$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: uQ1eHc9v0QW7OlfqwVjubAxhPfDnqseHoi6hnTIgpF0= Subject key identifier: 05:BD:5B:BE:8E:D8:97:6A:6F:8A:88:FA:FC:E9:89:C9:29:D9:85:90 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 02BB Signing time: Sun 25 Oct 2026 01:45:08 +0000 Manifest this update: Sun 25 Oct 2026 01:45:07 +0000 Manifest next update: Sun 01 Nov 2026 01:45:07 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: tqPJhaXcMJWh5lA6dcz5mKM/DdZSGNSpNrZMdmjgU48=) 2: 74FD4FD494BE11F1AFD2F6E63611F970.roa (hash: 0DKws/TZBwHKlP6bywafbYvjIkHk0Zh/vEoLGguK7rM=) 3: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 01:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Oct 25 01:45:07 2026 GMT Not After : Nov 1 01:45:07 2026 GMT Subject: CN=6add5f23-6e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8b:5c:c6:0f:c8:6e:3f:b6:10:59:61:ab:17: 1e:b3:65:ae:a4:73:81:09:5d:1a:42:85:e6:1f:27: 80:a3:bc:1b:9f:54:53:5a:70:96:43:50:77:7b:97: c3:4b:99:7b:4f:2a:39:37:37:01:ed:7e:61:9f:18: a7:e4:0b:0f:4f:01:1d:5e:e6:9a:97:5a:1b:5a:d5: f6:35:af:7c:f1:3e:aa:77:2b:a2:d5:a6:a1:15:a6: 54:72:92:c0:24:aa:3c:c8:2b:90:2f:72:f4:9f:79: 67:94:75:da:c3:e0:c9:1b:39:73:6f:99:da:71:32: 5a:52:08:26:4d:37:0c:13:2f:40:83:39:79:51:11: cc:78:e6:30:b1:ea:d0:bf:e8:36:8b:5f:d1:69:74: 87:b5:e9:d3:83:f0:01:5a:5e:39:b3:3d:1b:47:30: 69:7c:e5:e7:7f:20:ad:27:41:81:0b:bb:58:9c:25: 66:38:45:a7:65:ae:5c:09:3d:58:0b:90:c3:8e:32: 3f:6d:8a:c6:c9:b7:33:70:dc:52:a4:89:eb:d7:b4: e4:d4:43:e0:85:e5:8b:2f:0e:02:6f:91:1d:cc:9a: 94:63:62:22:03:d4:ab:0d:75:52:51:e4:f3:3b:35: fe:16:f9:0f:b7:c2:73:76:7c:4f:1c:d9:5b:e0:03: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:5B:BE:8E:D8:97:6A:6F:8A:88:FA:FC:E9:89:C9:29:D9:85:90 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ee:aa:90:d1:3f:a9:74:05:35:f8:5d:5b:c4:d8:bb:ed:a1: ba:2f:e1:31:34:8e:7d:7d:f8:79:ae:16:96:5e:ed:f1:83:26: 71:1d:d2:a2:4e:3a:62:b0:a7:7b:d0:d8:51:67:da:00:20:e0: 60:4c:9f:12:60:2f:c9:8e:a6:9c:b2:ba:6d:c9:82:eb:ca:a3: 37:44:40:53:ad:59:9c:bb:63:dc:6b:78:98:0a:c6:d1:0e:ef: ff:d7:9a:53:59:e1:15:e3:dc:45:31:7e:fa:b4:f2:88:c0:0f: 84:91:c9:cf:16:60:24:05:49:d4:39:a0:b6:19:82:bc:c0:47: 5e:15:0e:bb:94:87:fb:60:54:51:24:6b:90:44:4c:1d:c0:86: d1:23:cc:4e:e2:8a:39:22:32:b7:a9:1a:26:7e:3e:4e:a0:70: 0d:fd:f3:12:f2:07:6a:48:0a:2d:07:d5:f3:bd:1c:95:7d:1d: 97:0a:4f:11:81:20:9a:ae:7d:73:f6:2a:f2:13:af:4e:34:9c: 01:53:fd:80:f9:e4:8d:f1:62:6a:30:4e:46:e1:83:47:ff:d8: c6:bd:a5:cc:58:76:c8:68:31:09:b6:9e:ab:cb:f7:c6:31:d8: e9:16:4b:56:35:68:99:de:f9:46:c4:ba:7a:c0:4f:45:fd:b2: 05:65:bc:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYxMDI1MDE0NTA3WhcNMjYxMTAxMDE0NTA3WjAYMRYwFAYD VQQDEw02YWRkNWYyMy02ZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+4tcxg/Ibj+2EFlhqxces2WupHOBCV0aQoXmHyeAo7wbn1RTWnCWQ1B3e5fD S5l7Tyo5NzcB7X5hnxin5AsPTwEdXuaal1obWtX2Na988T6qdyui1aahFaZUcpLA JKo8yCuQL3L0n3lnlHXaw+DJGzlzb5nacTJaUggmTTcMEy9Agzl5URHMeOYwserQ v+g2i1/RaXSHtenTg/ABWl45sz0bRzBpfOXnfyCtJ0GBC7tYnCVmOEWnZa5cCT1Y C5DDjjI/bYrGybczcNxSpInr17Tk1EPgheWLLw4Cb5EdzJqUY2IiA9SrDXVSUeTz OzX+FvkPt8JzdnxPHNlb4ANACwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAW9W76O 2Jdqb4qI+vzpickp2YWQMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOO6qkNE/qXQFNfhdW8TYu+2hui/hMTSOfX34ea4Wll7t8YMmcR3Sok46YrCn e9DYUWfaACDgYEyfEmAvyY6mnLK6bcmC68qjN0RAU61ZnLtj3Gt4mArG0Q7v/9ea U1nhFePcRTF++rTyiMAPhJHJzxZgJAVJ1DmgthmCvMBHXhUOu5SH+2BUUSRrkERM HcCG0SPMTuKKOSIyt6kaJn4+TqBwDf3zEvIHakgKLQfV870clX0dlwpPEYEgmq59 c/Yq8hOvTjScAVP9gPnkjfFiajBORuGDR//Yxr2lzFh2yGgxCbaeq8v3xjHY6RZL VjVomd75RsS6esBPRf2yBWW8gQ== -----END CERTIFICATE-----Generated at Mon Oct 26 14:20:20 2026 by rpki-client