$ rpki-client -vvvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json) Hash identifier: SQJEuP8GNdC7ynRXD1uLhgwRWAE9A7h2iDFwHvTvTOc= Subject key identifier: EE:48:00:A8:6B:4E:C4:F6:5A:3D:92:38:D0:EA:B8:78:51:AC:84:BB Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft Manifest number: 04AF Signing time: Tue 22 Sep 2026 23:32:45 +0000 Manifest this update: Tue 22 Sep 2026 23:32:45 +0000 Manifest next update: Tue 29 Sep 2026 23:32:45 +0000 Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: ZLYAUb0tKiaHjArzEiiuuZLWliU9qA8KFaPPPugV4xk=) 2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: 24R9bP8FZGrYS8hzQsfu5XaVnVqMRb0ojEdqSMQzy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778D4, serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD Validity Not Before: Sep 22 23:32:45 2026 GMT Not After : Sep 29 23:32:45 2026 GMT Subject: CN=6ab3101d-2e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:9a:a2:d8:ad:b1:20:1b:54:88:51:b5:8c: cc:13:f0:db:9c:1c:e6:b3:af:3c:83:bf:3c:48:3c: ad:31:21:97:3d:b1:91:af:a2:b9:e7:4f:a7:d9:35: 62:ad:17:03:99:f9:5b:e2:8f:0b:5b:5d:cd:f9:67: 0f:92:3e:b1:7d:2f:6f:23:9c:f6:3f:9f:a3:0f:99: 65:3c:e5:90:d5:b7:7b:3f:26:e0:00:1c:a4:0e:b7: 34:77:86:ba:33:b4:dd:7f:23:64:93:1f:21:a8:0e: 21:64:7c:e6:64:ea:17:ea:de:7f:87:b1:eb:51:8f: d5:97:8f:d1:7f:e4:47:8c:d1:3d:6c:6b:c2:85:bf: 8d:c5:7e:6e:d1:d7:b3:b2:c1:7f:bc:f4:69:69:49: 4f:77:dd:73:41:63:47:67:91:f3:62:eb:32:68:12: 30:24:2e:ee:f1:b1:38:7d:08:e5:df:8c:1d:c2:69: 72:d0:07:5f:58:b8:14:1e:55:5c:30:0a:ea:9c:79: a2:90:16:52:a1:86:f6:cb:29:fc:ef:e4:7c:ab:5d: d8:40:5c:67:4d:ca:cc:6a:0b:96:ba:12:e0:df:46: 4b:bf:77:3a:a5:bc:8f:16:d5:8c:29:61:90:8d:19: a3:6b:70:2b:17:80:8d:a4:1d:d4:9a:fa:77:b7:13: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:48:00:A8:6B:4E:C4:F6:5A:3D:92:38:D0:EA:B8:78:51:AC:84:BB X509v3 Authority Key Identifier: keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:22:e0:58:a3:08:ed:83:bb:71:a1:20:d2:f2:f5:f8:97: 57:c4:20:0b:0f:2e:cd:07:6c:88:b1:25:0f:1e:b6:b5:c3:1e: 66:0d:62:1f:c1:40:9a:33:32:cf:c4:81:bf:d9:e1:9f:92:56: 73:8e:17:f8:d8:f1:16:67:6d:ad:ae:ec:33:17:31:ff:fa:2f: ea:91:09:37:3c:51:f5:89:27:f7:09:73:fe:42:4a:c5:35:7b: ef:72:b7:58:8f:ed:2d:7c:d8:e9:16:a8:85:a0:da:76:5b:01: 98:48:6e:db:a9:d0:8a:cc:4f:e7:fb:7e:8b:ad:cd:42:31:18: 6a:e5:e8:38:c1:27:ef:5e:72:0f:d0:b1:4c:5c:f1:fb:cb:57: 68:8f:2b:30:1c:94:0e:80:04:1b:cd:21:c8:b2:f4:28:86:4e: 9d:49:40:ba:bf:36:fd:57:1d:8f:21:7a:35:b7:50:f2:95:ee: 00:2f:7a:a9:a8:f9:3a:7b:66:d0:3e:69:8c:78:da:15:6b:65: 26:d9:7c:c6:70:39:a7:be:b4:9b:81:78:9c:a7:1b:42:de:51: 19:d5:0e:20:1d:59:02:b7:c0:89:60:6a:4f:03:69:3b:8b:a7: 52:7a:56:0f:21:0a:a8:2b:c4:8c:29:33:31:cf:83:7f:11:8c: 2c:27:9a:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4RDQxMTAvBgNVBAUTKDM4ODdBQ0RERjcxQ0JFRjRBNzUyMUQ4NDUxRUVDQkFF QjI1MTlFRkQwHhcNMjYwOTIyMjMzMjQ1WhcNMjYwOTI5MjMzMjQ1WjAYMRYwFAYD VQQDEw02YWIzMTAxZC0yZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC6aotitsSAbVIhRtYzME/DbnBzms688g788SDytMSGXPbGRr6K550+n2TVi rRcDmflb4o8LW13N+WcPkj6xfS9vI5z2P5+jD5llPOWQ1bd7PybgABykDrc0d4a6 M7TdfyNkkx8hqA4hZHzmZOoX6t5/h7HrUY/Vl4/Rf+RHjNE9bGvChb+NxX5u0dez ssF/vPRpaUlPd91zQWNHZ5HzYusyaBIwJC7u8bE4fQjl34wdwmly0AdfWLgUHlVc MArqnHmikBZSoYb2yyn87+R8q13YQFxnTcrMaguWuhLg30ZLv3c6pbyPFtWMKWGQ jRmja3ArF4CNpB3Umvp3txPe0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5IAKhr TsT2Wj2SONDquHhRrIS7MB8GA1UdIwQYMBaAFDiHrN33HL70p1IdhFHuy66yUZ79 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhENC9EOUQ1NjkzQTkw NTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2U25VaDJFVWU3THJySlJu djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZXMzZmNjdnZTblVoMkVVZTdMcnJKUm52MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhENC9EOUQ1NjkzQTkwNTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2 U25VaDJFVWU3THJySlJudjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuYi4FijCO2Du3GhINLy9fiXV8QgCw8uzQdsiLElDx62tcMeZg1iH8FAmjMy z8SBv9nhn5JWc44X+NjxFmdtra7sMxcx//ov6pEJNzxR9Ykn9wlz/kJKxTV773K3 WI/tLXzY6RaohaDadlsBmEhu26nQisxP5/t+i63NQjEYauXoOMEn715yD9CxTFzx +8tXaI8rMByUDoAEG80hyLL0KIZOnUlAur82/VcdjyF6NbdQ8pXuAC96qaj5Ontm 0D5pjHjaFWtlJtl8xnA5p760m4F4nKcbQt5RGdUOIB1ZArfAiWBqTwNpO4unUnpW DyEKqCvEjCkzMc+DfxGMLCeaBQ== -----END CERTIFICATE-----Generated at Thu Sep 24 03:09:27 2026 by rpki-client