$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: gLWpQgHdzGG7gsPSO4NmIYvye5jh647EiS7oULgZZOw= Subject key identifier: 52:A8:E2:15:EA:9F:C6:D8:85:D2:05:2B:76:26:E7:6A:DE:A7:DE:1C Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 055D Signing time: Mon 26 Oct 2026 16:58:36 +0000 Manifest this update: Mon 26 Oct 2026 16:58:36 +0000 Manifest next update: Mon 02 Nov 2026 16:58:36 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: Be+08iUx6zLo9YcrEbpoUmQCjoItAsPNFMxxxaZFwpk=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: 5Z7fKb2b95O7xf2REenK7dbH8KrSrAmTwTpVkXBeeOI=) 3: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY=) 4: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=) 5: 1479C514596A11ECB1394271C4F9AE02.roa (hash: wpAJJYnFAicDNwa71hcmrPmPcdiAdvkl0r/mHo7+0do=) 6: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: 76p1LWBSiAURuIgRIP/lu1qZCJd79sZFpOsF7Mk4V7g=) 7: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Ylv7wHI65XMnQYhoDyQSygUwHrURYMjzNieL/UaPiGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Oct 26 16:58:36 2026 GMT Not After : Nov 2 16:58:36 2026 GMT Subject: CN=6adf86bc-6276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:09:95:c4:6c:6e:d1:94:13:89:92:b2:e5: 9c:72:41:4d:52:d4:f7:5f:87:a7:59:49:b3:fb:d8: a1:8a:84:22:e5:fb:33:16:78:6a:3c:95:4f:42:0c: 6e:2d:28:81:0a:b6:d4:21:38:5b:45:0c:a5:52:65: 43:6f:a6:4d:b0:c1:50:95:98:77:b6:46:f4:10:83: ae:fa:a9:90:b0:d1:5c:e4:87:a5:51:b8:b7:42:31: 6c:9a:ec:19:08:b7:86:39:35:0d:ba:29:18:ee:75: 5d:55:51:41:bf:fb:97:8c:14:d8:25:a5:e7:b9:11: 20:a8:77:62:2d:66:17:c4:7c:90:83:9a:54:47:8a: 9e:9d:0a:13:33:a5:2c:c7:08:b0:b3:e9:b6:95:57: 40:3d:e2:06:c8:d6:d3:3a:9c:25:92:2f:19:31:e3: cd:71:74:2e:bf:8a:4c:e7:28:1f:ab:a7:90:34:ad: f6:42:44:e7:56:6b:af:c8:c6:2d:94:b6:4a:d8:98: 75:0a:f1:65:38:b3:3d:81:38:32:6c:20:94:5c:a5: 54:9f:95:21:2c:2a:eb:a2:84:f8:6b:20:87:50:ed: ce:c1:95:fb:8c:49:38:e2:77:2f:7c:04:1f:b0:8d: 44:93:38:5b:47:f3:0c:87:35:04:59:7a:3b:e4:28: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:E2:15:EA:9F:C6:D8:85:D2:05:2B:76:26:E7:6A:DE:A7:DE:1C X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:db:d3:54:de:bb:10:b7:d9:9b:dc:fe:0e:65:7d:a2:fa:e6: bd:0b:46:dc:f3:01:ff:51:6e:42:a9:24:10:6a:ec:cc:d2:8f: 16:84:0d:1e:62:9b:68:76:c7:3a:6b:5e:0e:4e:f4:37:bf:67: 25:6c:bb:3a:b1:13:d3:45:66:f4:b7:1c:9b:d9:f6:b2:10:1c: 70:52:cb:7c:78:68:49:b3:9a:93:8e:b8:20:f2:5d:39:ba:72: bd:3e:3b:09:87:7d:81:3d:8a:0b:08:bb:0c:d5:4a:40:4c:8c: 5c:b2:57:f5:18:fb:55:81:0a:e9:0f:c1:2f:f9:ec:15:57:d9: 28:c6:e9:cd:e4:88:47:10:3a:e6:d7:66:29:9b:0d:f0:06:3a: fe:bc:86:93:c2:00:39:e6:03:33:07:a6:4a:51:3d:e2:b1:76: 09:3c:57:36:ec:9c:e7:42:3b:8b:33:d9:01:9d:d1:e8:cc:4b: 42:f0:68:85:34:27:32:d7:37:d3:be:81:80:14:25:2d:84:40: e8:64:bb:4a:b9:b9:b2:10:bc:ac:e5:f8:44:c6:a4:9b:85:08: 35:a2:44:49:8d:3f:88:12:1e:9c:f4:ac:1e:36:48:57:90:dd: df:12:be:5b:e5:98:f4:49:db:08:39:bc:ac:b8:65:3f:18:36: 81:c0:c5:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjYxMDI2MTY1ODM2WhcNMjYxMTAyMTY1ODM2WjAYMRYwFAYD VQQDEw02YWRmODZiYy02Mjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmj8JlcRsbtGUE4mSsuWcckFNUtT3X4enWUmz+9ihioQi5fszFnhqPJVPQgxu LSiBCrbUIThbRQylUmVDb6ZNsMFQlZh3tkb0EIOu+qmQsNFc5IelUbi3QjFsmuwZ CLeGOTUNuikY7nVdVVFBv/uXjBTYJaXnuREgqHdiLWYXxHyQg5pUR4qenQoTM6Us xwiws+m2lVdAPeIGyNbTOpwlki8ZMePNcXQuv4pM5ygfq6eQNK32QkTnVmuvyMYt lLZK2Jh1CvFlOLM9gTgybCCUXKVUn5UhLCrrooT4ayCHUO3OwZX7jEk44ncvfAQf sI1EkzhbR/MMhzUEWXo75CgxzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKo4hXq n8bYhdIFK3Ym52rep94cMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAONvTVN67ELfZm9z+DmV9ovrmvQtG3PMB/1FuQqkkEGrszNKPFoQNHmKbaHbH OmteDk70N79nJWy7OrET00Vm9Lccm9n2shAccFLLfHhoSbOak464IPJdObpyvT47 CYd9gT2KCwi7DNVKQEyMXLJX9Rj7VYEK6Q/BL/nsFVfZKMbpzeSIRxA65tdmKZsN 8AY6/ryGk8IAOeYDMwemSlE94rF2CTxXNuyc50I7izPZAZ3R6MxLQvBohTQnMtc3 076BgBQlLYRA6GS7Srm5shC8rOX4RMakm4UINaJESY0/iBIenPSsHjZIV5Dd3xK+ W+WY9EnbCDm8rLhlPxg2gcDFUA== -----END CERTIFICATE-----Generated at Tue Oct 27 15:40:17 2026 by rpki-client