$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json) Hash identifier: w21yWhfFNXpBSwJ0pysp4usyyzcGwcP6mKdOmo4fJAY= Subject key identifier: 31:44:79:5E:98:DF:55:D0:F4:A8:A1:E8:E7:52:9A:26:A4:7C:B6:26 Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft Manifest number: 01AD Signing time: Sun 11 Oct 2026 04:39:58 +0000 Manifest this update: Sun 11 Oct 2026 04:39:57 +0000 Manifest next update: Sun 18 Oct 2026 04:39:57 +0000 Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: GCg9i7dgfpmcxKfZYYIC3X4QozlZS2tX4nStaLPpLos=) 2: F9AAE6F8994011F097180C40C4F9AE02.roa (hash: rN+KK3jryyT29WxMz6TJQKyL9vxdeXLa8TTLUuh8DZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Validity Not Before: Oct 11 04:39:57 2026 GMT Not After : Oct 18 04:39:57 2026 GMT Subject: CN=6acb131e-9d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:d8:ab:94:9c:00:87:86:ce:90:5e:5a:89: 25:98:07:22:46:32:42:b0:77:9c:96:8e:cc:97:43: 5c:7a:48:c6:3c:b6:5f:13:31:c7:67:e1:92:db:1b: 6a:2a:b1:65:c1:1f:65:be:69:58:b0:47:e0:92:5b: c5:97:76:1a:e7:29:29:89:4e:d9:88:d3:90:bc:79: c6:0e:6d:4d:85:ab:e5:4f:d8:2f:2d:f0:3e:1b:1d: ce:ba:2c:db:c4:9f:79:4e:2a:c1:f5:68:67:a7:79: 12:df:16:64:d5:77:4a:2b:35:ad:23:41:81:f8:39: ed:cb:b6:af:d7:a5:7f:21:7f:58:f4:98:9c:18:51: 7d:7d:6d:f0:2d:79:ab:dc:92:94:a5:8f:f7:cb:3d: bf:00:37:9a:6a:1c:17:0f:6a:3d:bc:ec:56:3a:6e: ef:8c:00:d6:3d:25:8e:5f:d5:82:8f:4a:bc:fa:05: 1f:0d:1a:70:29:45:26:7f:76:de:89:50:8f:2b:a7: 66:86:7e:55:db:46:7f:48:ef:fc:dd:b7:d4:e2:99: 0f:40:e9:de:1d:ff:c7:e0:7f:9b:7f:ed:21:89:86: 2a:5a:ed:1f:b9:1d:f8:9d:06:e1:eb:42:6a:52:86: fd:5b:24:57:bd:95:f5:b3:9e:ba:98:18:c3:06:8b: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:44:79:5E:98:DF:55:D0:F4:A8:A1:E8:E7:52:9A:26:A4:7C:B6:26 X509v3 Authority Key Identifier: keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:f3:bd:53:cf:2b:49:4b:55:88:72:f4:c0:a9:98:1b:f7:86: e2:fa:2a:db:44:1a:03:fa:3f:41:07:1f:70:80:f5:25:d1:32: 83:0f:9f:dc:a2:c7:ea:db:4a:02:a3:d2:3c:12:39:8f:8a:cf: d1:8e:73:0b:58:c8:81:5a:c0:41:e0:c0:22:ef:af:0d:f5:bf: 06:5e:e4:90:90:2d:ed:d5:6e:66:56:b5:90:6e:06:8f:41:88: 24:9b:90:7a:fc:4a:9d:0b:d3:74:a9:51:85:ce:e2:58:8e:d8: 6b:e4:a5:12:9a:48:1c:2d:0f:86:9d:6f:95:bd:2f:33:6c:0a: 33:00:30:e5:f7:d8:22:7a:ac:8c:72:fa:45:6b:42:2d:2a:2e: bd:d6:6b:8f:68:04:69:fb:68:6f:cc:fd:a5:fb:c5:6e:6a:56: d1:25:2e:f6:11:30:db:6a:0b:d1:dd:a4:82:4f:60:7d:76:2a: a3:1d:f9:c4:ac:fc:98:a8:e8:ce:68:ad:a3:78:62:cb:7b:a3: 1e:92:e8:e7:66:71:95:0c:7a:bb:b4:8c:03:da:4a:3a:e1:9d: 70:57:95:b3:28:e8:88:81:6e:37:63:ac:5a:fa:c9:27:99:c9: 85:89:2a:af:a2:2a:c3:61:43:a8:14:80:f6:9a:6a:68:08:fc: 92:c4:6e:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKEU1QjQ0QzY5RThERTczM0RGNjE5NjYwNTZFN0U0MTVF QzdDNzBEMkEwHhcNMjYxMDExMDQzOTU3WhcNMjYxMDE4MDQzOTU3WjAYMRYwFAYD VQQDEw02YWNiMTMxZS05ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CzYq5ScAIeGzpBeWoklmAciRjJCsHeclo7Ml0NcekjGPLZfEzHHZ+GS2xtq KrFlwR9lvmlYsEfgklvFl3Ya5ykpiU7ZiNOQvHnGDm1NhavlT9gvLfA+Gx3Ouizb xJ95TirB9Whnp3kS3xZk1XdKKzWtI0GB+Dnty7av16V/IX9Y9JicGFF9fW3wLXmr 3JKUpY/3yz2/ADeaahwXD2o9vOxWOm7vjADWPSWOX9WCj0q8+gUfDRpwKUUmf3be iVCPK6dmhn5V20Z/SO/83bfU4pkPQOneHf/H4H+bf+0hiYYqWu0fuR34nQbh60Jq Uob9WyRXvZX1s566mBjDBou0IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFEeV6Y 31XQ9Kih6OdSmiakfLYmMB8GA1UdIwQYMBaAFOW0TGno3nM99hlmBW5+QV7Hxw0q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My80RTI1QzhCQzM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6MzJHV1lGYm41QlhzZkhE U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzViUk1hZWplY3ozMkdXWUZibjVCWHNmSERTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My80RTI1QzhCQzM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6 MzJHV1lGYm41QlhzZkhEU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzfO9U88rSUtViHL0wKmYG/eG4voq20QaA/o/QQcfcID1JdEygw+f3KLH6ttK AqPSPBI5j4rP0Y5zC1jIgVrAQeDAIu+vDfW/Bl7kkJAt7dVuZla1kG4Gj0GIJJuQ evxKnQvTdKlRhc7iWI7Ya+SlEppIHC0Php1vlb0vM2wKMwAw5ffYInqsjHL6RWtC LSouvdZrj2gEaftob8z9pfvFbmpW0SUu9hEw22oL0d2kgk9gfXYqox35xKz8mKjo zmito3hiy3ujHpLo52ZxlQx6u7SMA9pKOuGdcFeVsyjoiIFuN2OsWvrJJ5nJhYkq r6Iqw2FDqBSA9ppqaAj8ksRubg== -----END CERTIFICATE-----Generated at Mon Oct 12 22:28:50 2026 by rpki-client