$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: nsxQ8QR1cR78N8r5T0Vke/rd+o8lp0tpZdnl4aw8zBw= Subject key identifier: AF:BB:8E:F6:30:52:AF:63:60:29:9A:25:19:37:57:F4:85:CB:5F:46 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D70 Signing time: Thu 10 Sep 2026 17:59:11 +0000 Manifest this update: Thu 10 Sep 2026 17:59:11 +0000 Manifest next update: Thu 17 Sep 2026 17:59:11 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: 0hwpuOl24DOnjCGq4XAx28wR0g/ZUpTtZoJHx5GV9H4=) 2: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=) 3: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Sep 10 17:59:11 2026 GMT Not After : Sep 17 17:59:11 2026 GMT Subject: CN=6aa2efef-9512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:5d:91:66:22:62:fc:0d:c1:71:4a:93:52: b7:8d:e0:b0:2b:5c:0b:25:a8:f9:3c:99:aa:74:e3: eb:0b:ad:09:53:7f:e9:d7:2e:1e:fb:dc:2b:10:6d: 49:20:18:b7:c6:86:8b:e4:83:5f:8a:7a:6a:6e:e4: 30:7f:8c:e8:96:de:29:e7:2d:e5:2e:3f:4d:fd:34: 61:c1:58:cb:ae:a9:72:31:39:2a:f8:c3:09:8c:8b: ce:c0:7e:61:b8:3c:84:d5:35:d0:4b:93:01:80:d9: dc:f7:f9:4f:5f:f0:3e:a7:95:33:44:e2:14:c7:bf: b5:25:c2:16:ed:51:a6:fa:6c:e7:1f:86:54:ab:a6: 70:6c:12:4a:84:5f:8b:db:de:b6:3c:c5:c3:63:3c: fb:76:54:b5:a0:01:a9:86:84:0d:f9:86:76:e3:30: 03:a4:53:e5:78:71:6c:1b:02:f9:f8:3e:0b:4d:78: 5e:4c:59:17:b7:06:54:e6:be:a9:41:7b:86:c6:a5: e1:02:4c:0f:10:ef:7a:d2:29:ee:a4:13:9b:48:ae: d4:a9:43:fc:80:2e:bc:6a:ab:78:83:00:25:7c:1a: cd:37:27:b9:00:44:11:25:23:b6:09:b8:27:3e:76: 6f:73:8b:43:cf:9a:a9:78:14:3b:d2:82:7b:23:c5: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BB:8E:F6:30:52:AF:63:60:29:9A:25:19:37:57:F4:85:CB:5F:46 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:90:58:74:d8:3f:2e:af:fb:3b:24:49:db:11:78:a0:43:48: 48:d7:16:a5:06:5b:f2:66:fb:c1:a6:e9:7b:f2:47:03:75:8e: 75:16:e3:f4:ca:0c:2c:7f:c7:7c:bf:4f:dc:cd:94:5a:e0:4b: b6:78:a9:20:51:a2:c2:1d:57:a1:0a:8d:5a:1e:59:8f:6d:45: 18:4e:a4:98:38:5c:98:09:55:ca:05:8c:56:6f:88:38:7b:87: 24:72:d2:17:86:c2:ef:6a:3c:ad:d0:b1:03:0a:3c:90:ab:01: b5:72:56:c5:e1:4b:8e:02:34:9f:a1:9d:a9:27:7e:4e:71:6d: b8:7b:1c:12:ef:c4:e0:af:c2:89:42:bd:b5:14:e7:0a:d6:a1: bb:50:ed:68:7c:56:49:ff:b5:74:60:61:f1:25:69:e3:9c:d5: fe:4f:7e:e6:11:40:5e:4f:53:2a:b6:a0:42:13:65:a3:d9:6b: 15:3d:05:dd:b9:9a:5d:c8:77:03:6a:bc:71:51:cd:5a:58:cc: 5b:cd:46:cb:63:ec:54:06:03:ad:32:33:cf:90:e1:e7:8a:5a: 64:dd:8c:66:4a:0c:a2:1d:18:68:67:fd:fb:3c:06:12:c3:4a: 61:11:15:e3:9a:6b:24:b9:7e:10:b7:e1:64:43:1c:ac:8f:0a: b1:2f:ba:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwOTEwMTc1OTExWhcNMjYwOTE3MTc1OTExWjAYMRYwFAYD VQQDEw02YWEyZWZlZi05NTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4tdkWYiYvwNwXFKk1K3jeCwK1wLJaj5PJmqdOPrC60JU3/p1y4e+9wrEG1J IBi3xoaL5INfinpqbuQwf4zolt4p5y3lLj9N/TRhwVjLrqlyMTkq+MMJjIvOwH5h uDyE1TXQS5MBgNnc9/lPX/A+p5UzROIUx7+1JcIW7VGm+mznH4ZUq6ZwbBJKhF+L 2962PMXDYzz7dlS1oAGphoQN+YZ24zADpFPleHFsGwL5+D4LTXheTFkXtwZU5r6p QXuGxqXhAkwPEO960inupBObSK7UqUP8gC68aqt4gwAlfBrNNye5AEQRJSO2Cbgn PnZvc4tDz5qpeBQ70oJ7I8UCswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+7jvYw Uq9jYCmaJRk3V/SFy19GMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh5BYdNg/Lq/7OyRJ2xF4oENISNcWpQZb8mb7wabpe/JHA3WOdRbj9MoMLH/H fL9P3M2UWuBLtnipIFGiwh1XoQqNWh5Zj21FGE6kmDhcmAlVygWMVm+IOHuHJHLS F4bC72o8rdCxAwo8kKsBtXJWxeFLjgI0n6GdqSd+TnFtuHscEu/E4K/CiUK9tRTn Ctahu1DtaHxWSf+1dGBh8SVp45zV/k9+5hFAXk9TKragQhNlo9lrFT0F3bmaXch3 A2q8cVHNWljMW81Gy2PsVAYDrTIzz5Dh54paZN2MZkoMoh0YaGf9+zwGEsNKYREV 45prJLl+ELfhZEMcrI8KsS+6pw== -----END CERTIFICATE-----Generated at Fri Sep 11 11:07:53 2026 by rpki-client