$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: nH4lYXBrBUx8VgNOMzwR9ls6okubWp/wk1k+RzcjHqs= Subject key identifier: 3E:27:44:8B:F5:1B:38:B5:6C:BC:BC:D7:93:7D:F8:CC:FF:67:68:6E Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 3578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3570 Signing time: Tue 18 Aug 2026 14:54:28 +0000 Manifest this update: Tue 18 Aug 2026 14:54:28 +0000 Manifest next update: Tue 25 Aug 2026 14:54:28 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: 0TLUZb3yhSgZMNdZDBexS0MnIepiJJw7fpfN5HV3LnY=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: k52zzNPlnYvuAvYWIlxb4hsiHOOq9dzm/h/OPeTzfmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13688 (0x3578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Aug 18 14:54:28 2026 GMT Not After : Aug 25 14:54:28 2026 GMT Subject: CN=6a847224-5d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:8d:d4:73:ff:e4:a1:71:02:31:52:85:c1: 6a:01:bb:40:f9:75:be:97:2b:c7:91:47:3b:06:68: ae:d6:4c:cb:19:24:32:4c:82:d3:c8:e7:96:cc:64: 50:33:40:3e:31:1c:e1:a3:03:d5:e4:f7:50:1e:73: 16:cf:01:7c:e7:ed:ac:02:ea:0f:e7:1f:8b:fb:4f: dc:0a:68:9e:fa:a9:70:b5:36:97:27:47:82:ca:08: 9a:c4:5c:41:4e:85:e3:29:54:b6:25:1d:a8:14:ab: fe:a3:d9:32:4b:c0:4d:52:f2:07:ee:43:56:2d:5a: ca:89:75:a2:5a:64:ee:7b:82:f3:04:85:de:98:dc: 0a:cf:50:b2:76:30:ad:39:44:ad:69:87:f2:9a:17: 66:12:59:fd:9c:82:63:5e:b0:12:d2:eb:5a:9f:d7: 47:43:6a:a6:b8:ce:4a:02:13:a0:61:0e:87:87:26: ab:2e:0d:f1:a4:82:f7:08:85:ca:8d:35:4b:ce:c9: 04:95:f9:fd:4f:3d:5f:11:5a:84:46:5d:86:97:a7: 0a:4c:9d:4c:9f:aa:d3:87:70:b6:78:e3:c4:04:99: 89:e9:9c:3e:23:a2:b6:a7:1e:55:cf:22:92:83:38: aa:1d:71:ad:d1:cf:e9:01:ad:36:d6:40:54:08:50: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:27:44:8B:F5:1B:38:B5:6C:BC:BC:D7:93:7D:F8:CC:FF:67:68:6E X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e9:c2:b9:ef:83:60:6d:09:70:78:cf:a5:33:7a:db:cb:72: 91:17:23:e3:fe:8d:6c:d8:e4:87:12:1e:79:29:07:0b:eb:f9: 30:2b:7f:8d:d2:7f:54:eb:f4:5b:98:3d:dc:34:f7:fd:09:05: 0c:0d:37:9e:a0:32:f4:77:05:c8:3b:50:08:01:63:25:77:b6: 18:2a:38:fb:f7:64:b4:7c:5d:0e:ae:d5:13:17:f7:09:f6:c9: 21:db:56:32:ac:5d:cf:2e:95:a2:e0:8c:f1:1b:6f:02:b9:49: 9f:63:4d:93:00:13:b0:32:d6:09:08:bb:95:36:e5:ee:7b:d5: 2d:2e:d4:42:87:37:64:d6:71:54:66:b9:b3:27:56:d7:ca:20: 0a:4e:da:89:fe:18:10:0c:17:5d:73:34:29:af:62:e8:a6:74: fd:fd:0c:54:fb:7b:77:b0:6c:2e:5a:6c:df:df:c9:b2:20:a2: 73:49:1b:b2:14:39:e4:cc:60:f3:d2:a4:ce:41:52:8d:75:c7: d3:55:79:a7:1e:df:5d:fd:f8:9f:f0:19:02:e4:f7:47:46:4c: 30:a7:63:66:30:10:30:43:76:20:be:0d:d5:c2:58:3a:d0:61: 8c:08:85:2b:a2:1d:4b:91:2b:8e:01:22:b6:ba:30:58:35:fc: 12:e7:60:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjYwODE4MTQ1NDI4WhcNMjYwODI1MTQ1NDI4WjAYMRYwFAYD VQQDEw02YTg0NzIyNC01ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue+N1HP/5KFxAjFShcFqAbtA+XW+lyvHkUc7Bmiu1kzLGSQyTILTyOeWzGRQ M0A+MRzhowPV5PdQHnMWzwF85+2sAuoP5x+L+0/cCmie+qlwtTaXJ0eCygiaxFxB ToXjKVS2JR2oFKv+o9kyS8BNUvIH7kNWLVrKiXWiWmTue4LzBIXemNwKz1CydjCt OUStaYfymhdmEln9nIJjXrAS0utan9dHQ2qmuM5KAhOgYQ6HhyarLg3xpIL3CIXK jTVLzskElfn9Tz1fEVqERl2Gl6cKTJ1Mn6rTh3C2eOPEBJmJ6Zw+I6K2px5VzyKS gziqHXGt0c/pAa021kBUCFALkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4nRIv1 Gzi1bLy815N9+Mz/Z2huMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd+nCue+DYG0JcHjPpTN628tykRcj4/6NbNjkhxIeeSkHC+v5MCt/jdJ/VOv0 W5g93DT3/QkFDA03nqAy9HcFyDtQCAFjJXe2GCo4+/dktHxdDq7VExf3CfbJIdtW Mqxdzy6VouCM8RtvArlJn2NNkwATsDLWCQi7lTbl7nvVLS7UQoc3ZNZxVGa5sydW 18ogCk7aif4YEAwXXXM0Ka9i6KZ0/f0MVPt7d7BsLlps39/JsiCic0kbshQ55Mxg 89KkzkFSjXXH01V5px7fXf34n/AZAuT3R0ZMMKdjZjAQMEN2IL4N1cJYOtBhjAiF K6IdS5ErjgEitrowWDX8Eudg5g== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:22 2026 by rpki-client