$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json) Hash identifier: hO+wrG/ZE6JDiNdvU7x0zDf8R6seUc5mhx1ZCv1JV6w= Subject key identifier: 2B:B9:38:74:34:05:7C:17:62:8B:C5:13:A8:75:F4:38:0B:E4:AA:9B Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft Manifest number: 0214 Signing time: Fri 25 Sep 2026 03:06:38 +0000 Manifest this update: Fri 25 Sep 2026 03:06:37 +0000 Manifest next update: Fri 02 Oct 2026 03:06:37 +0000 Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: qSSpMZnpRkZRdbLS9eZE1V+K16ino/y/JPOeLWAFWRY=) 2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Sep 25 03:06:37 2026 GMT Not After : Oct 2 03:06:37 2026 GMT Subject: CN=6ab5e53e-6627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:7f:3a:2f:bd:13:ef:fd:7d:1a:29:61:28: 15:f0:24:fb:cd:40:d7:a7:95:47:f1:55:69:57:20: 40:24:e0:52:04:72:2e:97:7e:06:fc:49:3f:31:e2: 7b:cb:f7:f8:5e:85:f2:9b:be:50:46:aa:77:ca:91: fb:96:22:cb:79:c6:a6:c9:15:cf:be:a7:47:67:83: ff:2d:c1:5a:9f:2b:4b:a8:bf:d2:ae:ec:50:10:57: a8:f1:fa:7b:2b:d7:34:c1:26:00:65:82:9c:fb:c7: 15:e9:d6:70:1a:44:ad:15:4f:f7:1f:e3:91:45:32: df:ed:0a:28:11:4f:00:1e:e2:98:43:56:c7:b0:e9: dc:94:0c:65:00:e2:4b:7a:2a:7c:e9:a9:89:47:74: b7:54:22:61:e2:72:59:e8:57:c1:81:f0:26:53:b6: ab:1e:17:53:2d:1e:21:e9:ac:94:3d:a4:b3:a5:16: b2:d1:3a:4d:9a:52:a2:d5:c7:08:df:06:88:3f:e7: ef:48:97:25:5c:92:1b:69:1e:ba:71:07:00:11:c1: 03:d3:bd:4e:93:2d:23:23:30:d7:9f:5e:66:9b:cd: 7d:8b:e2:93:8e:51:c9:33:35:c3:9a:ac:2d:7e:21: fc:eb:03:2c:4b:7c:57:92:0b:ff:d8:8a:7d:6f:ca: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B9:38:74:34:05:7C:17:62:8B:C5:13:A8:75:F4:38:0B:E4:AA:9B X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a8:7c:ab:d0:e2:46:7b:44:be:ce:71:e3:40:a2:41:bf:29: 78:9e:9e:f0:fe:b2:5c:e7:fe:8f:26:91:38:84:25:5b:27:80: 70:6c:75:9a:b9:43:6a:4b:1d:30:41:6d:9a:1f:58:92:9a:86: 3d:eb:0d:1e:d0:2d:48:55:78:64:87:00:62:86:e4:d6:a5:5f: c0:4e:d8:d4:f9:71:7a:fc:65:c8:90:29:27:b0:94:97:d4:43: be:75:ee:f8:67:4f:2e:4d:92:08:a2:64:c2:7b:39:6f:bf:20: 97:66:54:78:ec:f0:82:d5:36:91:f1:a0:10:13:74:a2:28:b7: 2f:c9:a4:b7:9e:2b:d4:07:b0:cb:18:1e:3d:ff:b3:98:90:41: 9d:63:25:ce:16:2a:27:29:b6:8d:c4:9c:fa:b5:38:f5:e4:1e: 07:10:ca:04:c8:de:06:0f:b3:6f:ca:83:cf:4c:98:df:e9:3b: 71:e0:a8:33:2d:5c:f3:44:7f:03:85:02:6d:20:89:64:d0:9d: 90:59:04:d4:fa:34:c3:63:7c:4c:80:b8:8d:b4:af:24:c7:29: 88:33:f6:a6:fc:11:e0:b9:63:06:98:3e:02:d0:00:c3:f8:68: 73:83:bb:1a:fe:2a:35:ef:b7:26:62:7c:a4:30:85:2e:d8:d8: 20:98:a7:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjYwOTI1MDMwNjM3WhcNMjYxMDAyMDMwNjM3WjAYMRYwFAYD VQQDEw02YWI1ZTUzZS02NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Wd/Oi+9E+/9fRopYSgV8CT7zUDXp5VH8VVpVyBAJOBSBHIul34G/Ek/MeJ7 y/f4XoXym75QRqp3ypH7liLLecamyRXPvqdHZ4P/LcFanytLqL/SruxQEFeo8fp7 K9c0wSYAZYKc+8cV6dZwGkStFU/3H+ORRTLf7QooEU8AHuKYQ1bHsOnclAxlAOJL eip86amJR3S3VCJh4nJZ6FfBgfAmU7arHhdTLR4h6ayUPaSzpRay0TpNmlKi1ccI 3waIP+fvSJclXJIbaR66cQcAEcED071Oky0jIzDXn15mm819i+KTjlHJMzXDmqwt fiH86wMsS3xXkgv/2Ip9b8pXQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCu5OHQ0 BXwXYovFE6h19DgL5KqbMB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IyMy83NTQ1RjAzQTk3RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4 eWhVbDhoOTk3UFdtb3FaTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKh8q9DiRntEvs5x40CiQb8peJ6e8P6yXOf+jyaROIQlWyeAcGx1mrlDaksd MEFtmh9YkpqGPesNHtAtSFV4ZIcAYobk1qVfwE7Y1PlxevxlyJApJ7CUl9RDvnXu +GdPLk2SCKJkwns5b78gl2ZUeOzwgtU2kfGgEBN0oii3L8mkt54r1AewyxgePf+z mJBBnWMlzhYqJym2jcSc+rU49eQeBxDKBMjeBg+zb8qDz0yY3+k7ceCoMy1c80R/ A4UCbSCJZNCdkFkE1Po0w2N8TIC4jbSvJMcpiDP2pvwR4LljBpg+AtAAw/hoc4O7 Gv4qNe+3JmJ8pDCFLtjYIJinAQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:37:58 2026 by rpki-client