$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft File: nID3XsZz_EiUE3dEZP47gW1LrsU.mft (raw, json) Hash identifier: Tq1nuxjwpzD9fVHTvqauU9yParMzSSp7OC2NF7Ms898= Subject key identifier: 21:0E:AE:B0:70:8D:D9:8B:85:0B:5A:19:ED:22:DF:34:21:F5:D9:54 Authority key identifier: 9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5 Certificate issuer: /CN=A91FB5C6/serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft Manifest number: 5A Signing time: Tue 29 Sep 2026 08:46:07 +0000 Manifest this update: Tue 29 Sep 2026 08:46:06 +0000 Manifest next update: Tue 06 Oct 2026 08:46:06 +0000 Files and hashes: 1: nID3XsZz_EiUE3dEZP47gW1LrsU.crl (hash: bEkFn9jGymiIx3AhwDrCtO8E3oDWdpBf0cKM8CefirI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 08:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5C6, serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5 Validity Not Before: Sep 29 08:46:06 2026 GMT Not After : Oct 6 08:46:06 2026 GMT Subject: CN=6abb7acf-58d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:59:34:05:ba:ea:c4:d8:b0:8a:a3:7a:6f: 9b:6b:de:6b:d9:bb:28:47:e5:a2:bd:be:b8:43:0e: 66:c2:4c:88:78:9d:c0:a8:7f:7c:e9:6e:1b:d7:0a: 54:dc:63:26:65:06:13:91:28:f5:23:e9:52:02:c9: 84:1a:5c:8d:c4:34:5b:b2:c6:2a:ab:d0:8e:14:10: 17:a8:2e:7a:d9:da:97:1b:a1:3d:79:45:b8:9b:d5: d1:03:9b:e9:ab:7f:4d:66:d8:19:f2:46:92:55:34: 2f:f9:71:46:77:02:5b:f9:e7:aa:b5:ac:57:66:33: 79:2c:4e:8c:8d:4a:37:ba:96:d5:16:4d:5b:b0:25: 12:89:ea:9b:4e:a8:48:4f:d0:93:d0:ed:00:62:1b: 3d:a2:f3:0a:55:5e:05:c6:69:a5:84:71:0d:5e:88: af:6a:eb:95:76:b8:04:31:34:7a:3c:22:55:2c:e3: 2a:45:de:e7:fe:00:ce:0a:eb:6d:4e:88:e5:89:09: db:66:0b:80:ce:a4:9a:35:cc:83:ec:ec:3b:8f:c2: 89:3a:c8:c7:c8:7e:ed:4f:5c:3c:c5:da:85:35:c3: 03:23:05:f9:dd:6c:3c:82:38:e1:e5:ce:1f:6c:b9: b0:27:c7:86:cf:52:54:f2:00:13:9a:37:a6:b4:61: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0E:AE:B0:70:8D:D9:8B:85:0B:5A:19:ED:22:DF:34:21:F5:D9:54 X509v3 Authority Key Identifier: keyid:9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ba:3e:99:48:c2:2f:7b:07:e2:26:8d:ee:70:a3:8f:50:d1: 79:ca:c2:99:00:2f:ad:ff:f0:43:80:0d:f2:db:c8:1b:32:81: 4c:1a:8a:b3:60:be:23:1c:ff:25:c8:0b:59:f2:71:40:a7:43: 53:7e:6c:84:5b:56:3c:e2:1e:87:50:ba:d5:de:85:49:3d:4b: 93:fb:21:f2:8e:50:fd:a6:c9:eb:2a:c7:5e:e3:6e:60:b1:85: ce:bd:80:6c:a3:7c:51:76:0e:1c:2a:72:9c:f0:db:9f:fd:dc: 00:90:2a:a1:c4:1b:a8:cc:6d:b3:f1:5d:1e:3c:16:20:6f:46: d3:5d:dc:2e:72:ee:25:cf:0d:f6:f9:a5:1b:23:63:bd:73:ef: cb:0c:7d:01:30:7e:59:ff:1c:4d:7c:13:75:c7:28:e6:cf:b4: 2a:3c:23:23:0c:56:57:5f:e4:e0:3b:90:c3:ec:a4:2c:b2:84: 85:45:ff:47:3d:3e:99:65:6b:34:5b:87:25:e0:75:19:cd:5b: 1f:5e:98:50:47:3b:4a:d0:70:6c:93:8a:2a:65:93:69:92:00: 0e:b0:68:80:03:17:29:9c:1f:db:bc:43:ee:d6:6d:87:66:84: 96:74:79:02:77:86:7a:cb:9b:b9:61:82:79:50:16:e4:1f:fb: 10:0f:db:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjVDNjExMC8GA1UEBRMoOUM4MEY3NUVDNjczRkM0ODk0MTM3NzQ0NjRGRTNCODE2 RDRCQUVDNTAeFw0yNjA5MjkwODQ2MDZaFw0yNjEwMDYwODQ2MDZaMBgxFjAUBgNV BAMTDTZhYmI3YWNmLTU4ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8glk0BbrqxNiwiqN6b5tr3mvZuyhH5aK9vrhDDmbCTIh4ncCof3zpbhvXClTc YyZlBhORKPUj6VICyYQaXI3ENFuyxiqr0I4UEBeoLnrZ2pcboT15Rbib1dEDm+mr f01m2BnyRpJVNC/5cUZ3Alv556q1rFdmM3ksToyNSje6ltUWTVuwJRKJ6ptOqEhP 0JPQ7QBiGz2i8wpVXgXGaaWEcQ1eiK9q65V2uAQxNHo8IlUs4ypF3uf+AM4K621O iOWJCdtmC4DOpJo1zIPs7DuPwok6yMfIfu1PXDzF2oU1wwMjBfndbDyCOOHlzh9s ubAnx4bPUlTyABOaN6a0YYQ9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIQ6usHCN 2YuFC1oZ7SLfNCH12VQwHwYDVR0jBBgwFoAUnID3XsZz/EiUE3dEZP47gW1LrsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNUM2L0I2MzU5MURFMzI5 QzExRjE5NkQ3RUJDQ0NCODMzNzczL25JRDNYc1p6X0VpVUUzZEVaUDQ3Z1cxTHJz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbklEM1hzWnpfRWlVRTNkRVpQNDdnVzFMcnNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NUM2L0I2MzU5MURFMzI5QzExRjE5NkQ3RUJDQ0NCODMzNzczL25JRDNYc1p6X0Vp VUUzZEVaUDQ3Z1cxTHJzVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCcuj6ZSMIvewfiJo3ucKOPUNF5ysKZAC+t//BDgA3y28gbMoFMGoqzYL4jHP8l yAtZ8nFAp0NTfmyEW1Y84h6HULrV3oVJPUuT+yHyjlD9psnrKsde425gsYXOvYBs o3xRdg4cKnKc8Nuf/dwAkCqhxBuozG2z8V0ePBYgb0bTXdwucu4lzw32+aUbI2O9 c+/LDH0BMH5Z/xxNfBN1xyjmz7QqPCMjDFZXX+TgO5DD7KQssoSFRf9HPT6ZZWs0 W4cl4HUZzVsfXphQRztK0HBsk4oqZZNpkgAOsGiAAxcpnB/bvEPu1m2HZoSWdHkC d4Z6y5u5YYJ5UBbkH/sQD9tC -----END CERTIFICATE-----Generated at Thu Oct 1 12:35:16 2026 by rpki-client