$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: 6YCRLkCN7/xh66465qP50k5Oqayb87pn/MpiiVj+pOA= Subject key identifier: D2:10:1D:D1:7E:46:9B:08:BD:31:C2:5C:7C:D6:DB:A5:F8:71:07:DE Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 07C4 Signing time: Thu 24 Sep 2026 21:19:39 +0000 Manifest this update: Thu 24 Sep 2026 21:19:38 +0000 Manifest next update: Thu 01 Oct 2026 21:19:38 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: SU7DAWLYFgl3ZdL29YTraPkMErx4geK/EByvh+fXjxA=) 2: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA=) 3: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Sep 24 21:19:38 2026 GMT Not After : Oct 1 21:19:38 2026 GMT Subject: CN=6ab593eb-4e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:c4:36:15:5d:26:07:51:85:ed:e5:f4:66: 52:12:43:62:21:14:44:57:5d:6c:63:b5:24:34:b4: 8b:66:28:79:16:da:97:c0:f7:72:b2:1c:68:84:8e: 11:9e:16:ad:40:be:4d:d7:7c:e9:7c:30:d2:fa:e4: 5f:6a:d3:a5:b7:f5:7e:a3:02:e1:f4:58:5d:b2:a2: d3:59:88:aa:ff:b6:34:8a:c2:fc:ef:58:ca:5d:31: f7:0f:ab:e7:f4:5a:30:f9:61:e4:d4:57:ad:e9:77: e8:ac:db:51:4a:52:e2:dc:84:f4:f9:c3:7b:ed:93: de:93:d0:f4:5a:97:76:b1:46:d0:f8:9c:12:ca:8f: 8e:3b:78:5b:57:f8:af:85:db:90:32:d1:f7:74:17: 69:b1:2d:e3:0b:dd:4b:cc:3e:06:e9:93:65:4f:b7: 07:87:98:5e:ab:c6:7e:02:e4:d4:59:ec:f9:96:32: a5:af:63:e4:7e:ea:f3:e3:6b:67:ae:a3:2f:f7:79: 58:a9:76:d0:d2:72:0b:4c:09:69:61:d6:4b:52:f6: 19:c0:2b:12:7c:b9:35:35:3d:75:10:a2:60:31:21: 6a:9c:0f:d9:73:1d:d3:8e:1f:33:6c:a3:e9:12:f7: ec:d2:b9:1f:fe:cf:01:00:b3:9a:2a:fe:30:61:72: db:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:10:1D:D1:7E:46:9B:08:BD:31:C2:5C:7C:D6:DB:A5:F8:71:07:DE X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:aa:0e:8e:c3:76:55:bc:37:23:e2:d2:66:6f:ae:a3:7c:67: 68:5d:54:4c:ea:f5:26:24:8f:62:06:c8:88:9c:51:2c:5b:69: ee:5e:18:09:b3:f1:08:06:32:8f:37:d6:79:1b:86:0b:fe:23: 9a:5d:bc:6c:80:a4:e3:f6:09:17:92:a9:f7:11:77:e1:48:d2: a5:94:29:b5:8e:2d:e1:e2:34:6c:eb:18:dc:26:93:da:67:12: f3:18:0d:e1:65:25:c2:be:01:3e:70:d6:a7:c4:e9:68:48:55: 2c:c3:cb:be:55:6e:d6:5e:ea:4a:a4:e6:f9:95:d9:19:62:ae: 60:68:c8:ed:82:28:ef:7c:31:af:8f:63:4d:07:b7:90:ed:a9: ea:35:fa:d6:f7:08:df:ea:75:ca:c4:5e:02:a4:54:b5:b6:50: eb:bc:85:e0:38:1a:54:7b:63:59:f8:a2:04:92:77:ca:b2:1e: 7f:20:b6:fd:a0:40:ca:28:a5:a7:b7:3b:3a:96:bc:32:58:77: 61:be:e0:a5:10:ef:fd:7e:03:d5:ff:5f:e7:0e:a4:3f:f8:99: ab:07:25:3e:25:e8:3b:3f:3a:a0:3c:e1:25:45:01:a0:3e:fb: 95:48:16:ac:c0:49:03:4b:80:a9:96:e8:52:95:9d:48:b2:09: 03:01:2e:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjYwOTI0MjExOTM4WhcNMjYxMDAxMjExOTM4WjAYMRYwFAYD VQQDEw02YWI1OTNlYi00ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIrENhVdJgdRhe3l9GZSEkNiIRREV11sY7UkNLSLZih5FtqXwPdyshxohI4R nhatQL5N13zpfDDS+uRfatOlt/V+owLh9FhdsqLTWYiq/7Y0isL871jKXTH3D6vn 9Fow+WHk1Fet6XforNtRSlLi3IT0+cN77ZPek9D0Wpd2sUbQ+JwSyo+OO3hbV/iv hduQMtH3dBdpsS3jC91LzD4G6ZNlT7cHh5heq8Z+AuTUWez5ljKlr2Pkfurz42tn rqMv93lYqXbQ0nILTAlpYdZLUvYZwCsSfLk1NT11EKJgMSFqnA/Zcx3Tjh8zbKPp Evfs0rkf/s8BALOaKv4wYXLb3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIQHdF+ RpsIvTHCXHzW26X4cQfeMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhqoOjsN2Vbw3I+LSZm+uo3xnaF1UTOr1JiSPYgbIiJxRLFtp7l4YCbPxCAYy jzfWeRuGC/4jml28bICk4/YJF5Kp9xF34UjSpZQptY4t4eI0bOsY3CaT2mcS8xgN 4WUlwr4BPnDWp8TpaEhVLMPLvlVu1l7qSqTm+ZXZGWKuYGjI7YIo73wxr49jTQe3 kO2p6jX61vcI3+p1ysReAqRUtbZQ67yF4DgaVHtjWfiiBJJ3yrIefyC2/aBAyiil p7c7Opa8Mlh3Yb7gpRDv/X4D1f9f5w6kP/iZqwclPiXoOz86oDzhJUUBoD77lUgW rMBJA0uAqZboUpWdSLIJAwEurg== -----END CERTIFICATE-----Generated at Fri Sep 25 19:05:34 2026 by rpki-client