$ rpki-client -vvvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: 5jRo3dNmPsuyGcrMiNGqui7QpboBqjobDJkhNy9h+A4= Subject key identifier: 9A:7E:9B:04:2D:B9:AE:5C:3B:BA:78:0D:61:BA:B5:5C:6B:E9:23:85 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1E98 Signing time: Fri 02 Oct 2026 16:10:17 +0000 Manifest this update: Fri 02 Oct 2026 16:10:17 +0000 Manifest next update: Fri 09 Oct 2026 16:10:17 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: mbZSWGbePiQJkZn6xOlPlfUJ3RA9QMW9pjpYjXE1aYg=) 2: 1D57FF40A01311E684546521C4F9AE02.roa (hash: lNaIu73lqivuKf4impc1RoL9Iorynr8Oq1i414eOVLY=) 3: 4865DD00A13B11E687921078C4F9AE02.roa (hash: ct9I/aMYPGYqo53jKTnyxK/j3JeT25nkuXtpX13/eJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7859 (0x1eb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Oct 2 16:10:17 2026 GMT Not After : Oct 9 16:10:17 2026 GMT Subject: CN=6abfd769-267c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:a7:cd:32:43:fa:f4:e7:9b:b1:0a:f9:d4: 9b:c6:4f:d4:00:28:0d:60:94:d2:59:27:4d:c0:72: 3b:63:91:05:c5:e5:9e:ba:83:de:fe:52:29:93:66: df:a9:1f:de:a9:97:c4:6c:34:90:9a:b5:92:e1:4c: 9b:54:4c:8e:1f:59:f8:65:96:d2:48:7b:6e:d0:27: 63:82:dd:53:91:1d:af:c2:dd:66:59:d1:fd:93:c5: 0c:cd:1c:19:bb:27:84:f9:6b:20:2f:e8:a7:88:da: 71:b4:32:89:63:49:a1:1a:1f:35:9e:fd:b9:0f:87: 4a:c6:8e:56:86:d4:1c:56:61:51:eb:96:64:f9:a0: de:97:d0:51:c9:21:50:06:18:6f:3d:8d:c4:f0:f3: 51:98:98:77:32:95:9f:f5:26:0e:9c:62:cb:7b:74: 76:ac:3e:82:56:f7:5f:80:76:ec:19:c1:69:cd:be: 22:7b:34:2f:fd:82:b0:d7:fa:c9:52:d1:4f:1a:f2: 9a:f3:c5:67:22:95:7a:c5:f5:af:bd:7d:fb:38:99: b7:e4:4f:48:1c:09:7c:2d:37:70:ab:13:02:47:00: db:f0:87:bb:81:22:1d:1f:36:9f:34:1e:f3:0c:8b: 60:d7:d7:15:64:a2:80:e7:a9:f0:9a:56:55:92:a9: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7E:9B:04:2D:B9:AE:5C:3B:BA:78:0D:61:BA:B5:5C:6B:E9:23:85 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:30:1e:2e:b5:5f:80:56:dd:50:f5:95:ad:7e:72:72:c2:c1: 7a:6a:16:e6:31:06:02:b3:20:cc:aa:01:cc:fa:3a:78:72:d1: dd:4b:ba:d9:6d:d0:f4:57:a1:88:dc:90:56:07:7a:e0:32:8d: 9b:d6:68:ac:a1:e2:56:ec:f1:8f:bd:47:da:54:83:17:2f:b0: 3c:2b:b9:55:ea:0c:9c:c7:1b:af:be:b7:55:f3:33:82:09:de: e3:f3:9a:45:77:32:26:15:69:6a:5f:31:fc:7d:aa:27:54:b9: 4a:4f:3e:95:40:c5:6d:3e:d7:fa:c7:d8:16:1c:49:bd:2a:07: f2:20:e9:70:3d:ed:3e:fd:21:3d:d0:4f:1d:a8:07:30:6a:78: ff:ce:51:7d:75:d4:f2:b9:1d:58:2b:1e:57:0b:14:56:5b:7f: 27:30:f4:1d:71:8f:35:7b:cc:59:4e:05:be:ef:cd:2b:8c:d4: 77:1b:65:b8:b7:88:65:e1:34:c9:18:3c:36:aa:ea:59:69:8f: 75:dc:45:57:4f:02:b8:b1:12:20:2a:fa:88:d1:55:58:3a:c8: 19:d2:ea:2c:73:92:aa:6a:e6:45:ca:e4:db:ae:a6:5c:2b:8c: 3f:a9:1e:af:79:c2:9d:41:10:a3:2d:fa:e2:36:b2:6b:6d:2a: f0:35:eb:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjYxMDAyMTYxMDE3WhcNMjYxMDA5MTYxMDE3WjAYMRYwFAYD VQQDEw02YWJmZDc2OS0yNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWGnzTJD+vTnm7EK+dSbxk/UACgNYJTSWSdNwHI7Y5EFxeWeuoPe/lIpk2bf qR/eqZfEbDSQmrWS4UybVEyOH1n4ZZbSSHtu0Cdjgt1TkR2vwt1mWdH9k8UMzRwZ uyeE+WsgL+iniNpxtDKJY0mhGh81nv25D4dKxo5WhtQcVmFR65Zk+aDel9BRySFQ BhhvPY3E8PNRmJh3MpWf9SYOnGLLe3R2rD6CVvdfgHbsGcFpzb4iezQv/YKw1/rJ UtFPGvKa88VnIpV6xfWvvX37OJm35E9IHAl8LTdwqxMCRwDb8Ie7gSIdHzafNB7z DItg19cVZKKA56nwmlZVkqntpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJp+mwQt ua5cO7p4DWG6tVxr6SOFMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJjAeLrVfgFbdUPWVrX5ycsLBemoW5jEGArMgzKoBzPo6eHLR3Uu62W3Q9Feh iNyQVgd64DKNm9ZorKHiVuzxj71H2lSDFy+wPCu5VeoMnMcbr763VfMzggne4/Oa RXcyJhVpal8x/H2qJ1S5Sk8+lUDFbT7X+sfYFhxJvSoH8iDpcD3tPv0hPdBPHagH MGp4/85RfXXU8rkdWCseVwsUVlt/JzD0HXGPNXvMWU4Fvu/NK4zUdxtluLeIZeE0 yRg8NqrqWWmPddxFV08CuLESICr6iNFVWDrIGdLqLHOSqmrmRcrk266mXCuMP6ke r3nCnUEQoy364jaya20q8DXrAw== -----END CERTIFICATE-----Generated at Sun Oct 4 15:23:28 2026 by rpki-client