$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: X6Asv0P4o33XziSlLmRDukrzjSO89fdYr26eHMXMLS4= Subject key identifier: 98:2C:31:90:F0:06:09:D6:FD:19:96:62:FC:CB:19:10:B7:A7:09:4D Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 09E3 Signing time: Sat 26 Sep 2026 19:56:41 +0000 Manifest this update: Sat 26 Sep 2026 19:56:40 +0000 Manifest next update: Sat 03 Oct 2026 19:56:40 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: NvZcWlaLe9RIBsYdBG/1sOvrPVEbPmLPDrIUAr3mrrc=) 2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=) 3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: JxvxI6LJ6TE3o05TEr7Y6rv7xRaFRfn8yJoeJorzJAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Sep 26 19:56:40 2026 GMT Not After : Oct 3 19:56:40 2026 GMT Subject: CN=6ab82379-2cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:de:57:cf:71:7f:a2:59:59:78:42:67:16: 49:b0:c1:70:b4:ac:c4:32:eb:0b:4f:2f:a9:80:eb: 11:4c:7e:11:bb:d5:8b:27:44:f9:78:ee:08:21:1a: 3d:30:45:00:98:d4:ca:4e:79:3d:84:3a:ef:bf:29: 60:11:d9:52:10:ed:1c:c4:a6:fa:d7:53:87:a7:f3: 88:d9:e4:e5:74:17:92:58:60:e9:3f:37:ac:a5:27: 63:1b:87:63:41:77:de:ab:50:64:3d:6b:32:be:46: e1:6d:03:97:2e:21:ff:00:f7:d0:7f:b1:05:9f:a2: 4f:72:a8:d9:c4:53:e1:20:76:26:61:25:2b:01:a9: 33:72:28:ea:bc:5c:2e:4e:2a:1e:a9:91:09:a5:ee: e9:72:d9:80:39:af:e7:e9:0b:57:8c:0c:e7:ef:aa: f9:2f:79:e2:bf:6b:c9:ad:84:8f:52:07:0a:7f:d0: 4a:79:de:07:9a:00:31:5e:9c:89:95:f8:5f:b0:1b: 14:5a:29:17:ad:64:1f:e0:af:f6:93:1e:32:c5:d6: d2:b0:a4:22:ac:5a:81:c7:9c:d7:76:89:31:e6:b2: 67:72:58:14:c0:f6:e8:ae:7b:7c:5b:c6:ae:e5:89: e3:e2:f1:44:9a:54:de:02:37:2b:69:90:2f:f9:5e: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:31:90:F0:06:09:D6:FD:19:96:62:FC:CB:19:10:B7:A7:09:4D X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d4:36:45:75:12:43:de:ce:bf:2e:41:1a:19:c1:92:cc:d7: 39:1c:96:ba:8c:09:15:d9:4f:6f:e7:6e:4d:58:0f:a6:e4:58: df:08:09:74:28:80:c8:4c:19:10:6f:3a:2f:e9:10:34:da:0e: 44:d0:83:2b:8e:74:41:7b:f3:bf:90:8a:19:d8:81:e1:03:a0: 9d:50:cf:2a:c4:6e:64:f0:8e:62:11:79:0f:57:8c:8a:e1:55: 72:58:1a:5e:df:36:3d:4d:ac:95:bd:8d:c2:2a:d7:d2:3c:c3: bc:7d:4d:07:32:c3:6b:b5:90:89:1b:d6:df:22:41:dd:40:0c: b8:ed:a2:d6:08:d0:c9:97:7a:2f:58:a7:7d:d4:98:2f:ea:e0: 5c:55:c8:cd:1d:13:bf:7e:b7:2a:bf:d5:4a:af:99:3b:30:96: 30:23:3c:60:6d:da:88:18:e4:d4:f4:57:92:f4:4b:fb:db:e0: bb:54:b8:00:e8:7e:3f:08:70:9c:7b:e2:30:11:86:6a:20:0d: 8b:80:d2:a6:24:90:36:db:a1:7c:f2:59:37:21:82:19:4f:17: f0:6e:71:cd:b4:46:33:0f:89:0c:ff:25:ca:12:3c:8f:c7:cb: 75:ea:d4:6a:3f:19:88:bd:40:f1:89:3d:bd:39:48:a7:cb:d0: dd:f0:f1:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjYwOTI2MTk1NjQwWhcNMjYxMDAzMTk1NjQwWjAYMRYwFAYD VQQDEw02YWI4MjM3OS0yY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHXeV89xf6JZWXhCZxZJsMFwtKzEMusLTy+pgOsRTH4Ru9WLJ0T5eO4IIRo9 MEUAmNTKTnk9hDrvvylgEdlSEO0cxKb611OHp/OI2eTldBeSWGDpPzespSdjG4dj QXfeq1BkPWsyvkbhbQOXLiH/APfQf7EFn6JPcqjZxFPhIHYmYSUrAakzcijqvFwu TioeqZEJpe7pctmAOa/n6QtXjAzn76r5L3niv2vJrYSPUgcKf9BKed4HmgAxXpyJ lfhfsBsUWikXrWQf4K/2kx4yxdbSsKQirFqBx5zXdokx5rJnclgUwPbornt8W8au 5Ynj4vFEmlTeAjcraZAv+V6x3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgsMZDw BgnW/RmWYvzLGRC3pwlNMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKtQ2RXUSQ97Ovy5BGhnBkszXORyWuowJFdlPb+duTVgPpuRY3wgJdCiAyEwZ EG86L+kQNNoORNCDK450QXvzv5CKGdiB4QOgnVDPKsRuZPCOYhF5D1eMiuFVclga Xt82PU2slb2NwirX0jzDvH1NBzLDa7WQiRvW3yJB3UAMuO2i1gjQyZd6L1infdSY L+rgXFXIzR0Tv363Kr/VSq+ZOzCWMCM8YG3aiBjk1PRXkvRL+9vgu1S4AOh+Pwhw nHviMBGGaiANi4DSpiSQNtuhfPJZNyGCGU8X8G5xzbRGMw+JDP8lyhI8j8fLderU aj8ZiL1A8Yk9vTlIp8vQ3fDxxQ== -----END CERTIFICATE-----Generated at Mon Sep 28 01:10:32 2026 by rpki-client