$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: 0oLpZnssacQA82fjJbN8OHiqpbMQAUr/Ja/bBPr6nNI= Subject key identifier: 03:84:A8:4B:8F:EF:9C:88:BF:4C:09:AF:9F:95:A8:BB:9F:34:AA:07 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 05BE Signing time: Sat 24 Oct 2026 23:04:45 +0000 Manifest this update: Sat 24 Oct 2026 23:04:44 +0000 Manifest next update: Sat 31 Oct 2026 23:04:44 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: WEEzzivt0dMEWTSVUCtWH7r08Xu4G1ZX9aB0JZdOO/0=) 2: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) 3: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) 4: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Oct 24 23:04:44 2026 GMT Not After : Oct 31 23:04:44 2026 GMT Subject: CN=6add398d-3790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:d6:9d:22:f9:6d:73:00:44:80:23:4a:c4: e7:15:de:63:bd:dc:34:24:3e:a1:48:f1:45:fe:16: 49:b5:dc:1d:d3:c4:6f:c2:da:3d:30:45:1a:39:42: ba:98:ec:20:52:b4:83:1c:e1:95:82:45:ca:77:04: 08:bd:7a:bd:61:2d:d7:85:d8:c6:89:bb:df:52:77: 67:ee:0f:31:f8:15:b9:75:fc:f8:98:3d:01:bb:2b: ef:2d:7f:f5:d5:e0:c5:d2:c9:b1:40:77:21:02:d9: ed:01:1e:bb:e5:3d:e9:60:ea:10:f7:40:98:87:7c: ee:d1:12:2e:ff:97:a6:de:76:44:0c:4b:c4:cf:2b: ac:41:8c:af:05:d7:e0:cc:85:33:d4:d9:38:5a:bb: 36:62:40:e6:90:22:cb:6b:66:cc:40:a2:05:6f:d7: dc:37:45:dd:65:34:5f:43:13:5b:00:8a:98:a2:e3: 74:c6:bc:f7:f2:71:c6:42:51:2d:65:88:82:b6:15: cb:ca:48:53:7a:fa:7d:db:cf:ff:e9:c1:7a:83:3c: 7e:cf:02:1a:46:6f:f4:30:9b:67:f5:74:8d:f9:94: 64:3d:fd:c3:cf:49:b0:12:63:e1:ea:e7:7e:bb:fb: c3:3e:b5:d3:bf:d2:bd:e9:78:25:77:f0:99:b5:3e: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:84:A8:4B:8F:EF:9C:88:BF:4C:09:AF:9F:95:A8:BB:9F:34:AA:07 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b0:55:f2:cc:30:bf:7c:43:82:01:66:40:cd:0c:3b:65:f5: f5:1d:a9:e2:10:90:bc:16:36:6c:f4:81:6e:78:6e:79:ab:10: 33:f1:4c:c4:17:6b:70:13:5f:68:c8:2d:b1:50:04:22:e3:6b: e5:2c:a8:cb:20:b5:71:aa:df:7a:fc:3b:c6:22:f6:4e:43:df: eb:98:ed:fb:8f:e6:d6:c5:41:27:fa:4f:d8:9b:b7:4d:81:5b: 62:38:76:fa:a5:65:9c:94:ac:32:73:ed:a8:20:aa:8d:7c:f2: 12:f8:7c:47:90:c8:0d:d8:6f:bb:f2:58:34:f9:85:d2:f8:4f: fc:16:f9:3c:80:39:e5:20:4a:47:49:a8:3c:69:48:d2:21:94: 97:03:9a:05:9e:ff:d8:c3:96:1e:d3:79:13:d9:93:a3:d6:e8: 7d:d9:f9:22:24:b8:f3:c2:29:02:33:58:7e:6c:be:fa:09:86: 8a:21:fc:f8:00:91:be:96:f2:5a:d8:a0:65:4a:e2:b5:97:98: 0d:bc:75:30:f9:51:ab:ad:cc:1c:d3:f5:a8:aa:bd:90:de:a2: 40:3e:96:65:b8:46:8b:33:64:7d:a2:b7:0d:e7:77:df:f6:7a: 66:87:e4:aa:37:19:3f:1d:e9:bf:3a:c3:96:ef:88:42:d3:d9: 33:2b:a1:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYxMDI0MjMwNDQ0WhcNMjYxMDMxMjMwNDQ0WjAYMRYwFAYD VQQDEw02YWRkMzk4ZC0zNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3bWnSL5bXMARIAjSsTnFd5jvdw0JD6hSPFF/hZJtdwd08Rvwto9MEUaOUK6 mOwgUrSDHOGVgkXKdwQIvXq9YS3XhdjGibvfUndn7g8x+BW5dfz4mD0BuyvvLX/1 1eDF0smxQHchAtntAR675T3pYOoQ90CYh3zu0RIu/5em3nZEDEvEzyusQYyvBdfg zIUz1Nk4Wrs2YkDmkCLLa2bMQKIFb9fcN0XdZTRfQxNbAIqYouN0xrz38nHGQlEt ZYiCthXLykhTevp928//6cF6gzx+zwIaRm/0MJtn9XSN+ZRkPf3Dz0mwEmPh6ud+ u/vDPrXTv9K96Xgld/CZtT56nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOEqEuP 75yIv0wJr5+VqLufNKoHMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANLBV8swwv3xDggFmQM0MO2X19R2p4hCQvBY2bPSBbnhueasQM/FMxBdrcBNf aMgtsVAEIuNr5SyoyyC1carfevw7xiL2TkPf65jt+4/m1sVBJ/pP2Ju3TYFbYjh2 +qVlnJSsMnPtqCCqjXzyEvh8R5DIDdhvu/JYNPmF0vhP/Bb5PIA55SBKR0moPGlI 0iGUlwOaBZ7/2MOWHtN5E9mTo9bofdn5IiS488IpAjNYfmy++gmGiiH8+ACRvpby WtigZUritZeYDbx1MPlRq63MHNP1qKq9kN6iQD6WZbhGizNkfaK3Ded33/Z6Zofk qjcZPx3pvzrDlu+IQtPZMyuhEQ== -----END CERTIFICATE-----Generated at Mon Oct 26 07:31:37 2026 by rpki-client