$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: 2NDoeD9VWPEnRlEfOveBbvzFDSmRAm5zbk30ROneO48= Subject key identifier: 60:10:8E:76:95:4C:19:84:F6:51:4E:41:37:3F:32:C1:6F:F6:B0:8F Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 1313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 12EA Signing time: Fri 18 Sep 2026 17:01:31 +0000 Manifest this update: Fri 18 Sep 2026 17:01:31 +0000 Manifest next update: Fri 25 Sep 2026 17:01:31 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: wtioqUh8KQAfpaLPAzQjZzDy+mcml+ilorxQPLbA2ks=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) 3: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) 4: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4883 (0x1313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Sep 18 17:01:31 2026 GMT Not After : Sep 25 17:01:31 2026 GMT Subject: CN=6aad6e6b-4701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:87:80:b7:6d:1a:bc:17:ec:81:9f:5d:ed: dc:51:39:99:3d:50:7a:c8:c8:51:c9:86:8e:4d:78: ca:84:f4:63:14:75:63:c1:8a:41:b8:15:4d:f4:44: 5b:ca:45:47:4d:2f:10:22:2e:02:d8:e5:db:54:62: ac:17:dd:d2:a8:7a:50:47:5a:f2:4c:c2:b5:4b:4c: 36:b6:1e:74:91:b3:05:95:53:ca:d9:cd:30:59:a6: 5d:2f:a0:43:0a:8c:03:a0:63:9b:2d:b3:31:2b:be: 84:66:31:cf:0c:5a:04:90:b2:e0:11:21:48:40:cb: f1:76:7f:79:e4:4b:8e:38:80:81:7a:67:ac:e2:fe: e8:62:23:12:70:48:a5:69:90:1c:e8:e3:a6:cc:52: 98:1d:25:9e:d6:43:be:87:88:d6:f2:6d:e6:69:ee: 74:76:81:09:84:90:86:a3:78:4f:74:75:cd:34:8b: e1:a8:46:81:e2:bf:4a:8f:84:a5:16:10:cf:67:68: 64:d3:f5:80:5e:f0:47:f7:02:c4:6b:bd:f8:5a:f3: 9c:8f:6b:8b:6d:08:6e:73:26:15:f7:ae:ad:cf:75: 8e:df:bb:53:75:36:d5:a8:93:51:ad:91:bc:d4:76: a0:bb:bf:9b:02:11:de:87:4a:56:a4:2e:30:1b:b5: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:10:8E:76:95:4C:19:84:F6:51:4E:41:37:3F:32:C1:6F:F6:B0:8F X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:59:0c:64:0a:d8:fa:c0:ce:8a:65:2c:d3:d2:41:db:0e: 46:f2:89:cf:79:74:23:d3:39:a2:fc:56:72:c3:b9:6b:12:8d: f1:32:66:b9:cf:26:8d:fb:87:f9:cf:e6:32:51:9d:c8:c6:9b: 7e:ab:dd:3a:38:bf:da:62:df:0a:69:dc:92:d1:7c:bd:10:9e: 55:1b:96:82:c0:0f:e5:3d:1f:2f:4e:64:9e:b0:62:7c:25:d9: 9a:dd:eb:70:eb:c5:d1:00:26:0e:34:1a:08:f8:82:7a:5b:19: 06:b7:4d:ab:3d:95:0e:cb:3c:92:1c:1b:ac:32:c2:3a:11:ca: 8b:c5:79:69:28:b8:91:9a:63:82:d8:65:33:77:84:14:a4:7a: a6:80:a3:a7:c9:c7:ca:14:b3:47:85:7b:34:31:78:bf:34:4a: d5:cb:20:8f:1d:34:63:18:b3:4d:ff:8a:b9:41:11:e0:bc:cd: c5:16:ac:9a:ca:3f:52:02:e2:f5:7a:90:63:89:6c:10:34:14: 04:c8:4b:37:d8:92:4a:63:27:26:e6:98:34:99:2a:11:21:53: 2f:ce:d8:be:d6:86:3a:99:e3:35:e7:58:f1:a7:8d:53:6c:f4: 5a:ed:0f:23:0a:07:48:69:78:e8:66:6b:d6:ee:0e:49:b0:42: cb:b9:26:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICExMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwOTE4MTcwMTMxWhcNMjYwOTI1MTcwMTMxWjAYMRYwFAYD VQQDEw02YWFkNmU2Yi00NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8iHgLdtGrwX7IGfXe3cUTmZPVB6yMhRyYaOTXjKhPRjFHVjwYpBuBVN9ERb ykVHTS8QIi4C2OXbVGKsF93SqHpQR1ryTMK1S0w2th50kbMFlVPK2c0wWaZdL6BD CowDoGObLbMxK76EZjHPDFoEkLLgESFIQMvxdn955EuOOICBemes4v7oYiMScEil aZAc6OOmzFKYHSWe1kO+h4jW8m3mae50doEJhJCGo3hPdHXNNIvhqEaB4r9Kj4Sl FhDPZ2hk0/WAXvBH9wLEa734WvOcj2uLbQhucyYV966tz3WO37tTdTbVqJNRrZG8 1Hagu7+bAhHeh0pWpC4wG7W1+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAQjnaV TBmE9lFOQTc/MsFv9rCPMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATW9ZDGQK2PrAzoplLNPSQdsORvKJz3l0I9M5ovxWcsO5axKN8TJmuc8mjfuH +c/mMlGdyMabfqvdOji/2mLfCmncktF8vRCeVRuWgsAP5T0fL05knrBifCXZmt3r cOvF0QAmDjQaCPiCelsZBrdNqz2VDss8khwbrDLCOhHKi8V5aSi4kZpjgthlM3eE FKR6poCjp8nHyhSzR4V7NDF4vzRK1csgjx00YxizTf+KuUER4LzNxRasmso/UgLi 9XqQY4lsEDQUBMhLN9iSSmMnJuaYNJkqESFTL87YvtaGOpnjNedY8aeNU2z0Wu0P IwoHSGl46GZr1u4OSbBCy7km0Q== -----END CERTIFICATE-----Generated at Sat Sep 19 06:39:41 2026 by rpki-client