$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: Q7YlbzJbBWG5Jmw3cqsvCqhUKwdLLhaGiMT/CG72HJs= Subject key identifier: 4E:B3:00:6F:87:BF:4C:FF:4C:6C:FF:D9:35:35:BE:68:6C:86:9B:72 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0ED8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0EC1 Signing time: Tue 20 Oct 2026 14:41:18 +0000 Manifest this update: Tue 20 Oct 2026 14:41:17 +0000 Manifest next update: Tue 27 Oct 2026 14:41:17 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 1M6fQcE6XIhd0x7sIG5HWPzmc/b5oNu7l6WXWvX3pOs=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3800 (0xed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Oct 20 14:41:17 2026 GMT Not After : Oct 27 14:41:17 2026 GMT Subject: CN=6ad77d8e-89bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:03:7b:86:ad:c3:6f:38:9b:b9:70:ca:09: f9:a3:cc:84:bc:f8:1d:1a:17:c0:0d:5b:87:00:15: f9:a0:dc:01:7b:13:f2:13:f7:2e:b7:90:ad:b8:ee: 75:c4:f3:74:98:8d:da:2f:35:54:a3:68:d7:fb:d2: 2e:96:f9:23:3a:f5:8a:2d:a4:ec:54:e4:94:f5:86: b8:97:ca:5f:b4:25:5a:de:67:d6:6a:68:84:df:02: 61:c2:b7:13:23:fa:f4:32:79:31:28:1a:29:00:07: f6:d0:5b:1a:d7:3c:0d:63:a4:13:e5:90:3a:22:0d: f5:4e:db:08:29:7f:67:9a:94:06:52:6f:cb:ba:94: b9:33:70:59:8a:73:b0:9f:44:38:af:28:a0:c8:76: c4:98:41:24:da:a3:41:6e:36:b3:35:47:d7:fc:e6: fa:d6:36:ec:e5:d0:77:75:72:69:e8:25:25:85:1b: 37:c9:3b:48:ef:37:e9:a6:42:48:1c:fc:64:db:00: 60:bc:84:7f:71:c5:bf:d9:54:32:e3:05:f3:7a:09: ce:b1:b8:18:f7:0f:cf:7b:4e:6e:3a:c7:5e:d6:03: f8:10:6d:3e:4c:af:0c:06:84:b9:f7:14:e4:db:8d: f0:cc:45:4d:6f:c4:02:a6:7d:3c:0d:a1:a8:1d:88: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B3:00:6F:87:BF:4C:FF:4C:6C:FF:D9:35:35:BE:68:6C:86:9B:72 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ef:b8:7a:ca:f1:bd:c0:0a:1a:f9:c5:84:a2:8d:e1:6a:1c: 04:d0:c2:ef:1a:70:86:d8:19:27:dd:34:41:a2:28:ca:7c:33: 6b:8c:0b:41:84:fa:11:c9:46:f0:a1:15:a8:e9:1f:f1:10:21: c3:95:4d:9f:e9:14:5f:eb:e1:7b:eb:cb:ef:be:47:86:f5:f9: ac:51:21:75:9f:13:dd:bf:7d:f7:84:fc:09:35:a4:a0:37:26: b7:c8:91:e0:e3:ff:6a:d5:a5:d7:c1:95:93:a1:dd:18:31:40: 42:df:4c:04:86:e1:2e:eb:ee:c6:7f:26:cf:3a:7b:af:be:d2: 81:fd:b8:aa:e1:35:82:82:81:d5:1f:52:9c:b7:b9:53:d9:e0: 14:19:a8:3f:2c:bb:27:38:f8:69:40:b8:83:65:04:f0:d4:19: 5e:40:21:64:dc:5d:2e:3a:be:94:07:92:35:3b:98:11:f3:57: 59:c7:92:c5:13:04:95:60:9c:f4:b4:4e:a6:02:0a:07:69:75: f0:b2:8f:0f:90:67:6a:fa:e1:e7:22:bc:e1:c1:e5:18:e0:20: 20:26:f3:9d:77:9b:5e:dc:37:84:8e:8c:8b:22:99:14:09:42: d6:eb:59:82:38:92:f6:d7:d4:90:a9:5e:4e:b0:87:99:0b:fc: c7:73:67:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYxMDIwMTQ0MTE3WhcNMjYxMDI3MTQ0MTE3WjAYMRYwFAYD VQQDEw02YWQ3N2Q4ZS04OWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwewDe4atw284m7lwygn5o8yEvPgdGhfADVuHABX5oNwBexPyE/cut5CtuO51 xPN0mI3aLzVUo2jX+9IulvkjOvWKLaTsVOSU9Ya4l8pftCVa3mfWamiE3wJhwrcT I/r0MnkxKBopAAf20Fsa1zwNY6QT5ZA6Ig31TtsIKX9nmpQGUm/LupS5M3BZinOw n0Q4ryigyHbEmEEk2qNBbjazNUfX/Ob61jbs5dB3dXJp6CUlhRs3yTtI7zfppkJI HPxk2wBgvIR/ccW/2VQy4wXzegnOsbgY9w/Pe05uOsde1gP4EG0+TK8MBoS59xTk 243wzEVNb8QCpn08DaGoHYjzWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6zAG+H v0z/TGz/2TU1vmhshptyMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXu+4esrxvcAKGvnFhKKN4WocBNDC7xpwhtgZJ900QaIoynwza4wLQYT6EclG 8KEVqOkf8RAhw5VNn+kUX+vhe+vL775HhvX5rFEhdZ8T3b9994T8CTWkoDcmt8iR 4OP/atWl18GVk6HdGDFAQt9MBIbhLuvuxn8mzzp7r77Sgf24quE1goKB1R9SnLe5 U9ngFBmoPyy7Jzj4aUC4g2UE8NQZXkAhZNxdLjq+lAeSNTuYEfNXWceSxRMElWCc 9LROpgIKB2l18LKPD5Bnavrh5yK84cHlGOAgICbznXebXtw3hI6MiyKZFAlC1utZ gjiS9tfUkKleTrCHmQv8x3Nn7A== -----END CERTIFICATE-----Generated at Wed Oct 21 02:19:59 2026 by rpki-client