$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json) Hash identifier: zyOuEsPMKrfVUbJObZySMlmqVrApbAv9rhZVVf49j6Y= Subject key identifier: 54:71:C9:6F:35:85:67:7E:EF:22:6F:D2:B8:7B:01:3C:96:68:7C:2C Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft Manifest number: 067A Signing time: Tue 22 Sep 2026 22:15:19 +0000 Manifest this update: Tue 22 Sep 2026 22:15:18 +0000 Manifest next update: Tue 29 Sep 2026 22:15:18 +0000 Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: pagdQw+AHmJXZ98tCWDkcXEFKEBE+NZgWlJ/+GwP0HM=) 2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=) 3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: cye1hIVFGwa2LCmeYD2ib4pZaHJ8xh8Jr5cItjYasmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Validity Not Before: Sep 22 22:15:18 2026 GMT Not After : Sep 29 22:15:18 2026 GMT Subject: CN=6ab2fdf7-fe52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:3c:cd:1e:83:4a:2d:70:14:6b:b3:7f:fe: 07:c1:7e:14:ac:d8:28:30:55:bd:c9:59:39:3b:1f: b4:e0:2c:03:78:fc:12:82:e5:32:d7:3b:37:a9:04: e4:c0:09:5f:6b:b7:ec:9f:08:66:92:c7:aa:f0:01: 09:69:7c:3e:fc:40:01:a2:77:07:38:2f:10:56:0a: a1:e9:86:99:85:ee:1b:8a:c0:0d:d1:8b:3c:fa:f9: ae:7d:cd:f9:50:e8:9a:08:62:8d:62:40:a1:8b:dd: 94:a6:86:92:a7:06:42:ff:1f:7a:31:fa:3f:a8:7a: 14:54:1c:c6:92:51:1e:8e:92:08:13:bd:a5:8c:9a: 8e:9c:b9:7d:38:4e:3c:a6:4e:0e:34:85:03:07:e0: d8:6c:88:9b:05:8f:7e:9d:24:ff:e5:0e:50:c3:c2: cb:32:88:30:a6:c4:2d:7b:a9:07:fd:ed:8c:86:35: 75:03:d7:5c:f2:2f:fd:7b:68:d2:5d:a5:7f:a4:4f: 58:e7:05:84:2f:53:43:2b:2f:97:10:79:8f:ca:65: 24:f9:e9:94:a0:e1:ae:34:25:a6:a6:44:8d:03:be: 39:69:c9:3b:03:c9:75:a8:67:ef:d0:ec:c4:0c:03: 56:51:33:e4:c8:f4:59:6a:d0:07:cc:ec:c1:12:ce: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:C9:6F:35:85:67:7E:EF:22:6F:D2:B8:7B:01:3C:96:68:7C:2C X509v3 Authority Key Identifier: keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c5:6d:5d:fd:53:1b:0e:52:a1:23:b7:61:b2:95:21:db:33: 6c:97:b6:6e:9e:73:b0:83:14:07:3b:b3:c3:5c:49:ac:0d:e2: 36:2c:9a:8c:a9:11:0c:ee:f6:e4:73:3f:41:7a:33:c9:77:aa: 5f:fe:2c:f7:f8:42:9f:20:75:e1:49:d9:6d:93:d7:75:b3:19: 68:ea:f2:2e:ef:fe:a9:de:55:5c:21:cf:a7:14:20:6a:8c:39: d0:63:6a:1d:5f:3c:3d:d1:80:55:46:6d:36:0d:45:de:45:4a: 59:95:91:1c:15:15:04:78:7f:fb:cf:af:14:6d:40:b3:71:0e: 40:6b:e3:be:92:58:79:79:d5:af:64:f7:0f:68:1b:4f:90:a3: 46:6e:49:71:23:6f:f9:0d:05:1c:47:58:47:06:b0:9b:16:6e: 86:8c:28:73:45:9d:f0:96:5a:c8:9b:b0:74:0c:bc:44:e3:a3: c6:12:10:b8:13:40:a9:f5:59:ef:3b:75:a8:26:66:09:e6:1a: 23:82:67:a5:33:e5:54:a9:18:8d:c6:3f:bf:e7:27:1c:1c:fa: de:4c:32:b0:6e:94:8b:49:48:1a:ba:3e:32:cb:cf:2a:45:25: 95:5b:e5:50:da:c8:66:da:0f:42:8c:ad:66:91:08:69:aa:57: 5b:e7:28:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJCNjYxMTAvBgNVBAUTKEIwMTNCOTcyQjQyQ0E1QUQ5RjZBMTYyQkYzQjVDNzRG OTMzQzFFMDUwHhcNMjYwOTIyMjIxNTE4WhcNMjYwOTI5MjIxNTE4WjAYMRYwFAYD VQQDEw02YWIyZmRmNy1mZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7o8zR6DSi1wFGuzf/4HwX4UrNgoMFW9yVk5Ox+04CwDePwSguUy1zs3qQTk wAlfa7fsnwhmkseq8AEJaXw+/EABoncHOC8QVgqh6YaZhe4bisAN0Ys8+vmufc35 UOiaCGKNYkChi92UpoaSpwZC/x96Mfo/qHoUVBzGklEejpIIE72ljJqOnLl9OE48 pk4ONIUDB+DYbIibBY9+nST/5Q5Qw8LLMogwpsQte6kH/e2MhjV1A9dc8i/9e2jS XaV/pE9Y5wWEL1NDKy+XEHmPymUk+emUoOGuNCWmpkSNA745ack7A8l1qGfv0OzE DANWUTPkyPRZatAHzOzBEs5hXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRxyW81 hWd+7yJv0rh7ATyWaHwsMB8GA1UdIwQYMBaAFLATuXK0LKWtn2oWK/O1x0+TPB4F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkI2Ni81M0U4RkJFQURB NUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3BhMmZhaFlyODdYSFQ1TThI Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCTzVjclFzcGEyZmFoWXI4N1hIVDVNOEhnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkI2Ni81M0U4RkJFQURBNUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3Bh MmZhaFlyODdYSFQ1TThIZ1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIMVtXf1TGw5SoSO3YbKVIdszbJe2bp5zsIMUBzuzw1xJrA3iNiyajKkRDO72 5HM/QXozyXeqX/4s9/hCnyB14UnZbZPXdbMZaOryLu/+qd5VXCHPpxQgaow50GNq HV88PdGAVUZtNg1F3kVKWZWRHBUVBHh/+8+vFG1As3EOQGvjvpJYeXnVr2T3D2gb T5CjRm5JcSNv+Q0FHEdYRwawmxZuhowoc0Wd8JZayJuwdAy8ROOjxhIQuBNAqfVZ 7zt1qCZmCeYaI4JnpTPlVKkYjcY/v+cnHBz63kwysG6Ui0lIGro+MsvPKkUllVvl UNrIZtoPQoytZpEIaapXW+co9w== -----END CERTIFICATE-----Generated at Thu Sep 24 17:20:44 2026 by rpki-client