$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft File: 5hNv9jcai54OTCI2tT1oHR6G5uE.mft (raw, json) Hash identifier: QQ42qXjmUlZBQbZLeIxxDp4NzMn5KOkKRm+37n6Jigg= Subject key identifier: C8:7A:5E:F3:49:9D:11:89:79:B4:65:01:19:E5:42:C5:B8:B9:16:B0 Authority key identifier: E6:13:6F:F6:37:1A:8B:9E:0E:4C:22:36:B5:3D:68:1D:1E:86:E6:E1 Certificate issuer: /CN=A91CE017/serialNumber=E6136FF6371A8B9E0E4C2236B53D681D1E86E6E1 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft Manifest number: 0E Signing time: Thu 03 Sep 2026 09:20:35 +0000 Manifest this update: Thu 03 Sep 2026 09:20:34 +0000 Manifest next update: Thu 10 Sep 2026 09:20:34 +0000 Files and hashes: 1: 5hNv9jcai54OTCI2tT1oHR6G5uE.crl (hash: Q2RhHUUdGl75oIcpSK9ATA4QwC8FSCrRkT+mLEckskI=) 2: 45686542953611F19AE964455B11F970.roa (hash: Wehi5FpfGokFKUB1RUxdtUYX4xVthD87KZo85iISNWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.crl rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE017, serialNumber=E6136FF6371A8B9E0E4C2236B53D681D1E86E6E1 Validity Not Before: Sep 3 09:20:34 2026 GMT Not After : Sep 10 09:20:34 2026 GMT Subject: CN=6a993be3-177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:e7:a9:b8:6f:b3:51:ec:94:cc:c5:d7:b4: 11:5a:ec:ca:ff:f5:aa:ea:42:ba:f0:9e:65:32:c6: d0:3e:31:58:79:61:11:af:94:69:c3:6e:b4:bc:57: f6:9a:ed:b2:96:af:29:c5:8a:98:6b:2f:2b:e0:aa: de:45:59:6a:70:0a:15:41:99:65:9b:d0:6f:b4:d4: dd:0d:16:34:07:89:ea:5f:8f:a4:ab:a6:72:f6:df: 26:3d:95:14:57:48:bb:fe:fd:93:0b:db:76:1b:6e: d3:ce:24:4a:89:74:03:b1:97:1b:31:20:b6:35:07: 67:b7:bf:a0:90:72:cf:84:af:76:54:ae:e4:8c:70: 8c:1e:45:10:41:65:1d:af:2d:67:21:5d:eb:0e:e2: 0c:fa:96:21:1e:e1:32:b5:d8:8f:39:d7:9c:d2:4a: 8c:3c:69:5a:72:bf:eb:6e:b7:d9:9b:a5:85:24:cd: 24:bc:4d:de:4e:da:00:66:b3:74:f8:bc:96:ac:00: 4a:b5:ef:0b:54:dd:94:14:0b:73:c3:11:b1:a6:37: ed:77:54:3e:c8:a6:8f:72:9d:c5:2d:32:19:a8:96: 0e:b7:51:1a:19:78:30:cb:b5:12:de:6e:9c:c7:a8: a3:b6:c9:29:eb:a2:fb:02:05:c5:e9:2d:72:f9:40: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7A:5E:F3:49:9D:11:89:79:B4:65:01:19:E5:42:C5:B8:B9:16:B0 X509v3 Authority Key Identifier: keyid:E6:13:6F:F6:37:1A:8B:9E:0E:4C:22:36:B5:3D:68:1D:1E:86:E6:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5hNv9jcai54OTCI2tT1oHR6G5uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE017/3788B554953511F1966FBC125B11F970/5hNv9jcai54OTCI2tT1oHR6G5uE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:06:2e:f1:24:53:bc:0f:7c:97:e0:27:7e:a4:62:2f:b3:13: 