$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json) Hash identifier: WrEEOND+P7ZAOgpmCeR62mmEmHQbpWs1gheEPJ8kGNE= Subject key identifier: 1C:B6:73:4F:BE:49:A2:1A:89:7A:55:CA:A5:D9:C2:AD:5A:43:7F:3E Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft Manifest number: 02AC Signing time: Fri 25 Sep 2026 01:32:56 +0000 Manifest this update: Fri 25 Sep 2026 01:32:55 +0000 Manifest next update: Fri 02 Oct 2026 01:32:55 +0000 Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: cYbHm7KAJHBZ6uhkbn9IO3ddB4HwfeoPVMb3lmNuy+U=) 2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=) 3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Validity Not Before: Sep 25 01:32:55 2026 GMT Not After : Oct 2 01:32:55 2026 GMT Subject: CN=6ab5cf48-c80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:07:87:c0:cc:78:77:25:a5:57:73:16:60: 3b:86:27:54:72:33:cd:cb:1c:08:37:e0:2d:9d:aa: 14:1f:88:9a:e0:06:36:94:ad:9d:23:14:d7:34:4a: 92:ab:c2:3f:7d:d9:ff:c9:f2:85:56:a4:7a:4f:2f: 85:e1:41:97:85:cf:61:48:63:ad:7d:45:2b:74:b8: 10:9c:d3:47:99:fa:dc:2a:91:22:95:3b:f1:f4:22: e0:3f:bd:ea:a3:13:13:19:b5:68:9b:72:15:5e:0a: a9:db:16:09:7e:42:a2:eb:b2:00:cb:15:ed:21:f5: 26:09:47:5f:18:0e:c0:a2:15:be:71:d6:09:54:27: 4a:06:04:94:87:23:7b:f1:ea:be:af:2d:0c:25:ae: 35:4f:3d:dc:c0:03:12:44:cf:dd:48:6e:5c:cc:eb: 13:fa:59:6e:75:ad:7c:22:ab:a7:d4:40:90:a6:cc: 42:c2:26:65:9b:cc:b5:14:c5:4a:fa:05:ea:0b:aa: 58:d8:12:e8:bd:9a:03:ce:57:b6:59:70:91:4d:a0: aa:14:b7:5f:a5:31:80:ae:70:17:f7:61:9e:5e:dd: 7c:0d:36:73:33:cb:50:79:19:db:b4:9f:49:4f:33: d1:d2:46:58:37:fa:40:e7:fb:ee:d2:80:48:71:f8: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:73:4F:BE:49:A2:1A:89:7A:55:CA:A5:D9:C2:AD:5A:43:7F:3E X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:63:d8:97:b2:ae:cb:5a:53:e8:24:a2:b7:04:dd:c5:a6:2d: 10:d7:23:73:82:ea:d3:90:54:77:d7:29:35:6c:ae:0b:0d:e8: f1:9b:76:e8:4e:f4:39:5e:bb:81:d1:52:55:2d:2c:d5:08:df: 4e:03:ee:c2:66:7d:45:1a:42:82:89:4e:a8:75:fe:d1:c1:c1: 32:80:33:75:9b:d9:85:89:63:38:36:80:92:fe:b7:f8:5d:b1: c4:7a:5f:86:34:36:f5:93:64:e5:37:fc:1a:05:dc:a1:f7:31: 47:c5:81:db:5d:e1:d2:41:46:9e:5d:2e:9f:36:11:39:e7:51: e3:7a:62:6d:a2:c3:9d:7c:cf:66:c1:32:fe:17:0d:45:1b:ce: b0:79:b1:3a:68:31:5c:01:27:07:ad:c8:74:2a:4b:59:7a:af: ea:83:7b:44:14:d2:ea:7a:d0:5a:d6:d6:62:ae:1d:6d:f6:85: e3:78:b5:7f:c5:82:e5:aa:96:59:89:3d:b9:d2:19:a2:1a:27: f0:59:6c:25:10:b7:a4:a9:78:c3:59:21:b1:7e:12:2c:00:f1: d1:15:1d:0c:96:a2:3a:4e:ee:e6:13:a1:8d:d7:41:cd:86:b1: 59:92:93:e9:b2:74:ac:b3:be:4b:40:13:60:6f:e7:57:3a:7a: 4c:b4:28:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjYwOTI1MDEzMjU1WhcNMjYxMDAyMDEzMjU1WjAYMRYwFAYD VQQDEw02YWI1Y2Y0OC1jODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycIHh8DMeHclpVdzFmA7hidUcjPNyxwIN+AtnaoUH4ia4AY2lK2dIxTXNEqS q8I/fdn/yfKFVqR6Ty+F4UGXhc9hSGOtfUUrdLgQnNNHmfrcKpEilTvx9CLgP73q oxMTGbVom3IVXgqp2xYJfkKi67IAyxXtIfUmCUdfGA7AohW+cdYJVCdKBgSUhyN7 8eq+ry0MJa41Tz3cwAMSRM/dSG5czOsT+lluda18Iqun1ECQpsxCwiZlm8y1FMVK +gXqC6pY2BLovZoDzle2WXCRTaCqFLdfpTGArnAX92GeXt18DTZzM8tQeRnbtJ9J TzPR0kZYN/pA5/vu0oBIcfjkZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBy2c0++ SaIaiXpVyqXZwq1aQ38+MB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC bGI2MXpaRDIySG52NlpFS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv2PYl7Kuy1pT6CSitwTdxaYtENcjc4Lq05BUd9cpNWyuCw3o8Zt26E70OV67 gdFSVS0s1QjfTgPuwmZ9RRpCgolOqHX+0cHBMoAzdZvZhYljODaAkv63+F2xxHpf hjQ29ZNk5Tf8GgXcofcxR8WB213h0kFGnl0unzYROedR43pibaLDnXzPZsEy/hcN RRvOsHmxOmgxXAEnB63IdCpLWXqv6oN7RBTS6nrQWtbWYq4dbfaF43i1f8WC5aqW WYk9udIZohon8FlsJRC3pKl4w1khsX4SLADx0RUdDJaiOk7u5hOhjddBzYaxWZKT 6bJ0rLO+S0ATYG/nVzp6TLQoPA== -----END CERTIFICATE-----Generated at Fri Sep 25 08:01:32 2026 by rpki-client