$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft File: 5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json) Hash identifier: Q5Pu5lBUMh4+5IvHoJiqvd7iaNnW3c1KwUQR4ragNeg= Subject key identifier: FC:13:BF:F3:9E:AB:1F:37:16:23:5B:2B:A4:80:11:56:43:7A:D4:14 Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1 Certificate issuer: /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft Manifest number: 029A Signing time: Mon 05 Oct 2026 01:59:19 +0000 Manifest this update: Mon 05 Oct 2026 01:59:19 +0000 Manifest next update: Mon 12 Oct 2026 01:59:19 +0000 Files and hashes: 1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: oXIsYlzyetL2eLhgpaCjPdN9WNs+y91XogFp6mJo0Vk=) 2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: r/QdasLc5bg8TvtpOH3qUVDciFGg4kgkaUmfu3ixoOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1 Validity Not Before: Oct 5 01:59:19 2026 GMT Not After : Oct 12 01:59:19 2026 GMT Subject: CN=6ac30477-59af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:95:10:88:67:ab:3c:18:06:2a:1d:44:94: b8:42:40:2b:5f:7d:92:b8:7d:4e:18:90:f9:83:68: fa:01:1a:95:ff:0e:c3:a1:76:f7:e0:db:8e:59:cc: 7c:e2:06:0c:be:7c:df:4d:50:4d:b5:d6:a4:ea:6e: 46:ef:4d:0c:bf:28:d3:bc:fe:eb:b5:6f:04:38:63: 09:5f:87:57:c8:21:e5:d3:b8:7e:fc:a5:a2:75:75: 8b:99:b5:37:52:77:55:51:b4:a2:5e:e5:2a:d8:3a: 3c:09:6f:a8:a2:b6:ef:e0:e5:f2:50:ee:70:55:fb: 7b:9f:d6:07:dd:e1:00:4a:ab:e1:a1:ca:96:8c:1a: cf:42:6a:06:23:b0:ab:32:62:cd:ef:21:23:21:51: 6f:d4:dc:f5:4a:e4:58:9e:39:68:9f:09:72:b7:96: a2:a9:e9:cc:72:3c:73:c0:43:44:0a:13:da:f1:b5: 04:e0:fe:b9:0c:bf:30:d7:a7:93:37:7d:e1:88:05: 5b:c1:db:8e:90:a5:58:e8:05:cb:0a:9f:7e:4f:a3: 7c:16:83:e1:22:19:53:a3:72:07:a6:ec:15:5d:7b: 0b:67:72:04:82:9b:f1:23:44:0b:4e:64:ba:46:74: 51:fa:96:40:ff:85:69:9c:bd:94:02:f4:5d:02:b6: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:13:BF:F3:9E:AB:1F:37:16:23:5B:2B:A4:80:11:56:43:7A:D4:14 X509v3 Authority Key Identifier: keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7b:67:07:13:f5:59:16:35:4f:1c:9d:a9:6e:bc:d8:fd:9f: 69:0b:b7:f4:a7:3f:29:ba:35:fc:4e:e0:90:4d:97:df:79:2e: 46:15:18:a1:c5:7d:d8:4e:47:8a:14:cb:fb:0f:5c:31:0b:ce: 98:f7:c4:85:1f:f0:42:4a:91:72:ad:11:84:a9:6b:51:ee:08: 96:e6:a3:ef:8c:7d:79:14:c2:09:a4:c6:54:32:52:a9:c9:cc: 02:15:1e:dd:6a:a0:9c:e1:44:e1:e3:fd:e4:70:29:7d:20:aa: 4e:96:db:33:cb:68:d5:49:74:5b:19:94:9f:15:03:86:52:c8: 8c:f0:ec:70:b5:a7:81:a3:18:fe:df:eb:0f:c4:fe:0b:1d:ac: c1:e2:da:e1:7c:1c:fd:03:26:5a:09:1f:a0:a7:c1:4d:5c:80: 40:56:be:17:f0:63:15:f0:44:15:94:fb:2c:ea:53:0e:4b:b8: 27:75:28:a9:9c:76:7a:3c:2f:82:7a:4d:f9:80:b5:d7:45:c6: 37:58:bd:f4:f6:1c:93:a8:d4:ea:7a:f7:fb:84:7e:71:1c:3c: 99:7f:8f:77:6c:b4:a2:78:f8:f4:b4:9f:4a:4d:85:3e:01:a9: e4:b9:1f:82:b0:02:db:1b:0f:eb:8c:32:f9:31:3b:ed:28:8a: 45:01:d1:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMkIxMTAvBgNVBAUTKEU1QkIyRDhCOUUxODY5N0MwMTU5RUQ4MTMyRTVGMzRC ODZCMTM3QjEwHhcNMjYxMDA1MDE1OTE5WhcNMjYxMDEyMDE1OTE5WjAYMRYwFAYD VQQDEw02YWMzMDQ3Ny01OWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzGVEIhnqzwYBiodRJS4QkArX32SuH1OGJD5g2j6ARqV/w7DoXb34NuOWcx8 4gYMvnzfTVBNtdak6m5G700MvyjTvP7rtW8EOGMJX4dXyCHl07h+/KWidXWLmbU3 UndVUbSiXuUq2Do8CW+oorbv4OXyUO5wVft7n9YH3eEASqvhocqWjBrPQmoGI7Cr MmLN7yEjIVFv1Nz1SuRYnjlonwlyt5aiqenMcjxzwENEChPa8bUE4P65DL8w16eT N33hiAVbwduOkKVY6AXLCp9+T6N8FoPhIhlTo3IHpuwVXXsLZ3IEgpvxI0QLTmS6 RnRR+pZA/4VpnL2UAvRdArZ/tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwTv/Oe qx83FiNbK6SAEVZDetQUMB8GA1UdIwQYMBaAFOW7LYueGGl8AVntgTLl80uGsTex MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyQi9EMjdFNkVEMENC OTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFYd0JXZTJCTXVYelM0YXhO N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVic3RpNTRZYVh3QldlMkJNdVh6UzRheE43RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyQi9EMjdFNkVEMENCOTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFY d0JXZTJCTXVYelM0YXhON0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXtnBxP1WRY1TxydqW682P2faQu39Kc/Kbo1/E7gkE2X33kuRhUYocV92E5H ihTL+w9cMQvOmPfEhR/wQkqRcq0RhKlrUe4Iluaj74x9eRTCCaTGVDJSqcnMAhUe 3WqgnOFE4eP95HApfSCqTpbbM8to1Ul0WxmUnxUDhlLIjPDscLWngaMY/t/rD8T+ Cx2sweLa4Xwc/QMmWgkfoKfBTVyAQFa+F/BjFfBEFZT7LOpTDku4J3UoqZx2ejwv gnpN+YC110XGN1i99PYck6jU6nr3+4R+cRw8mX+Pd2y0onj49LSfSk2FPgGp5Lkf grAC2xsP64wy+TE77SiKRQHRmg== -----END CERTIFICATE-----Generated at Tue Oct 6 19:30:09 2026 by rpki-client