$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft File: 5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json) Hash identifier: /eFaFPu7Z3Xk8UL/P6pX9EVbj3sNjSikJMpqIXSCv4E= Subject key identifier: 2D:41:D1:6B:09:8E:C3:B6:5D:20:BA:3B:09:57:C5:D3:9B:BC:40:46 Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71 Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft Manifest number: 5C Signing time: Tue 25 Aug 2026 08:19:17 +0000 Manifest this update: Tue 25 Aug 2026 08:19:17 +0000 Manifest next update: Tue 01 Sep 2026 08:19:17 +0000 Files and hashes: 1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: EuiFmZ638VRNxgnTJuohz9OtnvFrNvzTktSVDaIfkOE=) 2: AAA9E87A8F4811F19F9849D84411F970.roa (hash: lPnLM3IBe+agLx4ljzNp7JDQbn0Po4ZvE6p2YZXrWU0=) 3: A6ACEFDA968011F1B17E4A773E11F970.roa (hash: 9GD4Uo0AguAzcCLbKYP6lXShUffxjOG2KgRAUcehRi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371 Validity Not Before: Aug 25 08:19:17 2026 GMT Not After : Sep 1 08:19:17 2026 GMT Subject: CN=6a8d5005-45c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:11:f2:23:ba:b7:0e:b0:bb:9a:b3:4c:85: 1c:3d:51:60:fe:92:f1:f3:a0:3d:32:a7:37:ec:60: 67:42:3a:d1:35:91:da:5d:51:c9:0c:e0:f3:12:8e: 52:e6:c7:09:a6:a4:56:27:5d:a8:17:d3:82:7d:03: ad:ca:a4:dc:d7:46:32:21:46:13:43:25:db:00:4c: 0c:f8:61:d8:9b:a5:65:d0:cb:06:f7:e9:8c:92:92: 50:43:ac:9b:ce:2e:42:4c:95:c6:fa:57:90:7d:d8: 7a:07:2c:6f:76:9c:a5:3f:e1:27:43:41:5c:d8:3e: b3:d5:14:15:3e:b3:7a:c6:d5:64:90:b5:c5:fa:e3: f0:31:48:69:e7:37:a6:4c:a3:fb:89:a4:a4:b1:67: 8d:21:52:52:be:60:0e:a3:c1:8c:1c:19:6f:65:b3: b5:84:7b:da:73:ed:f6:e7:0d:4e:5f:93:86:4b:fc: 7c:d8:02:1a:97:6f:9f:5c:6a:0d:54:43:f6:de:3c: c4:c4:5f:b8:dc:45:13:2d:19:fd:70:e3:4d:04:8e: cd:4d:11:57:46:d1:02:c9:98:44:ee:15:97:59:46: ff:be:f0:c1:42:d5:00:e6:a7:9a:15:0d:d9:66:1e: cb:2e:08:a2:06:30:b4:e3:ab:9a:ff:d7:6e:68:c5: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:41:D1:6B:09:8E:C3:B6:5D:20:BA:3B:09:57:C5:D3:9B:BC:40:46 X509v3 Authority Key Identifier: keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b9:53:f0:2f:50:8c:02:b0:a2:bf:2d:3a:cc:3a:da:91:f0: c9:c1:f0:01:9d:19:a9:ce:9c:50:2a:2a:e5:3d:c0:d3:51:fd: 2c:33:34:f7:9a:8c:e6:ae:ec:96:06:a6:e2:77:a9:2e:91:b9: 74:a4:81:35:26:cf:a1:bd:e0:b0:b3:0c:14:fc:6f:28:f0:b9: 96:31:01:da:d0:eb:76:77:6c:5e:5e:d2:eb:da:ae:29:26:99: fb:59:6b:f8:9a:b8:64:ae:ce:81:97:e8:27:0c:7d:cf:bc:24: 37:90:bb:35:4c:bf:2b:52:4e:3f:0a:49:2d:5c:c6:d0:99:2e: f2:85:c7:9a:00:08:68:b2:5f:ff:18:6b:29:a0:a5:7b:7f:6d: aa:22:ea:c0:b7:e3:a9:b2:56:b6:6f:4c:1b:3f:d8:3b:8e:1a: b7:56:96:9b:c6:d3:eb:e2:5d:25:27:64:68:8a:49:3a:0d:82: d2:68:6e:ef:eb:06:d9:a8:de:68:b7:5e:c5:85:c7:b8:0e:f6: 80:81:f5:fc:4c:bd:7f:91:f0:44:dd:da:0a:ec:38:b2:37:b9: 59:ed:98:23:77:c9:b1:e2:7b:41:01:b4:05:44:43:9d:f1:84: c5:b5:55:84:16:99:4e:06:af:df:18:46:e0:03:ba:68:9c:a9: 68:09:e6:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDkyRDExMC8GA1UEBRMoRTU3MzNCMTNGRDg2QTIzNjk0NzAyQzNFMjhGM0ZGMDk0 OTdBOTM3MTAeFw0yNjA4MjUwODE5MTdaFw0yNjA5MDEwODE5MTdaMBgxFjAUBgNV BAMTDTZhOGQ1MDA1LTQ1YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClKhHyI7q3DrC7mrNMhRw9UWD+kvHzoD0ypzfsYGdCOtE1kdpdUckM4PMSjlLm xwmmpFYnXagX04J9A63KpNzXRjIhRhNDJdsATAz4YdibpWXQywb36YySklBDrJvO LkJMlcb6V5B92HoHLG92nKU/4SdDQVzYPrPVFBU+s3rG1WSQtcX64/AxSGnnN6ZM o/uJpKSxZ40hUlK+YA6jwYwcGW9ls7WEe9pz7fbnDU5fk4ZL/HzYAhqXb59cag1U Q/bePMTEX7jcRRMtGf1w400Ejs1NEVdG0QLJmETuFZdZRv++8MFC1QDmp5oVDdlm HssuCKIGMLTjq5r/125oxYgLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULUHRawmO w7ZdILo7CVfF05u8QEYwHwYDVR0jBBgwFoAU5XM7E/2GojaUcCw+KPP/CUl6k3Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREOTJELzI0RDhFM0RDMzZG NTExRjE4NTlBQjRGRUI5ODMzNzczLzVYTTdFXzJHb2phVWNDdy1LUFBfQ1VsNmsz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVhNN0VfMkdvamFVY0N3LUtQUF9DVWw2azNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE OTJELzI0RDhFM0RDMzZGNTExRjE4NTlBQjRGRUI5ODMzNzczLzVYTTdFXzJHb2ph VWNDdy1LUFBfQ1VsNmszRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0uVPwL1CMArCivy06zDrakfDJwfABnRmpzpxQKirlPcDTUf0sMzT3mozmruyW Bqbid6kukbl0pIE1Js+hveCwswwU/G8o8LmWMQHa0Ot2d2xeXtLr2q4pJpn7WWv4 mrhkrs6Bl+gnDH3PvCQ3kLs1TL8rUk4/CkktXMbQmS7yhceaAAhosl//GGspoKV7 f22qIurAt+Opsla2b0wbP9g7jhq3VpabxtPr4l0lJ2Roikk6DYLSaG7v6wbZqN5o t17Fhce4DvaAgfX8TL1/kfBE3doK7DiyN7lZ7Zgjd8mx4ntBAbQFREOd8YTFtVWE FplOBq/fGEbgA7ponKloCeaw -----END CERTIFICATE-----Generated at Wed Aug 26 23:57:53 2026 by rpki-client