$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json) Hash identifier: yya/AQbtaWLzBIpun3fELQM0UutMYn2AVoK+Ui6lJuE= Subject key identifier: 4E:C0:D2:B0:1A:33:E4:DC:25:CA:76:5F:2E:2F:0E:8F:BC:2A:F1:E7 Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft Manifest number: 0181 Signing time: Tue 29 Sep 2026 05:03:56 +0000 Manifest this update: Tue 29 Sep 2026 05:03:56 +0000 Manifest next update: Tue 06 Oct 2026 05:03:56 +0000 Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: gxB3w8Su/DXst6esUVtKIMCZvXKlRgV1SrXQI6GFLIo=) 2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 05:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Validity Not Before: Sep 29 05:03:56 2026 GMT Not After : Oct 6 05:03:56 2026 GMT Subject: CN=6abb46bc-38f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:fa:b7:5d:25:a5:0e:88:0a:35:60:d7:9d: da:8e:40:e4:29:84:ac:59:99:e8:54:a1:80:26:7a: 9e:66:19:0e:af:08:83:eb:99:bf:d2:a9:f2:97:b4: c7:1c:95:5d:0e:f1:0d:1a:1b:fa:6f:89:c6:5f:14: f2:38:1c:71:fa:e0:ae:7c:ac:90:c0:ea:88:61:ba: 12:7c:9a:2e:c5:07:43:8e:3c:8a:53:70:25:67:4d: d2:15:96:8f:b1:91:3d:d6:66:5b:0b:bd:bb:9f:29: c3:52:ea:2f:f2:51:e3:b6:64:b4:cd:4c:85:d8:be: 99:b6:ad:d6:2e:59:5a:7a:9c:ee:3d:ac:24:bc:2e: fc:b8:25:da:40:ee:15:a0:87:9b:8e:54:9f:9f:1e: cb:2a:d5:5f:0e:c0:9a:2f:c2:7e:f2:5d:da:ab:15: 53:f3:98:4c:29:08:91:87:0e:40:71:19:df:aa:8e: 67:37:b4:8a:ab:f2:7e:2e:2a:72:c1:20:67:e5:47: c4:ee:0a:ac:88:4b:70:af:b2:bf:cb:f7:39:dd:a9: 59:0c:3e:9b:ae:1f:5b:48:72:94:be:3f:2a:ed:01: 54:56:0a:cb:6c:93:66:ea:20:b6:bb:51:d6:20:bb: f2:c9:ca:44:56:7e:b4:39:74:1d:89:81:4c:12:dd: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C0:D2:B0:1A:33:E4:DC:25:CA:76:5F:2E:2F:0E:8F:BC:2A:F1:E7 X509v3 Authority Key Identifier: keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:17:71:40:d6:58:ac:39:fb:4f:60:9c:7d:e8:61:0a:dd:32: 9f:68:9b:26:56:49:bb:a3:7d:34:c0:1b:8b:93:31:a9:0d:a7: 6d:55:d7:ce:b7:67:9c:29:dc:05:0e:04:e8:94:9f:e7:b1:78: fa:56:ca:e2:46:0b:22:75:17:e3:18:a9:eb:14:7f:f7:dc:34: ec:cc:e7:43:91:2c:99:a0:4c:45:d5:a3:2e:58:0f:77:ab:d2: 28:d4:80:9f:54:52:cd:43:09:f3:83:76:53:7e:c7:2a:83:3c: 5d:7a:04:69:1f:1b:14:21:80:c8:fe:9f:08:4d:0b:5d:94:e7: 86:8b:7a:22:e5:65:a3:54:5f:cb:da:72:8a:bb:d7:8b:b6:0b: df:02:7d:f7:30:f0:67:b5:f8:9a:8b:7e:81:39:64:63:4e:f5: 05:eb:e2:64:e7:e7:83:4c:34:21:c0:5d:c8:38:60:80:f2:87: e5:fb:f0:06:b2:16:23:29:e1:84:4e:3a:14:e9:b7:c7:0f:4d: b1:12:c8:54:a8:79:77:48:bc:e6:91:19:15:75:2f:73:bc:b0: 3f:15:ff:e1:38:d8:54:36:65:41:17:3b:ec:8b:2b:53:66:bc: dd:10:ac:99:7f:b8:f2:9e:d6:07:9f:a4:5a:78:45:c8:80:ff: 93:82:c1:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKDM4MTdDRkUwMEE1RjFBQ0MzNjNCNDcyRjRGNjlEQTgz QkVCNTY2MTMwHhcNMjYwOTI5MDUwMzU2WhcNMjYxMDA2MDUwMzU2WjAYMRYwFAYD VQQDEw02YWJiNDZiYy0zOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEr6t10lpQ6ICjVg153ajkDkKYSsWZnoVKGAJnqeZhkOrwiD65m/0qnyl7TH HJVdDvENGhv6b4nGXxTyOBxx+uCufKyQwOqIYboSfJouxQdDjjyKU3AlZ03SFZaP sZE91mZbC727nynDUuov8lHjtmS0zUyF2L6Ztq3WLllaepzuPawkvC78uCXaQO4V oIebjlSfnx7LKtVfDsCaL8J+8l3aqxVT85hMKQiRhw5AcRnfqo5nN7SKq/J+Lipy wSBn5UfE7gqsiEtwr7K/y/c53alZDD6brh9bSHKUvj8q7QFUVgrLbJNm6iC2u1HW ILvyycpEVn60OXQdiYFMEt36VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7A0rAa M+TcJcp2Xy4vDo+8KvHnMB8GA1UdIwQYMBaAFDgXz+AKXxrMNjtHL09p2oO+tWYT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9EMTE4QzBCQzZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdzdzJPMGN2VDJuYWc3NjFa aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CZlA0QXBmR3N3Mk8wY3ZUMm5hZzc2MVpoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9EMTE4QzBCQzZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdz dzJPMGN2VDJuYWc3NjFaaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArBdxQNZYrDn7T2CcfehhCt0yn2ibJlZJu6N9NMAbi5MxqQ2nbVXXzrdnnCnc BQ4E6JSf57F4+lbK4kYLInUX4xip6xR/99w07MznQ5EsmaBMRdWjLlgPd6vSKNSA n1RSzUMJ84N2U37HKoM8XXoEaR8bFCGAyP6fCE0LXZTnhot6IuVlo1Rfy9pyirvX i7YL3wJ99zDwZ7X4mot+gTlkY071BeviZOfng0w0IcBdyDhggPKH5fvwBrIWIynh hE46FOm3xw9NsRLIVKh5d0i85pEZFXUvc7ywPxX/4TjYVDZlQRc77IsrU2a83RCs mX+48p7WB5+kWnhFyID/k4LBpQ== -----END CERTIFICATE-----Generated at Wed Sep 30 03:59:29 2026 by rpki-client