$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft File: oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json) Hash identifier: du2broR6xyC9FB8gIKfez0I+dMy9Iv08Co1APyrmGUY= Subject key identifier: 3E:57:B8:6D:A7:D8:FC:2E:BC:DE:A4:E7:97:39:6F:79:16:7F:BF:B8 Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2 Certificate issuer: /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft Manifest number: 43 Signing time: Mon 05 Oct 2026 08:58:49 +0000 Manifest this update: Mon 05 Oct 2026 08:58:49 +0000 Manifest next update: Mon 12 Oct 2026 08:58:49 +0000 Files and hashes: 1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: f8x2d3kVkGV82KRMxrA+sjooxql0Ty6YAGcmPCPoJHo=) 2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2 Validity Not Before: Oct 5 08:58:49 2026 GMT Not After : Oct 12 08:58:49 2026 GMT Subject: CN=6ac366c9-db07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:44:fd:25:ff:cd:3a:10:d3:72:12:c5:a0: 60:02:e2:8e:38:d3:e9:6c:d8:7d:73:2d:5a:ac:14: a5:c4:2c:a4:eb:50:03:59:94:86:2c:5d:ac:d1:03: 8f:a8:e2:5b:db:ff:ca:6b:99:1e:4d:6a:bc:ba:38: 5c:6b:e0:48:8b:5d:96:84:fd:bf:22:c7:02:d5:02: 08:38:03:a0:13:e8:da:a5:39:02:0d:4d:26:e9:36: 96:08:a7:6f:75:71:1f:a9:73:fb:2a:52:6a:f3:a9: fa:61:cc:f3:5a:20:74:e4:b3:6a:73:b1:cb:ce:93: ab:24:01:42:96:9c:af:b0:0e:89:ee:2c:12:63:2a: 58:fe:49:8a:b2:97:1c:41:54:f7:b0:d3:a7:36:a1: ef:9f:9c:a9:d3:39:b0:f7:bf:7e:7d:8b:23:96:b2: 33:57:6d:84:41:b4:26:42:81:03:25:83:9d:0f:b6: 50:2f:54:1a:85:a5:29:48:2d:5d:2a:d6:e6:76:0e: 90:fa:66:db:6a:56:e1:4d:2c:f4:29:bb:55:15:16: ac:65:d9:d3:8b:09:7f:cc:91:46:66:88:ff:ea:1b: 20:4d:e4:52:d3:91:a0:ce:00:70:29:e4:56:26:2e: 6c:19:5e:99:98:15:bd:71:86:e9:79:0b:17:7a:60: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:B8:6D:A7:D8:FC:2E:BC:DE:A4:E7:97:39:6F:79:16:7F:BF:B8 X509v3 Authority Key Identifier: keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c9:38:04:a6:03:ff:25:4a:e9:bb:f3:d4:98:0a:69:5c:c3: b9:19:bb:db:19:15:20:fd:fe:7f:ca:ba:ae:e1:0d:ab:12:cb: dd:3c:93:73:14:cf:26:52:14:a6:be:ce:35:d2:e7:cf:45:50: 35:d9:8a:16:68:c3:e5:2b:e8:12:a6:1f:ca:0f:bb:71:99:15: 81:fb:8f:64:60:f0:c0:81:0f:f1:a7:a2:7f:e3:fc:6c:0b:70: a9:dd:9b:eb:99:0b:b8:8b:80:b8:6d:d8:69:eb:50:f3:9b:fa: 23:f8:b7:ae:2f:64:40:af:9e:be:26:2c:e4:e6:5b:be:1c:37: ba:8b:4b:98:f7:e4:b7:f2:6c:b8:d0:29:89:03:46:75:d5:1d: 8f:69:37:02:14:be:2d:33:3a:15:f8:a0:a2:a9:ff:e1:42:dd: b9:a4:2b:d6:8a:18:ba:13:b2:1d:c0:6c:55:85:74:c8:b2:39: 8f:31:ae:e8:8a:11:9f:21:8c:61:3b:1a:3a:a9:b2:65:5d:a9: be:e4:3a:c9:5d:6d:59:7e:2b:99:9f:41:aa:87:aa:f7:37:47: a1:8f:04:9f:b4:35:bc:4e:66:4a:ac:64:3a:8a:02:36:2a:8f: fd:57:df:39:7b:93:00:90:ef:07:66:14:19:72:be:5f:f3:50: 17:c7:27:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzZGMjExMC8GA1UEBRMoQTA5OUQwMkNEMEI3Rjk2ODg5NjQ2NTYzOUYxQUYwNkIz M0U0NkFBMjAeFw0yNjEwMDUwODU4NDlaFw0yNjEwMTIwODU4NDlaMBgxFjAUBgNV BAMTDTZhYzM2NmM5LWRiMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0OUT9Jf/NOhDTchLFoGAC4o440+ls2H1zLVqsFKXELKTrUANZlIYsXazRA4+o 4lvb/8prmR5Nary6OFxr4EiLXZaE/b8ixwLVAgg4A6AT6NqlOQINTSbpNpYIp291 cR+pc/sqUmrzqfphzPNaIHTks2pzscvOk6skAUKWnK+wDonuLBJjKlj+SYqylxxB VPew06c2oe+fnKnTObD3v359iyOWsjNXbYRBtCZCgQMlg50PtlAvVBqFpSlILV0q 1uZ2DpD6ZttqVuFNLPQpu1UVFqxl2dOLCX/MkUZmiP/qGyBN5FLTkaDOAHAp5FYm LmwZXpmYFb1xhul5Cxd6YIyBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPle4bafY /C683qTnlzlveRZ/v7gwHwYDVR0jBBgwFoAUoJnQLNC3+WiJZGVjnxrwazPkaqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNkYyLzVFMEY3QjNDNjNC NjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdpSlpHVmpueHJ3YXpQa2Fx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0puUUxOQzMtV2lKWkdWam54cndhelBrYXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NkYyLzVFMEY3QjNDNjNCNjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdp SlpHVmpueHJ3YXpQa2FxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRyTgEpgP/JUrpu/PUmAppXMO5GbvbGRUg/f5/yrqu4Q2rEsvdPJNzFM8mUhSm vs410ufPRVA12YoWaMPlK+gSph/KD7txmRWB+49kYPDAgQ/xp6J/4/xsC3Cp3Zvr mQu4i4C4bdhp61Dzm/oj+LeuL2RAr56+Jizk5lu+HDe6i0uY9+S38my40CmJA0Z1 1R2PaTcCFL4tMzoV+KCiqf/hQt25pCvWihi6E7IdwGxVhXTIsjmPMa7oihGfIYxh Oxo6qbJlXam+5DrJXW1ZfiuZn0Gqh6r3N0ehjwSftDW8TmZKrGQ6igI2Ko/9V985 e5MAkO8HZhQZcr5f81AXxyc4 -----END CERTIFICATE-----Generated at Tue Oct 6 15:30:07 2026 by rpki-client