$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: WM0DTND/rAJgBcjgBkEDGG+hxZJdkI+bap17QIXd8Po= Subject key identifier: 7B:0F:E9:3B:E1:ED:3F:F0:6A:B9:97:FC:71:85:B1:BE:52:D2:03:C3 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0A3A Signing time: Tue 06 Oct 2026 19:49:24 +0000 Manifest this update: Tue 06 Oct 2026 19:49:23 +0000 Manifest next update: Tue 13 Oct 2026 19:49:23 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: f59KV+dJxIH1nknVayvhOjo9jJdkRVPWEK/8VPpqAw4=) 2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: dtXmtJBVm8P8OuQoT+Q52qD+Vudy7GZ/K52aKBTJI5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Oct 6 19:49:23 2026 GMT Not After : Oct 13 19:49:23 2026 GMT Subject: CN=6ac550c4-29dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:11:be:35:c4:35:73:72:6a:a4:c2:bb:aa: 87:43:62:32:18:f8:75:a2:9a:35:6f:59:b8:c4:54: bb:cb:b5:ac:d4:2a:16:f9:61:82:6d:7e:ae:22:9d: 33:f2:71:37:46:f9:d1:19:f2:7e:8d:ff:81:b5:bd: d8:b0:ac:4d:97:c2:a5:8e:23:93:cd:62:9e:8e:db: 1a:48:1f:d9:b6:17:54:35:bb:29:ca:d7:c2:74:bc: 88:fb:9c:18:d4:f6:e6:f1:c2:1f:12:cd:dd:3b:f4: b2:1a:ac:1c:fa:bc:5c:e9:69:a3:f6:67:48:57:93: 39:6b:a1:27:c5:0f:39:03:79:6e:b3:e0:0b:5c:f1: 13:41:05:8c:f4:6f:84:49:59:33:f4:18:a9:af:d7: 32:2a:ad:18:ac:02:75:64:95:3a:3a:2c:a9:2f:cc: 51:df:97:56:99:ee:95:3b:63:27:bb:b6:17:16:f3: c5:b4:56:76:b3:5f:85:3b:bd:41:b5:9c:e0:65:b5: 6a:c2:3e:d9:5f:d2:ba:66:0e:68:3c:dd:04:c8:6d: e5:d7:00:3d:10:a5:d6:79:07:1d:1a:b6:26:a8:4d: d6:9a:4e:9d:86:a9:6d:b0:72:12:18:55:0b:a1:41: d4:e5:5e:38:84:b8:28:8d:d5:d8:8d:c9:ab:3b:aa: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:E9:3B:E1:ED:3F:F0:6A:B9:97:FC:71:85:B1:BE:52:D2:03:C3 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:c7:73:04:ad:e9:31:b7:cc:85:5c:88:d0:2a:65:14:a2:50: b3:ce:27:57:c5:85:e2:c8:76:05:33:ee:a3:6c:0b:0a:52:ee: 8a:a3:76:93:74:43:db:9c:9c:d0:3c:5b:a1:36:55:72:36:5c: 1f:9d:77:30:22:a2:36:eb:ea:4e:b8:d0:34:c3:2e:e2:b7:0f: de:43:24:f7:b5:f2:1c:fe:5f:6c:bd:3a:22:aa:bc:6d:45:50: 56:69:c5:d7:5c:74:2d:07:35:ab:ec:00:2b:7c:e0:7e:2a:7e: 4e:14:8d:62:43:0b:f8:98:c4:b4:22:8e:3a:c6:8b:a2:f3:ba: f1:e7:ac:c5:1b:5e:65:47:09:99:e3:ad:6f:bc:25:0a:3e:67: 78:be:31:b5:fd:96:7c:25:44:ae:01:2a:d0:18:79:dd:bb:c3: a7:37:a2:62:35:5f:6a:bf:62:c4:d0:c7:d8:6d:ee:07:11:8d: b2:3f:c6:ea:61:d6:9b:32:5b:ea:c6:8f:e5:33:f9:3d:29:10: 25:b4:e3:2b:e0:07:15:b1:c5:9d:ff:4e:29:e2:76:0e:08:9e: 26:eb:71:d5:8e:8d:0f:c5:b9:a2:90:f9:73:f6:0e:0a:0c:9e: 61:1e:8d:a0:3b:d6:87:32:8e:5d:7b:ad:99:a1:f4:3c:ba:0e: 10:2c:93:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjYxMDA2MTk0OTIzWhcNMjYxMDEzMTk0OTIzWjAYMRYwFAYD VQQDEw02YWM1NTBjNC0yOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1IRvjXENXNyaqTCu6qHQ2IyGPh1opo1b1m4xFS7y7Ws1CoW+WGCbX6uIp0z 8nE3RvnRGfJ+jf+Btb3YsKxNl8KljiOTzWKejtsaSB/ZthdUNbspytfCdLyI+5wY 1Pbm8cIfEs3dO/SyGqwc+rxc6Wmj9mdIV5M5a6EnxQ85A3lus+ALXPETQQWM9G+E SVkz9Bipr9cyKq0YrAJ1ZJU6OiypL8xR35dWme6VO2Mnu7YXFvPFtFZ2s1+FO71B tZzgZbVqwj7ZX9K6Zg5oPN0EyG3l1wA9EKXWeQcdGrYmqE3Wmk6dhqltsHISGFUL oUHU5V44hLgojdXYjcmrO6pzrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsP6Tvh 7T/warmX/HGFsb5S0gPDMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx8dzBK3pMbfMhVyI0CplFKJQs84nV8WF4sh2BTPuo2wLClLuiqN2k3RD25yc 0DxboTZVcjZcH513MCKiNuvqTrjQNMMu4rcP3kMk97XyHP5fbL06Iqq8bUVQVmnF 11x0LQc1q+wAK3zgfip+ThSNYkML+JjEtCKOOsaLovO68eesxRteZUcJmeOtb7wl Cj5neL4xtf2WfCVErgEq0Bh53bvDpzeiYjVfar9ixNDH2G3uBxGNsj/G6mHWmzJb 6saP5TP5PSkQJbTjK+AHFbHFnf9OKeJ2DgieJutx1Y6ND8W5opD5c/YOCgyeYR6N oDvWhzKOXXutmaH0PLoOECyTnA== -----END CERTIFICATE-----Generated at Wed Oct 7 11:28:11 2026 by rpki-client