$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: L7jkw+g1pUBXsG503dJMLNybIlkbzZC76nyU0uGQG0k= Subject key identifier: 33:01:05:96:22:E4:93:87:D6:C8:E9:28:4D:12:88:9B:06:AE:22:0D Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 05A7 Signing time: Thu 24 Sep 2026 23:02:09 +0000 Manifest this update: Thu 24 Sep 2026 23:02:09 +0000 Manifest next update: Thu 01 Oct 2026 23:02:09 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: 1VluoAygRtDm+o2TCzKJSVdX3awFEYxlY6V8ksE+O8o=) 2: CA24F21C6DE711F180D709405CA30FBC.roa (hash: Oyiw752YkZ+aWMvYkiVvYpwM7PpYiOLSODbco0Yd+e0=) 3: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Sep 24 23:02:09 2026 GMT Not After : Oct 1 23:02:09 2026 GMT Subject: CN=6ab5abf1-c5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:3c:48:a0:5d:51:74:d1:06:c5:a5:81:f5: a7:35:d7:72:7b:25:9e:d3:83:85:f9:cf:b6:72:8c: 6b:de:40:86:47:a0:43:ad:3c:12:a3:4b:03:35:a6: 27:42:91:d7:eb:15:70:57:f5:cc:11:bd:fe:7c:d4: b0:c4:89:19:e8:f9:0f:f4:7b:34:11:a2:be:b3:9a: c8:3f:95:58:4f:32:b6:df:5b:3b:f6:a8:2d:2e:4b: f6:84:a0:46:85:eb:1c:1d:b4:4e:92:47:de:07:dd: 3f:5c:35:35:fc:15:f7:9c:c3:2c:c6:96:92:df:50: 31:8b:5e:96:b6:88:aa:a6:f9:e7:51:60:83:d7:18: 9d:31:95:68:a8:c9:5f:79:41:28:72:c1:44:20:e0: ae:5c:32:aa:fc:9c:72:cf:f2:83:79:0c:7a:79:62: 1c:bf:c0:4d:bb:f2:29:b7:bc:15:23:db:5d:0e:9b: 23:c5:f4:76:07:9d:b9:c1:9e:5f:65:02:fe:48:f8: b2:d1:09:3f:9b:d7:81:4e:83:e4:b1:29:66:0d:45: 8b:94:41:87:51:06:a0:0c:e4:e3:c9:f8:82:0b:d2: a9:df:d5:59:a7:1d:22:a7:f6:05:41:41:c8:81:eb: 61:c7:a7:1f:82:3d:b7:74:26:db:75:bc:e6:9c:d1: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:01:05:96:22:E4:93:87:D6:C8:E9:28:4D:12:88:9B:06:AE:22:0D X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:78:aa:c0:fe:1b:5a:39:15:58:92:a2:83:bb:24:0e:d5:03: 50:f0:a2:2b:cf:a1:92:9e:4c:1f:27:bb:6c:1e:87:c8:d2:84: 22:1c:b3:85:9b:1e:86:95:26:92:5c:9a:82:29:89:3c:31:e7: 06:be:7e:c4:6e:c2:3d:3f:c5:19:53:be:ac:7e:d8:e0:b2:30: 04:0c:83:32:f2:aa:2f:8a:0b:8a:07:e9:e7:25:95:93:a5:8a: 22:4e:84:84:9d:1b:f4:63:70:c0:bb:ef:f9:02:67:df:cd:f3: d1:51:95:23:1f:96:38:d2:57:3f:94:13:d3:f3:ad:2c:54:b8: c1:78:d8:2e:d9:5b:4b:4b:4b:cc:0b:6b:30:97:9f:64:68:20: 8d:ee:8a:1d:6d:7a:63:88:11:dd:c9:a6:93:07:67:5c:2a:2c: f6:44:3b:99:ea:2e:34:db:15:af:19:2b:f6:08:fa:87:62:83: 6e:ef:15:a9:04:e8:19:25:94:2f:c5:bf:c0:4b:a9:31:c2:55: e2:97:e7:55:ac:3c:9d:4e:36:37:ca:5f:70:c1:c4:c9:05:07: 86:c4:13:47:0c:a9:92:49:cc:26:e3:51:24:d7:7b:9d:8a:9c: 0e:0c:83:6a:e7:39:e8:02:4d:c8:40:b9:15:7c:91:15:b6:44: 82:05:03:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjYwOTI0MjMwMjA5WhcNMjYxMDAxMjMwMjA5WjAYMRYwFAYD VQQDEw02YWI1YWJmMS1jNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIY8SKBdUXTRBsWlgfWnNddyeyWe04OF+c+2coxr3kCGR6BDrTwSo0sDNaYn QpHX6xVwV/XMEb3+fNSwxIkZ6PkP9Hs0EaK+s5rIP5VYTzK231s79qgtLkv2hKBG hescHbROkkfeB90/XDU1/BX3nMMsxpaS31Axi16WtoiqpvnnUWCD1xidMZVoqMlf eUEocsFEIOCuXDKq/Jxyz/KDeQx6eWIcv8BNu/Ipt7wVI9tdDpsjxfR2B525wZ5f ZQL+SPiy0Qk/m9eBToPksSlmDUWLlEGHUQagDOTjyfiCC9Kp39VZpx0ip/YFQUHI gethx6cfgj23dCbbdbzmnNFdtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMBBZYi 5JOH1sjpKE0SiJsGriINMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQHiqwP4bWjkVWJKig7skDtUDUPCiK8+hkp5MHye7bB6HyNKEIhyzhZsehpUm klyagimJPDHnBr5+xG7CPT/FGVO+rH7Y4LIwBAyDMvKqL4oLigfp5yWVk6WKIk6E hJ0b9GNwwLvv+QJn383z0VGVIx+WONJXP5QT0/OtLFS4wXjYLtlbS0tLzAtrMJef ZGggje6KHW16Y4gR3cmmkwdnXCos9kQ7meouNNsVrxkr9gj6h2KDbu8VqQToGSWU L8W/wEupMcJV4pfnVaw8nU42N8pfcMHEyQUHhsQTRwypkknMJuNRJNd7nYqcDgyD auc56AJNyEC5FXyRFbZEggUDIg== -----END CERTIFICATE-----Generated at Sat Sep 26 07:52:32 2026 by rpki-client