0a:f3:b8:07:81:25:dc:eb:24:76:19:2f:93:99:96:24:a0:17: f2:49:61:92:0a:8b:d4:dd:1a:42:62:50:06:76:94:d9:72:8a: dd:68:b6:f3:31:8b:d8:73:bc:a5:f8:f9:48:fd:84:39:43:20: 4a:19:7b:07:99:55:95:a6:b6:1d:9b:7d:c8:48:4f:4c:3c:dd: 60:6e:74:0f:70:57:af:0e:36:a3:c5:e0:8a:12:12:73:6b:6a: 91:ca:7a:d4:41:64:0d:f8:90:d2:5b:57:9e:8f:eb:3d:db:c3: dd:8f:e4:2b:9e:59:55:c4:d4:22:f1:b0:0f:28:18:28:d0:60: fc:b3:31:24:09:a2:6c:5d:29:3d:d2:a4:93:af:ad:db:e6:cb: a6:9b:bd:11:ec:f9:eb:55:37:e2:d6:6b:15:a5:16:d5:e5:b8: 67:79:aa:da:02:19:84:76:f3:da:82:c3:c7:a1:4c:19:ed:0b: d3:0c:3d:85:08:23:dc:26:f9:1b:a5:71:ca:6d:f0:62:b3:15: 18:fc:57:d2:2e:f4:78:28:6f:09:1e:da:33:91:e6:81:ae:9e: 56:66:31:4f:7c:8f:97:f1:f3:3a:38:43:56:69:2c:d4:0a:6c: 36:a1:ae:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTAxNzExMC8GA1UEBRMoRTYxMzZGRjYzNzFBOEI5RTBFNEMyMjM2QjUzRDY4MUQx RTg2RTZFMTAeFw0yNjA5MDMwOTIwMzRaFw0yNjA5MTAwOTIwMzRaMBgxFjAUBgNV BAMTDTZhOTkzYmUzLTE3N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYVeepuG+zUeyUzMXXtBFa7Mr/9arqQrrwnmUyxtA+MVh5YRGvlGnDbrS8V/aa 7bKWrynFiphrLyvgqt5FWWpwChVBmWWb0G+01N0NFjQHiepfj6SrpnL23yY9lRRX SLv+/ZML23YbbtPOJEqJdAOxlxsxILY1B2e3v6CQcs+Er3ZUruSMcIweRRBBZR2v LWchXesO4gz6liEe4TK12I8515zSSow8aVpyv+tut9mbpYUkzSS8Td5O2gBms3T4 vJasAEq17wtU3ZQUC3PDEbGmN+13VD7Ipo9yncUtMhmolg63URoZeDDLtRLebpzH qKO2ySnrovsCBcXpLXL5QH1ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyHpe80md EYl5tGUBGeVCxbi5FrAwHwYDVR0jBBgwFoAU5hNv9jcai54OTCI2tT1oHR6G5uEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFMDE3LzM3ODhCNTU0OTUz NTExRjE5NjZGQkMxMjVCMTFGOTcwLzVoTnY5amNhaTU0T1RDSTJ0VDFvSFI2RzV1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNWhOdjlqY2FpNTRPVENJMnRUMW9IUjZHNXVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF MDE3LzM3ODhCNTU0OTUzNTExRjE5NjZGQkMxMjVCMTFGOTcwLzVoTnY5amNhaTU0 T1RDSTJ0VDFvSFI2RzV1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPBi7xJFO8D3yX4Cd+pGIvsxMK87gHgSXc6yR2GS+TmZYkoBfySWGSCovU3RpC YlAGdpTZcordaLbzMYvYc7yl+PlI/YQ5QyBKGXsHmVWVprYdm33ISE9MPN1gbnQP cFevDjajxeCKEhJza2qRynrUQWQN+JDSW1eej+s928Pdj+QrnllVxNQi8bAPKBgo 0GD8szEkCaJsXSk90qSTr63b5summ70R7PnrVTfi1msVpRbV5bhnearaAhmEdvPa gsPHoUwZ7QvTDD2FCCPcJvkbpXHKbfBisxUY/FfSLvR4KG8JHtozkeaBrp5WZjFP fI+X8fM6OENWaSzUCmw2oa69 -----END CERTIFICATE-----Generated at Fri Sep 4 22:58:39 2026 by rpki-client