$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: wncmDcSTdDglV6peCaq+SCw3L0JZ5/4nEkDDtstPrHc= Subject key identifier: A0:10:03:71:66:E1:14:DE:66:7B:99:65:91:FD:E6:6B:B4:81:E8:EA Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 059D Signing time: Mon 28 Sep 2026 23:20:03 +0000 Manifest this update: Mon 28 Sep 2026 23:20:02 +0000 Manifest next update: Mon 05 Oct 2026 23:20:02 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: tC0inrlKGVDxH99pxXsYG4Z6yMsd8mzqN2bneRrxAJU=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: FjlCfaAiS0/SIVjNyB82F27uQR6v8yVVRfaKD0rMx5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 23:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Sep 28 23:20:02 2026 GMT Not After : Oct 5 23:20:02 2026 GMT Subject: CN=6abaf623-bd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:09:b2:0a:c0:7f:56:57:e6:f2:fd:92:d2: a4:b3:88:84:de:98:d9:94:af:c5:4c:1c:ae:00:c8: 06:10:49:f8:e3:19:c4:c7:35:ad:07:9f:2e:0b:2f: 61:c9:ca:05:e8:5a:09:44:e2:d1:31:48:14:59:a7: 37:db:ca:d6:50:d5:de:7e:d3:d6:21:84:f0:ee:d9: 7d:f4:90:4b:1c:fa:3f:17:02:c2:4d:32:91:5c:a7: 89:ce:a5:a7:9d:b6:00:fb:89:3d:e2:6e:49:9a:45: 63:f7:7d:7f:bd:03:2b:24:0f:0f:dd:d6:3d:f7:ec: 0a:45:20:73:b5:c9:d3:da:3a:4f:05:8f:d6:6f:a7: 82:c9:e7:f1:99:4d:98:1f:c7:b4:f1:58:8d:ef:2b: 3a:94:77:f4:86:c1:5d:af:22:a2:81:69:1b:5a:a7: c9:b9:62:3c:ed:98:7a:5f:1d:fa:b5:b0:ce:d8:ae: 88:f4:3d:d5:fd:85:6f:88:64:f6:a3:be:b4:59:1d: 50:f4:8a:4a:a1:f2:a3:8e:0f:6e:95:4b:fd:b7:89: 25:ec:dd:78:18:2c:fb:ad:e3:f7:30:75:d7:10:7f: 01:a8:7a:8f:3c:3c:b8:8d:19:26:7f:97:8b:64:db: 5c:b8:7f:72:34:73:f4:82:7d:57:a5:01:70:f6:73: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:10:03:71:66:E1:14:DE:66:7B:99:65:91:FD:E6:6B:B4:81:E8:EA X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:14:ce:55:40:1e:9e:0f:93:95:7d:49:59:8a:25:35:e7: 4f:a0:e4:4d:73:eb:ee:c4:d5:a5:65:51:6f:fd:64:13:94:c0: b4:c1:ac:f4:fd:9a:f2:7c:3d:0c:1d:c9:93:3f:c8:46:91:3c: 21:a7:b0:6e:4f:ef:2f:ac:20:d1:d8:96:f4:3e:93:dd:ae:d2: 56:fd:c6:5e:0a:d0:4e:ad:2d:a7:20:38:b7:71:fc:6a:ca:d1: 5e:19:50:e3:af:1d:5d:ff:25:74:0e:76:67:3a:4e:09:b4:c1: 8a:09:ea:39:89:42:b4:f1:c5:3d:50:d8:fc:25:20:31:26:c2: ad:d8:e0:44:01:b1:c9:52:40:71:6e:aa:de:72:d4:ca:48:cb: d9:7e:05:ec:b3:79:83:d6:a7:b8:c8:16:20:8b:a7:a7:96:0e: 64:1f:cc:c1:2d:fa:e8:80:ba:95:43:85:9f:0b:e7:dc:fa:c9: 15:c8:9a:93:6f:b9:12:a2:2a:0c:71:87:a0:7f:b0:e3:74:45: 09:57:36:46:79:5a:6a:22:54:a7:ea:9e:02:fa:ac:d2:cc:9a: f9:fb:c3:9b:f5:16:32:e5:39:29:f4:57:5a:3a:9f:b4:21:67: bc:20:d9:3f:6d:42:a0:5c:d7:10:1e:6b:b2:6e:32:a6:63:61: 97:68:8d:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjYwOTI4MjMyMDAyWhcNMjYxMDA1MjMyMDAyWjAYMRYwFAYD VQQDEw02YWJhZjYyMy1iZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIYJsgrAf1ZX5vL9ktKks4iE3pjZlK/FTByuAMgGEEn44xnExzWtB58uCy9h ycoF6FoJROLRMUgUWac328rWUNXeftPWIYTw7tl99JBLHPo/FwLCTTKRXKeJzqWn nbYA+4k94m5JmkVj931/vQMrJA8P3dY99+wKRSBztcnT2jpPBY/Wb6eCyefxmU2Y H8e08ViN7ys6lHf0hsFdryKigWkbWqfJuWI87Zh6Xx36tbDO2K6I9D3V/YVviGT2 o760WR1Q9IpKofKjjg9ulUv9t4kl7N14GCz7reP3MHXXEH8BqHqPPDy4jRkmf5eL ZNtcuH9yNHP0gn1XpQFw9nPHfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAQA3Fm 4RTeZnuZZZH95mu0gejqMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcKQUzlVAHp4Pk5V9SVmKJTXnT6DkTXPr7sTVpWVRb/1kE5TAtMGs9P2a8nw9 DB3Jkz/IRpE8Iaewbk/vL6wg0diW9D6T3a7SVv3GXgrQTq0tpyA4t3H8asrRXhlQ 468dXf8ldA52ZzpOCbTBignqOYlCtPHFPVDY/CUgMSbCrdjgRAGxyVJAcW6q3nLU ykjL2X4F7LN5g9anuMgWIIunp5YOZB/MwS366IC6lUOFnwvn3PrJFciak2+5EqIq DHGHoH+w43RFCVc2RnlaaiJUp+qeAvqs0sya+fvDm/UWMuU5KfRXWjqftCFnvCDZ P21CoFzXEB5rsm4ypmNhl2iN4Q== -----END CERTIFICATE-----Generated at Tue Sep 29 04:55:02 2026 by rpki-client