$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: 4ifae+re46GFGGYrLgSM+efuDnTaC4E3NmTaJT3zpXU= Subject key identifier: 58:A3:87:5C:BF:E2:C1:DE:59:1B:9C:41:7C:E9:4C:89:43:BD:CB:EB Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 9E Signing time: Mon 05 Oct 2026 07:48:47 +0000 Manifest this update: Mon 05 Oct 2026 07:48:47 +0000 Manifest next update: Mon 12 Oct 2026 07:48:47 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: c7GYcfYEz/l+BZnIys+avvwvuwXrzZyjmvQ7AW928j0=) 2: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=) 3: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Oct 5 07:48:47 2026 GMT Not After : Oct 12 07:48:47 2026 GMT Subject: CN=6ac3565f-23fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:bf:a4:27:9c:24:68:ab:ad:6c:b8:f8:a6: 26:9d:76:20:b5:2c:04:d4:b5:41:21:a7:0a:01:95: 09:3e:9e:da:a3:62:75:9f:52:f1:d6:db:85:f8:e7: cb:d3:f3:ad:b6:ed:70:a6:de:4e:9a:c8:87:ad:da: 29:44:19:64:d9:25:65:9b:29:d4:88:a4:3f:c1:e9: 28:7c:31:4f:44:e2:6f:52:2a:d6:76:36:df:8f:2b: 1e:42:75:ad:d2:89:0b:06:ed:cb:c8:27:51:18:45: bc:c5:98:29:93:9f:9e:31:5d:fc:73:dd:80:8b:5b: 9d:d4:6d:a8:c0:a5:84:31:ff:d9:72:ce:45:87:21: 8c:0f:1a:6a:c2:fe:7b:ea:d1:a0:d5:a3:1e:af:87: 57:63:51:f0:10:e0:3c:22:91:bc:27:fa:ec:51:14: 99:04:96:7d:91:b3:0f:b4:9e:6b:19:4e:24:72:64: a6:30:73:ca:46:46:f9:04:fb:31:c2:56:af:37:fc: 0d:1d:81:c3:0f:f8:cf:5a:f8:3d:60:b1:7b:5c:01: ac:16:5a:95:e9:14:e0:d0:16:01:a5:1c:f8:3a:ef: 13:83:c0:a8:94:ee:a0:9c:97:40:04:06:a5:3a:60: 1a:d7:a0:61:d3:1a:13:80:cb:b9:fe:e4:6c:7c:57: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:87:5C:BF:E2:C1:DE:59:1B:9C:41:7C:E9:4C:89:43:BD:CB:EB X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:10:5b:85:65:1d:f4:86:82:ed:5b:f9:f9:db:00:6a:07:2d: 79:e1:6e:31:89:02:ed:ce:2e:83:fe:8f:14:55:1f:9b:fa:b1: 28:48:d0:29:70:e4:39:d4:2b:4e:7c:f7:c2:9e:4f:29:00:67: b9:7e:33:9a:be:8c:59:c7:12:16:f2:00:47:01:cf:86:d6:c9: c0:df:8c:ae:49:bb:c0:82:e2:68:2e:16:8a:ad:c8:00:d9:1b: 64:26:51:3a:70:8b:88:b6:a1:52:bb:b4:98:3e:9b:59:cc:42: c7:9a:55:82:1f:fa:83:c3:1a:00:99:d3:dc:c6:2f:f7:eb:69: a3:b3:e9:03:46:b5:41:df:e4:57:e3:af:18:bb:cc:2c:ec:1f: 10:a7:05:b0:b0:7a:cd:38:1e:66:9a:4d:89:34:c0:03:f8:93: 8e:56:e1:58:e7:af:e9:72:a3:35:18:96:2d:c0:54:f1:9a:f6: 90:d0:74:34:01:ac:85:86:8d:2e:69:6c:f4:ec:7b:e0:34:d3: b5:cd:4c:1a:6b:05:a9:34:72:cb:ae:c3:77:7f:15:5b:78:ee: a7:be:3f:78:fa:9f:0b:70:75:61:a6:0c:eb:78:0f:26:ed:eb: 5a:5f:f8:9c:5d:1e:e7:a1:33:fa:76:ac:bd:01:e9:42:52:52: 7d:9e:69:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBQTMxMTAvBgNVBAUTKEY5QUU1RTJBOURDODBCNTFFQUE3NTc3Mjc4QzNERTA2 MUE4MEFCNjMwHhcNMjYxMDA1MDc0ODQ3WhcNMjYxMDEyMDc0ODQ3WjAYMRYwFAYD VQQDEw02YWMzNTY1Zi0yM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0W/pCecJGirrWy4+KYmnXYgtSwE1LVBIacKAZUJPp7ao2J1n1Lx1tuF+OfL 0/Ottu1wpt5OmsiHrdopRBlk2SVlmynUiKQ/wekofDFPROJvUirWdjbfjyseQnWt 0okLBu3LyCdRGEW8xZgpk5+eMV38c92Ai1ud1G2owKWEMf/Zcs5FhyGMDxpqwv57 6tGg1aMer4dXY1HwEOA8IpG8J/rsURSZBJZ9kbMPtJ5rGU4kcmSmMHPKRkb5BPsx wlavN/wNHYHDD/jPWvg9YLF7XAGsFlqV6RTg0BYBpRz4Ou8Tg8ColO6gnJdABAal OmAa16Bh0xoTgMu5/uRsfFd3LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFijh1y/ 4sHeWRucQXzpTIlDvcvrMB8GA1UdIwQYMBaAFPmuXiqdyAtR6qdXcnjD3gYagKtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFBMy8xQzE3OTEzQUQ5 MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC8tYTVlS3AzSUMxSHFwMWR5ZU1QZUJocUFx Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFBMy8xQzE3OTEzQUQ5MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC8tYTVlS3AzSUMx SHFwMWR5ZU1QZUJocUFxMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFxBbhWUd9IaC7Vv5+dsAagcteeFuMYkC7c4ug/6PFFUfm/qxKEjQKXDkOdQr Tnz3wp5PKQBnuX4zmr6MWccSFvIARwHPhtbJwN+Mrkm7wILiaC4Wiq3IANkbZCZR OnCLiLahUru0mD6bWcxCx5pVgh/6g8MaAJnT3MYv9+tpo7PpA0a1Qd/kV+OvGLvM LOwfEKcFsLB6zTgeZppNiTTAA/iTjlbhWOev6XKjNRiWLcBU8Zr2kNB0NAGshYaN Lmls9Ox74DTTtc1MGmsFqTRyy67Dd38VW3jup74/ePqfC3B1YaYM63gPJu3rWl/4 nF0e56Ez+nasvQHpQlJSfZ5p9Q== -----END CERTIFICATE-----Generated at Wed Oct 7 02:25:53 2026 by rpki-client