$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft File: D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json) Hash identifier: eGsoaw5LA31eYcobN0R8p8eJN3YfkRdXuyreIzzzJI4= Subject key identifier: 19:C5:F6:4F:57:75:D5:A4:05:47:B7:2E:76:24:7A:2D:ED:FF:A2:50 Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft Manifest number: 02A3 Signing time: Fri 09 Oct 2026 02:03:37 +0000 Manifest this update: Fri 09 Oct 2026 02:03:37 +0000 Manifest next update: Fri 16 Oct 2026 02:03:37 +0000 Files and hashes: 1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: EI2Wwu0cqT5zYRigJwJ64VfumaTcNaVpR34MMomvU/0=) 2: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (hash: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=) 3: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (hash: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Validity Not Before: Oct 9 02:03:37 2026 GMT Not After : Oct 16 02:03:37 2026 GMT Subject: CN=6ac84b79-5262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:48:c6:b9:a6:c0:a2:02:51:7e:5f:79:a5:76: 42:91:3f:b9:7b:97:cf:2b:19:ca:8c:7e:52:69:50: d4:1c:be:69:e8:e2:18:3b:c3:a2:10:ca:61:3a:fb: a4:db:5f:b3:37:15:75:3a:e1:58:d4:29:0c:ec:ef: 44:e5:a5:36:0e:a4:89:86:51:30:e9:5c:bc:48:25: 99:ed:82:ad:80:5a:ca:c6:6f:ad:c0:66:c1:d1:4f: 35:20:36:8c:1b:e9:4e:9b:a6:87:01:52:4f:df:fa: f2:10:8f:85:a6:23:13:48:14:ec:6b:e6:67:c2:ea: 83:b5:76:aa:91:67:95:f3:47:cb:d8:fa:67:38:8d: 0a:13:87:76:26:2a:a2:0b:ef:ef:74:86:7d:95:1d: 1d:f6:01:84:d9:2b:a2:2f:81:51:04:b5:8c:d3:92: 6f:ee:d3:a1:11:60:9d:63:3a:2c:78:2c:2b:95:29: 1a:5b:b9:ce:16:0b:a9:18:6e:e7:b1:51:3c:5f:8b: 05:f0:66:34:f7:35:6f:2e:9e:a3:a4:cd:c0:ab:19: a4:47:d9:94:4e:7f:2a:79:fe:a0:78:3a:db:91:ac: 0b:b7:c6:ef:da:79:f5:af:60:55:bb:55:e1:ba:4e: d4:20:87:6b:60:4f:74:a6:74:9d:2c:9e:11:a4:7d: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C5:F6:4F:57:75:D5:A4:05:47:B7:2E:76:24:7A:2D:ED:FF:A2:50 X509v3 Authority Key Identifier: keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:66:71:df:f5:d9:07:9a:cb:24:62:b6:9e:ff:a0:41:db:3d: 1a:4d:5d:03:b0:5f:e1:ec:fb:4f:6a:23:1e:25:75:22:58:08: 35:f0:62:e5:3a:47:09:ac:51:1b:01:b9:e9:26:79:ef:13:17: 26:1e:d3:b5:a3:44:41:75:2d:53:69:de:50:c1:d7:d4:8b:e8: 66:c6:89:27:7d:2b:fb:07:b8:ed:43:7a:11:88:51:51:78:a1: 54:68:40:cf:b2:f7:63:03:21:a6:31:53:62:38:db:90:61:38: 7a:85:6c:a7:34:63:e7:84:fc:6a:7a:f4:22:6c:98:6d:6d:26: ec:d5:dc:42:74:c1:37:7f:4d:6b:61:97:2e:7b:c2:6e:d2:a4: af:3a:9c:10:8f:2f:02:9f:91:6b:05:e3:34:cc:49:2d:5e:8d: ae:b4:bd:fe:0d:3e:a3:e8:74:3e:da:fc:a6:b0:05:3b:0f:7a: 41:44:59:c9:66:b6:01:05:8d:42:6e:26:90:b1:1b:c0:4c:3c: d6:88:81:ff:dc:5d:d3:3b:ba:0e:bb:63:8c:6a:71:0f:75:0f: 6e:f8:95:c6:38:bf:35:26:e3:07:8e:6e:1e:64:00:2e:77:32: ba:8a:f2:1e:02:93:00:38:78:72:31:07:1d:6a:d0:46:8e:7a: a2:e6:08:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKDBGOTA2OTJBMUVFRkU3RjBBMUFDNjhCNUUxQUMwOUY3 MDI2OTcxQ0MwHhcNMjYxMDA5MDIwMzM3WhcNMjYxMDE2MDIwMzM3WjAYMRYwFAYD VQQDEw02YWM4NGI3OS01MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg0jGuabAogJRfl95pXZCkT+5e5fPKxnKjH5SaVDUHL5p6OIYO8OiEMphOvuk 21+zNxV1OuFY1CkM7O9E5aU2DqSJhlEw6Vy8SCWZ7YKtgFrKxm+twGbB0U81IDaM G+lOm6aHAVJP3/ryEI+FpiMTSBTsa+ZnwuqDtXaqkWeV80fL2PpnOI0KE4d2Jiqi C+/vdIZ9lR0d9gGE2SuiL4FRBLWM05Jv7tOhEWCdYzoseCwrlSkaW7nOFgupGG7n sVE8X4sF8GY09zVvLp6jpM3AqxmkR9mUTn8qef6geDrbkawLt8bv2nn1r2BVu1Xh uk7UIIdrYE90pnSdLJ4RpH3zkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnF9k9X ddWkBUe3LnYkei3t/6JQMB8GA1UdIwQYMBaAFA+QaSoe7+fwoaxoteGsCfcCaXHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9DRkEzNDA5QUJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVfQ2hyR2kxNGF3Sjl3SnBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1QnBLaDd2NV9DaHJHaTE0YXdKOXdKcGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9DRkEzNDA5QUJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVf Q2hyR2kxNGF3Sjl3SnBjY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0GZx3/XZB5rLJGK2nv+gQds9Gk1dA7Bf4ez7T2ojHiV1IlgINfBi5TpHCaxR GwG56SZ57xMXJh7TtaNEQXUtU2neUMHX1IvoZsaJJ30r+we47UN6EYhRUXihVGhA z7L3YwMhpjFTYjjbkGE4eoVspzRj54T8anr0ImyYbW0m7NXcQnTBN39Na2GXLnvC btKkrzqcEI8vAp+RawXjNMxJLV6NrrS9/g0+o+h0Ptr8prAFOw96QURZyWa2AQWN Qm4mkLEbwEw81oiB/9xd0zu6DrtjjGpxD3UPbviVxji/NSbjB45uHmQALncyuory HgKTADh4cjEHHWrQRo56ouYIfg== -----END CERTIFICATE-----Generated at Sat Oct 10 00:34:03 2026 by rpki-client