$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft File: 5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json) Hash identifier: NMD6A3XftrJ/M/GkdDGGNRnhF93l6fcy6Ce6u9qvUDc= Subject key identifier: CA:D4:9D:E5:1C:06:B8:FE:EC:51:A4:8C:A5:99:0E:29:92:62:34:85 Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71 Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft Manifest number: 76 Signing time: Tue 13 Oct 2026 08:50:51 +0000 Manifest this update: Tue 13 Oct 2026 08:50:51 +0000 Manifest next update: Tue 20 Oct 2026 08:50:51 +0000 Files and hashes: 1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: DkhrKsb/Uvo506Rxa3Oe4dL3vVn6xubitDXrlBN94uU=) 2: AAA9E87A8F4811F19F9849D84411F970.roa (hash: lPnLM3IBe+agLx4ljzNp7JDQbn0Po4ZvE6p2YZXrWU0=) 3: A6ACEFDA968011F1B17E4A773E11F970.roa (hash: 3gCHngJzVnskVVhK1jUp7VtMejxIWQ1lkVTaECuXDhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371 Validity Not Before: Oct 13 08:50:51 2026 GMT Not After : Oct 20 08:50:51 2026 GMT Subject: CN=6acdf0eb-e98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:3e:1e:42:e0:92:cb:1b:a4:18:65:6d:ed: 70:38:0c:c0:53:43:d4:a5:2d:5b:65:9b:8b:3c:ec: 21:f5:b5:f9:9c:ee:65:ab:1f:b2:1e:9b:64:94:02: 31:9e:69:32:88:6c:b2:c5:ae:93:ea:e6:9a:af:b9: 31:ea:2b:a5:d5:f8:2d:38:fc:b1:06:9b:bd:07:7d: fa:4d:fe:ec:53:e3:87:35:4b:02:8c:2d:b4:a1:54: c2:61:f0:06:73:b0:57:55:49:7b:0a:e6:71:d2:2e: 16:41:41:94:d2:19:c3:09:05:94:71:58:a2:70:23: 7e:2c:11:5c:6b:7c:c1:e6:c5:ba:be:2f:10:9d:1e: 66:93:3b:6b:61:6f:d6:fe:14:f6:de:5a:73:96:d9: 51:a1:8f:ce:cb:9b:fb:91:96:ca:61:ac:96:4d:e0: b4:45:0f:52:2b:93:ef:25:63:cf:4e:69:56:83:8d: 09:2e:d8:28:5a:5c:0e:6f:4d:20:cf:1c:b8:38:3f: f1:18:48:36:13:64:68:d5:f1:9a:7f:cb:92:f3:09: df:cb:cd:08:52:c4:8c:52:af:31:74:ac:29:94:1e: 16:ee:40:02:0a:6a:dc:45:4a:cd:60:f3:0c:6e:bc: 53:55:6b:83:73:02:e8:68:9a:60:59:4a:1b:b2:c9: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D4:9D:E5:1C:06:B8:FE:EC:51:A4:8C:A5:99:0E:29:92:62:34:85 X509v3 Authority Key Identifier: keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1a:b5:8f:72:e8:d5:58:32:c9:de:9f:4c:22:39:91:30:13: 6a:5f:7a:d0:f0:25:31:c7:25:17:44:fe:19:31:0e:19:0a:fa: 59:5f:bd:97:0a:22:86:ac:50:ee:e2:c9:b5:24:7f:e8:9e:37: 1b:e2:bb:1b:f1:54:2e:8b:aa:aa:e4:e4:13:49:3d:58:9f:60: 8e:34:9a:6d:9d:13:6e:2f:35:64:d4:54:7b:c7:b6:50:eb:f5: 88:4b:e6:c4:18:8e:35:ec:53:fb:54:83:c3:43:67:cc:a8:b0: 99:a8:10:d1:6c:ba:8a:2b:1e:37:70:bc:d2:7f:99:3d:a6:81: 76:56:8e:23:2c:ed:1a:7f:f9:9a:b2:ec:44:29:b7:64:7e:f2: dd:77:c3:08:f7:60:05:e0:83:2a:7e:c3:ea:1a:cc:cb:62:27: b0:c1:aa:c5:a2:5d:9a:d3:bd:b8:dc:16:3a:43:c9:3e:f0:b7: 0e:66:dd:7c:2c:be:d5:50:de:79:0a:e5:5c:57:eb:ae:07:d9: 00:46:24:b0:80:49:d1:eb:b0:42:ba:32:1e:88:ff:62:84:4c: 05:7a:f4:8b:24:64:cb:e1:c0:8e:8f:51:57:c5:f9:b9:2e:97: 30:73:fa:f1:37:04:c3:6d:ec:4d:e9:7e:3d:35:54:08:b1:e3: f9:eb:8e:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MkQxMTAvBgNVBAUTKEU1NzMzQjEzRkQ4NkEyMzY5NDcwMkMzRTI4RjNGRjA5 NDk3QTkzNzEwHhcNMjYxMDEzMDg1MDUxWhcNMjYxMDIwMDg1MDUxWjAYMRYwFAYD VQQDEw02YWNkZjBlYi1lOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsro+HkLgkssbpBhlbe1wOAzAU0PUpS1bZZuLPOwh9bX5nO5lqx+yHptklAIx nmkyiGyyxa6T6uaar7kx6iul1fgtOPyxBpu9B336Tf7sU+OHNUsCjC20oVTCYfAG c7BXVUl7CuZx0i4WQUGU0hnDCQWUcViicCN+LBFca3zB5sW6vi8QnR5mkztrYW/W /hT23lpzltlRoY/Oy5v7kZbKYayWTeC0RQ9SK5PvJWPPTmlWg40JLtgoWlwOb00g zxy4OD/xGEg2E2Ro1fGaf8uS8wnfy80IUsSMUq8xdKwplB4W7kACCmrcRUrNYPMM brxTVWuDcwLoaJpgWUobssmNwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrUneUc Brj+7FGkjKWZDimSYjSFMB8GA1UdIwQYMBaAFOVzOxP9hqI2lHAsPijz/wlJepNx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkyRC8yNEQ4RTNEQzM2 RjUxMUYxODU5QUI0RkVCOTgzMzc3My81WE03RV8yR29qYVVjQ3ctS1BQX0NVbDZr M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVYTTdFXzJHb2phVWNDdy1LUFBfQ1VsNmszRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkyRC8yNEQ4RTNEQzM2RjUxMUYxODU5QUI0RkVCOTgzMzc3My81WE03RV8yR29q YVVjQ3ctS1BQX0NVbDZrM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUxq1j3Lo1Vgyyd6fTCI5kTATal960PAlMcclF0T+GTEOGQr6WV+9lwoihqxQ 7uLJtSR/6J43G+K7G/FULouqquTkE0k9WJ9gjjSabZ0Tbi81ZNRUe8e2UOv1iEvm xBiONexT+1SDw0NnzKiwmagQ0Wy6iiseN3C80n+ZPaaBdlaOIyztGn/5mrLsRCm3 ZH7y3XfDCPdgBeCDKn7D6hrMy2InsMGqxaJdmtO9uNwWOkPJPvC3DmbdfCy+1VDe eQrlXFfrrgfZAEYksIBJ0euwQroyHoj/YoRMBXr0iyRky+HAjo9RV8X5uS6XMHP6 8TcEw23sTel+PTVUCLHj+euOdw== -----END CERTIFICATE-----Generated at Wed Oct 14 08:51:54 2026 by rpki-client