$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: zSdWzvrwS7X9bOsbIbY8N00XIMNPz3zag8zSz+NWomk= Subject key identifier: F7:67:37:77:4A:33:55:0B:86:3C:7D:87:B1:3B:AE:FC:62:19:5A:BE Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 3127 Signing time: Sat 26 Sep 2026 15:27:39 +0000 Manifest this update: Sat 26 Sep 2026 15:27:39 +0000 Manifest next update: Sat 03 Oct 2026 15:27:39 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: KtYgHJTnn/GLRZqHFwlH5DzgDdNpGGU0DYIRkGXAqsc=) 2: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: 5gzyMm8E3RtBL5u+p29X/7YWyO/vj5NHozUgRoKZ84M=) 3: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: +rkvcv94NMaYampI+fYTUB0c8pEWY+GEMSJjHTOiOXE=) 4: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: vT+TgUmgODqZCcEcsB93R+wccx/Yl+5U/tfDsp7/ZFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 15:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12677 (0x3185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Sep 26 15:27:39 2026 GMT Not After : Oct 3 15:27:39 2026 GMT Subject: CN=6ab7e46b-2069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:cc:c2:27:56:ed:61:0c:59:2c:51:bc:55: 2f:f7:16:98:d6:74:e9:ca:a5:27:7e:cd:51:d0:95: 63:d6:69:1c:46:6a:9b:f7:f8:6c:ba:5a:0e:48:ca: 57:15:ed:a3:6c:a2:4f:93:58:51:e4:12:56:a5:4c: 97:e0:28:8c:c8:7e:47:d5:74:7d:a0:8f:69:16:30: a3:29:79:74:50:b0:1e:ca:93:a5:bd:62:4c:d6:57: a9:71:3d:b6:8b:cd:23:f6:5a:19:8a:3c:46:cc:99: 3e:b4:af:cb:f1:d2:8a:6d:f3:67:35:60:fc:03:aa: e3:9b:08:b1:29:0c:b2:1a:d3:41:de:f0:d5:e6:d2: 9f:04:c5:3d:94:4c:9f:50:c2:d9:a7:f7:23:35:c1: 26:e8:34:bd:50:d3:17:35:92:89:5f:fb:19:58:78: 46:0b:4e:7d:21:45:11:04:2e:71:8e:89:5e:73:1d: 06:8c:af:6e:70:a3:02:c9:5e:c7:2c:ac:42:97:9e: 48:7d:71:e4:6c:ab:b1:41:6e:84:23:fc:6e:5e:bb: f7:b6:0a:f0:f5:7e:7c:ad:0d:31:fe:a5:73:c3:36: 3e:20:d0:e3:ef:45:ce:10:c9:f8:cd:60:bf:23:47: 9c:82:c0:22:11:08:bb:38:df:72:f7:fd:8b:88:4d: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:67:37:77:4A:33:55:0B:86:3C:7D:87:B1:3B:AE:FC:62:19:5A:BE X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b6:0f:ac:2b:63:33:2e:f9:31:40:50:eb:25:b1:44:18:95: 94:25:33:a7:71:c1:dc:13:a7:a2:39:89:2b:85:aa:2d:81:c8: 48:5f:32:b4:f9:02:b0:93:16:52:67:6a:1e:89:56:66:b4:c3: dc:c7:9b:23:c6:1c:1f:d3:6c:22:2b:a3:2a:20:f2:24:9d:93: 86:68:27:26:dd:46:c1:88:29:8a:b3:48:4e:91:19:bd:c8:eb: 0d:0b:ca:21:2e:45:6f:c2:12:8d:aa:62:af:c7:af:fa:7d:f6: 5a:7b:ae:71:87:84:0e:43:5d:63:cb:74:d5:67:a0:94:8e:2c: aa:d2:ea:0f:00:15:7e:d4:50:9c:a8:00:1e:42:3b:89:58:aa: 08:93:78:1d:fc:8d:33:dc:d0:47:cf:75:b3:2d:79:a4:39:dd: 05:a8:31:21:c3:27:d6:7e:cb:20:9f:44:fe:c9:da:20:88:93: 16:10:72:f9:10:f7:17:e5:cf:49:8a:ba:50:57:19:16:b0:37: 77:30:6b:60:2b:19:dd:0d:66:35:8e:d8:e0:ef:76:2f:cc:ef: 7d:97:96:08:ee:3e:ed:76:a7:69:b2:62:8a:af:d9:5e:0f:04: 5a:f0:7e:3a:a1:f0:ff:f2:56:fa:cd:63:3b:83:2f:f9:66:a3: c1:45:4a:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYwOTI2MTUyNzM5WhcNMjYxMDAzMTUyNzM5WjAYMRYwFAYD VQQDEw02YWI3ZTQ2Yi0yMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLzMwidW7WEMWSxRvFUv9xaY1nTpyqUnfs1R0JVj1mkcRmqb9/hsuloOSMpX Fe2jbKJPk1hR5BJWpUyX4CiMyH5H1XR9oI9pFjCjKXl0ULAeypOlvWJM1lepcT22 i80j9loZijxGzJk+tK/L8dKKbfNnNWD8A6rjmwixKQyyGtNB3vDV5tKfBMU9lEyf UMLZp/cjNcEm6DS9UNMXNZKJX/sZWHhGC059IUURBC5xjolecx0GjK9ucKMCyV7H LKxCl55IfXHkbKuxQW6EI/xuXrv3tgrw9X58rQ0x/qVzwzY+INDj70XOEMn4zWC/ I0ecgsAiEQi7ON9y9/2LiE3dGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdnN3dK M1ULhjx9h7E7rvxiGVq+MB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7YPrCtjMy75MUBQ6yWxRBiVlCUzp3HB3BOnojmJK4WqLYHISF8ytPkCsJMW UmdqHolWZrTD3MebI8YcH9NsIiujKiDyJJ2ThmgnJt1GwYgpirNITpEZvcjrDQvK IS5Fb8ISjapir8ev+n32WnuucYeEDkNdY8t01WeglI4sqtLqDwAVftRQnKgAHkI7 iViqCJN4HfyNM9zQR891sy15pDndBagxIcMn1n7LIJ9E/snaIIiTFhBy+RD3F+XP SYq6UFcZFrA3dzBrYCsZ3Q1mNY7Y4O92L8zvfZeWCO4+7XanabJiiq/ZXg8EWvB+ OqHw//JW+s1jO4Mv+WajwUVK1Q== -----END CERTIFICATE-----Generated at Sun Sep 27 10:29:45 2026 by rpki-client