$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json) Hash identifier: IuTdfNT/ofEJMM4FtQKQTxR6QZzTe5i0uSzFytzmac4= Subject key identifier: 6B:ED:E9:CC:79:39:61:C8:BE:AA:B8:4E:0F:D4:71:44:14:A5:48:93 Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft Manifest number: 03C5 Signing time: Thu 01 Oct 2026 00:56:00 +0000 Manifest this update: Thu 01 Oct 2026 00:56:00 +0000 Manifest next update: Thu 08 Oct 2026 00:56:00 +0000 Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: tGKOWYMz83QSe/1XzHAjtYaTHN/EDc81hJwIdLEU3bY=) 2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: yIITaHKhLktq8hIVDB/hFkrrSu/yxWdnPRfSTHr4wTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 00:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Validity Not Before: Oct 1 00:56:00 2026 GMT Not After : Oct 8 00:56:00 2026 GMT Subject: CN=6abdafa0-0607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:4f:d8:2f:b4:9d:fa:13:32:38:01:cd:ed: 13:b5:ab:53:73:76:9d:91:cb:76:9e:a5:fb:d9:a8: cc:15:1f:02:87:89:59:5b:03:23:91:81:9e:ab:f2: b3:e8:50:ed:cb:f8:42:ac:bb:e4:4b:e4:56:12:c4: 0e:8b:46:b7:e6:ed:00:2d:56:dc:89:69:5a:08:a2: 45:60:92:b8:0f:3d:f3:f4:e7:26:cf:28:35:d8:67: ed:16:27:02:25:aa:dd:b3:cb:37:06:74:5b:64:61: 50:33:c2:cb:2d:2b:6c:34:8c:8b:09:a7:c0:38:2d: 3f:5c:06:fd:0c:45:f9:6f:93:f8:3f:ba:7e:0c:37: af:25:6f:00:03:dc:12:6f:34:7b:5a:1a:cc:6f:57: 2f:0d:87:f4:8e:a6:1d:29:46:6f:22:09:8b:32:d8: d8:7f:12:12:58:bb:e5:b1:e3:fd:0f:94:c6:2b:09: b7:a0:0d:68:b8:50:a6:6f:b4:ad:73:b8:73:2c:31: f1:71:88:35:f1:85:90:82:dc:b3:d8:b4:f7:64:4b: af:1e:90:6e:f2:a4:be:43:6a:f9:30:e1:62:5e:39: 1e:4f:46:f0:df:24:3f:4b:60:9c:1b:58:5c:ee:2b: 4b:c5:be:e2:b5:7b:af:d3:a4:2e:27:a9:b8:ad:07: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:ED:E9:CC:79:39:61:C8:BE:AA:B8:4E:0F:D4:71:44:14:A5:48:93 X509v3 Authority Key Identifier: keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f6:7e:c2:9f:d9:56:70:89:52:8c:96:d3:29:bf:5a:59:81: 19:cc:66:2c:36:0a:99:73:82:5f:fb:3e:2a:1c:3f:ac:09:59: 76:e3:8e:75:ec:e1:33:b9:aa:da:bf:bc:f8:2f:5f:fb:f9:70: 5a:8b:1a:d9:c7:6f:95:45:52:39:a7:5d:af:6d:6f:31:74:3c: 3c:ca:2d:ee:a5:6f:ac:05:3f:92:a3:a6:6f:70:9e:6e:26:de: f5:4c:8c:07:e2:c7:ee:39:9e:e6:cf:bb:c3:5e:45:75:e3:c0: 41:55:59:c1:5f:d7:7d:2e:25:b4:e6:75:63:d5:29:7a:9d:34: 12:9b:77:a1:75:8c:41:e8:10:78:8f:c6:3b:b7:83:89:59:33: 70:1f:16:2b:0a:76:06:10:21:c9:07:a8:fc:ed:29:ee:ec:bf: 6c:9d:25:1d:d8:1f:67:1f:b4:e4:f2:38:4a:21:89:8d:42:5e: 2e:2a:12:ea:5c:e8:37:17:c1:8b:81:19:eb:16:6d:a0:7c:85: a2:66:59:e9:81:4b:1a:86:1f:46:dc:70:72:35:bf:4d:57:d8: 70:2a:b2:88:7a:bf:e8:13:2b:7c:cf:37:5f:2c:5e:49:37:b0: 2c:7c:2e:6f:64:11:a5:58:2d:dd:a1:9d:6b:08:35:e3:45:6e: 13:5f:dd:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB OEIwNDY2RDUwHhcNMjYxMDAxMDA1NjAwWhcNMjYxMDA4MDA1NjAwWjAYMRYwFAYD VQQDEw02YWJkYWZhMC0wNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Z5P2C+0nfoTMjgBze0TtatTc3adkct2nqX72ajMFR8Ch4lZWwMjkYGeq/Kz 6FDty/hCrLvkS+RWEsQOi0a35u0ALVbciWlaCKJFYJK4Dz3z9Ocmzyg12GftFicC Jards8s3BnRbZGFQM8LLLStsNIyLCafAOC0/XAb9DEX5b5P4P7p+DDevJW8AA9wS bzR7WhrMb1cvDYf0jqYdKUZvIgmLMtjYfxISWLvlseP9D5TGKwm3oA1ouFCmb7St c7hzLDHxcYg18YWQgtyz2LT3ZEuvHpBu8qS+Q2r5MOFiXjkeT0bw3yQ/S2CcG1hc 7itLxb7itXuv06QuJ6m4rQc0sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvt6cx5 OWHIvqq4Tg/UcUQUpUiTMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzE3NC9CMTMxRjg5Q0VFQ0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBn UHYxcl9lcnVKb3Fvc0VadFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGfZ+wp/ZVnCJUoyW0ym/WlmBGcxmLDYKmXOCX/s+Khw/rAlZduOOdezhM7mq 2r+8+C9f+/lwWosa2cdvlUVSOaddr21vMXQ8PMot7qVvrAU/kqOmb3Cebibe9UyM B+LH7jme5s+7w15FdePAQVVZwV/XfS4ltOZ1Y9Upep00Ept3oXWMQegQeI/GO7eD iVkzcB8WKwp2BhAhyQeo/O0p7uy/bJ0lHdgfZx+05PI4SiGJjUJeLioS6lzoNxfB i4EZ6xZtoHyFomZZ6YFLGoYfRtxwcjW/TVfYcCqyiHq/6BMrfM83XyxeSTewLHwu b2QRpVgt3aGdawg140VuE1/d2w== -----END CERTIFICATE-----Generated at Thu Oct 1 14:58:27 2026 by rpki-client