$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json) Hash identifier: WjRV+IvTDXC6lnUu5M/10074vA6mKMldvvWAeuzmqY4= Subject key identifier: 4C:A2:0A:88:6C:D7:D4:C1:FF:60:10:17:8D:23:F3:2F:C8:67:4F:38 Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft Manifest number: 012D Signing time: Thu 03 Sep 2026 05:54:07 +0000 Manifest this update: Thu 03 Sep 2026 05:54:06 +0000 Manifest next update: Thu 10 Sep 2026 05:54:06 +0000 Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: e+2SfRjOxtp4BVDKY9jSXEK/GQqUbBzUegjRSVumw/4=) 2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=) 3: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=) 4: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 05:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Sep 3 05:54:06 2026 GMT Not After : Sep 10 05:54:06 2026 GMT Subject: CN=6a990b7f-83d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:51:ea:db:d8:b9:d0:fe:bc:66:e5:3b:66: 49:b4:27:46:dc:2e:c2:ec:e0:24:f2:13:fe:06:74: 93:df:6f:a7:9e:17:e9:07:98:0b:d0:ec:bc:30:10: 17:8a:58:2d:61:9c:3d:f6:f6:4f:84:c8:9e:3e:91: 0f:f8:a7:78:c5:a4:82:c1:cb:be:6c:32:a7:be:2e: a5:c3:06:29:1d:98:1f:f9:15:e3:21:67:73:4a:39: f0:06:15:42:b7:2d:aa:e1:f0:45:4c:3e:18:b8:6c: ab:6a:a3:dd:91:3c:7c:74:08:ca:85:b3:34:60:4e: ed:9d:c3:ab:4a:7e:a8:ea:5f:3c:ef:6d:d0:7a:75: ab:58:3e:f0:79:95:b3:09:26:37:b5:52:81:ff:ce: 52:60:40:66:ec:6c:fa:2b:05:8f:95:f9:6e:e4:03: 5a:06:fa:0d:9c:61:09:ea:3d:67:8b:af:8b:2e:c4: 90:87:26:3f:20:1d:0b:a9:fe:3e:00:f0:6b:53:26: bc:7e:a5:3c:50:01:7c:db:33:3d:f0:eb:8f:39:08: 01:2a:b8:c0:db:25:35:b4:d5:98:d5:99:94:41:dc: 09:e0:6f:7c:c5:5f:ed:cd:a8:f5:6c:aa:f4:c8:07: 67:5a:9e:9e:69:e7:f9:7d:c2:15:c1:48:61:20:73: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A2:0A:88:6C:D7:D4:C1:FF:60:10:17:8D:23:F3:2F:C8:67:4F:38 X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:0a:f6:fa:de:8e:0d:86:b7:31:79:b8:34:16:8c:f2:d3: f0:3c:82:fe:72:0a:31:f3:64:8e:88:76:59:04:8f:b2:79:ae: c7:01:06:e5:2f:c6:2f:9e:67:3c:a4:1e:09:fb:b0:a2:2a:08: 50:26:2a:3e:50:23:79:eb:d9:86:fd:56:80:03:e3:e1:cf:3f: b6:af:8e:68:31:eb:aa:a3:4d:01:24:7d:f6:26:34:c4:e2:c5: 00:9b:7d:16:ea:5d:3f:96:b0:a6:cf:e1:1a:89:eb:a4:f8:98: 35:84:fd:3d:9b:ea:17:71:65:57:03:6f:86:04:da:f0:61:8a: 64:d2:8a:76:e2:db:5d:95:d0:b4:b9:a1:0c:b7:98:0a:32:b9: 2f:08:73:86:02:5c:2e:f2:c5:42:e8:82:28:46:b9:55:c8:07: a3:13:ac:0e:4c:f5:97:74:44:a7:d5:42:20:7c:f9:76:80:80: c5:8f:c1:de:cb:6c:0d:62:6a:4d:a7:94:c0:78:95:a6:27:14: 1e:8f:9d:53:0f:8e:40:1f:c2:93:14:2d:d6:bc:fb:37:d5:44: 2d:d8:f1:b0:b7:e8:a5:0c:44:53:28:d0:78:75:6c:55:1b:de: 48:ac:58:cd:03:15:72:17:c2:dd:78:82:b8:b6:10:f3:63:32: 7b:fe:40:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4RkExMTAvBgNVBAUTKDBCOTIzN0UzQjA4NkI1OEMzQ0Q5Q0U2RkQ0OUFDMjYx RjdENTI1QTMwHhcNMjYwOTAzMDU1NDA2WhcNMjYwOTEwMDU1NDA2WjAYMRYwFAYD VQQDEw02YTk5MGI3Zi04M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvFR6tvYudD+vGblO2ZJtCdG3C7C7OAk8hP+BnST32+nnhfpB5gL0Oy8MBAX ilgtYZw99vZPhMiePpEP+Kd4xaSCwcu+bDKnvi6lwwYpHZgf+RXjIWdzSjnwBhVC ty2q4fBFTD4YuGyraqPdkTx8dAjKhbM0YE7tncOrSn6o6l88723QenWrWD7weZWz CSY3tVKB/85SYEBm7Gz6KwWPlflu5ANaBvoNnGEJ6j1ni6+LLsSQhyY/IB0Lqf4+ APBrUya8fqU8UAF82zM98OuPOQgBKrjA2yU1tNWY1ZmUQdwJ4G98xV/tzaj1bKr0 yAdnWp6eaef5fcIVwUhhIHM1hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyiCohs 19TB/2AQF40j8y/IZ084MB8GA1UdIwQYMBaAFAuSN+OwhrWMPNnOb9SawmH31SWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhGQS9EMzdGNjI1Q0U3 M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZdzgyYzV2MUpyQ1lmZlZK YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkphTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhGQS9EMzdGNjI1Q0U3M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZ dzgyYzV2MUpyQ1lmZlZKYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAExUK9vrejg2GtzF5uDQWjPLT8DyC/nIKMfNkjoh2WQSPsnmuxwEG5S/GL55n PKQeCfuwoioIUCYqPlAjeevZhv1WgAPj4c8/tq+OaDHrqqNNASR99iY0xOLFAJt9 FupdP5awps/hGonrpPiYNYT9PZvqF3FlVwNvhgTa8GGKZNKKduLbXZXQtLmhDLeY CjK5LwhzhgJcLvLFQuiCKEa5VcgHoxOsDkz1l3REp9VCIHz5doCAxY/B3stsDWJq TaeUwHiVpicUHo+dUw+OQB/CkxQt1rz7N9VELdjxsLfopQxEUyjQeHVsVRveSKxY zQMVchfC3XiCuLYQ82Mye/5AoA== -----END CERTIFICATE-----Generated at Sat Sep 5 07:08:17 2026 by rpki-client