$ rpki-client -vvvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: sy/x1WyZYdtQoZOf2p1mtb+KXxfRHwHHp4aUEuOz6+4= Subject key identifier: 75:2B:F8:63:F5:C4:6A:E3:35:F2:11:81:B4:C6:E3:48:8A:BD:F8:56 Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 042B Signing time: Tue 22 Sep 2026 23:55:10 +0000 Manifest this update: Tue 22 Sep 2026 23:55:10 +0000 Manifest next update: Tue 29 Sep 2026 23:55:10 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: ecMavOyVMNx5uz8xw7hcu46EY2BPlj2ICtMVj8ib9SI=) 2: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: lEva1qsHLGxJxjBIgGtQFKUdKFRPRCiOTXaXyoGN6Ms=) 3: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: CldvSs/M5ZiWN5Du12GJRc0WhEtY3OpvQfzL4bZReRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: Sep 22 23:55:10 2026 GMT Not After : Sep 29 23:55:10 2026 GMT Subject: CN=6ab3155e-4f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:90:6e:54:79:72:bf:b3:35:3d:7e:9c:ba: de:4a:88:e2:49:4f:31:03:49:6d:66:ce:dd:7a:85: 34:0e:83:7d:93:68:78:37:6f:51:db:b8:e3:86:70: 18:e3:9b:cb:9d:bf:02:ec:66:ec:07:fa:8c:3c:27: 39:1b:9d:cd:f5:13:36:cd:6b:03:1d:83:cd:bf:6f: f4:82:dd:fc:bc:0a:58:a6:92:a6:8f:7a:ed:41:40: 3a:66:b7:8d:c6:dd:7a:b2:73:53:2c:51:5b:3c:73: 42:18:20:51:6e:40:f4:30:f4:e4:70:fe:7f:66:c0: ff:97:4f:e3:99:d5:12:bf:1d:92:2f:87:57:16:be: 24:b8:6f:6e:77:fb:9b:35:6f:8b:82:37:a3:dd:82: 14:31:49:1f:d0:60:cb:20:a2:35:ad:31:75:c3:fe: fb:83:93:76:42:b5:6f:bb:95:5e:82:08:45:bd:41: 10:4e:7c:4d:8b:d3:92:17:61:88:a9:8d:e3:b3:81: 8b:2f:b9:82:56:93:8c:30:b1:05:11:29:25:84:08: b1:86:5f:e7:a3:14:22:4a:ad:70:a8:14:2d:3b:e5: 8f:fc:c9:4d:b1:38:b0:a8:52:b6:e2:77:90:8d:d6: e5:ad:2c:ea:7b:39:71:16:50:dc:dd:5c:63:70:ef: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2B:F8:63:F5:C4:6A:E3:35:F2:11:81:B4:C6:E3:48:8A:BD:F8:56 X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:4b:1f:fb:d9:47:a2:cf:94:b7:54:be:b9:09:64:53:a3:96: d0:6d:97:96:2e:8c:77:01:60:70:58:57:1d:b0:2f:06:ce:bd: 6d:98:04:49:f8:a9:13:b7:3a:d5:87:96:f4:6f:47:1b:6b:72: aa:ce:1b:6e:41:0e:3a:13:12:4d:8e:2e:a6:c7:0d:8c:47:75: e8:00:0f:0b:e9:19:38:69:66:0e:d6:85:00:bf:b4:da:18:c4: a6:46:5a:f3:b0:c9:2a:3b:9e:70:55:00:47:d0:75:c9:73:4b: 4a:75:cf:96:45:5f:50:ff:6f:18:9e:c0:8e:39:f9:f4:d2:5a: 64:cf:1b:e7:19:78:dc:b9:da:74:51:e4:68:59:99:bc:08:d1: 8b:43:d4:a7:7f:92:1d:d8:34:55:16:eb:c1:81:be:6a:f5:76: 0f:b0:b0:38:cc:de:3a:da:2b:08:76:92:6f:db:6c:4d:3e:0d: 4f:bd:9b:a8:0c:1f:99:bd:9f:e2:25:53:a8:3f:9e:00:e7:d9: b2:dd:82:6b:95:40:03:04:02:3f:05:4d:43:6b:74:b1:30:fb: fd:06:a2:28:15:74:93:99:fc:8d:e0:f2:b7:ee:52:7b:44:9a: f0:d3:1a:41:61:f3:e9:5c:60:f9:59:a3:c4:98:22:57:90:0f: 1a:3d:53:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjYwOTIyMjM1NTEwWhcNMjYwOTI5MjM1NTEwWjAYMRYwFAYD VQQDEw02YWIzMTU1ZS00ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIWQblR5cr+zNT1+nLreSojiSU8xA0ltZs7deoU0DoN9k2h4N29R27jjhnAY 45vLnb8C7GbsB/qMPCc5G53N9RM2zWsDHYPNv2/0gt38vApYppKmj3rtQUA6ZreN xt16snNTLFFbPHNCGCBRbkD0MPTkcP5/ZsD/l0/jmdUSvx2SL4dXFr4kuG9ud/ub NW+Lgjej3YIUMUkf0GDLIKI1rTF1w/77g5N2QrVvu5VegghFvUEQTnxNi9OSF2GI qY3js4GLL7mCVpOMMLEFESklhAixhl/noxQiSq1wqBQtO+WP/MlNsTiwqFK24neQ jdblrSzqezlxFlDc3VxjcO/odwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUr+GP1 xGrjNfIRgbTG40iKvfhWMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABksf+9lHos+Ut1S+uQlkU6OW0G2Xli6MdwFgcFhXHbAvBs69bZgESfipE7c6 1YeW9G9HG2tyqs4bbkEOOhMSTY4upscNjEd16AAPC+kZOGlmDtaFAL+02hjEpkZa 87DJKjuecFUAR9B1yXNLSnXPlkVfUP9vGJ7Ajjn59NJaZM8b5xl43LnadFHkaFmZ vAjRi0PUp3+SHdg0VRbrwYG+avV2D7CwOMzeOtorCHaSb9tsTT4NT72bqAwfmb2f 4iVTqD+eAOfZst2Ca5VAAwQCPwVNQ2t0sTD7/QaiKBV0k5n8jeDyt+5Se0Sa8NMa QWHz6Vxg+VmjxJgiV5APGj1Tww== -----END CERTIFICATE-----Generated at Thu Sep 24 12:01:04 2026 by rpki-client