$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: r+x+jiK6fh7YtjMwdrmlsTeFo79BK8jNcMEO+Vy4rj8= Subject key identifier: 67:9F:D5:A9:14:7F:44:90:A9:FD:7C:5D:34:CF:DE:D2:C9:EA:1A:C0 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 0123 Signing time: Wed 07 Oct 2026 06:21:54 +0000 Manifest this update: Wed 07 Oct 2026 06:21:53 +0000 Manifest next update: Wed 14 Oct 2026 06:21:53 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: jLy7rNDJZ6iNis/hqR9KbuFMKCdxET2VKXdoDWRj1HY=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: xJEez0DY8AmNVE2VqhZDR/pkwfuh11Vrc1/2qRF3aqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Oct 7 06:21:53 2026 GMT Not After : Oct 14 06:21:53 2026 GMT Subject: CN=6ac5e501-6d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:79:ad:71:97:cf:23:a3:fd:35:e2:45:c0: bb:58:0e:66:c7:af:7a:da:0f:4b:8a:12:61:34:b1: 17:92:69:c1:df:10:d4:d7:99:c4:84:47:d4:38:3c: 6e:df:92:e8:1a:14:8c:e9:67:4a:c2:27:da:50:68: 1e:de:11:f0:fe:cb:ff:3a:e7:4d:52:0c:da:9e:6e: 4d:70:b5:ae:00:4a:27:a1:19:96:64:69:66:4e:1f: fc:f2:4e:af:07:21:d7:57:7a:78:6e:3b:b9:98:9e: e5:6b:90:02:85:3c:24:d0:7f:33:c4:2b:c0:6c:15: d4:e3:3f:f0:9e:8f:c1:dd:d2:84:c9:d1:41:7a:0b: 8d:5b:c4:53:dc:83:21:b3:e9:6d:37:46:f6:63:db: a0:0c:71:7a:66:f3:ec:76:f3:66:38:f3:48:24:6c: f1:c6:8c:26:a3:06:89:f0:70:9b:b0:b2:19:7e:b1: 99:a7:8a:d9:11:64:c6:28:65:b2:15:39:b0:f1:17: 13:8d:52:86:d6:85:7b:4e:23:72:70:99:68:b1:ec: 00:6b:73:ca:09:ea:e7:ef:a3:fb:6f:4d:fd:47:26: f6:09:11:b8:2f:c4:94:e0:77:01:ba:28:63:1e:31: 09:ab:a6:5e:19:b7:d3:b8:6e:0c:de:d6:85:7c:25: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9F:D5:A9:14:7F:44:90:A9:FD:7C:5D:34:CF:DE:D2:C9:EA:1A:C0 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a4:bb:22:f9:d6:a7:aa:07:3e:fb:cd:a2:f2:b6:bc:b0:a7: 81:c4:24:ca:58:6e:43:83:25:3b:e3:ea:e8:43:37:88:dc:1b: 74:71:d2:81:e5:5d:99:95:15:c5:41:05:77:8d:3b:fc:d3:1a: eb:d4:e7:9b:10:0a:00:7e:21:f2:41:53:62:ac:bb:e0:d9:e7: d4:0b:e5:f6:97:f8:e2:f9:61:b6:4c:11:c0:5a:48:f2:91:be: bf:2e:a1:3c:3a:f9:84:82:30:22:71:26:fa:9b:92:37:d7:4f: 46:ec:f9:3e:05:e8:c1:f5:e7:81:3a:b2:46:c9:99:d9:10:d6: f0:c0:5d:31:8a:e7:21:8a:42:05:6e:3a:63:1a:67:23:ca:fd: f9:92:4f:8c:b8:d5:e7:02:88:6f:33:f0:a0:92:30:32:93:b0: 16:50:98:2f:fe:00:fb:e9:04:92:1d:30:c0:a4:b6:02:0f:70: 21:23:aa:64:56:cc:96:ff:15:4e:07:78:cc:44:a8:39:37:29: 27:ff:6c:ce:c6:95:9e:93:f7:b7:e3:0f:ea:d6:65:7f:a8:6b: 49:f4:b9:61:7d:25:55:0e:bb:0f:6f:d5:e2:5f:32:55:61:3c: e4:fb:33:29:27:11:22:42:41:08:f9:a0:26:02:07:aa:59:e1: 53:d9:69:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYxMDA3MDYyMTUzWhcNMjYxMDE0MDYyMTUzWjAYMRYwFAYD VQQDEw02YWM1ZTUwMS02ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvid5rXGXzyOj/TXiRcC7WA5mx6962g9LihJhNLEXkmnB3xDU15nEhEfUODxu 35LoGhSM6WdKwifaUGge3hHw/sv/OudNUgzanm5NcLWuAEonoRmWZGlmTh/88k6v ByHXV3p4bju5mJ7la5AChTwk0H8zxCvAbBXU4z/wno/B3dKEydFBeguNW8RT3IMh s+ltN0b2Y9ugDHF6ZvPsdvNmOPNIJGzxxowmowaJ8HCbsLIZfrGZp4rZEWTGKGWy FTmw8RcTjVKG1oV7TiNycJlosewAa3PKCern76P7b039Ryb2CRG4L8SU4HcBuihj HjEJq6ZeGbfTuG4M3taFfCXuoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGef1akU f0SQqf18XTTP3tLJ6hrAMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKS7IvnWp6oHPvvNovK2vLCngcQkylhuQ4MlO+Pq6EM3iNwbdHHSgeVdmZUV xUEFd407/NMa69TnmxAKAH4h8kFTYqy74Nnn1Avl9pf44vlhtkwRwFpI8pG+vy6h PDr5hIIwInEm+puSN9dPRuz5PgXowfXngTqyRsmZ2RDW8MBdMYrnIYpCBW46Yxpn I8r9+ZJPjLjV5wKIbzPwoJIwMpOwFlCYL/4A++kEkh0wwKS2Ag9wISOqZFbMlv8V Tgd4zESoOTcpJ/9szsaVnpP3t+MP6tZlf6hrSfS5YX0lVQ67D2/V4l8yVWE85Psz KScRIkJBCPmgJgIHqlnhU9lpIA== -----END CERTIFICATE-----Generated at Thu Oct 8 23:36:26 2026 by rpki-client