$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft File: U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json) Hash identifier: iGIeN7/8ZbxhVtNKJ42RMojpW9ttDWAUWNkPaZdlxos= Subject key identifier: B6:51:53:EB:1B:C5:DC:5A:EB:B0:F0:24:65:D0:26:3F:09:3B:06:CA Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6 Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6 Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft Manifest number: 062A Signing time: Thu 10 Sep 2026 22:40:29 +0000 Manifest this update: Thu 10 Sep 2026 22:40:29 +0000 Manifest next update: Thu 17 Sep 2026 22:40:29 +0000 Files and hashes: 1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: 9UMjQ97wo0VFSbqTHXRnksrqRuFHKPkeRFQRBbZUHdw=) 2: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: EtIVrjW3D9LKTRC7oaoRmQY6Qz3nhGLe2dzCq7rzB8U=) 3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: 6SWLv2jStmw9Boi79xmGA+0FveHASTq1p9xtUOijHD0=) 4: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: 6SMT1AnOauj5YAPAP3C0QKupLOTw71ii/bAztVft8xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6 Validity Not Before: Sep 10 22:40:29 2026 GMT Not After : Sep 17 22:40:29 2026 GMT Subject: CN=6aa331dd-88de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:60:f7:e3:15:72:53:7b:e1:c3:e7:3a:8c: e4:4b:9f:b4:bb:3b:6e:3e:e7:48:3c:d4:4d:58:cc: 2a:bd:bb:2a:11:c9:ca:06:8a:cb:18:8b:ef:5e:2b: 6f:f7:fd:9d:52:e0:ec:a9:dc:ff:25:c9:7b:61:bf: c1:9e:e2:90:4e:56:d7:03:65:e6:32:be:bb:bd:05: 94:8f:30:a8:b6:e8:57:67:67:21:18:5b:a6:e1:94: 0b:b9:1c:42:ef:b2:d6:53:e7:2b:aa:5a:68:a2:38: 9e:55:bf:9f:64:89:8a:31:de:c0:f6:46:9e:98:e2: d0:9f:a6:f1:17:61:b3:a5:1b:ac:ab:cd:fa:11:43: 85:09:fb:f1:29:f4:fa:db:cc:69:c5:d1:7f:ac:81: f1:40:64:50:bb:79:0d:52:74:aa:54:67:3e:4d:22: d0:29:bd:00:8c:1f:95:86:99:64:b6:dc:6b:84:93: 66:21:c9:db:d8:82:81:af:5e:12:95:05:74:7d:7e: 72:61:d0:07:4d:df:1b:40:2b:6d:03:ec:b8:c3:89: 2d:97:b4:d4:65:f1:86:bc:7f:91:5e:36:5c:f0:10: 14:3c:0b:74:74:be:19:08:15:06:98:eb:e3:2f:f9: b2:68:b6:32:8d:0b:bd:32:59:eb:a3:e0:47:c8:46: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:51:53:EB:1B:C5:DC:5A:EB:B0:F0:24:65:D0:26:3F:09:3B:06:CA X509v3 Authority Key Identifier: keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7e:05:ed:53:7d:dd:bc:26:7d:6f:9c:8e:03:35:69:13:61: 3b:d5:09:4c:59:25:a6:b1:de:ad:c5:a8:4e:9e:74:d5:05:54: 27:94:2d:43:15:68:ef:b0:22:dd:8e:93:8a:fa:43:55:92:6c: cd:c1:75:b1:68:66:77:86:7d:fe:29:33:e2:92:51:55:b7:80: f3:8c:22:c3:ed:b9:70:79:88:c0:77:15:d1:7e:a5:8f:b4:21: 51:5d:eb:96:72:55:3a:97:4c:13:09:46:8e:b5:76:e5:1b:e6: cb:5a:a5:2e:cf:cd:58:74:ac:f8:e4:28:9c:bd:bb:53:96:4c: 13:92:a7:a6:d7:f2:c2:0e:a1:ed:0d:04:56:32:aa:63:32:05: 93:ce:bf:4e:e0:1f:23:6e:24:a0:46:e1:0e:ca:ba:a5:5b:80: 0d:ea:13:7d:aa:19:ba:67:6a:f1:16:08:d6:ff:fd:ac:20:83: e0:ec:4d:1b:3a:5b:69:ce:d8:b2:f0:5e:49:19:6c:5b:70:58: c6:95:82:82:81:48:3e:a4:80:27:d8:fc:6a:03:96:72:b5:88: c4:a9:2a:42:e9:ca:0e:87:41:cd:8e:07:a0:b3:71:3d:3a:19: a9:91:a8:d9:7c:e2:f3:bb:ae:b3:95:b5:6e:2a:2e:60:bd:d4: bc:e8:9c:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3QTkxMTAvBgNVBAUTKDUzOTRFNTdEMjg1Nzc3RkQ3NTE0MjhEMTVDQjBGQjJG QzU5MkM3QTYwHhcNMjYwOTEwMjI0MDI5WhcNMjYwOTE3MjI0MDI5WjAYMRYwFAYD VQQDEw02YWEzMzFkZC04OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUNg9+MVclN74cPnOozkS5+0uztuPudIPNRNWMwqvbsqEcnKBorLGIvvXitv 9/2dUuDsqdz/Jcl7Yb/BnuKQTlbXA2XmMr67vQWUjzCotuhXZ2chGFum4ZQLuRxC 77LWU+crqlpoojieVb+fZImKMd7A9kaemOLQn6bxF2GzpRusq836EUOFCfvxKfT6 28xpxdF/rIHxQGRQu3kNUnSqVGc+TSLQKb0AjB+VhplkttxrhJNmIcnb2IKBr14S lQV0fX5yYdAHTd8bQCttA+y4w4ktl7TUZfGGvH+RXjZc8BAUPAt0dL4ZCBUGmOvj L/myaLYyjQu9Mlnro+BHyEZ8IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZRU+sb xdxa67DwJGXQJj8JOwbKMB8GA1UdIwQYMBaAFFOU5X0oV3f9dRQo0Vyw+y/Fksem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTdBOS81Rjg5RjZFQ0ZC MzExMUVCOEZCRkE1NTlDNEY5QUUwMi9VNVRsZlNoWGRfMTFGQ2pSWExEN0w4V1N4 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U1VGxmU2hYZF8xMUZDalJYTEQ3TDhXU3g2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTdBOS81Rjg5RjZFQ0ZCMzExMUVCOEZCRkE1NTlDNEY5QUUwMi9VNVRsZlNoWGRf MTFGQ2pSWExEN0w4V1N4NlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtH4F7VN93bwmfW+cjgM1aRNhO9UJTFklprHercWoTp501QVUJ5QtQxVo77Ai 3Y6TivpDVZJszcF1sWhmd4Z9/ikz4pJRVbeA84wiw+25cHmIwHcV0X6lj7QhUV3r lnJVOpdMEwlGjrV25Rvmy1qlLs/NWHSs+OQonL27U5ZME5Knptfywg6h7Q0EVjKq YzIFk86/TuAfI24koEbhDsq6pVuADeoTfaoZumdq8RYI1v/9rCCD4OxNGzpbac7Y svBeSRlsW3BYxpWCgoFIPqSAJ9j8agOWcrWIxKkqQunKDodBzY4HoLNxPToZqZGo 2Xzi87uus5W1biouYL3UvOicrA== -----END CERTIFICATE-----Generated at Fri Sep 11 17:11:20 2026 by rpki-client