$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: URydUaiPumocULEFhEsG/JTJ45rtsPBzgAXGdciAG+A= Subject key identifier: 6D:BC:D4:2D:10:DE:E9:0C:F4:29:61:F0:F4:6A:EF:8A:56:E3:F5:88 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 05A5 Signing time: Fri 04 Sep 2026 22:57:36 +0000 Manifest this update: Fri 04 Sep 2026 22:57:36 +0000 Manifest next update: Fri 11 Sep 2026 22:57:36 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: XzNkjJkwxA06/5rXWfQjROipmv1Ctj0gaRZ+ypHRaVI=) 2: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) 3: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) 4: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1465 (0x5b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Sep 4 22:57:36 2026 GMT Not After : Sep 11 22:57:36 2026 GMT Subject: CN=6a9b4ce0-19c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:79:3d:04:17:25:cd:b2:dc:ca:16:d7:32: 06:c4:a5:74:3a:27:b2:77:36:a0:24:45:22:63:9d: 3e:2c:c1:d0:77:ed:cb:79:c1:ad:bf:c3:ec:fb:f4: d6:17:62:e0:2a:32:04:8a:38:e0:27:af:f0:98:e4: d3:68:cc:78:d9:82:29:3f:ba:f3:e4:c7:c9:fc:6b: 69:3b:95:b5:a9:ff:d1:60:26:3a:a0:0b:e5:03:bb: d1:c4:c4:41:3d:67:2c:55:a8:a6:65:51:a6:4d:3f: 77:21:64:ea:d5:ea:68:c5:ba:cf:20:44:d0:d8:50: f0:f0:b3:14:97:6a:cc:d3:9e:0c:07:b0:d7:eb:de: c2:64:99:9b:86:e6:05:c4:d1:aa:a3:36:f7:5c:90: 80:6c:6e:86:04:a0:35:f7:c9:b8:93:63:3d:9f:29: ee:41:f3:21:4f:ab:0f:83:75:93:a9:6a:ca:a4:40: 8d:05:12:5d:e9:d2:a8:79:25:cc:48:51:48:a4:02: 51:df:5d:cb:71:b9:b8:73:f1:bc:a6:f0:e5:b1:62: 09:c0:6f:ed:bb:ef:f5:03:e3:3d:97:67:0b:5e:ec: 7d:22:b5:93:65:6c:7e:43:e6:15:ed:01:6d:c5:95: 64:03:79:80:72:02:d3:ea:24:7b:41:01:60:78:41: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BC:D4:2D:10:DE:E9:0C:F4:29:61:F0:F4:6A:EF:8A:56:E3:F5:88 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:35:18:2d:52:2b:69:4f:69:22:bb:65:52:ea:fd:50:56:8d: 88:e9:26:b3:18:00:9b:ac:69:b7:b6:89:66:b2:8d:d8:69:dd: a1:43:24:3e:14:6b:59:71:51:4e:2b:18:16:64:75:0e:07:76: d8:4e:b3:fd:08:c8:d1:95:fb:c1:a8:43:76:91:f4:ed:a9:0a: a3:b4:f7:d2:31:88:d6:28:7e:98:ea:5e:80:06:ce:3d:cd:59: 24:d6:0c:05:af:f8:d2:f2:75:b4:9c:a2:b3:0f:0b:3d:16:48: 03:35:b6:0b:4c:83:be:a8:49:35:2a:07:7a:ce:53:72:50:09: 35:21:1e:de:be:70:35:2e:6e:37:d8:cd:2d:fb:98:5d:17:de: 8f:6c:e5:90:4f:aa:cd:ae:c0:0a:0c:19:c0:5c:2c:9f:6f:62: 7b:4e:11:15:0e:6e:3a:90:66:cd:90:70:c1:7f:b5:c1:b8:91: 1d:6d:1f:15:b1:7f:d0:13:84:8f:78:af:4f:03:bb:60:4b:df: 57:08:33:ba:79:62:6f:76:ee:ea:dd:aa:24:3c:73:0c:45:39: ac:f7:7c:c5:a1:85:b2:fe:a4:95:8d:c5:69:62:27:e7:fc:fd: ca:46:e1:fa:b2:6c:f2:06:58:fc:2c:7f:5d:76:5b:a8:a1:7b: 55:19:1d:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYwOTA0MjI1NzM2WhcNMjYwOTExMjI1NzM2WjAYMRYwFAYD VQQDEw02YTliNGNlMC0xOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV55PQQXJc2y3MoW1zIGxKV0OieydzagJEUiY50+LMHQd+3LecGtv8Ps+/TW F2LgKjIEijjgJ6/wmOTTaMx42YIpP7rz5MfJ/GtpO5W1qf/RYCY6oAvlA7vRxMRB PWcsVaimZVGmTT93IWTq1epoxbrPIETQ2FDw8LMUl2rM054MB7DX697CZJmbhuYF xNGqozb3XJCAbG6GBKA198m4k2M9nynuQfMhT6sPg3WTqWrKpECNBRJd6dKoeSXM SFFIpAJR313Lcbm4c/G8pvDlsWIJwG/tu+/1A+M9l2cLXux9IrWTZWx+Q+YV7QFt xZVkA3mAcgLT6iR7QQFgeEGLxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG281C0Q 3ukM9Clh8PRq74pW4/WIMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhzUYLVIraU9pIrtlUur9UFaNiOkmsxgAm6xpt7aJZrKN2GndoUMkPhRrWXFR TisYFmR1Dgd22E6z/QjI0ZX7wahDdpH07akKo7T30jGI1ih+mOpegAbOPc1ZJNYM Ba/40vJ1tJyisw8LPRZIAzW2C0yDvqhJNSoHes5TclAJNSEe3r5wNS5uN9jNLfuY XRfej2zlkE+qza7ACgwZwFwsn29ie04RFQ5uOpBmzZBwwX+1wbiRHW0fFbF/0BOE j3ivTwO7YEvfVwgzunlib3bu6t2qJDxzDEU5rPd8xaGFsv6klY3FaWIn5/z9ykbh +rJs8gZY/Cx/XXZbqKF7VRkduQ== -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:05 2026 by rpki-client