$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: 5EU9NaKv6zNETt+eW1hw0QupwXLac/BEPTFQExZmKj0= Subject key identifier: B1:C0:1F:B7:65:3D:CA:E2:A5:20:24:F1:05:F7:37:B7:26:23:7F:4C Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 03B4 Signing time: Sun 27 Sep 2026 00:38:53 +0000 Manifest this update: Sun 27 Sep 2026 00:38:52 +0000 Manifest next update: Sun 04 Oct 2026 00:38:52 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: i2DTapkT0WhLvVfrxT1B8ffxbEuR1XBdNfPMFePwQP8=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: al8fBj0l9FNorWDDEmWTxJIA8uTe/zODnox5rpi44HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Sep 27 00:38:52 2026 GMT Not After : Oct 4 00:38:52 2026 GMT Subject: CN=6ab8659c-2c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:7a:3b:5e:19:8e:2f:86:71:98:d5:76:f6: 6b:da:07:51:a0:5f:06:e2:b0:c4:98:4c:a8:5c:c6: 40:88:aa:76:4e:2d:a9:d6:70:92:61:ec:44:8a:da: 06:3b:32:76:2b:07:a5:93:3c:4d:32:57:45:a0:83: 25:c1:d5:c8:b6:77:eb:7c:14:62:41:5e:c9:52:26: c9:28:33:3c:e0:a3:b1:8e:2e:cb:46:15:88:e7:dc: 96:54:00:5d:f3:f0:a8:33:d1:8f:6a:a9:be:7f:33: 3e:cd:06:06:6d:25:24:fa:c4:4a:98:5c:0c:35:48: 20:31:22:34:c6:38:06:a0:0c:6c:9a:ab:ff:96:b2: 65:9d:34:bc:f2:a1:e0:09:1b:c1:fe:86:8e:ca:8b: d1:ad:51:8c:8e:9e:81:5b:df:16:82:ca:6b:1b:2c: 6a:39:41:1b:9f:0a:10:2a:94:a9:e0:cb:d2:64:e4: 16:9c:4c:0c:c8:6e:9d:bb:b8:bf:96:52:26:1d:f5: ab:06:a5:c5:d2:f0:8c:f3:d5:71:a7:f9:f7:c9:90: f7:49:2d:5b:a9:62:b7:38:01:8f:64:5f:f5:9e:15: 71:a4:23:6a:b3:32:3f:84:8d:88:04:3f:50:c3:6c: de:46:b9:f2:6d:16:00:c2:70:b2:e0:7f:40:98:a3: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C0:1F:B7:65:3D:CA:E2:A5:20:24:F1:05:F7:37:B7:26:23:7F:4C X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7f:ca:7c:61:78:ff:2d:22:03:77:3d:73:79:cd:57:36:fe: dd:38:f0:c8:d3:7d:74:19:9d:34:9f:ee:21:c6:e8:fa:eb:48: b8:70:44:a3:e8:6c:97:a3:3f:f1:5e:9a:4d:71:c8:8b:67:69: a7:83:35:cd:0a:c8:55:91:f8:32:c3:9c:a3:cd:44:de:dc:f5: 41:a8:09:6c:7f:96:50:62:8b:bc:f6:0b:56:88:af:1e:1a:2e: a1:e3:5c:a9:59:79:c1:99:7b:5a:78:b4:b8:9f:e3:4b:fd:e9: 38:69:28:ef:50:10:57:50:87:67:3f:34:40:11:42:81:6c:bb: 42:5a:75:37:95:f2:44:37:62:76:49:ba:47:d8:5c:5c:6c:21: b7:08:98:cf:36:bb:19:9f:c5:4c:1b:fb:b0:80:d8:db:a2:61: ea:45:f9:6f:c6:16:ee:bd:28:58:65:b4:b2:a8:65:4f:2e:cf: e0:38:4b:cf:c0:1e:6c:dd:73:7b:9c:cb:20:7a:8f:ae:4f:a4: 81:39:46:db:f1:ff:17:87:a0:10:04:c3:cb:8f:ad:53:79:dc: 7b:cb:90:5c:61:08:f4:07:df:40:a0:2c:2e:d4:1e:2b:fa:e1: 3a:34:9e:f9:52:96:0d:1b:73:7c:9c:a6:9c:a6:dd:8a:c6:4b: 55:a0:86:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjYwOTI3MDAzODUyWhcNMjYxMDA0MDAzODUyWjAYMRYwFAYD VQQDEw02YWI4NjU5Yy0yYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnx6O14Zji+GcZjVdvZr2gdRoF8G4rDEmEyoXMZAiKp2Ti2p1nCSYexEitoG OzJ2KwelkzxNMldFoIMlwdXItnfrfBRiQV7JUibJKDM84KOxji7LRhWI59yWVABd 8/CoM9GPaqm+fzM+zQYGbSUk+sRKmFwMNUggMSI0xjgGoAxsmqv/lrJlnTS88qHg CRvB/oaOyovRrVGMjp6BW98WgsprGyxqOUEbnwoQKpSp4MvSZOQWnEwMyG6du7i/ llImHfWrBqXF0vCM89Vxp/n3yZD3SS1bqWK3OAGPZF/1nhVxpCNqszI/hI2IBD9Q w2zeRrnybRYAwnCy4H9AmKMIqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHAH7dl PcripSAk8QX3N7cmI39MMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACX/KfGF4/y0iA3c9c3nNVzb+3TjwyNN9dBmdNJ/uIcbo+utIuHBEo+hsl6M/ 8V6aTXHIi2dpp4M1zQrIVZH4MsOco81E3tz1QagJbH+WUGKLvPYLVoivHhouoeNc qVl5wZl7Wni0uJ/jS/3pOGko71AQV1CHZz80QBFCgWy7Qlp1N5XyRDdidkm6R9hc XGwhtwiYzza7GZ/FTBv7sIDY26Jh6kX5b8YW7r0oWGW0sqhlTy7P4DhLz8AebN1z e5zLIHqPrk+kgTlG2/H/F4egEATDy4+tU3nce8uQXGEI9AffQKAsLtQeK/rhOjSe +VKWDRtzfJymnKbdisZLVaCGow== -----END CERTIFICATE-----Generated at Sun Sep 27 10:17:18 2026 by rpki-client