$ rpki-client -vvvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json) Hash identifier: aXM5Lbv8NfR74BHyRC1fprRi1BXHlSC8/m6N25/BWss= Subject key identifier: 69:4D:74:62:CB:60:08:87:85:B1:79:32:53:AB:E0:E0:93:7B:36:E6 Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft Manifest number: F2 Signing time: Fri 09 Oct 2026 07:01:32 +0000 Manifest this update: Fri 09 Oct 2026 07:01:31 +0000 Manifest next update: Fri 16 Oct 2026 07:01:31 +0000 Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: T1eV7MbGDP2j4NmtjpnHuCPW+MMjXRsIn/txiMvz1nU=) 2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: g6Egk/b7vNf0MzgI//DoeOCEJm43M/fSUDub5ucoMAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Validity Not Before: Oct 9 07:01:31 2026 GMT Not After : Oct 16 07:01:31 2026 GMT Subject: CN=6ac8914c-344a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:cf:21:0d:14:13:15:5a:56:bc:4e:eb:f6: 8c:87:bd:03:5d:97:e2:3c:1a:c5:13:f0:d5:5d:dd: 92:72:d0:b4:48:0f:4c:ff:ca:a4:fd:86:ac:e1:73: 7b:dc:18:58:56:eb:6d:78:0d:08:00:1e:e0:91:ff: bd:43:a2:59:86:b2:1d:8f:fb:c6:59:fa:e8:4c:33: 90:f9:d5:a0:5e:82:80:b8:6b:25:ce:24:e0:07:12: ca:9e:07:cc:ee:40:99:02:64:37:52:5a:1c:03:d9: d0:4a:e1:ba:c1:3e:98:24:5e:53:32:96:5b:39:2c: ef:91:64:71:fe:f3:9d:31:c4:0b:6d:d7:3d:83:c2: 10:00:46:0b:96:2d:47:bd:26:49:85:73:70:80:79: b4:1d:bf:a1:5b:0c:ee:e3:2e:83:eb:2a:30:8f:35: db:02:e4:5e:73:43:df:d0:98:9f:53:0c:ed:6a:cc: 71:e4:13:b5:46:84:54:cd:92:a3:61:16:49:10:26: 46:0a:c5:e8:18:15:e1:f1:c8:80:7e:b8:08:41:28: 05:61:82:54:6d:b0:a9:8f:90:ec:3b:95:4e:ae:18: e3:f2:18:c4:ec:af:70:e0:34:56:c2:41:b1:60:84: 3e:e9:e1:ab:30:b8:ad:7a:54:6c:d0:4a:cc:2f:02: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:74:62:CB:60:08:87:85:B1:79:32:53:AB:E0:E0:93:7B:36:E6 X509v3 Authority Key Identifier: keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:54:f0:92:05:b0:f5:28:c3:0b:58:52:88:a8:c1:6f:d4:1b: 01:4f:16:20:1f:d8:d5:a2:7d:4a:b1:0f:63:8e:ad:7f:26:c7: 11:6d:79:f7:b6:ce:f2:cf:88:cb:09:64:25:20:cd:34:b8:16: e3:4e:0a:60:cf:4d:15:dc:cc:2c:85:fb:82:df:51:d0:bf:80: ce:17:80:ad:70:a2:81:57:17:e6:a5:f4:9e:75:08:65:2e:6e: 73:fe:d2:41:55:a4:05:cc:47:12:4a:ae:74:43:2f:4f:47:56: 69:99:a2:38:41:ac:cf:10:5f:9d:9f:dc:b5:be:73:64:18:c4: e0:a0:f7:d4:fd:ce:e4:d6:80:09:40:8c:9d:ea:ed:76:48:16: 88:c5:5d:c2:11:45:f7:d9:ec:5d:b7:29:40:06:c4:68:ba:9e: 81:84:80:0f:02:de:91:4d:f3:25:55:a6:ea:c7:d2:55:19:4c: 90:bf:67:85:20:07:a9:4c:56:e1:20:bf:12:4b:62:0a:7b:57: de:e5:f8:a7:49:99:b4:c6:07:16:85:7a:08:d9:28:0b:57:35: 86:35:13:ce:c7:51:39:74:16:82:d9:aa:ff:dc:5c:a3:3b:0d: 4c:38:66:48:87:d6:35:2c:45:c3:32:23:23:05:8f:f8:b1:78: 65:78:55:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3QzExMTAvBgNVBAUTKEEyQjlGRkVENDcwQzVCNzFDNTJGM0I2NEIzQjZFREE0 MTlCRTEzQjMwHhcNMjYxMDA5MDcwMTMxWhcNMjYxMDE2MDcwMTMxWjAYMRYwFAYD VQQDEw02YWM4OTE0Yy0zNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKnPIQ0UExVaVrxO6/aMh70DXZfiPBrFE/DVXd2SctC0SA9M/8qk/Yas4XN7 3BhYVutteA0IAB7gkf+9Q6JZhrIdj/vGWfroTDOQ+dWgXoKAuGslziTgBxLKngfM 7kCZAmQ3UlocA9nQSuG6wT6YJF5TMpZbOSzvkWRx/vOdMcQLbdc9g8IQAEYLli1H vSZJhXNwgHm0Hb+hWwzu4y6D6yowjzXbAuRec0Pf0JifUwztasxx5BO1RoRUzZKj YRZJECZGCsXoGBXh8ciAfrgIQSgFYYJUbbCpj5DsO5VOrhjj8hjE7K9w4DRWwkGx YIQ+6eGrMLitelRs0ErMLwJ0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlNdGLL YAiHhbF5MlOr4OCTezbmMB8GA1UdIwQYMBaAFKK5/+1HDFtxxS87ZLO27aQZvhOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdDMS8yNjMxQzhCNDU3 MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVczSEZMenRrczdidHBCbS1F N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29ybl83VWNNVzNIRkx6dGtzN2J0cEJtLUU3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdDMS8yNjMxQzhCNDU3MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVcz SEZMenRrczdidHBCbS1FN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGlTwkgWw9SjDC1hSiKjBb9QbAU8WIB/Y1aJ9SrEPY46tfybHEW1597bO8s+I ywlkJSDNNLgW404KYM9NFdzMLIX7gt9R0L+AzheArXCigVcX5qX0nnUIZS5uc/7S QVWkBcxHEkqudEMvT0dWaZmiOEGszxBfnZ/ctb5zZBjE4KD31P3O5NaACUCMnert dkgWiMVdwhFF99nsXbcpQAbEaLqegYSADwLekU3zJVWm6sfSVRlMkL9nhSAHqUxW 4SC/EktiCntX3uX4p0mZtMYHFoV6CNkoC1c1hjUTzsdROXQWgtmq/9xcozsNTDhm SIfWNSxFwzIjIwWP+LF4ZXhVew== -----END CERTIFICATE-----Generated at Fri Oct 9 20:47:29 2026 by rpki-client