$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json) Hash identifier: Qgqdh+2qUWC72712JPZYM/DcsHVWOwwKvOoRvRlPS5Y= Subject key identifier: 38:8C:63:E0:9A:D5:0E:0D:94:3F:A7:08:3F:BB:12:BB:11:FA:6F:11 Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft Manifest number: 04BC Signing time: Sat 10 Oct 2026 23:57:42 +0000 Manifest this update: Sat 10 Oct 2026 23:57:42 +0000 Manifest next update: Sat 17 Oct 2026 23:57:42 +0000 Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: C8kCl1AlSufY+ucwsWCjV3c293+s9J0v0nUWXrf5VJw=) 2: 06820D08961011ECA540626AC4F9AE02.roa (hash: CzUXYWkkIQDOcHq1RR+8siO68bCnK+19oDi4KioI2dg=) 3: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 2uDIVTyJFeprZ8aKmJZDal4SC0k4TrY+Gr38dV8hu3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 23:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Oct 10 23:57:42 2026 GMT Not After : Oct 17 23:57:42 2026 GMT Subject: CN=6acad0f6-253f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:01:c0:17:aa:cd:a1:81:9f:9d:af:b3:11: 89:b8:6e:b3:6d:64:a2:f3:47:74:96:d8:3a:2a:6d: b5:d8:c0:4c:f9:3d:1c:a5:9a:47:d2:56:11:29:3a: 8d:48:96:26:11:d7:25:1d:c9:72:5b:18:e0:2f:36: b3:b7:8f:69:ec:04:e2:59:11:c5:dd:3e:15:c1:b0: b0:90:3c:f9:1e:bb:8e:5d:ab:85:31:24:83:a7:49: 8a:04:f9:2e:c0:b3:e8:14:d8:3f:f3:9a:6c:4f:74: 17:fd:01:da:c6:6d:3d:af:cd:34:a5:8c:b5:94:51: a6:79:b0:6a:b9:a0:4f:26:a1:3a:93:b8:64:47:36: b0:0b:8d:07:f3:d7:e8:a8:b9:de:92:6e:99:99:90: ea:eb:60:64:33:c7:0f:9d:80:e0:26:f6:c0:d6:8a: 95:88:5f:26:a8:67:0e:fe:56:cf:03:bc:f6:69:3a: fb:41:d4:e3:7a:9d:8a:9a:d2:0e:da:0b:09:08:56: 33:71:13:2f:d9:55:18:cf:af:c6:f6:a9:d1:46:91: 44:35:c3:9a:48:6b:a4:11:6f:27:cd:5c:28:12:fd: 63:23:59:9a:c8:dd:36:91:c0:14:a4:33:15:ef:a3: d1:d3:0d:78:e5:b2:1f:af:53:b4:69:00:af:de:02: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8C:63:E0:9A:D5:0E:0D:94:3F:A7:08:3F:BB:12:BB:11:FA:6F:11 X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:59:b1:9b:cf:bf:36:e7:e2:18:72:94:75:df:cc:c1:03:52: fe:2c:b8:42:0e:b2:2c:c5:0a:e9:fe:34:ee:aa:cd:b6:14:28: 85:1d:89:44:64:ac:a4:7c:27:98:d8:db:ee:6c:3e:98:44:05: 1d:b5:0b:72:29:ea:0d:eb:bf:39:58:ac:5e:bf:6c:91:c9:47: e1:a5:6b:8e:48:50:92:ae:cd:95:47:51:d9:72:2c:c0:0e:28: f0:a2:95:e5:fc:e5:c3:37:94:db:8c:fe:6d:84:ab:9c:4e:f6: 32:0a:e6:b9:3d:5a:46:35:f7:39:31:ee:55:a9:33:5f:5c:6b: ae:62:3d:19:d9:03:3c:8f:9b:17:3a:28:87:b5:c2:fd:66:ed: b2:e5:95:e3:ff:e9:e6:2d:11:af:a2:33:00:60:08:dc:ea:ff: 01:b3:70:46:ce:1b:19:e2:d7:ca:66:e9:04:7b:6c:88:f3:41: 10:2c:c8:3f:cb:5e:93:be:dd:27:9c:a3:c2:8d:8f:0b:e6:79: c1:24:a9:9a:bc:08:7f:ef:71:db:21:54:ac:bf:2f:b8:d1:aa: 4e:87:a5:fa:88:d6:ec:cc:f1:31:f1:14:ea:bc:41:55:43:ac: 5f:79:5c:00:3c:c2:64:84:9f:1c:d8:c9:d5:3e:8e:43:9c:0b: 36:f8:dd:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjYxMDEwMjM1NzQyWhcNMjYxMDE3MjM1NzQyWjAYMRYwFAYD VQQDEw02YWNhZDBmNi0yNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7gBwBeqzaGBn52vsxGJuG6zbWSi80d0ltg6Km212MBM+T0cpZpH0lYRKTqN SJYmEdclHclyWxjgLzazt49p7ATiWRHF3T4VwbCwkDz5HruOXauFMSSDp0mKBPku wLPoFNg/85psT3QX/QHaxm09r800pYy1lFGmebBquaBPJqE6k7hkRzawC40H89fo qLnekm6ZmZDq62BkM8cPnYDgJvbA1oqViF8mqGcO/lbPA7z2aTr7QdTjep2KmtIO 2gsJCFYzcRMv2VUYz6/G9qnRRpFENcOaSGukEW8nzVwoEv1jI1mayN02kcAUpDMV 76PR0w145bIfr1O0aQCv3gI8RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDiMY+Ca 1Q4NlD+nCD+7ErsR+m8RMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z ekczeFpsdnh5SUN2bWJlMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACVmxm8+/NufiGHKUdd/MwQNS/iy4Qg6yLMUK6f407qrNthQohR2JRGSspHwn mNjb7mw+mEQFHbULcinqDeu/OVisXr9skclH4aVrjkhQkq7NlUdR2XIswA4o8KKV 5fzlwzeU24z+bYSrnE72MgrmuT1aRjX3OTHuVakzX1xrrmI9GdkDPI+bFzooh7XC /WbtsuWV4//p5i0Rr6IzAGAI3Or/AbNwRs4bGeLXymbpBHtsiPNBECzIP8tek77d J5yjwo2PC+Z5wSSpmrwIf+9x2yFUrL8vuNGqToel+ojW7MzxMfEU6rxBVUOsX3lc ADzCZISfHNjJ1T6OQ5wLNvjdcA== -----END CERTIFICATE-----Generated at Sun Oct 11 06:35:00 2026 by rpki-client