$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: veTb2RMaIJbQU/oHAxvZEKPyU7CjseykG0aPAwGNmuY= Subject key identifier: A0:CA:38:BF:5E:90:59:75:59:58:81:AD:2E:44:E0:6B:4C:76:B3:ED Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 011D Signing time: Fri 25 Sep 2026 06:00:07 +0000 Manifest this update: Fri 25 Sep 2026 06:00:06 +0000 Manifest next update: Fri 02 Oct 2026 06:00:06 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: bn1Bn8hs7bvke8DNGzB9ecLIyhazHCr7Rhwz0In6gMc=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: xJEez0DY8AmNVE2VqhZDR/pkwfuh11Vrc1/2qRF3aqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Sep 25 06:00:06 2026 GMT Not After : Oct 2 06:00:06 2026 GMT Subject: CN=6ab60de7-a014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:26:1b:0f:3a:39:81:7a:24:11:ba:7e:45: be:4f:a0:77:6e:9a:99:a1:95:aa:bd:28:ee:c3:6a: 93:66:b9:04:71:aa:46:66:7a:bb:9e:16:47:a6:29: 87:ec:bb:0d:1a:da:20:81:66:82:62:c3:0b:29:a7: 06:9c:70:84:01:e7:2b:92:70:b8:9a:1f:a2:ac:8e: f6:3f:05:3b:d9:c7:58:d2:e5:64:34:4a:1a:48:87: 45:23:6e:e6:ff:22:3d:f7:8a:d4:fd:90:75:fc:ec: 18:14:a5:06:ac:9d:d3:17:29:85:a6:f7:9e:ef:a0: fc:3c:95:23:20:7a:85:7e:24:1a:66:f9:4a:3d:1e: 96:10:34:c3:77:0b:c8:a5:8a:0d:f9:12:01:50:83: 6a:95:5d:48:3a:56:b6:6b:90:74:bf:da:24:27:1c: b9:74:0b:a2:04:87:57:ae:ad:8c:ff:f4:5c:2e:d7: b1:da:e0:d3:26:89:df:b1:09:7e:49:91:69:57:61: 25:e7:65:ed:f9:90:40:63:75:de:0d:0d:08:56:3a: d8:d3:0e:f9:bc:af:2e:02:ea:56:70:ff:ee:cc:d7: 38:90:be:3a:ed:01:2a:0f:93:cb:21:41:0a:68:4f: e6:32:83:3d:0c:e8:00:4e:db:1f:c4:b2:2d:3d:74: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CA:38:BF:5E:90:59:75:59:58:81:AD:2E:44:E0:6B:4C:76:B3:ED X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3f:f9:8c:07:b0:38:05:5f:e1:a2:c2:9f:fc:51:63:91:4b: 3c:38:8e:72:02:01:64:a8:eb:45:c9:aa:69:62:27:a9:d1:f4: b0:9b:17:c4:22:ad:49:c9:0e:e6:32:7e:07:a2:3e:33:79:79: cb:19:ad:50:ed:92:10:50:0b:55:c0:c7:0d:c8:a3:d4:db:b9: 61:3b:eb:53:b7:1e:98:28:84:78:55:34:62:fb:05:0b:e5:ff: d8:6f:cb:16:ec:b1:0b:dd:f9:31:1b:09:41:cb:50:e8:c9:02: 70:4c:55:78:f6:b8:31:76:53:8b:a9:b6:c6:1a:0e:47:b2:8a: 5d:58:10:de:3b:55:ae:e6:35:0f:02:06:aa:bb:03:50:bc:01: f2:1a:ba:d2:21:02:a5:ea:db:6c:30:c5:b1:24:b0:cc:ae:f2: 1a:6a:98:38:39:c1:88:f6:ee:03:95:02:ae:26:e7:66:9a:8c: c2:92:ab:97:3d:5e:af:d6:6a:6a:6f:ce:d8:0d:ca:c2:84:fd: 19:a8:d6:19:ab:57:ba:9b:13:49:56:43:2f:fa:a4:48:54:64: 46:e2:82:8a:d2:a2:45:a6:2a:0b:09:97:31:1a:b5:c9:61:be: f8:84:e1:34:0c:32:ce:1f:b9:1d:f9:af:64:44:39:7c:34:0c: 64:3a:78:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwOTI1MDYwMDA2WhcNMjYxMDAyMDYwMDA2WjAYMRYwFAYD VQQDEw02YWI2MGRlNy1hMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT0mGw86OYF6JBG6fkW+T6B3bpqZoZWqvSjuw2qTZrkEcapGZnq7nhZHpimH 7LsNGtoggWaCYsMLKacGnHCEAecrknC4mh+irI72PwU72cdY0uVkNEoaSIdFI27m /yI994rU/ZB1/OwYFKUGrJ3TFymFpvee76D8PJUjIHqFfiQaZvlKPR6WEDTDdwvI pYoN+RIBUINqlV1IOla2a5B0v9okJxy5dAuiBIdXrq2M//RcLtex2uDTJonfsQl+ SZFpV2El52Xt+ZBAY3XeDQ0IVjrY0w75vK8uAupWcP/uzNc4kL467QEqD5PLIUEK aE/mMoM9DOgATtsfxLItPXRDhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDKOL9e kFl1WViBrS5E4GtMdrPtMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATj/5jAewOAVf4aLCn/xRY5FLPDiOcgIBZKjrRcmqaWInqdH0sJsXxCKtSckO 5jJ+B6I+M3l5yxmtUO2SEFALVcDHDcij1Nu5YTvrU7cemCiEeFU0YvsFC+X/2G/L FuyxC935MRsJQctQ6MkCcExVePa4MXZTi6m2xhoOR7KKXVgQ3jtVruY1DwIGqrsD ULwB8hq60iECperbbDDFsSSwzK7yGmqYODnBiPbuA5UCribnZpqMwpKrlz1er9Zq am/O2A3KwoT9GajWGatXupsTSVZDL/qkSFRkRuKCitKiRaYqCwmXMRq1yWG++ITh NAwyzh+5HfmvZEQ5fDQMZDp4/Q== -----END CERTIFICATE-----Generated at Fri Sep 25 23:58:44 2026 by rpki-client