$ rpki-client -vvvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: 3j0zQSkSHcRidyWzUV4Mkumw9HZu/qeUsdo5vPHQQiM= Subject key identifier: C2:DF:9E:02:E9:68:55:BD:63:C6:CF:B9:45:14:AC:AA:29:70:3B:0A Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 02D9 Signing time: Wed 23 Sep 2026 01:04:18 +0000 Manifest this update: Wed 23 Sep 2026 01:04:18 +0000 Manifest next update: Wed 30 Sep 2026 01:04:18 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: kG2Rz5PuR5o+9qG2S83I2IJO5cZPZ1fpMx+jnyqRExA=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Sep 23 01:04:18 2026 GMT Not After : Sep 30 01:04:18 2026 GMT Subject: CN=6ab32592-ab7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:15:aa:61:4c:8f:7b:a7:8a:c3:f9:2b:3e: b9:d9:52:90:dd:f0:d3:d8:d4:a5:d9:fb:7f:a5:1e: 29:3f:cb:88:7a:c6:a3:83:9e:91:ec:c1:45:04:19: c9:5e:c7:ad:3d:fb:20:90:55:33:bf:e9:1a:98:24: df:c6:37:5f:46:6e:9e:73:c2:c4:2f:77:55:d1:dc: 4e:da:1d:a2:4a:f2:b6:1b:74:91:e9:58:10:87:d3: 42:99:3e:36:98:04:b5:c8:38:85:73:7d:2f:01:a2: 34:fb:6b:95:c0:83:a0:18:34:84:ab:bb:14:ee:31: 8e:16:43:e7:11:06:93:7c:77:96:62:d6:94:af:ae: a5:46:52:a5:12:80:0f:94:2e:a0:8c:32:22:86:53: 8a:14:9d:af:27:bb:bc:20:22:e7:22:ef:b0:67:8b: 83:a6:5e:dc:e1:75:93:6f:96:7d:bd:1d:08:93:e0: ce:dc:2b:14:5c:aa:ce:ee:8c:7a:13:d6:25:2c:a6: f6:06:c6:1d:24:12:28:09:b4:3a:90:e9:2f:9c:dc: 00:7e:bf:b9:23:60:f6:76:0e:8c:61:ba:01:85:21: 00:f2:f2:a3:ed:d8:44:2d:ef:d2:5e:7a:0a:3b:93: 34:96:17:e5:18:86:6e:13:8f:f0:30:c8:6d:f0:21: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:9E:02:E9:68:55:BD:63:C6:CF:B9:45:14:AC:AA:29:70:3B:0A X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:79:13:9c:ae:dd:a7:65:5b:54:df:de:da:13:44:25:c4:12: af:ca:68:a1:2a:b7:7b:48:c9:7e:63:c0:35:d1:0a:8a:47:6f: 9e:31:27:e9:2d:fa:af:21:7f:a2:14:8c:a7:80:fb:37:76:47: ef:84:94:1d:40:0f:62:a8:2f:08:1b:c8:07:b9:9a:1d:ad:d0: 3a:5a:fe:7b:cc:38:cc:3f:18:c6:92:5e:fa:f3:77:40:73:ff: 09:de:a9:ab:be:97:0f:e1:7a:67:05:b6:9b:ab:c9:3d:52:4a: 79:f7:02:94:df:a9:5b:5d:2b:cf:1b:ff:d8:26:73:5a:3c:c6: ac:de:b0:3c:3d:4c:0c:f7:0f:fe:72:1d:eb:f4:97:ce:cb:da: 9f:30:e4:53:32:ff:5c:14:4b:89:dd:b3:84:21:fd:ce:8b:2a: 9f:2e:b2:1d:13:e7:6b:d8:9e:4e:1c:f8:e4:af:b1:d0:2c:80: 3a:4f:00:26:10:8e:96:38:27:03:8b:cb:e7:b1:a5:37:e9:bf: 5a:29:1d:e8:e8:a0:2c:66:05:5f:ce:e4:3c:ed:5b:4d:53:f5: 5f:6a:8d:6f:65:36:f5:46:ea:40:5d:77:b1:17:3b:2d:4c:74: 93:8e:5e:80:49:28:8f:16:6a:b5:19:08:92:ee:18:65:a7:0d: 5d:62:c9:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjYwOTIzMDEwNDE4WhcNMjYwOTMwMDEwNDE4WjAYMRYwFAYD VQQDEw02YWIzMjU5Mi1hYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgEVqmFMj3unisP5Kz652VKQ3fDT2NSl2ft/pR4pP8uIesajg56R7MFFBBnJ XsetPfsgkFUzv+kamCTfxjdfRm6ec8LEL3dV0dxO2h2iSvK2G3SR6VgQh9NCmT42 mAS1yDiFc30vAaI0+2uVwIOgGDSEq7sU7jGOFkPnEQaTfHeWYtaUr66lRlKlEoAP lC6gjDIihlOKFJ2vJ7u8ICLnIu+wZ4uDpl7c4XWTb5Z9vR0Ik+DO3CsUXKrO7ox6 E9YlLKb2BsYdJBIoCbQ6kOkvnNwAfr+5I2D2dg6MYboBhSEA8vKj7dhELe/SXnoK O5M0lhflGIZuE4/wMMht8CFH+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLfngLp aFW9Y8bPuUUUrKopcDsKMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkXkTnK7dp2VbVN/e2hNEJcQSr8pooSq3e0jJfmPANdEKikdvnjEn6S36ryF/ ohSMp4D7N3ZH74SUHUAPYqgvCBvIB7maHa3QOlr+e8w4zD8YxpJe+vN3QHP/Cd6p q76XD+F6ZwW2m6vJPVJKefcClN+pW10rzxv/2CZzWjzGrN6wPD1MDPcP/nId6/SX zsvanzDkUzL/XBRLid2zhCH9zosqny6yHRPna9ieThz45K+x0CyAOk8AJhCOljgn A4vL57GlN+m/Wikd6OigLGYFX87kPO1bTVP1X2qNb2U29UbqQF13sRc7LUx0k45e gEkojxZqtRkIku4YZacNXWLJ3g== -----END CERTIFICATE-----Generated at Wed Sep 23 17:34:10 2026 by rpki-client