$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: 9b9uOSYHU3lM3eCGb+Q8maQp0K78fWafcwLtyumKPgc= Subject key identifier: AF:94:85:4C:65:01:75:90:10:CD:3F:91:F7:15:F6:94:66:34:64:B4 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 099B Signing time: Thu 24 Sep 2026 19:56:52 +0000 Manifest this update: Thu 24 Sep 2026 19:56:51 +0000 Manifest next update: Thu 01 Oct 2026 19:56:51 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: d1gTNbrgPPq+g++Ee3t4gqHANNLqZe92pX1jIYfMl2U=) 2: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: X+eBxovvqzHyCJboQeyc2wo6Qm3l7D8nVBLA57hyGZk=) 3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: OFe6pYT5si7P735ls7Y5SGcQNrbPBZR9CsKE32oRmEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Sep 24 19:56:51 2026 GMT Not After : Oct 1 19:56:51 2026 GMT Subject: CN=6ab58083-d64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:76:34:62:b8:36:cc:c5:3c:4a:75:9a:c9: c4:b7:cc:0a:25:34:ce:4c:da:08:3b:e1:77:a5:62: fd:0a:7e:44:d8:1e:55:71:29:5a:49:e8:7a:d4:e5: 49:34:e1:ed:df:69:5b:76:96:f5:d5:53:d2:d0:ae: 13:55:e3:47:de:a9:3a:ff:e0:06:38:9f:a5:26:fa: 2b:71:fc:55:df:72:26:a4:29:c3:a1:ca:b1:83:78: 23:9e:e1:b2:f1:a3:e3:14:61:cc:b0:a7:68:54:66: 70:51:11:46:52:22:83:04:62:76:ba:fd:f4:97:72: 91:07:6c:4f:86:9c:86:83:95:ac:fa:2b:91:80:bc: cd:0b:d7:4c:e6:4b:29:42:b6:54:b3:0b:12:df:d4: ac:81:f4:f2:38:6f:a3:f3:e3:75:ca:84:ce:d8:17: 8d:83:4a:80:96:7b:b5:9a:80:dc:7e:9d:20:6f:29: e2:2f:70:63:78:45:4c:f3:5a:c3:c3:a1:6a:71:2b: 00:0a:9e:ac:54:ce:6e:8a:00:91:5d:2a:fb:78:16: 81:81:15:a7:c1:e9:83:61:cc:65:8a:93:13:c9:a0: 22:fb:70:17:55:02:a9:e6:99:28:f4:3f:07:03:29: d7:3a:09:95:59:0e:fe:6f:ac:b4:c7:ef:ca:d3:1b: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:94:85:4C:65:01:75:90:10:CD:3F:91:F7:15:F6:94:66:34:64:B4 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1e:8c:6c:be:7d:50:d4:fd:6e:a5:47:d0:ec:da:65:67:0e: 96:a7:f2:03:d8:70:27:fb:db:d4:01:d8:28:ef:39:42:75:5a: e3:04:0b:1e:61:11:5e:3a:73:13:28:0f:29:ee:25:13:8d:b9: 43:9d:52:ad:45:84:7b:24:b0:e1:56:c8:63:b3:49:9d:f6:fd: 3d:a9:18:17:2c:7e:9c:66:1e:4c:12:2f:5b:58:b0:db:c2:79: 68:ce:de:fe:e3:89:bf:09:3f:9f:5d:ef:7b:79:29:b0:03:ec: fb:3d:6a:14:ed:37:df:61:fb:47:53:b2:0f:02:8a:62:02:8b: 7c:4d:0d:d2:49:68:c2:ca:c3:1d:00:af:3c:58:bd:3c:d6:dc: 62:3b:9b:6f:74:bf:1c:3e:e8:34:b6:aa:8e:f2:00:a3:71:a3: 3a:59:1b:df:a3:d1:48:5b:21:da:a1:21:d7:36:b6:35:2a:bb: a2:9e:dd:e8:ed:ad:9a:49:f6:51:e0:06:fc:6c:90:b5:d8:59: 8e:62:9f:dc:cd:89:ea:e5:de:53:17:62:82:23:19:db:f8:4c: ec:dc:39:be:27:92:00:1a:1d:78:dc:57:50:fb:87:de:30:88: 1d:57:0e:c5:70:f1:5b:bc:17:36:ca:31:75:cb:c0:a1:3f:b3: e4:4f:4c:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjYwOTI0MTk1NjUxWhcNMjYxMDAxMTk1NjUxWjAYMRYwFAYD VQQDEw02YWI1ODA4My1kNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw92NGK4NszFPEp1msnEt8wKJTTOTNoIO+F3pWL9Cn5E2B5VcSlaSeh61OVJ NOHt32lbdpb11VPS0K4TVeNH3qk6/+AGOJ+lJvorcfxV33ImpCnDocqxg3gjnuGy 8aPjFGHMsKdoVGZwURFGUiKDBGJ2uv30l3KRB2xPhpyGg5Ws+iuRgLzNC9dM5ksp QrZUswsS39SsgfTyOG+j8+N1yoTO2BeNg0qAlnu1moDcfp0gbyniL3BjeEVM81rD w6FqcSsACp6sVM5uigCRXSr7eBaBgRWnwemDYcxlipMTyaAi+3AXVQKp5pko9D8H AynXOgmVWQ7+b6y0x+/K0xu4ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+UhUxl AXWQEM0/kfcV9pRmNGS0MB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnR6MbL59UNT9bqVH0OzaZWcOlqfyA9hwJ/vb1AHYKO85QnVa4wQLHmERXjpz EygPKe4lE425Q51SrUWEeySw4VbIY7NJnfb9PakYFyx+nGYeTBIvW1iw28J5aM7e /uOJvwk/n13ve3kpsAPs+z1qFO0332H7R1OyDwKKYgKLfE0N0klowsrDHQCvPFi9 PNbcYjubb3S/HD7oNLaqjvIAo3GjOlkb36PRSFsh2qEh1za2NSq7op7d6O2tmkn2 UeAG/GyQtdhZjmKf3M2J6uXeUxdigiMZ2/hM7Nw5vieSABodeNxXUPuH3jCIHVcO xXDxW7wXNsoxdcvAoT+z5E9Mfg== -----END CERTIFICATE-----Generated at Fri Sep 25 02:41:41 2026 by rpki-client