$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft File: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json) Hash identifier: u31DIFt5ZfLi2srUyhedhDaU9keIGVX1shTEIDmZSjM= Subject key identifier: 72:BB:B5:E5:C1:0E:45:99:AD:92:35:77:46:CB:E9:31:EB:1E:3F:1B Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56 Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft Manifest number: 01DF Signing time: Wed 23 Sep 2026 03:26:14 +0000 Manifest this update: Wed 23 Sep 2026 03:26:14 +0000 Manifest next update: Wed 30 Sep 2026 03:26:14 +0000 Files and hashes: 1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: pomNokoea/5I0xeCgA9r8iYTV5X7cHuUC0UPboHB/J0=) 2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: Km37wq6aDw75/u5KZyWOq+MrrDlARwtAXstjS4OwvhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456 Validity Not Before: Sep 23 03:26:14 2026 GMT Not After : Sep 30 03:26:14 2026 GMT Subject: CN=6ab346d6-6ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:f4:58:18:d9:10:75:67:0e:1b:5f:82:b7: af:a7:40:6d:4b:64:5a:f9:cf:96:4b:3c:46:74:f0: 6f:fe:fb:8f:c4:fa:45:95:cf:3f:08:dc:21:5d:b1: f8:c7:d2:c4:27:e1:2b:45:b8:7e:36:36:0e:7e:4b: 7d:ec:18:af:71:42:9c:d1:c7:8f:3e:fd:3a:61:7c: f9:e1:dc:07:7a:f1:1c:b4:e3:b3:ef:51:ef:ae:bb: 93:f5:bd:45:ae:42:94:4a:af:b5:cd:f9:07:b9:5c: 84:5f:7a:4d:22:bd:0e:03:69:ad:d7:cc:e8:f1:6c: 51:f1:e2:ea:09:60:69:fb:99:72:65:3b:be:96:13: a6:10:74:87:8c:9b:c2:a0:33:0d:7e:3c:38:3a:f1: 9b:0e:44:90:34:3a:77:9a:14:75:f6:29:f4:ec:45: c2:3c:e1:49:21:ee:83:6e:c9:82:9b:c6:b9:4c:b6: 73:3b:96:0d:6f:0d:c5:c4:52:d7:90:9c:66:12:03: 68:a5:ec:54:20:b3:04:05:4e:75:af:5b:ed:e9:c1: 9e:e7:74:3f:6f:e1:43:c8:eb:74:89:8e:bb:c8:dc: 63:8a:24:43:7a:87:49:98:38:db:93:db:14:97:ca: c4:e9:3f:f9:8b:77:06:b5:c9:98:b9:a2:5b:b1:b0: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BB:B5:E5:C1:0E:45:99:AD:92:35:77:46:CB:E9:31:EB:1E:3F:1B X509v3 Authority Key Identifier: keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:13:9d:f1:22:8d:4a:8e:87:45:89:cf:61:d2:85:dc:02:41: 08:63:d6:29:83:33:0e:a8:9c:66:1e:be:8b:95:6f:fb:39:76: c0:49:73:74:4d:77:64:50:88:53:5b:6c:ad:fa:b0:5d:5f:1c: 34:72:60:f7:42:a0:69:0a:ac:40:00:ed:ef:21:a4:3a:ae:2e: c8:b7:08:52:a8:e2:e0:a9:5c:9e:dd:a5:b5:86:ad:9a:01:9e: f9:0e:42:bf:ed:c3:80:84:fc:6e:e1:b2:59:76:d0:32:87:dc: 99:b6:cc:b6:f8:8b:4f:74:c1:5d:97:30:9e:84:52:42:5b:6f: 20:38:25:7d:ae:36:18:39:77:f4:41:7a:04:51:9e:ac:74:cf: a4:62:f7:c5:2e:b2:52:8a:90:23:34:07:f6:90:2f:57:79:1e: c1:82:ee:65:28:9c:e5:f1:a2:ff:98:d3:ed:3f:3d:e4:0d:f8: 8c:25:20:e7:a4:b8:e5:62:0f:db:ec:8f:9a:bc:0b:b9:f6:08: c5:c0:19:fe:49:5d:77:a7:3e:2b:68:04:9f:30:4c:05:29:5c: dc:71:ed:8b:a0:aa:39:8e:7e:d2:2d:ba:df:17:c5:3c:51:f2: 46:4e:4a:af:f0:8d:00:94:09:aa:a8:43:b0:63:49:f0:68:aa: 3d:31:0c:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKEExMEY1NzgzQzhGOUE2RDk0RDI5QjRBQTkwQzU2RTAx NkJCNTE0NTYwHhcNMjYwOTIzMDMyNjE0WhcNMjYwOTMwMDMyNjE0WjAYMRYwFAYD VQQDEw02YWIzNDZkNi02Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn30WBjZEHVnDhtfgrevp0BtS2Ra+c+WSzxGdPBv/vuPxPpFlc8/CNwhXbH4 x9LEJ+ErRbh+NjYOfkt97BivcUKc0cePPv06YXz54dwHevEctOOz71HvrruT9b1F rkKUSq+1zfkHuVyEX3pNIr0OA2mt18zo8WxR8eLqCWBp+5lyZTu+lhOmEHSHjJvC oDMNfjw4OvGbDkSQNDp3mhR19in07EXCPOFJIe6DbsmCm8a5TLZzO5YNbw3FxFLX kJxmEgNopexUILMEBU51r1vt6cGe53Q/b+FDyOt0iY67yNxjiiRDeodJmDjbk9sU l8rE6T/5i3cGtcmYuaJbsbDb2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK7teXB DkWZrZI1d0bL6THrHj8bMB8GA1UdIwQYMBaAFKEPV4PI+abZTSm0qpDFbgFrtRRW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9DQjc0RjhCRUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0bE5LYlNxa01WdUFXdTFG RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29ROVhnOGo1cHRsTktiU3FrTVZ1QVd1MUZGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9DQjc0RjhCRUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0 bE5LYlNxa01WdUFXdTFGRlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhBOd8SKNSo6HRYnPYdKF3AJBCGPWKYMzDqicZh6+i5Vv+zl2wElzdE13ZFCI U1tsrfqwXV8cNHJg90KgaQqsQADt7yGkOq4uyLcIUqji4Klcnt2ltYatmgGe+Q5C v+3DgIT8buGyWXbQMofcmbbMtviLT3TBXZcwnoRSQltvIDglfa42GDl39EF6BFGe rHTPpGL3xS6yUoqQIzQH9pAvV3kewYLuZSic5fGi/5jT7T895A34jCUg56S45WIP 2+yPmrwLufYIxcAZ/kldd6c+K2gEnzBMBSlc3HHti6CqOY5+0i263xfFPFHyRk5K r/CNAJQJqqhDsGNJ8GiqPTEMwg== -----END CERTIFICATE-----Generated at Thu Sep 24 04:10:09 2026 by rpki-client