnZxJaDFELe6MB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNmw0fDtEL7G/HCOXzpJjiRlQUXhveS8f4+vKpVieqbqxK8Sj5jebYnSFb/L Z/aREBORG8q3NTM2ERMd07OwqCi9SBphjOSGJMGszUhue4XSNuEsPGpUzqwOgAoS NfEpALzNKD2uCNv5Djx3Q96kdo4oQpjQZalH9JQWKeBtvitFjVTDhVa6mOLIM12c 5xLSyDzC8vbUvBHK5wRfSJCAUMH0+G/0QOQW0jM8YQkk+hcXXR+gwL77ydYbBEt0 SioW4VaogLv4TGfbiGqNo5gMOiMdxjh2yt03WKgtBwwV7TzneR9gBAR1qAgF5SMF AI1u/wAsRUQxWrcvOTkRTMoqpw== -----END CERTIFICATE-----Generated at Wed Sep 23 07:44:05 2026 by rpki-client