$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: 8FmgF/DlUdvXPU6QMR8SrZGwEm7r5/6tY407G9pKgyI= Subject key identifier: E1:E1:3C:F6:E3:19:4A:83:0D:C9:C5:DF:00:A0:73:B0:11:BA:EA:D0 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 01CD Signing time: Fri 25 Sep 2026 03:53:54 +0000 Manifest this update: Fri 25 Sep 2026 03:53:53 +0000 Manifest next update: Fri 02 Oct 2026 03:53:53 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: Skwpe8jqj+naFJVuGeV6/pgEf5gbDF0LLljcWnBLM5A=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: xQfXZG9thzj3/CL2WyGBShFxcEh/aS+ejX4ZQkD/eSA=) 3: BmnXqFaaGnCRZw6br6_99NY0qNU.asa (hash: 6/6909m5DPdkpRZS5zI/K4IkgLXQISkJokrBbFl2iRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Sep 25 03:53:53 2026 GMT Not After : Oct 2 03:53:53 2026 GMT Subject: CN=6ab5f052-1aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:de:ab:66:55:ff:8a:ab:bf:d9:e8:ac:35:83: 35:b0:23:64:16:fe:b1:b5:68:62:52:99:b6:c2:d3: 08:a6:ad:21:b8:58:35:3f:1e:ad:c6:d8:f3:4f:71: 32:b8:b6:7c:ee:f4:79:14:0a:61:98:eb:23:0c:df: 7f:ea:2e:bf:50:5b:bf:cf:be:b5:36:bc:03:3c:67: aa:e8:18:7b:05:58:e2:5a:c7:2a:d9:3f:5b:92:4c: d8:9c:cd:4e:57:ad:f8:2a:c5:2a:f9:5c:90:e6:fb: fb:2b:bd:0d:c2:7f:22:28:2a:63:94:8f:ca:2d:67: d6:e1:84:30:f8:cf:40:82:82:49:10:a7:40:3e:b5: 0f:cb:b7:9c:58:39:da:10:07:2d:21:86:8b:b3:b0: 9c:42:ea:05:dc:52:54:9d:78:cc:72:cf:f4:d9:f9: 00:5a:4c:3a:d8:d8:6a:99:2f:2c:e3:69:17:24:54: 9a:ed:55:78:5a:fb:f7:59:2e:49:97:fe:6b:5d:ec: 9d:a8:9a:4f:c4:90:ba:e6:52:f5:2e:ef:a4:fb:cb: 07:df:8a:05:15:86:f6:2b:88:4e:f1:aa:4f:b9:13: bf:40:86:1b:94:0c:e0:18:01:cf:5a:4c:38:eb:7b: c5:02:5b:80:0d:08:67:c9:c1:0b:01:26:2c:7c:d7: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:3C:F6:E3:19:4A:83:0D:C9:C5:DF:00:A0:73:B0:11:BA:EA:D0 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:60:23:f4:9a:87:0e:07:24:cc:98:18:1f:c8:61:94:98:dc: 8d:3d:b9:f2:e1:fa:4a:52:32:56:d8:0c:42:ca:65:31:56:9e: 21:cc:13:a1:6b:c8:68:4f:6f:ab:97:6e:d1:64:af:1e:3d:1a: 24:e6:9d:61:80:c7:db:ca:80:01:f0:17:c6:07:d3:47:0c:20: 17:a0:1b:27:9e:3e:c4:32:fc:ed:80:40:11:fe:c5:78:1e:74: e4:fe:6f:e2:a7:d0:63:66:50:2a:34:0b:1b:07:cc:ca:ba:79: e2:34:ee:1d:62:b4:46:33:f2:69:5d:d9:a5:be:ea:8f:7e:b5: 1a:d6:0a:49:db:65:26:01:9c:e5:f9:48:0f:46:bf:f7:74:81: 8e:b1:ca:20:87:b7:54:ca:29:c2:ad:1b:2f:5c:68:73:e9:5f: 48:93:18:f0:91:0f:42:e0:d3:88:8a:59:2e:16:72:34:b2:a6: de:b7:a9:4d:99:8c:9d:8e:68:a1:35:c2:b6:eb:c8:50:ae:1a: 0b:f9:da:23:12:d3:8d:9e:54:40:ff:cd:7b:62:66:73:ad:a4: 83:51:9d:87:29:02:2f:24:76:74:ee:1b:57:98:24:78:e4:0a: ae:5e:0c:16:89:7e:c2:7c:3b:d1:76:a5:b1:2e:8c:66:fc:76: 31:5c:1e:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwOTI1MDM1MzUzWhcNMjYxMDAyMDM1MzUzWjAYMRYwFAYD VQQDEw02YWI1ZjA1Mi0xYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAid6rZlX/iqu/2eisNYM1sCNkFv6xtWhiUpm2wtMIpq0huFg1Px6txtjzT3Ey uLZ87vR5FAphmOsjDN9/6i6/UFu/z761NrwDPGeq6Bh7BVjiWscq2T9bkkzYnM1O V634KsUq+VyQ5vv7K70Nwn8iKCpjlI/KLWfW4YQw+M9AgoJJEKdAPrUPy7ecWDna EActIYaLs7CcQuoF3FJUnXjMcs/02fkAWkw62NhqmS8s42kXJFSa7VV4Wvv3WS5J l/5rXeydqJpPxJC65lL1Lu+k+8sH34oFFYb2K4hO8apPuRO/QIYblAzgGAHPWkw4 63vFAluADQhnycELASYsfNcYmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHhPPbj GUqDDcnF3wCgc7ARuurQMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADGAj9JqHDgckzJgYH8hhlJjcjT258uH6SlIyVtgMQsplMVaeIcwToWvIaE9v q5du0WSvHj0aJOadYYDH28qAAfAXxgfTRwwgF6AbJ54+xDL87YBAEf7FeB505P5v 4qfQY2ZQKjQLGwfMyrp54jTuHWK0RjPyaV3Zpb7qj361GtYKSdtlJgGc5flID0a/ 93SBjrHKIIe3VMopwq0bL1xoc+lfSJMY8JEPQuDTiIpZLhZyNLKm3repTZmMnY5o oTXCtuvIUK4aC/naIxLTjZ5UQP/Ne2Jmc62kg1GdhykCLyR2dO4bV5gkeOQKrl4M Fol+wnw70XalsS6MZvx2MVwe6Q== -----END CERTIFICATE-----Generated at Sun Sep 27 06:20:29 2026 by rpki-client