$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: CLPbcckZIAOJvxie99SiXzQl+NRMQFWRnqBN69HUrIY= Subject key identifier: 39:DF:52:3E:DB:85:A9:7C:B5:B4:BD:75:23:AE:A6:97:2C:03:AC:45 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D87 Signing time: Mon 26 Oct 2026 17:59:35 +0000 Manifest this update: Mon 26 Oct 2026 17:59:35 +0000 Manifest next update: Mon 02 Nov 2026 17:59:35 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: uiBR+AS0x8jIqhxFuJVMxjG4zRW4BQD9FidacauWjjc=) 2: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=) 3: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Oct 26 17:59:35 2026 GMT Not After : Nov 2 17:59:35 2026 GMT Subject: CN=6adf9507-1fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:b4:7c:83:7e:fa:17:5f:e9:af:64:55:6f: 0e:d5:ea:1e:02:d1:7a:13:08:22:21:29:bc:e3:0d: 12:f4:bc:ab:91:7f:d6:24:3c:cb:2c:7d:2a:7d:33: 4f:60:b3:aa:b1:15:34:ac:a9:74:fd:7e:3b:f2:6d: b3:12:6d:14:ac:3b:ac:3a:53:07:6f:37:c2:31:28: a7:be:de:7a:67:07:41:7b:26:e2:82:9e:62:af:5c: 35:c7:6d:47:29:c1:b1:6c:aa:a5:67:00:cc:0f:2f: 13:6d:7f:3c:52:8c:d0:28:b3:85:13:03:41:ab:23: 6c:96:ae:8b:c2:f1:33:92:51:71:e1:53:07:c3:21: 6f:62:2a:e7:ad:73:42:fb:db:cb:f0:87:fc:f5:09: 41:79:1a:ab:83:2d:9f:f1:90:a4:c6:66:e2:78:f4: e1:62:d5:f0:52:fd:4e:68:0b:d9:aa:65:ae:ba:8a: 1f:2c:db:f3:f5:3d:f6:d3:4d:95:85:3d:7f:2f:2a: 88:c0:be:6b:5c:85:82:94:52:20:7c:dc:d2:cd:ea: b1:a3:2e:b6:a7:6e:6c:48:b5:15:bd:5d:2e:c1:35: 4b:c2:bb:58:8d:8f:e2:f8:8d:d6:16:1e:e3:32:46: 54:fb:c1:70:b1:77:e9:3c:58:16:64:00:70:6b:67: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DF:52:3E:DB:85:A9:7C:B5:B4:BD:75:23:AE:A6:97:2C:03:AC:45 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e5:e2:57:dd:20:db:e3:b4:8c:a3:df:61:6f:7e:a7:c2:25: 56:01:ff:5e:06:20:c8:cd:a5:c6:59:f8:a9:85:59:0f:3e:e9: 66:1b:4a:67:0f:04:1f:e9:71:c5:66:03:09:ce:74:69:dd:84: 2a:39:e7:af:f3:03:2f:61:b3:99:b6:67:29:19:da:9a:31:d3: 08:36:5c:e1:92:4a:5f:8a:f2:f3:05:94:00:29:2c:9f:9b:81: d9:e6:b6:5a:cb:38:e9:10:90:35:1d:90:e8:75:9b:da:20:3c: 5e:a6:17:66:4a:e0:1d:c0:4b:4f:b6:dc:1a:cf:55:6e:71:5a: 0f:89:63:11:b4:40:c2:e5:00:3c:67:39:de:2a:ab:9e:12:b5: 13:c2:e9:70:24:a7:c5:0a:d1:a9:a9:4b:7b:62:62:8b:3e:54: f0:88:1b:4a:66:2e:db:00:78:a0:f5:31:b5:b9:60:f3:8f:08: 0b:30:9b:c9:d2:35:55:bf:c5:c5:ef:40:e0:81:49:81:f4:a0: c4:23:7c:06:4b:74:4f:93:1a:3f:38:5f:05:7e:d0:b6:5a:8b: 73:82:ca:70:3c:96:73:14:44:d0:c7:46:8d:07:b5:22:5e:de: b9:ee:47:03:37:c2:62:21:79:e2:82:9e:0f:fc:7d:4a:b9:0f: 30:8f:47:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYxMDI2MTc1OTM1WhcNMjYxMTAyMTc1OTM1WjAYMRYwFAYD VQQDEw02YWRmOTUwNy0xZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aq0fIN++hdf6a9kVW8O1eoeAtF6EwgiISm84w0S9LyrkX/WJDzLLH0qfTNP YLOqsRU0rKl0/X478m2zEm0UrDusOlMHbzfCMSinvt56ZwdBeybigp5ir1w1x21H KcGxbKqlZwDMDy8TbX88UozQKLOFEwNBqyNslq6LwvEzklFx4VMHwyFvYirnrXNC +9vL8If89QlBeRqrgy2f8ZCkxmbiePThYtXwUv1OaAvZqmWuuoofLNvz9T32002V hT1/LyqIwL5rXIWClFIgfNzSzeqxoy62p25sSLUVvV0uwTVLwrtYjY/i+I3WFh7j MkZU+8FwsXfpPFgWZABwa2dA5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnfUj7b hal8tbS9dSOuppcsA6xFMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHOXiV90g2+O0jKPfYW9+p8IlVgH/XgYgyM2lxln4qYVZDz7pZhtKZw8EH+lx xWYDCc50ad2EKjnnr/MDL2GzmbZnKRnamjHTCDZc4ZJKX4ry8wWUACksn5uB2ea2 Wss46RCQNR2Q6HWb2iA8XqYXZkrgHcBLT7bcGs9VbnFaD4ljEbRAwuUAPGc53iqr nhK1E8LpcCSnxQrRqalLe2Jiiz5U8IgbSmYu2wB4oPUxtblg848ICzCbydI1Vb/F xe9A4IFJgfSgxCN8Bkt0T5MaPzhfBX7QtlqLc4LKcDyWcxRE0MdGjQe1Il7eue5H AzfCYiF54oKeD/x9SrkPMI9HfA== -----END CERTIFICATE-----Generated at Wed Oct 28 20:27:11 2026 by rpki-client