$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft File: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json) Hash identifier: VoZtVNoj17BfVig58riZfXPLsDQxzBgHqCW/Oi72RdY= Subject key identifier: 5B:A9:29:65:2C:23:98:31:1D:58:A9:67:3D:6A:B2:00:57:84:13:ED Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft Manifest number: 08A3 Signing time: Tue 22 Sep 2026 20:23:14 +0000 Manifest this update: Tue 22 Sep 2026 20:23:13 +0000 Manifest next update: Tue 29 Sep 2026 20:23:13 +0000 Files and hashes: 1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: T4Z9bYspmGYC6lATyMChZhl/XjRIqMf4FD+ELbSMvgA=) 2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: rOOLtipm7iwZ1G3DRtj3Ie/BnVh8OmZXs4JyGI1GLtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Validity Not Before: Sep 22 20:23:13 2026 GMT Not After : Sep 29 20:23:13 2026 GMT Subject: CN=6ab2e3b2-b34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:d9:0d:96:5b:3b:02:cf:5e:b1:b7:9c:92: 32:c7:7f:e9:a6:94:41:e8:bf:76:4e:07:06:ef:68: d5:88:71:2e:c5:3d:26:65:d8:71:ce:2c:04:17:59: a2:fb:c2:64:5a:92:31:a9:d1:ea:16:dd:1b:ed:06: 41:5f:34:71:ad:c9:21:a6:bc:80:fb:45:1f:28:76: de:e2:eb:12:ae:93:73:f0:84:56:8c:9a:d8:15:ab: ce:a6:d9:cc:8d:5f:79:64:ec:1c:12:06:f1:b2:a3: 4d:8b:98:74:b8:3a:69:bb:ec:1e:d3:9b:f8:6f:57: 1f:09:a7:32:e8:16:39:31:dc:d9:41:5e:1f:28:a8: b3:d0:99:c9:08:25:34:90:94:3a:2b:e8:59:b6:b7: a2:45:2d:8f:eb:fc:ae:26:06:fb:4c:ad:6d:77:61: 38:7d:45:a1:fd:fa:9e:d6:c6:ae:78:a3:eb:a0:f9: ef:53:e5:2c:d8:16:a3:b5:d2:03:59:ea:18:84:a1: d5:d8:97:50:e1:0e:54:09:ec:aa:ae:b7:de:9d:7f: 0a:37:f8:7a:ef:dc:0e:2c:17:d1:09:f4:8d:cf:66: 9e:7f:b9:2b:77:67:a6:d6:41:0c:00:f1:4e:fc:a6: 56:67:a1:40:71:3b:49:ea:19:0d:78:61:04:a1:7c: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:29:65:2C:23:98:31:1D:58:A9:67:3D:6A:B2:00:57:84:13:ED X509v3 Authority Key Identifier: keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:fb:f1:cf:2d:ad:73:41:6f:b1:2c:9b:ba:c6:9e:83:10:ad: 8e:12:28:d6:b2:71:ba:e9:b5:3d:71:30:df:5f:fa:ae:bf:d3: ef:b1:91:9d:73:33:ce:06:05:35:6d:36:40:c0:49:49:82:96: 84:98:c2:1b:68:e4:37:a3:42:14:04:c9:da:76:6b:f1:8a:55: c1:f1:3b:d7:aa:4b:74:ea:01:ff:62:30:67:15:d6:1c:09:12: fd:27:bf:3a:78:3c:2e:43:d7:39:0c:dd:af:d5:8d:12:f5:0a: b5:dc:21:4f:12:54:ea:8a:2e:ad:c0:c8:72:6d:dd:09:05:0e: 26:cc:ad:10:71:a3:1a:a3:69:38:e1:72:93:9c:dc:d6:6f:34: a5:d3:09:4e:a9:10:39:71:a2:db:4d:ee:7e:79:45:95:bc:93: a3:36:4c:55:d9:7c:87:fc:e4:82:63:31:3a:9e:07:c7:c1:a9: 2a:9b:3f:1b:b4:f1:ba:c7:cb:9d:a0:d2:9d:57:33:57:30:fb: b6:a4:90:3a:99:29:46:25:1b:4b:89:dc:f4:64:2e:27:c5:50: 6c:6a:e5:e8:40:d0:25:8b:cb:38:cb:d8:ec:4a:ed:f8:9d:27: 0b:d7:67:c9:bb:c3:87:3c:41:33:ac:e9:f8:94:43:e1:37:f0: c4:b3:cb:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzQkExMTAvBgNVBAUTKEU0NjIzQ0ZENDQzRTYyMzJGMjZDMjNFODFGREY5NzU4 QjI2RjNCMkMwHhcNMjYwOTIyMjAyMzEzWhcNMjYwOTI5MjAyMzEzWjAYMRYwFAYD VQQDEw02YWIyZTNiMi1iMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL3ZDZZbOwLPXrG3nJIyx3/pppRB6L92TgcG72jViHEuxT0mZdhxziwEF1mi +8JkWpIxqdHqFt0b7QZBXzRxrckhpryA+0UfKHbe4usSrpNz8IRWjJrYFavOptnM jV95ZOwcEgbxsqNNi5h0uDppu+we05v4b1cfCacy6BY5MdzZQV4fKKiz0JnJCCU0 kJQ6K+hZtreiRS2P6/yuJgb7TK1td2E4fUWh/fqe1saueKProPnvU+Us2BajtdID WeoYhKHV2JdQ4Q5UCeyqrrfenX8KN/h679wOLBfRCfSNz2aef7krd2em1kEMAPFO /KZWZ6FAcTtJ6hkNeGEEoXxnywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFupKWUs I5gxHVipZz1qsgBXhBPtMB8GA1UdIwQYMBaAFORiPP1EPmIy8mwj6B/fl1iybzss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjNCQS9GRjIwRUJEQzAx M0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlqTHliQ1BvSDktWFdMSnZP eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHSThfVVEtWWpMeWJDUG9IOS1YV0xKdk95dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjNCQS9GRjIwRUJEQzAxM0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlq THliQ1BvSDktWFdMSnZPeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/vxzy2tc0FvsSybusaegxCtjhIo1rJxuum1PXEw31/6rr/T77GRnXMzzgYF NW02QMBJSYKWhJjCG2jkN6NCFATJ2nZr8YpVwfE716pLdOoB/2IwZxXWHAkS/Se/ Ong8LkPXOQzdr9WNEvUKtdwhTxJU6oourcDIcm3dCQUOJsytEHGjGqNpOOFyk5zc 1m80pdMJTqkQOXGi203ufnlFlbyTozZMVdl8h/zkgmMxOp4Hx8GpKps/G7TxusfL naDSnVczVzD7tqSQOpkpRiUbS4nc9GQuJ8VQbGrl6EDQJYvLOMvY7Ert+J0nC9dn ybvDhzxBM6zp+JRD4TfwxLPLdw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:15:34 2026 by rpki-client