$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: 0D4MDhsPMyFPw3aDuXEmm3ZzIRbeNX3rDBWrjbebPos= Subject key identifier: BB:DC:A5:71:15:B4:12:42:D9:82:CF:8E:27:91:3A:D3:33:61:96:6C Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 05B8 Signing time: Wed 28 Oct 2026 23:19:41 +0000 Manifest this update: Wed 28 Oct 2026 23:19:40 +0000 Manifest next update: Wed 04 Nov 2026 23:19:40 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: Ym0LevkDlg0xre0SFqkHtxwIF4kswnVw1FU9awpyZOo=) 2: CA24F21C6DE711F180D709405CA30FBC.roa (hash: Oyiw752YkZ+aWMvYkiVvYpwM7PpYiOLSODbco0Yd+e0=) 3: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Oct 28 23:19:40 2026 GMT Not After : Nov 4 23:19:40 2026 GMT Subject: CN=6ae2830d-7a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:83:2f:77:0b:e7:3e:0d:4e:9b:ff:5a:ca: 6b:eb:6c:28:69:f8:cb:71:df:3c:05:c4:06:df:a2: 84:40:80:d7:a9:ff:68:8b:24:4f:a6:37:dd:5a:cb: af:d3:9b:14:b7:2c:06:59:93:74:3f:57:55:c3:c4: c6:07:88:ce:fb:66:77:92:da:f5:55:36:09:7b:a2: a6:fe:94:26:ac:70:c6:2c:22:28:e5:9f:71:b3:e5: ca:d0:f4:61:bc:3c:5b:87:72:55:ce:71:b9:1c:9e: b5:be:b1:52:9f:2e:10:35:0d:6f:a5:0e:93:11:7b: e4:c9:54:90:99:12:cf:4d:2f:13:92:29:0b:54:8a: 24:12:ab:3c:e1:90:ab:07:71:f6:7b:ca:ca:e6:a2: c4:3a:9a:df:11:fd:15:dc:cd:63:d4:d6:2d:16:c5: 18:72:b5:d5:02:64:dd:7c:52:c4:9b:7e:1d:b9:08: 54:b9:f3:94:78:20:89:e6:3d:1c:ce:f9:f0:af:23: ac:e6:68:dd:3a:49:ec:ca:da:07:89:09:63:ba:56: 83:11:f0:d9:67:e2:aa:67:e5:75:f0:af:92:80:a1: 23:a1:6a:91:dc:b1:55:ef:32:3c:9b:5d:0f:5f:08: c6:0c:dc:0f:c4:12:cb:d3:3c:5d:83:3e:f1:ac:e8: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DC:A5:71:15:B4:12:42:D9:82:CF:8E:27:91:3A:D3:33:61:96:6C X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a0:e5:da:40:cc:9f:c1:5b:ab:de:8c:47:b8:b3:82:83:05: 50:0b:c6:e6:5b:75:1d:70:27:c0:7b:08:73:3d:6b:ea:4b:8c: 05:0d:d2:95:6a:76:9f:74:c7:3e:3a:f7:30:10:11:42:df:37: 99:ae:33:cc:08:df:86:0d:0e:31:ac:70:85:20:26:46:a5:36: c3:c9:0b:b5:5b:6f:18:e5:b7:bf:0c:4a:7b:9b:d1:f3:14:8d: f4:be:c5:6d:c8:a9:97:94:fe:47:a4:56:8e:f4:01:29:cc:34: da:4f:bb:a2:51:95:65:56:e6:be:ba:7a:ac:cc:53:16:52:90: 85:81:7c:cc:c5:0c:26:88:ba:38:17:9d:7b:f7:77:cd:f8:34: c6:32:50:c8:65:8b:08:7a:fa:c0:4d:6e:24:bd:9e:11:f8:17: 99:80:3c:5d:f4:8d:42:01:07:4e:03:66:1b:ed:21:8e:56:9f: 2a:6e:b1:7a:74:af:80:41:32:54:a8:36:df:2c:fd:42:9b:b8: 05:7c:0b:c8:37:43:d7:84:a3:36:de:d4:19:fd:2e:30:25:52: a8:2d:ff:11:9c:31:df:cc:2e:d8:e6:c9:e5:86:b3:5d:95:4f: 0b:c1:ba:49:83:a6:0d:a1:ca:83:10:3b:9a:f5:71:90:e8:e7: 40:ae:67:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjYxMDI4MjMxOTQwWhcNMjYxMTA0MjMxOTQwWjAYMRYwFAYD VQQDEw02YWUyODMwZC03YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkKDL3cL5z4NTpv/Wspr62woafjLcd88BcQG36KEQIDXqf9oiyRPpjfdWsuv 05sUtywGWZN0P1dVw8TGB4jO+2Z3ktr1VTYJe6Km/pQmrHDGLCIo5Z9xs+XK0PRh vDxbh3JVznG5HJ61vrFSny4QNQ1vpQ6TEXvkyVSQmRLPTS8TkikLVIokEqs84ZCr B3H2e8rK5qLEOprfEf0V3M1j1NYtFsUYcrXVAmTdfFLEm34duQhUufOUeCCJ5j0c zvnwryOs5mjdOknsytoHiQljulaDEfDZZ+KqZ+V18K+SgKEjoWqR3LFV7zI8m10P XwjGDNwPxBLL0zxdgz7xrOgrTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvcpXEV tBJC2YLPjieROtMzYZZsMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHqDl2kDMn8Fbq96MR7izgoMFUAvG5lt1HXAnwHsIcz1r6kuMBQ3SlWp2n3TH Pjr3MBARQt83ma4zzAjfhg0OMaxwhSAmRqU2w8kLtVtvGOW3vwxKe5vR8xSN9L7F bcipl5T+R6RWjvQBKcw02k+7olGVZVbmvrp6rMxTFlKQhYF8zMUMJoi6OBede/d3 zfg0xjJQyGWLCHr6wE1uJL2eEfgXmYA8XfSNQgEHTgNmG+0hjlafKm6xenSvgEEy VKg23yz9Qpu4BXwLyDdD14SjNt7UGf0uMCVSqC3/EZwx38wu2ObJ5YazXZVPC8G6 SYOmDaHKgxA7mvVxkOjnQK5n5Q== -----END CERTIFICATE-----Generated at Thu Oct 29 13:56:17 2026 by rpki-client