$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: KJ4RpfTbHUclRre1nEUmcQMsEoB4Ety6ZZuBSmC5Zic= Subject key identifier: 83:B3:CB:13:A9:3D:12:F8:C0:90:1C:2F:C9:94:E9:5A:16:E1:62:38 Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: C9 Signing time: Mon 19 Oct 2026 07:29:51 +0000 Manifest this update: Mon 19 Oct 2026 07:29:50 +0000 Manifest next update: Mon 26 Oct 2026 07:29:50 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: Y5aqME3GAtkCNHqAn8hfpbmDczIDCqm8TO4FGHW1q54=) 2: 7A339E4448F711F1A886AD5191833773.roa (hash: AkLBKnBGnGaPJ8LjzqW9BNXxip/jAPg4ZWxCffjH75k=) 3: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=) 4: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Oct 19 07:29:50 2026 GMT Not After : Oct 26 07:29:50 2026 GMT Subject: CN=6ad5c6ef-b696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:0b:ee:fc:2b:97:2f:d5:05:94:5b:8d:bb: 1d:98:d6:cc:10:7c:37:3a:b1:c9:f3:12:c9:51:53: e1:6f:6f:e1:d1:4f:0b:ca:2c:e8:73:60:6a:b6:b2: ff:2b:ff:3e:89:f8:df:75:ac:ed:c3:50:c5:9f:cd: d5:3b:4b:12:7d:4d:69:2a:2b:7a:34:3c:c5:2f:c1: 2e:77:43:6f:a6:48:9b:8b:d8:d4:eb:be:26:6f:26: a8:18:d1:ea:44:0f:be:1d:b7:c1:fe:0f:86:fe:f5: 4e:9a:23:b2:de:5a:16:92:66:f3:32:45:0e:8f:36: d6:03:e0:99:cc:68:af:e0:a2:67:25:9b:ff:c2:8a: c9:d8:6d:17:0b:84:f7:09:33:40:1d:61:e7:c8:07: 00:2b:ac:ba:02:4a:10:f2:8a:7b:29:3b:a4:76:40: 1f:50:11:13:fe:5a:6a:6a:cf:21:1e:31:bd:ff:85: c9:eb:90:15:e7:b7:2b:d7:e2:a7:df:5c:9a:9d:fc: 3d:fe:be:4a:94:79:d5:7f:ef:b8:c4:1d:bd:87:7a: 62:f9:d5:dc:f5:1d:32:79:48:da:ec:07:64:3f:09: 48:d4:a3:10:05:09:6e:cd:61:9d:08:9f:6f:b5:11: 59:91:80:67:c6:73:34:ec:fc:06:5c:5a:c4:77:aa: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B3:CB:13:A9:3D:12:F8:C0:90:1C:2F:C9:94:E9:5A:16:E1:62:38 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d8:6c:79:0c:37:92:fe:56:22:37:50:90:ac:1b:ed:9d:a8: ee:04:37:5f:11:b1:e7:3c:d9:7c:0d:23:a4:bc:fa:94:98:69: 2b:e6:14:fa:e4:12:0d:57:70:23:c8:7f:76:47:7d:bf:62:14: 5c:a8:76:5d:47:23:02:5e:fb:68:b7:f4:1c:13:61:a9:6b:73: 43:91:2f:dc:af:2e:6b:95:6a:da:60:a2:4b:37:a4:72:35:fa: ed:4f:5d:a5:3c:12:1d:4e:90:fa:19:b7:21:ba:7b:99:ca:09: a9:e5:0c:99:5a:cb:89:86:28:60:b8:6c:47:75:a8:a1:0e:4a: 16:b6:8c:4c:73:16:6e:3d:2e:c4:a1:0f:6a:0f:3d:57:1e:a4: 4b:95:03:75:a1:de:76:af:df:7e:d0:ac:f1:12:5d:6d:36:6f: 7c:7d:2e:b4:6f:55:10:46:7b:7e:94:b9:68:69:d6:7d:6c:85: a9:fb:7a:ab:e7:7e:e0:95:9b:05:9a:97:b3:8a:0d:da:45:3d: d9:7b:31:1a:13:4c:01:a4:41:69:28:17:5d:c1:4f:e9:8c:f3: e7:69:3d:eb:16:5d:18:d5:48:e2:a4:31:28:d3:47:43:56:05: 0e:7f:9b:93:14:7e:2b:91:83:c8:43:f4:07:34:96:92:a7:43: d2:c8:2b:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0Q0QxMTAvBgNVBAUTKEU3MDYwMTJBMTA2QkQwOTQ2NThFNjA0QzU2MDMwNTBG MTREQzNGNEMwHhcNMjYxMDE5MDcyOTUwWhcNMjYxMDI2MDcyOTUwWjAYMRYwFAYD VQQDEw02YWQ1YzZlZi1iNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMEL7vwrly/VBZRbjbsdmNbMEHw3OrHJ8xLJUVPhb2/h0U8Lyizoc2BqtrL/ K/8+ifjfdaztw1DFn83VO0sSfU1pKit6NDzFL8Eud0Nvpkibi9jU674mbyaoGNHq RA++HbfB/g+G/vVOmiOy3loWkmbzMkUOjzbWA+CZzGiv4KJnJZv/worJ2G0XC4T3 CTNAHWHnyAcAK6y6AkoQ8op7KTukdkAfUBET/lpqas8hHjG9/4XJ65AV57cr1+Kn 31yanfw9/r5KlHnVf++4xB29h3pi+dXc9R0yeUja7AdkPwlI1KMQBQluzWGdCJ9v tRFZkYBnxnM07PwGXFrEd6p/8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOzyxOp PRL4wJAcL8mU6VoW4WI4MB8GA1UdIwQYMBaAFOcGASoQa9CUZY5gTFYDBQ8U3D9M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRDRC8yQ0Q3RkQwRTlF QzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBKUmxqbUJNVmdNRkR4VGNQ MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Awdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8yQ0Q3RkQwRTlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi81d1lCS2hCcjBK UmxqbUJNVmdNRkR4VGNQMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa9hseQw3kv5WIjdQkKwb7Z2o7gQ3XxGx5zzZfA0jpLz6lJhpK+YU+uQSDVdw I8h/dkd9v2IUXKh2XUcjAl77aLf0HBNhqWtzQ5Ev3K8ua5Vq2mCiSzekcjX67U9d pTwSHU6Q+hm3Ibp7mcoJqeUMmVrLiYYoYLhsR3WooQ5KFraMTHMWbj0uxKEPag89 Vx6kS5UDdaHedq/fftCs8RJdbTZvfH0utG9VEEZ7fpS5aGnWfWyFqft6q+d+4JWb BZqXs4oN2kU92XsxGhNMAaRBaSgXXcFP6Yzz52k96xZdGNVI4qQxKNNHQ1YFDn+b kxR+K5GDyEP0BzSWkqdD0sgr2Q== -----END CERTIFICATE-----Generated at Mon Oct 19 22:23:46 2026 by rpki-client