$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json) Hash identifier: sRiZdYCWqlD+X/k1U4ze3Xkk/lAWzNXi2Z8yj+iEiYQ= Subject key identifier: 25:90:40:C0:41:92:75:17:5B:A6:68:2B:D2:3C:87:37:11:EF:6E:BB Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Certificate serial: 1024 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft Manifest number: 0EA8 Signing time: Mon 28 Sep 2026 18:48:32 +0000 Manifest this update: Mon 28 Sep 2026 18:48:31 +0000 Manifest next update: Mon 05 Oct 2026 18:48:31 +0000 Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: HpFX31y+DMyH+F5Z/FhpUheEgOvHnsUDRID0MyD3rRQ=) 2: DA216556B3D411F090043E0CC4F9AE02.roa (hash: 8vKM78IcMwZB6PIl/JxE5LRwpEY6Xf+cQc1+dknWpTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4132 (0x1024) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Validity Not Before: Sep 28 18:48:31 2026 GMT Not After : Oct 5 18:48:31 2026 GMT Subject: CN=6abab680-a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:60:a6:30:bc:59:17:81:d5:37:83:ae:12: bc:ab:c1:97:95:ea:85:81:f3:8c:e4:98:29:f6:12: 0c:a2:fe:33:cc:c2:8c:e3:2a:ad:18:d4:13:eb:b6: 62:2a:ca:18:25:12:a1:9c:fe:8c:8b:39:60:2b:ff: 56:ff:40:c4:6b:46:ff:86:ea:4d:12:85:13:fc:ee: f9:1e:60:ff:87:9c:dc:2a:64:00:4a:2f:63:ee:c1: 83:ea:19:9c:e4:ce:c1:d5:3f:b7:0e:da:a3:cd:5d: b0:6b:6c:64:c4:12:bf:5c:2a:61:9c:a1:c6:f7:f1: 1b:6f:05:81:4f:be:18:d5:a2:6e:46:5a:a3:ff:fa: 43:ff:86:fb:4a:9e:f4:37:4f:ad:5c:f0:d0:e0:c9: 16:7c:45:1b:05:87:70:c4:89:af:a5:99:45:4e:f9: a9:00:2d:59:2e:b2:fa:49:65:fd:82:79:08:a2:69: 51:56:84:0f:dd:8c:b3:ea:c9:a5:a6:f1:a3:2a:0a: e7:22:52:c8:6a:d6:07:02:59:1f:f4:c3:4b:b6:bf: c2:a3:df:28:87:3a:b9:8b:2a:22:09:ca:1b:87:1e: 7f:04:5d:d2:79:37:a9:6a:39:4e:d7:a0:a7:fe:08: 20:6d:78:f8:fc:bc:fa:af:e3:52:30:b4:c3:fb:78: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:90:40:C0:41:92:75:17:5B:A6:68:2B:D2:3C:87:37:11:EF:6E:BB X509v3 Authority Key Identifier: keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:09:63:d9:6c:13:0c:0c:3a:3c:e5:84:0d:99:98:b2:e3:cd: 18:10:06:25:1a:a3:9c:68:a2:dd:b5:04:28:ac:0c:8e:61:be: 41:bc:07:7e:33:c1:60:87:fa:62:57:5e:3f:a4:a2:50:cc:4a: 5d:63:27:42:3f:41:7c:3b:f4:2c:a2:64:cf:4a:ef:47:66:64: 5f:64:10:9f:e7:51:1e:d8:00:b8:82:66:b6:62:75:e8:65:5c: 7c:a5:ea:5c:97:4c:ef:1a:a2:7d:6f:3f:02:f0:48:78:28:f9: 6a:cf:62:40:cb:6a:0a:ef:ba:c1:ed:a7:1b:02:0d:2e:2f:93: 79:90:18:b3:db:50:be:7a:32:28:b8:06:ec:ec:fe:9b:38:4c: cd:ed:d9:7b:a4:bf:9c:e5:c0:c7:c3:63:07:2d:13:6e:16:54: 59:cb:53:48:59:a9:b0:30:c2:23:d9:ad:22:8f:25:ff:26:e6: 88:86:01:a5:de:89:b6:01:aa:81:3e:26:4e:01:63:bf:2d:e9: f0:c7:1a:25:47:2a:0c:93:8b:1f:be:5e:72:48:05:6c:19:85: 24:39:0f:97:7a:c5:a9:67:7b:4f:ae:cb:58:91:80:6b:0e:d7: 5a:f5:99:1d:8b:3d:0a:57:f5:e6:42:29:03:a3:1d:20:cd:46: 27:83:01:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICECQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKDc0RTVCQjlCNkQzQ0M3RjhDMjlBODNCREM4NDkyQjk2 NTlGMEVFMTcwHhcNMjYwOTI4MTg0ODMxWhcNMjYxMDA1MTg0ODMxWjAYMRYwFAYD VQQDEw02YWJhYjY4MC1hNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRhgpjC8WReB1TeDrhK8q8GXleqFgfOM5Jgp9hIMov4zzMKM4yqtGNQT67Zi KsoYJRKhnP6MizlgK/9W/0DEa0b/hupNEoUT/O75HmD/h5zcKmQASi9j7sGD6hmc 5M7B1T+3DtqjzV2wa2xkxBK/XCphnKHG9/EbbwWBT74Y1aJuRlqj//pD/4b7Sp70 N0+tXPDQ4MkWfEUbBYdwxImvpZlFTvmpAC1ZLrL6SWX9gnkIomlRVoQP3Yyz6sml pvGjKgrnIlLIatYHAlkf9MNLtr/Co98ohzq5iyoiCcobhx5/BF3SeTepajlO16Cn /gggbXj4/Lz6r+NSMLTD+3hc5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWQQMBB knUXW6ZoK9I8hzcR7267MB8GA1UdIwQYMBaAFHTlu5ttPMf4wpqDvchJK5ZZ8O4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9EOTY0QjQ4MjMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhfakNtb085eUVrcmxsbnc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RPVzdtMjA4eF9qQ21vTzl5RWtybGxudzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9EOTY0QjQ4MjMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhf akNtb085eUVrcmxsbnc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuAlj2WwTDAw6POWEDZmYsuPNGBAGJRqjnGii3bUEKKwMjmG+QbwHfjPBYIf6 YldeP6SiUMxKXWMnQj9BfDv0LKJkz0rvR2ZkX2QQn+dRHtgAuIJmtmJ16GVcfKXq XJdM7xqifW8/AvBIeCj5as9iQMtqCu+6we2nGwINLi+TeZAYs9tQvnoyKLgG7Oz+ mzhMze3Ze6S/nOXAx8NjBy0TbhZUWctTSFmpsDDCI9mtIo8l/ybmiIYBpd6JtgGq gT4mTgFjvy3p8McaJUcqDJOLH75eckgFbBmFJDkPl3rFqWd7T67LWJGAaw7XWvWZ HYs9Clf15kIpA6MdIM1GJ4MBKQ== -----END CERTIFICATE-----Generated at Wed Sep 30 19:59:52 2026 by rpki-client