$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json) Hash identifier: ZKm7izxVxWghgmxZ1w8oZfPCh2AmpWiQbpcE1Ia9DE4= Subject key identifier: 9E:13:D1:BF:34:12:6D:0F:B0:91:E8:22:57:6E:39:CF:BF:F8:E1:80 Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft Manifest number: 02A5 Signing time: Fri 11 Sep 2026 01:36:53 +0000 Manifest this update: Fri 11 Sep 2026 01:36:53 +0000 Manifest next update: Fri 18 Sep 2026 01:36:53 +0000 Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: CyemGpdoSwDiRShigPQ9yfOyHURhjRCKHqBpqLInQkw=) 2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=) 3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Validity Not Before: Sep 11 01:36:53 2026 GMT Not After : Sep 18 01:36:53 2026 GMT Subject: CN=6aa35b35-6073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:f1:40:39:d9:b0:c8:30:cf:21:8e:bc:ae: 49:74:e5:da:38:ed:03:f9:90:8f:2c:3f:2c:be:4a: da:29:36:ee:2a:ac:81:7c:bd:75:67:69:50:de:7b: f2:49:10:a3:fb:b3:bf:ab:b1:bc:9d:7a:88:bc:78: a7:d4:7b:c6:23:de:14:34:2e:c8:9b:2e:81:43:f1: 49:4c:86:8f:cd:f6:50:53:d3:ec:fd:9f:ce:e4:4a: 84:a6:a1:8e:40:e8:6c:69:01:84:b5:09:c7:31:4b: 36:fc:dc:42:d8:06:dc:1c:c7:87:bc:74:7a:26:f4: 0f:69:db:60:4a:ae:2c:14:07:14:a5:bf:c9:96:92: 19:4b:dd:5d:1f:98:ff:f0:0e:1a:78:ee:3c:ff:5a: 1d:59:9b:3e:43:95:f7:b8:32:ac:7b:73:6a:99:60: f9:55:04:3f:33:bb:79:13:7d:c6:f3:28:95:9f:87: 74:d6:2d:10:ee:91:3e:c4:a0:56:e0:20:fb:83:ff: 4e:f1:36:34:a7:cb:b4:f8:2c:4c:63:8d:dc:9d:cd: 92:cf:27:ac:e4:65:f2:0a:94:b2:cc:2a:9b:4b:90: 43:64:66:25:9a:3d:38:6d:b0:b8:be:81:4d:b0:85: 80:e1:9f:fa:09:f6:b4:e1:e2:66:71:a4:ff:03:22: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:13:D1:BF:34:12:6D:0F:B0:91:E8:22:57:6E:39:CF:BF:F8:E1:80 X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:84:47:e8:59:09:99:af:b1:5c:72:f8:a4:ab:cc:a1:77:26: 82:4d:31:d8:35:d9:86:46:c7:64:55:d4:a8:1c:7a:59:18:aa: 44:ee:68:de:c2:05:e9:6a:c1:5c:03:15:25:2b:b4:4d:7e:33: e0:41:bf:19:2f:19:02:cf:27:ff:32:ef:0b:2e:61:d3:4b:c8: 47:74:11:79:37:65:99:e5:20:bb:6b:d0:35:75:d8:88:d5:a1: 3d:21:0d:7c:20:8a:61:4f:09:59:d7:64:7f:24:42:ab:74:1f: ad:b3:70:21:f2:dd:a1:3f:3d:c2:00:97:f7:f1:a8:02:13:25: 7a:fd:e5:76:d2:f3:6e:f2:b2:3d:11:43:ae:f9:cb:9f:a4:52: 54:81:b8:1f:2a:e2:b0:ad:8a:fa:f5:57:3c:07:b0:c4:ff:ca: ef:53:38:78:f8:6c:87:40:41:ad:b2:67:36:f7:e6:a5:46:3a: 97:1b:cb:9f:85:84:c7:86:2d:cb:56:90:41:37:08:9f:19:38: 8a:0a:37:53:d0:36:ab:d2:d9:56:c8:eb:5e:8f:0c:08:23:71: d2:0d:67:55:34:39:b7:7a:7f:2d:bc:f0:2a:6d:1c:b2:02:be: 86:90:ce:bd:23:56:8b:a7:98:27:a9:ef:2c:4d:27:1c:1e:28: 71:68:f1:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjYwOTExMDEzNjUzWhcNMjYwOTE4MDEzNjUzWjAYMRYwFAYD VQQDEw02YWEzNWIzNS02MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEvxQDnZsMgwzyGOvK5JdOXaOO0D+ZCPLD8svkraKTbuKqyBfL11Z2lQ3nvy SRCj+7O/q7G8nXqIvHin1HvGI94UNC7Imy6BQ/FJTIaPzfZQU9Ps/Z/O5EqEpqGO QOhsaQGEtQnHMUs2/NxC2AbcHMeHvHR6JvQPadtgSq4sFAcUpb/JlpIZS91dH5j/ 8A4aeO48/1odWZs+Q5X3uDKse3NqmWD5VQQ/M7t5E33G8yiVn4d01i0Q7pE+xKBW 4CD7g/9O8TY0p8u0+CxMY43cnc2Szyes5GXyCpSyzCqbS5BDZGYlmj04bbC4voFN sIWA4Z/6Cfa04eJmcaT/AyLW2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4T0b80 Em0PsJHoIlduOc+/+OGAMB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC bGI2MXpaRDIySG52NlpFS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGIRH6FkJma+xXHL4pKvMoXcmgk0x2DXZhkbHZFXUqBx6WRiqRO5o3sIF6WrB XAMVJSu0TX4z4EG/GS8ZAs8n/zLvCy5h00vIR3QReTdlmeUgu2vQNXXYiNWhPSEN fCCKYU8JWddkfyRCq3QfrbNwIfLdoT89wgCX9/GoAhMlev3ldtLzbvKyPRFDrvnL n6RSVIG4HyrisK2K+vVXPAewxP/K71M4ePhsh0BBrbJnNvfmpUY6lxvLn4WEx4Yt y1aQQTcInxk4igo3U9A2q9LZVsjrXo8MCCNx0g1nVTQ5t3p/LbzwKm0csgK+hpDO vSNWi6eYJ6nvLE0nHB4ocWjxgg== -----END CERTIFICATE-----Generated at Fri Sep 11 11:56:21 2026 by rpki-client