$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: QVE9Br6m9M+iUss/8eRkVXqpl4vsGGn7zBnuSV+lxuE= Subject key identifier: 3E:D0:F0:3D:72:CB:98:3C:6C:30:8F:BB:0D:96:16:71:DA:D5:A6:6E Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 02A4 Signing time: Wed 09 Sep 2026 01:54:13 +0000 Manifest this update: Wed 09 Sep 2026 01:54:12 +0000 Manifest next update: Wed 16 Sep 2026 01:54:12 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: kwww0ZvcXJxhLAEn6Vc6Ta82bZOVcbWXWCnHBg2XHeI=) 2: 74FD4FD494BE11F1AFD2F6E63611F970.roa (hash: 0DKws/TZBwHKlP6bywafbYvjIkHk0Zh/vEoLGguK7rM=) 3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) 4: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Sep 9 01:54:12 2026 GMT Not After : Sep 16 01:54:12 2026 GMT Subject: CN=6aa0bc45-84af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:96:8d:99:a8:d6:16:d7:8f:21:88:31:dc: 0b:d8:90:71:df:0f:14:8c:15:fe:8a:db:c3:e7:73: 89:0b:22:9e:c8:88:1b:d4:5d:90:e2:f2:c2:27:31: e0:48:e4:d4:01:55:9b:77:75:7f:84:72:3e:1c:b2: fc:3f:75:6b:73:1f:d4:3f:19:2b:4b:ea:6d:ba:c7: a2:84:e8:83:10:69:ed:0c:25:61:89:f0:75:52:04: 70:f2:62:3e:61:40:80:08:e1:c7:0d:12:fb:20:e5: f3:70:69:80:6f:1d:3a:7c:a3:77:fe:98:86:5a:a4: 58:78:91:7b:e5:c6:c7:f1:ef:1c:00:c2:05:c2:37: 6f:b7:5b:0a:dd:15:7c:47:e9:26:7b:1e:ad:e2:71: 5c:94:7b:aa:1f:ed:25:09:59:4e:ba:60:67:de:bc: 39:a7:39:db:19:e4:82:b9:89:60:3b:91:f0:3b:98: d4:e9:38:1d:b8:cf:df:f0:35:9b:31:e5:1d:f7:3d: bb:24:9a:56:0d:ab:c9:d9:4f:f2:b9:34:62:5b:78: 0f:b4:23:1b:a9:1b:b6:d4:33:48:62:5f:bf:9b:ec: 38:2b:ca:d2:ff:71:6f:e1:99:c3:9c:0e:16:9b:76: c1:a0:2b:a3:93:4e:1f:a8:4a:62:f4:a9:83:31:3a: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D0:F0:3D:72:CB:98:3C:6C:30:8F:BB:0D:96:16:71:DA:D5:A6:6E X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:6e:ec:7b:4f:83:32:8a:b5:88:7e:9e:c3:28:35:e7:42:35: 62:bb:70:20:36:bb:f9:89:0e:49:f0:fe:53:be:93:a9:e9:f2: f3:3c:36:30:06:55:da:6c:a7:2b:32:46:93:75:3c:18:d3:0b: 2f:30:29:00:cd:57:80:d8:87:af:a1:c5:64:8e:63:a4:3c:16: 67:df:f8:f0:1b:fa:76:c6:46:61:98:c8:c9:c3:78:cd:6c:b6: b2:6b:2b:dd:47:49:a0:46:8b:79:f7:63:05:ad:24:ee:60:61: 88:3f:ac:62:45:74:26:af:36:ae:6d:c8:e8:a3:fb:46:88:05: 9d:72:5d:37:89:af:31:dc:c1:15:fc:5a:77:22:b8:70:c1:92: f1:4c:42:e1:ed:7c:09:4d:cf:09:c5:ef:57:a0:6f:6d:28:1c: 48:1b:91:88:80:40:a4:94:02:eb:15:35:b2:07:3e:0f:9c:61: 56:96:16:3c:ac:f9:99:74:2c:e6:b7:f0:19:50:9f:60:c5:d4: de:2e:82:39:47:41:95:14:4c:42:7e:42:5e:a6:00:44:f6:c9: fc:fb:2b:47:d4:90:e6:73:b1:8d:2c:33:8b:77:72:d8:b8:5b: a3:1d:ff:08:10:bd:9b:6f:8a:78:dd:24:7c:b7:b4:ed:ab:7b: 6d:e1:8b:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwOTA5MDE1NDEyWhcNMjYwOTE2MDE1NDEyWjAYMRYwFAYD VQQDEw02YWEwYmM0NS04NGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeGWjZmo1hbXjyGIMdwL2JBx3w8UjBX+itvD53OJCyKeyIgb1F2Q4vLCJzHg SOTUAVWbd3V/hHI+HLL8P3Vrcx/UPxkrS+ptuseihOiDEGntDCVhifB1UgRw8mI+ YUCACOHHDRL7IOXzcGmAbx06fKN3/piGWqRYeJF75cbH8e8cAMIFwjdvt1sK3RV8 R+kmex6t4nFclHuqH+0lCVlOumBn3rw5pznbGeSCuYlgO5HwO5jU6TgduM/f8DWb MeUd9z27JJpWDavJ2U/yuTRiW3gPtCMbqRu21DNIYl+/m+w4K8rS/3Fv4ZnDnA4W m3bBoCujk04fqEpi9KmDMTqVmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7Q8D1y y5g8bDCPuw2WFnHa1aZuMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdW7se0+DMoq1iH6ewyg150I1YrtwIDa7+YkOSfD+U76Tqeny8zw2MAZV2myn KzJGk3U8GNMLLzApAM1XgNiHr6HFZI5jpDwWZ9/48Bv6dsZGYZjIycN4zWy2smsr 3UdJoEaLefdjBa0k7mBhiD+sYkV0Jq82rm3I6KP7RogFnXJdN4mvMdzBFfxadyK4 cMGS8UxC4e18CU3PCcXvV6BvbSgcSBuRiIBApJQC6xU1sgc+D5xhVpYWPKz5mXQs 5rfwGVCfYMXU3i6COUdBlRRMQn5CXqYARPbJ/PsrR9SQ5nOxjSwzi3dy2Lhbox3/ CBC9m2+KeN0kfLe07at7beGL0w== -----END CERTIFICATE-----Generated at Thu Sep 10 08:15:59 2026 by rpki-client