$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: wK0ksuqoan51gUBbvoouv1zGf0vGUBrBogK6zrKeJLk= Subject key identifier: C1:55:36:74:F2:C7:87:6D:25:F1:75:7B:7C:FD:A6:98:C1:FF:7D:62 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: 016D Signing time: Sat 03 Oct 2026 05:38:46 +0000 Manifest this update: Sat 03 Oct 2026 05:38:46 +0000 Manifest next update: Sat 10 Oct 2026 05:38:46 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: BWSJJItAT7fn0jTrLYDflnIoO3e2uXPut+i9N5s8fyc=) 2: 03FFD61EEF8A11F09F678C04616F56BC.roa (hash: A7HwJDVNxwJYLBDJd9TfXMdwuNFGxBemZdYTybMyqFE=) 3: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: XI4mL6mEa2M+1NS8PfnGuvRQBxr1+O78oNJurqURZgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Oct 3 05:38:46 2026 GMT Not After : Oct 10 05:38:46 2026 GMT Subject: CN=6ac094e6-cc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:ac:89:69:87:68:d6:fe:64:fc:18:53:90: 4c:9c:30:ed:b1:a1:60:ea:30:73:d2:ad:6c:a0:01: 11:80:b0:cc:b8:ab:0f:5e:22:11:27:98:fb:36:0f: 23:a2:2d:d2:96:5e:6d:65:b2:b7:2f:5e:43:31:b9: aa:4c:56:dc:3d:61:7e:fe:bf:fe:5d:06:77:df:06: 30:12:c3:84:99:36:7b:2e:3f:09:f3:9c:54:6e:24: c7:ca:a5:93:83:38:3c:f8:1c:4e:c8:a6:8e:27:4e: 1f:70:ac:13:6a:84:37:99:15:e1:30:90:61:00:a3: e0:ac:6e:56:48:b9:e5:0d:2a:67:af:1e:29:92:3a: bc:f9:c6:db:9b:5c:94:6d:51:e6:62:32:f9:fa:4d: 77:0d:92:ac:fc:21:5c:94:b5:cb:dd:d8:85:0e:62: fb:85:a0:05:f0:bd:7d:05:67:ea:ec:8e:f5:1f:14: fe:45:19:2e:72:4f:3c:9a:0f:34:60:2b:20:5d:a3: a1:2d:e1:46:58:3f:d4:55:43:3d:3a:5b:56:e3:b4: a0:f0:12:6f:5e:a3:73:85:55:01:e6:6c:2d:fc:47: fa:0e:ad:2e:8b:ee:a4:83:89:8b:f6:b9:2c:f6:0d: 68:88:59:4a:52:53:c3:4d:37:11:b1:ea:6e:66:ca: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:55:36:74:F2:C7:87:6D:25:F1:75:7B:7C:FD:A6:98:C1:FF:7D:62 X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3f:b6:3b:80:68:ee:fb:35:7a:11:39:f3:b3:5e:4a:53:39: 75:8a:0f:9e:58:69:dd:1d:4e:53:d2:b2:73:4c:59:68:14:35: dc:3d:6d:22:9e:66:01:0a:82:82:c0:db:cd:92:e7:be:22:b4: 2b:b5:e4:33:f2:bd:fa:ef:c4:01:a8:7d:85:20:6e:d1:d1:52: fc:68:42:74:ed:4f:ab:af:9b:77:dd:bb:58:db:12:75:6c:a7: 0a:c6:cf:22:5c:dd:b7:84:e2:12:f9:ec:37:67:19:e4:f0:38: ef:21:f6:33:c6:a7:4d:d3:1c:25:b5:b2:c3:46:a0:38:41:a7: 36:35:f9:d4:06:4d:9f:ee:8f:3e:73:56:e7:ca:04:34:1f:10: b5:ec:ba:d2:a3:12:52:47:b9:be:68:cc:39:00:7e:05:14:3f: ce:6b:82:f7:cc:aa:e1:a0:36:15:4a:e7:54:f3:ad:99:31:8f: 03:a4:78:26:07:2c:10:c2:10:0c:f0:41:d4:65:f4:70:d7:aa: 9d:00:dc:4b:ec:4f:57:8a:44:1e:bb:c6:5c:53:52:63:5b:c4: f2:1a:5c:c7:e7:d8:4a:ac:f3:f3:86:2a:34:2b:fb:fa:38:60: 65:e1:9d:9e:a0:3c:ef:8d:48:e4:70:c9:89:89:98:4a:47:61: 83:ce:4f:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYxMDAzMDUzODQ2WhcNMjYxMDEwMDUzODQ2WjAYMRYwFAYD VQQDEw02YWMwOTRlNi1jYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19ysiWmHaNb+ZPwYU5BMnDDtsaFg6jBz0q1soAERgLDMuKsPXiIRJ5j7Ng8j oi3Sll5tZbK3L15DMbmqTFbcPWF+/r/+XQZ33wYwEsOEmTZ7Lj8J85xUbiTHyqWT gzg8+BxOyKaOJ04fcKwTaoQ3mRXhMJBhAKPgrG5WSLnlDSpnrx4pkjq8+cbbm1yU bVHmYjL5+k13DZKs/CFclLXL3diFDmL7haAF8L19BWfq7I71HxT+RRkuck88mg80 YCsgXaOhLeFGWD/UVUM9OltW47Sg8BJvXqNzhVUB5mwt/Ef6Dq0ui+6kg4mL9rks 9g1oiFlKUlPDTTcRsepuZsqFFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFVNnTy x4dtJfF1e3z9ppjB/31iMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnj+2O4Bo7vs1ehE587NeSlM5dYoPnlhp3R1OU9Kyc0xZaBQ13D1tIp5mAQqC gsDbzZLnviK0K7XkM/K9+u/EAah9hSBu0dFS/GhCdO1Pq6+bd927WNsSdWynCsbP Ilzdt4TiEvnsN2cZ5PA47yH2M8anTdMcJbWyw0agOEGnNjX51AZNn+6PPnNW58oE NB8Qtey60qMSUke5vmjMOQB+BRQ/zmuC98yq4aA2FUrnVPOtmTGPA6R4JgcsEMIQ DPBB1GX0cNeqnQDcS+xPV4pEHrvGXFNSY1vE8hpcx+fYSqzz84YqNCv7+jhgZeGd nqA8741I5HDJiYmYSkdhg85P2Q== -----END CERTIFICATE-----Generated at Sun Oct 4 21:17:41 2026 by rpki-client