$ rpki-client -vvvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: LYzRpZgIrn/qi04tB9iQ7Qr4daRw9JdkLhayJmSaoRY= Subject key identifier: 62:94:31:BB:0A:1A:DE:59:D9:D5:E3:02:78:89:DC:2F:37:53:58:88 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 01DF Signing time: Wed 23 Sep 2026 03:36:29 +0000 Manifest this update: Wed 23 Sep 2026 03:36:28 +0000 Manifest next update: Wed 30 Sep 2026 03:36:28 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: wqIcAFwRyRt/TIJEimauisJWb/uGq8J0iZSZrxGmCWw=) 2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=) 3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=) 4: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Sep 23 03:36:28 2026 GMT Not After : Sep 30 03:36:28 2026 GMT Subject: CN=6ab3493d-9db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:2f:ba:cd:dd:56:a0:b7:36:18:da:02:7c: 59:a7:e1:9f:6d:23:8f:60:80:ae:ad:a6:de:9e:26: 26:b6:c7:54:12:03:d0:5d:9a:96:57:d1:c0:92:d6: d8:07:d6:00:cb:3d:61:ba:ee:ee:1f:05:8f:0a:05: e7:f4:3b:47:e2:cc:18:28:97:94:c2:52:57:57:b8: 6f:8f:26:8d:56:16:f2:82:10:e6:81:1f:92:e6:ce: 1a:12:cb:02:45:86:31:0a:ec:da:05:14:05:be:23: f7:d9:a5:ca:8f:04:d2:ea:aa:94:fb:82:63:54:5c: ac:cd:1b:b9:b4:73:46:41:af:6d:f0:7b:0d:1d:e0: 2d:8a:36:3c:89:1d:af:90:2d:57:cc:13:bc:88:66: 37:e6:5f:ad:72:9d:75:fb:df:f9:3f:25:5e:2b:72: 78:79:e3:a0:db:bb:90:93:6c:30:4f:06:ed:bf:7e: 16:f4:1d:6e:e8:90:47:b5:fa:d1:00:d7:f4:16:a5: 21:8b:94:09:ef:d6:bf:82:d0:de:44:62:f7:33:cb: c1:21:ac:86:86:4d:7d:68:54:53:ae:fa:98:61:e8: 74:66:5a:5f:8a:bb:35:22:a8:57:c6:33:a3:d2:5b: 4e:c2:79:f3:61:c9:88:c7:8b:c2:ad:34:76:84:9e: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:94:31:BB:0A:1A:DE:59:D9:D5:E3:02:78:89:DC:2F:37:53:58:88 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fc:78:81:e1:e3:1e:c3:b4:11:04:18:3a:6f:dd:51:43:e4: 81:0b:9e:85:87:b6:80:78:5f:ef:33:8d:61:9a:a0:77:83:d0: 31:28:67:3e:39:9d:15:7a:d2:0a:f6:3f:32:94:3d:64:13:33: db:64:7d:b5:c0:c6:7d:ec:9b:d4:b5:24:ec:68:6e:a7:65:20: 99:11:76:05:ce:18:83:57:a8:92:e5:fd:21:74:04:14:90:18: 1e:78:56:89:4a:fb:ee:c2:7e:63:90:b1:dd:dd:57:2b:16:dc: 17:5d:0b:81:4d:bc:dd:22:3e:2b:3f:da:06:a3:9f:65:ad:c8: ac:5a:ab:0b:47:a6:3d:5d:e7:52:31:bb:62:a6:c3:f6:a5:72: a2:2c:19:89:d3:bf:98:f4:fa:41:a0:5f:53:55:a2:54:06:f6: b7:1a:37:f2:5b:1c:1c:85:82:f1:8d:6e:3b:79:76:05:30:6b: 44:04:7c:31:d1:ce:d0:37:fc:71:9a:44:0b:08:d8:10:1c:d6: d0:c0:1f:fc:18:df:21:3c:e7:54:c4:e7:6a:1c:29:18:24:69: e6:6c:f1:6f:cd:be:95:5f:e2:68:b7:fb:8f:00:3c:ca:8d:f5: 02:15:df:27:e7:dd:a4:74:20:73:50:ca:dd:28:a6:2f:dc:18: 3d:b8:4b:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwOTIzMDMzNjI4WhcNMjYwOTMwMDMzNjI4WjAYMRYwFAYD VQQDEw02YWIzNDkzZC05ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh0Ivus3dVqC3NhjaAnxZp+GfbSOPYICurabeniYmtsdUEgPQXZqWV9HAktbY B9YAyz1huu7uHwWPCgXn9DtH4swYKJeUwlJXV7hvjyaNVhbyghDmgR+S5s4aEssC RYYxCuzaBRQFviP32aXKjwTS6qqU+4JjVFyszRu5tHNGQa9t8HsNHeAtijY8iR2v kC1XzBO8iGY35l+tcp11+9/5PyVeK3J4eeOg27uQk2wwTwbtv34W9B1u6JBHtfrR ANf0FqUhi5QJ79a/gtDeRGL3M8vBIayGhk19aFRTrvqYYeh0Zlpfirs1IqhXxjOj 0ltOwnnzYcmIx4vCrTR2hJ7FYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKUMbsK Gt5Z2dXjAniJ3C83U1iIMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANfx4geHjHsO0EQQYOm/dUUPkgQuehYe2gHhf7zONYZqgd4PQMShnPjmdFXrS CvY/MpQ9ZBMz22R9tcDGfeyb1LUk7Ghup2UgmRF2Bc4Yg1eokuX9IXQEFJAYHnhW iUr77sJ+Y5Cx3d1XKxbcF10LgU283SI+Kz/aBqOfZa3IrFqrC0emPV3nUjG7YqbD 9qVyoiwZidO/mPT6QaBfU1WiVAb2txo38lscHIWC8Y1uO3l2BTBrRAR8MdHO0Df8 cZpECwjYEBzW0MAf/BjfITznVMTnahwpGCRp5mzxb82+lV/iaLf7jwA8yo31AhXf J+fdpHQgc1DK3SimL9wYPbhL4Q== -----END CERTIFICATE-----Generated at Wed Sep 23 19:34:40 2026 by rpki-client