$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: G9FnyNaWIgqQe2vTawGTc0k9xEPTznv4lK+jdzkfh5U= Subject key identifier: 3A:B5:5F:48:EA:11:30:20:F1:2F:11:C7:EF:F7:28:66:CE:8C:EE:2B Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 0AA1 Signing time: Fri 02 Oct 2026 19:48:32 +0000 Manifest this update: Fri 02 Oct 2026 19:48:32 +0000 Manifest next update: Fri 09 Oct 2026 19:48:32 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: gO+cleH0K0hSLUMLJ2e+K5qB3VFOQWqwQvoqTbdGeV0=) 2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: EUoTZeexjkbb7zufCQtahAm8AEeFMiE7APDK7et0hJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2741 (0xab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Oct 2 19:48:32 2026 GMT Not After : Oct 9 19:48:32 2026 GMT Subject: CN=6ac00a90-61cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:ce:e5:bb:af:4a:da:b2:e4:ac:0d:3c:04: 69:95:e6:da:d8:a7:57:c6:91:4a:32:c5:87:f8:71: 69:b3:bd:c0:af:69:9b:54:a2:a5:71:2d:01:61:26: 3b:0d:18:da:86:5d:71:cf:2f:b2:5e:a9:e4:32:62: a6:a7:90:a9:38:0b:89:16:75:85:7c:fb:4a:13:77: cc:3b:76:ff:33:c8:52:54:89:50:8b:38:e0:55:cd: 3a:4b:27:f1:68:d3:69:9e:7b:29:80:3d:bf:6c:c5: f9:92:f6:ba:a7:5d:2f:23:18:e6:78:96:1b:87:6f: d8:52:41:41:c4:a6:8e:8c:23:df:9d:ce:2d:08:f5: 7b:c2:2b:82:28:7b:a3:07:e0:50:8d:75:79:e5:fa: 02:c5:ce:db:e2:23:47:6f:dc:8b:c7:c7:22:f4:1f: b7:78:9d:c7:10:57:d6:3e:c6:df:90:6d:3b:4d:20: b9:8d:9a:3e:5a:8d:20:05:c0:4d:4f:88:54:cf:f4: eb:4a:d3:5f:b9:43:3b:05:6c:1e:6e:33:13:ac:29: 68:4c:65:3f:04:04:47:70:9c:b9:0b:c1:78:59:a5: 89:06:e4:22:db:15:60:c5:c3:b8:76:a6:4f:0d:ab: 4b:90:40:26:06:eb:14:99:31:b8:89:28:51:cc:23: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:5F:48:EA:11:30:20:F1:2F:11:C7:EF:F7:28:66:CE:8C:EE:2B X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:db:6a:ef:96:25:90:9f:be:ea:5c:f7:b5:e7:6d:d7:9b:08: fc:c5:42:a6:96:eb:c4:cb:51:d6:ae:9c:4b:55:e2:88:a8:57: 02:ee:02:eb:d5:0d:dc:8b:1d:a4:08:69:2c:da:ec:d4:ef:82: fa:d0:0d:6e:1b:e8:15:6f:35:21:04:eb:41:d6:02:af:ee:e8: ce:5c:2c:10:98:f2:e6:df:b8:ee:09:ba:d0:0c:66:43:ce:06: cb:a1:28:d5:8e:b7:a9:1f:d2:b6:e3:8b:a2:c8:d5:f1:d5:1a: 10:8f:89:46:61:08:c4:e5:63:61:2e:98:b3:8d:29:41:3f:ca: e6:cc:26:c9:f9:46:89:6b:85:3d:4a:ba:bd:dc:c2:7f:78:0d: 02:16:60:4f:b9:da:8e:d2:4f:47:db:b7:26:82:e3:ff:8f:9a: 08:08:74:89:c4:07:38:21:5c:14:41:43:a8:9f:79:2e:32:41: 19:9c:88:7c:b5:40:4d:57:d4:fb:75:7b:6f:40:7c:fc:0b:fb: 71:54:c6:ed:87:5d:0b:fe:f4:85:3e:1b:82:fc:17:ae:6a:83: c2:9d:6b:3a:e6:bb:82:6a:f5:2e:6e:4b:c4:f0:79:6c:1f:89: 52:37:bb:e3:a3:44:b5:be:d2:8e:2a:38:cd:6b:38:85:1e:f7: e7:f3:ca:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjYxMDAyMTk0ODMyWhcNMjYxMDA5MTk0ODMyWjAYMRYwFAYD VQQDEw02YWMwMGE5MC02MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRjO5buvStqy5KwNPARpleba2KdXxpFKMsWH+HFps73Ar2mbVKKlcS0BYSY7 DRjahl1xzy+yXqnkMmKmp5CpOAuJFnWFfPtKE3fMO3b/M8hSVIlQizjgVc06Syfx aNNpnnspgD2/bMX5kva6p10vIxjmeJYbh2/YUkFBxKaOjCPfnc4tCPV7wiuCKHuj B+BQjXV55foCxc7b4iNHb9yLx8ci9B+3eJ3HEFfWPsbfkG07TSC5jZo+Wo0gBcBN T4hUz/TrStNfuUM7BWwebjMTrCloTGU/BARHcJy5C8F4WaWJBuQi2xVgxcO4dqZP DatLkEAmBusUmTG4iShRzCMLFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDq1X0jq ETAg8S8Rx+/3KGbOjO4rMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9tq75YlkJ++6lz3tedt15sI/MVCppbrxMtR1q6cS1XiiKhXAu4C69UN3Isd pAhpLNrs1O+C+tANbhvoFW81IQTrQdYCr+7ozlwsEJjy5t+47gm60AxmQ84Gy6Eo 1Y63qR/StuOLosjV8dUaEI+JRmEIxOVjYS6Ys40pQT/K5swmyflGiWuFPUq6vdzC f3gNAhZgT7najtJPR9u3JoLj/4+aCAh0icQHOCFcFEFDqJ95LjJBGZyIfLVATVfU +3V7b0B8/Av7cVTG7YddC/70hT4bgvwXrmqDwp1rOua7gmr1Lm5LxPB5bB+JUje7 46NEtb7Sjio4zWs4hR735/PKjw== -----END CERTIFICATE-----Generated at Sun Oct 4 23:16:33 2026 by rpki-client