$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: /6lCsVbY+Ye7NO/+IBhd0LM6y5bVtYLVJCN3GThJ79s= Subject key identifier: 7D:BD:D2:52:6E:24:47:1E:0B:21:37:70:7A:FD:93:09:07:FF:D3:04 Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: FF Signing time: Fri 25 Sep 2026 06:32:51 +0000 Manifest this update: Fri 25 Sep 2026 06:32:51 +0000 Manifest next update: Fri 02 Oct 2026 06:32:51 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: HBOnDXaXEVSaO1a4h9PcRRGR9Qg+cq3sHKWbNgeGE2c=) 2: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: 61YOBpN768smaHlb7VNUU/OIP9xDMKXDWqFb5RlTs1U=) 3: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=) 4: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=) 5: 5792E7089C8211F1BE3258805211F970.roa (hash: SksxWtWEgcLENurVHTkG2do91ByIFkLP750du3iMIuM=) 6: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=) 7: A760CBA891D611F1A1097B9E5111F970.roa (hash: rVJa4ebXuFql7e5EjczJk/uiGqznYyPnvPEFXZFvTA4=) 8: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Sep 25 06:32:51 2026 GMT Not After : Oct 2 06:32:51 2026 GMT Subject: CN=6ab61593-4ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:bb:3a:1e:9c:d4:45:23:4f:a1:b1:37:67: 0a:b9:83:cb:cd:c5:e2:ad:dd:43:63:58:23:eb:de: c8:aa:01:2d:e8:4c:31:6c:49:9c:34:c0:a8:0f:7a: 67:4b:8d:fd:7c:ec:d1:c6:00:26:1d:24:b3:9a:cf: da:98:3e:e3:50:c7:d5:eb:63:7e:85:b7:89:4e:6b: b7:4c:1b:90:d3:8e:35:1c:86:86:06:23:0a:e6:50: 83:44:87:24:20:08:8e:56:18:d0:0d:7f:58:37:37: 8a:9a:de:42:98:16:cf:7d:83:60:5f:d3:1c:48:db: 5b:d5:68:57:d0:34:20:5a:f9:5f:e8:48:01:6c:47: 17:fe:ee:2f:c7:fa:97:01:49:83:b9:01:9c:06:71: 66:4e:e0:20:bb:70:26:3e:19:d8:a1:cd:e8:9c:4b: cf:57:b6:16:8b:36:c4:6d:34:3e:f0:2c:65:a1:26: f6:47:1c:5b:f4:ef:73:95:95:56:4c:73:07:78:92: 57:60:ee:16:f1:c8:a7:1f:14:d8:04:65:0a:95:0d: a3:4e:1f:d0:10:9f:7e:f1:a5:64:1c:3e:b4:7a:b4: 04:ea:53:87:ff:e0:d7:ae:a7:bf:1c:79:f2:8d:9f: fa:03:17:52:fd:ba:b4:c5:f2:53:77:cc:59:10:19: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BD:D2:52:6E:24:47:1E:0B:21:37:70:7A:FD:93:09:07:FF:D3:04 X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:1a:1d:f5:a7:24:d7:87:c0:5f:ae:eb:be:36:1b:c7:6f:f0: b8:f1:da:46:9d:97:1b:c5:c6:7e:04:49:da:3a:72:08:f2:aa: 5b:c5:ce:a5:bd:3d:f8:3e:a7:7a:0a:26:f6:b0:88:24:54:e8: a3:b7:31:7a:93:54:30:8e:c3:28:71:45:9f:0c:bb:f3:93:0a: 31:ef:c3:10:16:b3:18:ff:e2:cb:bc:c1:41:4c:a3:67:40:85: 88:28:d3:c5:89:61:93:76:96:47:c5:1b:aa:3d:fa:0d:31:25: 23:22:74:c9:27:35:2c:42:36:54:6e:79:c0:d3:7e:31:2d:33: 5b:d4:96:96:18:56:7f:9f:04:93:16:e6:7a:59:87:77:71:94: 29:70:c0:4b:42:90:5c:ed:b2:a8:ab:85:4d:10:05:07:5e:5d: 4f:e3:71:93:f3:65:88:77:d3:57:79:23:ed:ab:41:59:21:7e: ef:71:80:b0:13:b8:74:e7:65:c4:b6:f7:0a:e2:49:e3:a7:79: 4f:66:81:33:23:9c:35:32:ab:eb:ef:58:ce:2a:ec:aa:2a:a6: 85:a2:ad:76:cb:e3:7e:73:f9:b6:0d:d0:0c:a7:3d:8d:1e:38: 0a:db:0c:06:ef:b3:41:1f:d7:26:d3:a6:fc:5f:cd:7b:d3:f6: 47:50:95:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1QkMxMTAvBgNVBAUTKEExNDUyNDFEOTgzMEFGMjRBNzE1NjczNTEyNTVFQzhF N0VENTNFRkUwHhcNMjYwOTI1MDYzMjUxWhcNMjYxMDAyMDYzMjUxWjAYMRYwFAYD VQQDEw02YWI2MTU5My00ZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquS7Oh6c1EUjT6GxN2cKuYPLzcXird1DY1gj697IqgEt6EwxbEmcNMCoD3pn S439fOzRxgAmHSSzms/amD7jUMfV62N+hbeJTmu3TBuQ0441HIaGBiMK5lCDRIck IAiOVhjQDX9YNzeKmt5CmBbPfYNgX9McSNtb1WhX0DQgWvlf6EgBbEcX/u4vx/qX AUmDuQGcBnFmTuAgu3AmPhnYoc3onEvPV7YWizbEbTQ+8CxloSb2Rxxb9O9zlZVW THMHeJJXYO4W8cinHxTYBGUKlQ2jTh/QEJ9+8aVkHD60erQE6lOH/+DXrqe/HHny jZ/6AxdS/bq0xfJTd8xZEBlq3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH290lJu JEceCyE3cHr9kwkH/9MEMB8GA1UdIwQYMBaAFKFFJB2YMK8kpxVnNRJV7I5+1T7+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzVCQy83MUU1RDhCRTU5 RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9vVVVrSFpnd3J5U25GV2MxRWxYc2puN1ZQ djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzVCQy83MUU1RDhCRTU5RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9vVVVrSFpnd3J5 U25GV2MxRWxYc2puN1ZQdjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwBod9ack14fAX67rvjYbx2/wuPHaRp2XG8XGfgRJ2jpyCPKqW8XOpb09+D6n egom9rCIJFToo7cxepNUMI7DKHFFnwy785MKMe/DEBazGP/iy7zBQUyjZ0CFiCjT xYlhk3aWR8Ubqj36DTElIyJ0ySc1LEI2VG55wNN+MS0zW9SWlhhWf58EkxbmelmH d3GUKXDAS0KQXO2yqKuFTRAFB15dT+Nxk/NliHfTV3kj7atBWSF+73GAsBO4dOdl xLb3CuJJ46d5T2aBMyOcNTKr6+9YzirsqiqmhaKtdsvjfnP5tg3QDKc9jR44CtsM Bu+zQR/XJtOm/F/Ne9P2R1CV3w== -----END CERTIFICATE-----Generated at Fri Sep 25 16:59:31 2026 by rpki-client