$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json) Hash identifier: mt4x32ZYdwkHMJCQPHJMwwLT2Cd2ruASI/sxYQXpgqU= Subject key identifier: BD:1E:2F:59:3B:AC:37:B2:88:BF:FC:3B:6C:64:F4:C8:41:62:02:5A Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft Manifest number: 0137 Signing time: Wed 23 Sep 2026 05:25:38 +0000 Manifest this update: Wed 23 Sep 2026 05:25:38 +0000 Manifest next update: Wed 30 Sep 2026 05:25:38 +0000 Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: hIrJm43A9gjjDn3cES6cnYJP7qhsj2ERe9bM3tiPbkQ=) 2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=) 3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=) 4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Sep 23 05:25:38 2026 GMT Not After : Sep 30 05:25:38 2026 GMT Subject: CN=6ab362d2-6b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:9f:ce:0d:f3:3f:92:9b:49:ac:c9:30:7a: 83:e2:a3:55:54:14:8e:74:ea:7e:38:08:e5:39:fd: 86:3b:1e:6f:f5:5e:66:58:4f:bf:af:a1:35:f8:5d: a9:e3:4a:a3:41:12:d5:e5:e0:a2:2f:d5:23:3b:0b: fe:94:72:52:68:3b:96:cb:44:db:42:7f:35:0a:0e: 3f:ba:88:9b:01:3a:19:0e:d2:ff:16:7d:93:5c:4e: c9:c3:1d:c5:17:d8:94:e9:f7:fd:07:65:2a:9d:ba: e7:b9:66:75:dc:22:42:6d:ed:9b:ac:54:20:c0:cd: e6:4d:ad:30:5d:bb:ab:33:5a:ab:2d:b8:d9:6d:3a: 22:b7:91:25:b7:2b:d3:7c:64:b7:0b:8e:ed:c4:41: 90:d7:ff:a2:5c:8f:51:22:b5:16:99:0f:63:1b:60: 37:d3:cc:3f:3a:6e:2a:a8:d9:a0:36:e0:5f:8f:81: 15:92:62:e2:e7:08:12:4b:5b:04:0a:68:fb:7e:bc: 1f:10:22:81:4b:4f:3f:7c:3a:0f:dc:86:01:32:f6: 9b:20:c8:70:24:98:d6:91:ab:53:83:dd:6e:85:f9: 2f:64:15:07:87:36:70:d7:af:e0:33:35:28:4b:bc: 64:84:17:0a:04:b9:35:88:0f:6c:4a:b5:59:bb:d0: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1E:2F:59:3B:AC:37:B2:88:BF:FC:3B:6C:64:F4:C8:41:62:02:5A X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b9:9c:53:1d:ae:bf:25:11:7d:2c:eb:2e:63:da:a9:94:99: d2:8f:b9:c3:5b:75:e5:03:88:05:5f:2f:e5:dc:73:f2:a7:ff: 89:4e:2d:03:68:f1:ed:b6:42:d3:f7:1e:68:7f:39:f4:f6:fd: 3d:81:05:49:e5:b1:4f:c5:2a:82:82:bd:20:59:6d:db:bc:1f: 50:6d:8d:ed:d9:a2:64:10:a7:0b:eb:55:12:de:a2:89:c2:5b: b5:93:a7:1e:4c:6e:8f:0e:ba:96:14:b4:a8:7b:ec:6a:6c:1b: 66:cf:ce:0e:11:da:d5:ae:e5:3e:0b:ad:86:85:3c:f7:88:59: d2:5f:c2:c3:0f:8d:f1:7d:52:a2:47:25:78:5e:dc:0d:1c:6b: 3a:2b:0b:04:bd:73:88:d2:f0:88:3c:89:d6:15:ea:16:d7:df: fa:6a:5d:46:3d:74:f0:ba:f9:82:91:cd:dd:43:c9:dc:d6:2a: 8a:c3:51:c4:75:b2:07:90:bd:59:ff:e0:4b:38:f5:0f:ad:16: fa:a2:4f:1c:e2:87:21:c1:05:91:3f:08:c7:db:0c:93:67:2b: d5:80:97:bf:50:34:15:0f:c5:f4:8d:4f:21:12:e2:c8:2b:b0: 65:40:ef:0e:c2:46:21:b3:29:5b:c8:26:b0:6e:2c:da:85:b3: 7b:ab:b1:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4RkExMTAvBgNVBAUTKDBCOTIzN0UzQjA4NkI1OEMzQ0Q5Q0U2RkQ0OUFDMjYx RjdENTI1QTMwHhcNMjYwOTIzMDUyNTM4WhcNMjYwOTMwMDUyNTM4WjAYMRYwFAYD VQQDEw02YWIzNjJkMi02YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPqfzg3zP5KbSazJMHqD4qNVVBSOdOp+OAjlOf2GOx5v9V5mWE+/r6E1+F2p 40qjQRLV5eCiL9UjOwv+lHJSaDuWy0TbQn81Cg4/uoibAToZDtL/Fn2TXE7Jwx3F F9iU6ff9B2UqnbrnuWZ13CJCbe2brFQgwM3mTa0wXburM1qrLbjZbToit5EltyvT fGS3C47txEGQ1/+iXI9RIrUWmQ9jG2A308w/Om4qqNmgNuBfj4EVkmLi5wgSS1sE Cmj7frwfECKBS08/fDoP3IYBMvabIMhwJJjWkatTg91uhfkvZBUHhzZw16/gMzUo S7xkhBcKBLk1iA9sSrVZu9DqvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0eL1k7 rDeyiL/8O2xk9MhBYgJaMB8GA1UdIwQYMBaAFAuSN+OwhrWMPNnOb9SawmH31SWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhGQS9EMzdGNjI1Q0U3 M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZdzgyYzV2MUpyQ1lmZlZK YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkphTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhGQS9EMzdGNjI1Q0U3M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZ dzgyYzV2MUpyQ1lmZlZKYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrmcUx2uvyURfSzrLmPaqZSZ0o+5w1t15QOIBV8v5dxz8qf/iU4tA2jx7bZC 0/ceaH859Pb9PYEFSeWxT8UqgoK9IFlt27wfUG2N7dmiZBCnC+tVEt6iicJbtZOn Hkxujw66lhS0qHvsamwbZs/ODhHa1a7lPguthoU894hZ0l/Cww+N8X1SokcleF7c DRxrOisLBL1ziNLwiDyJ1hXqFtff+mpdRj108Lr5gpHN3UPJ3NYqisNRxHWyB5C9 Wf/gSzj1D60W+qJPHOKHIcEFkT8Ix9sMk2cr1YCXv1A0FQ/F9I1PIRLiyCuwZUDv DsJGIbMpW8gmsG4s2oWze6uxPg== -----END CERTIFICATE-----Generated at Thu Sep 24 19:30:04 2026 by rpki-client