$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: smd4JUbeTfZpPbso3kIrD8gSoyRXf+jI78GcAXbdA28= Subject key identifier: D5:19:53:C6:8E:E1:B4:20:3E:69:F4:19:B3:72:63:64:90:02:59:DE Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 023A Signing time: Wed 23 Sep 2026 02:26:16 +0000 Manifest this update: Wed 23 Sep 2026 02:26:16 +0000 Manifest next update: Wed 30 Sep 2026 02:26:16 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: jVe8+CQdStQvbbxQA6zIzY7c4Iel42Niixk+/ZhcGRE=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Sep 23 02:26:16 2026 GMT Not After : Sep 30 02:26:16 2026 GMT Subject: CN=6ab338c8-af1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:29:1d:6c:81:ac:92:55:49:20:34:ea:1f: 30:2c:b6:c3:16:41:c3:9c:3e:1c:67:60:48:98:be: a1:5d:18:7b:e3:19:28:06:5b:1e:7e:f2:3b:51:8e: 39:7c:87:6e:9b:6c:85:1d:fd:f9:30:1c:74:2e:a1: bf:33:ed:96:1e:b1:3f:be:e1:00:04:78:9f:f6:2e: 2d:4f:1b:01:9d:8e:4e:f7:b3:f2:f8:9a:48:84:0d: 4b:8b:01:12:5f:d8:66:65:76:b6:47:d1:1a:c2:c4: f1:83:ce:20:f6:88:23:ab:b2:d5:de:26:bf:c0:29: 3c:48:ad:8c:85:c9:86:2f:e4:61:d3:04:bc:7e:61: 98:2d:03:f2:d4:4a:ba:69:22:16:9e:aa:ae:4a:69: c8:64:5b:d2:59:30:27:28:a8:0e:6f:f2:a6:b9:1a: de:da:c1:98:6a:20:88:38:3c:95:e5:df:6d:d9:af: b6:22:ad:65:c3:5e:fb:05:26:03:14:8c:fa:1e:e4: 12:76:a6:60:32:e6:c3:91:7b:ee:1d:db:da:5f:0a: 7f:b5:11:08:71:b1:3d:c1:4d:be:cc:71:e9:36:fd: 4c:da:33:a8:b6:08:2d:e8:14:0a:a4:1e:ad:99:52: ca:f4:47:7b:cc:87:69:6f:64:b1:1c:4d:1a:b3:d7: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:19:53:C6:8E:E1:B4:20:3E:69:F4:19:B3:72:63:64:90:02:59:DE X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6e:77:37:f5:64:72:e6:e6:37:58:76:c3:3a:63:5d:2c:15: 29:03:27:43:23:b4:ac:0b:36:cc:81:af:18:79:38:55:69:10: fe:49:48:c3:53:ef:f7:df:ff:d6:3e:1d:44:c8:4d:ac:5c:ac: 04:bb:28:2b:7f:d3:35:6c:3b:f1:27:6c:c7:3b:1f:7a:30:7e: 5c:ad:6c:52:11:0d:ee:d3:5c:89:39:21:66:d8:d7:c2:66:d5: a3:2d:0d:8e:28:8f:14:74:52:bf:96:db:2b:de:16:2e:d3:0a: 46:37:0b:a9:fa:b9:5f:72:70:fb:39:82:af:e0:91:ee:be:c1: 24:4b:9c:30:c9:68:b3:69:92:02:85:dc:aa:f4:5e:f6:73:3d: 21:4f:78:4b:b0:24:30:af:3d:70:63:74:62:40:ac:55:1b:92: a4:22:d4:88:63:89:a5:c2:b5:39:4f:02:03:e3:6f:f8:4b:84: 02:c5:f7:55:5f:f8:12:e7:0b:13:46:0b:2e:c1:9c:e7:b4:c4: 98:51:ef:ee:56:6c:27:f7:66:49:3f:10:10:40:35:13:6b:1a: ba:c9:2b:83:e7:b6:ee:ab:8f:a2:0f:3a:16:c4:67:f0:c5:dd: b0:43:b7:04:1e:98:a8:6a:c1:39:25:ba:00:7b:8b:fc:26:e7: c8:f7:83:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwOTIzMDIyNjE2WhcNMjYwOTMwMDIyNjE2WjAYMRYwFAYD VQQDEw02YWIzMzhjOC1hZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHApHWyBrJJVSSA06h8wLLbDFkHDnD4cZ2BImL6hXRh74xkoBlsefvI7UY45 fIdum2yFHf35MBx0LqG/M+2WHrE/vuEABHif9i4tTxsBnY5O97Py+JpIhA1LiwES X9hmZXa2R9EawsTxg84g9ogjq7LV3ia/wCk8SK2MhcmGL+Rh0wS8fmGYLQPy1Eq6 aSIWnqquSmnIZFvSWTAnKKgOb/KmuRre2sGYaiCIODyV5d9t2a+2Iq1lw177BSYD FIz6HuQSdqZgMubDkXvuHdvaXwp/tREIcbE9wU2+zHHpNv1M2jOotggt6BQKpB6t mVLK9Ed7zIdpb2SxHE0as9cKbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUZU8aO 4bQgPmn0GbNyY2SQAlneMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuG53N/VkcubmN1h2wzpjXSwVKQMnQyO0rAs2zIGvGHk4VWkQ/klIw1Pv99// 1j4dRMhNrFysBLsoK3/TNWw78SdsxzsfejB+XK1sUhEN7tNciTkhZtjXwmbVoy0N jiiPFHRSv5bbK94WLtMKRjcLqfq5X3Jw+zmCr+CR7r7BJEucMMlos2mSAoXcqvRe 9nM9IU94S7AkMK89cGN0YkCsVRuSpCLUiGOJpcK1OU8CA+Nv+EuEAsX3VV/4EucL E0YLLsGc57TEmFHv7lZsJ/dmST8QEEA1E2sauskrg+e27quPog86FsRn8MXdsEO3 BB6YqGrBOSW6AHuL/CbnyPeDlQ== -----END CERTIFICATE-----Generated at Fri Sep 25 02:57:08 2026 by rpki-client