$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: hRdFKEhPl8WKiFJ4UhVjH+0cV5hObn9y29VHDnrp2WQ= Subject key identifier: D6:E7:1C:E3:89:D1:A4:91:A5:87:CB:8A:21:46:E0:80:6C:0D:0E:1F Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0AF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0AE8 Signing time: Fri 02 Oct 2026 19:38:58 +0000 Manifest this update: Fri 02 Oct 2026 19:38:58 +0000 Manifest next update: Fri 09 Oct 2026 19:38:58 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: UnaqpjuQsJNzEZOzv7xU6oRKmrPblx0Va13e1SuAL+0=) 2: 2B3DAF56792F11F1AA232E0470A30FBC.roa (hash: FaexDfof3iMtZUkiOS5mGwX0gEamxotee2n3devY+9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2806 (0xaf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Oct 2 19:38:58 2026 GMT Not After : Oct 9 19:38:58 2026 GMT Subject: CN=6ac00852-de38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:d2:1a:77:f5:46:4b:e2:36:6a:99:04:86: 17:e6:1a:1e:9d:95:ea:9b:f3:43:06:a8:9b:15:c0: 01:fc:4a:1f:60:da:04:e0:c7:ca:1b:61:dd:75:74: 4d:f3:dd:26:65:21:c2:e5:ee:3c:fe:e9:51:bb:4a: 1e:0e:f9:e7:2b:42:c8:a7:a6:1d:40:bb:41:9e:95: 9a:1b:d4:79:b2:58:c3:3b:81:e0:ad:73:f3:e3:ea: 11:36:f2:3e:d5:09:8a:f3:d6:f2:cd:e5:69:58:40: be:aa:fe:bf:76:63:c9:ec:7d:59:f3:f8:c0:22:a4: 20:fb:fc:ad:f1:cc:35:44:ce:dd:f4:79:5b:0c:0a: 04:26:6d:16:ef:9c:07:f1:ea:ab:54:72:1b:55:3f: 24:6f:dd:53:93:b8:8b:15:23:ec:f1:2c:ac:ce:f1: 0c:d4:40:8f:92:20:60:b7:ba:61:7e:4a:07:b2:b1: 6d:3b:0c:48:b4:04:97:d8:b6:d1:1b:b0:e6:ef:2d: 9f:42:3b:0b:83:cb:90:4b:67:c8:f3:ae:a8:8a:ae: 03:73:cb:d9:14:53:2a:56:bd:32:02:a9:eb:10:69: 24:9c:26:95:62:28:f8:db:8c:82:7d:4c:86:69:9e: d4:0c:63:de:0c:fd:48:88:4c:2b:21:ed:68:88:e6: dd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E7:1C:E3:89:D1:A4:91:A5:87:CB:8A:21:46:E0:80:6C:0D:0E:1F X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8d:e6:98:a6:8d:2f:14:0a:a8:7f:4e:ff:6d:95:a0:24:29: 99:bb:af:bd:20:a3:89:48:4f:34:6b:76:ad:76:d0:c1:96:24: c3:9c:e6:95:ea:92:e7:da:db:32:54:b0:56:7a:b6:68:90:e1: 52:11:64:aa:fd:52:78:3d:6e:41:e3:82:f0:cd:cc:2d:10:a4: 4d:7f:38:a2:b8:d2:73:74:ee:85:c6:f0:0f:a0:b9:0c:49:b8: 8b:02:56:44:d5:56:4c:02:0b:61:ce:d3:98:c9:d6:ab:e1:51: 03:44:88:68:41:c4:a5:6c:97:12:8e:9d:c4:3b:a5:b3:66:f0: 2f:16:59:ce:2f:9c:31:83:c4:04:18:be:ef:aa:85:84:09:b6: bc:77:91:3a:e3:9e:39:d4:3b:98:ba:52:c2:c9:fc:f6:18:24: 68:2c:bf:e4:68:77:6d:e4:31:16:d2:6b:2e:76:50:7a:79:1a: 3e:e8:0d:b2:0d:c4:58:7c:df:a9:97:dc:30:f5:54:3f:5a:6c: 50:94:87:ea:26:06:97:d1:6b:9f:9a:3f:9f:f7:67:9b:95:df: 78:1d:88:27:6b:29:11:dd:38:33:0c:d4:78:27:f2:13:4b:60: f4:77:ab:68:b4:18:80:ad:e3:40:c3:13:fb:16:c0:9e:54:2f: 26:b9:b0:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjYxMDAyMTkzODU4WhcNMjYxMDA5MTkzODU4WjAYMRYwFAYD VQQDEw02YWMwMDg1Mi1kZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3t7SGnf1RkviNmqZBIYX5hoenZXqm/NDBqibFcAB/EofYNoE4MfKG2HddXRN 890mZSHC5e48/ulRu0oeDvnnK0LIp6YdQLtBnpWaG9R5sljDO4HgrXPz4+oRNvI+ 1QmK89byzeVpWEC+qv6/dmPJ7H1Z8/jAIqQg+/yt8cw1RM7d9HlbDAoEJm0W75wH 8eqrVHIbVT8kb91Tk7iLFSPs8SyszvEM1ECPkiBgt7phfkoHsrFtOwxItASX2LbR G7Dm7y2fQjsLg8uQS2fI866oiq4Dc8vZFFMqVr0yAqnrEGkknCaVYij424yCfUyG aZ7UDGPeDP1IiEwrIe1oiObd9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbnHOOJ 0aSRpYfLiiFG4IBsDQ4fMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQY3mmKaNLxQKqH9O/22VoCQpmbuvvSCjiUhPNGt2rXbQwZYkw5zmleqS59rb MlSwVnq2aJDhUhFkqv1SeD1uQeOC8M3MLRCkTX84orjSc3TuhcbwD6C5DEm4iwJW RNVWTAILYc7TmMnWq+FRA0SIaEHEpWyXEo6dxDuls2bwLxZZzi+cMYPEBBi+76qF hAm2vHeROuOeOdQ7mLpSwsn89hgkaCy/5Gh3beQxFtJrLnZQenkaPugNsg3EWHzf qZfcMPVUP1psUJSH6iYGl9Frn5o/n/dnm5XfeB2IJ2spEd04MwzUeCfyE0tg9Her aLQYgK3jQMMT+xbAnlQvJrmwYA== -----END CERTIFICATE-----Generated at Sun Oct 4 10:48:13 2026 by rpki-client