$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft File: 0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json) Hash identifier: LS8RsYeWtR+Kge2YMiP9y5od/arC+4kkmqTvxUWe+1g= Subject key identifier: 46:D3:2D:F3:D6:F1:24:F4:D9:5D:09:13:DB:B8:F8:4A:2C:4E:2E:7E Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 Certificate issuer: /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft Manifest number: 26 Signing time: Mon 21 Sep 2026 08:47:05 +0000 Manifest this update: Mon 21 Sep 2026 08:47:05 +0000 Manifest next update: Mon 28 Sep 2026 08:47:05 +0000 Files and hashes: 1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: tWJ7ryINYSYa5d94wydcFwLIuYWQSs7vj3kRAV+7DYA=) 2: 331B257C948D11F1A5BE36406611F970.roa (hash: HNA4rjO5UGOdW/eL7CIfPG7iC2OgFOjS6hhZEI3sMeg=) 3: 328CBC1A948D11F1A5BE36406611F970.roa (hash: 1F7cx/vFo7/QfoO4QwD2fE5604MofvsFO/wXSVuF0sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Validity Not Before: Sep 21 08:47:05 2026 GMT Not After : Sep 28 08:47:05 2026 GMT Subject: CN=6ab0ef09-8fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:8d:a0:ff:d9:6c:cb:0a:4a:8c:1e:80:81: 9e:bf:50:35:f1:41:f1:6a:c1:1a:29:c4:f6:86:4c: 02:3e:11:1d:e5:24:48:7e:b0:9e:ce:77:52:3f:14: be:d3:1d:ee:6f:d4:85:6b:36:bf:d4:8b:35:95:63: 0a:3d:b6:25:3b:4d:8f:15:ab:b5:c5:52:55:be:1f: e5:42:27:8b:7e:1f:01:d1:7e:21:5b:70:64:bd:81: 41:2a:91:a9:48:59:0d:30:40:46:c6:0d:ad:89:15: 7c:c1:f9:dd:f4:0b:ab:a1:55:95:98:d2:2e:83:35: 25:50:4d:c4:92:22:06:66:53:bd:34:a4:36:d5:89: 7b:ac:61:22:7d:d8:8a:25:8b:b3:a7:d3:fb:62:47: ee:fc:af:0f:59:f1:93:10:0b:7b:8a:cf:a7:47:cb: 40:d4:e1:30:ed:b5:c6:02:09:03:c6:a4:ab:be:6d: 9a:45:cf:f7:8b:8b:e8:be:ff:43:79:64:61:02:1b: f2:3a:77:9d:90:c4:c2:7a:e2:54:20:4b:52:1b:d4: 8e:64:1f:d5:05:c6:0b:9f:62:e0:a3:aa:0a:88:27: 66:c9:b4:c2:b0:89:fa:29:6c:90:b2:86:d5:f4:73: e4:58:87:07:16:ab:dc:8e:47:f4:5e:3c:12:95:2d: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D3:2D:F3:D6:F1:24:F4:D9:5D:09:13:DB:B8:F8:4A:2C:4E:2E:7E X509v3 Authority Key Identifier: keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f2:fa:22:2a:90:a8:0f:0a:dc:95:e2:bc:ac:4c:54:6a:ef: 41:85:09:d1:6c:48:01:0c:9b:5b:c0:d3:77:2f:b5:1b:b7:62: 3f:f8:28:4d:c3:01:17:4f:79:96:e5:0d:99:fb:43:5e:6f:fb: 4e:79:02:f6:b9:e0:0c:b2:4d:d5:30:44:c3:fd:67:92:0c:80: a7:24:5a:18:c0:bb:fd:9f:20:06:e8:48:13:51:3b:a1:3c:0d: 9e:43:fd:12:6e:c3:82:88:b1:6f:73:1b:9b:14:35:ee:de:81: ba:f4:94:49:a6:c8:0e:e8:5f:76:5d:88:b1:8e:54:7c:e2:b1: ad:62:1d:c5:06:9d:d2:43:48:15:74:3a:4e:8b:20:e4:cb:a7: 03:8a:51:ba:94:79:f6:5b:27:9b:83:d9:4c:0d:c5:c8:1e:b2: f6:49:3e:d8:5c:17:9a:7f:fb:8c:d7:5c:37:bd:72:71:8b:d1: 21:a9:5c:22:7c:0c:42:0b:3b:38:f2:46:f0:bc:68:eb:c8:18: b8:d9:c6:fb:33:fd:12:88:a6:bd:69:1f:8a:ad:98:74:eb:96: 80:18:26:6a:70:b6:dc:7a:76:45:7d:03:3e:2f:ca:89:72:44: 4c:29:06:c6:c1:a2:ac:61:cc:32:6c:8e:d6:b5:c6:5b:56:0f: 67:68:9a:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzgzNjExMC8GA1UEBRMoRDA1RjRCNjVFRjgwQjUyRDNGN0ExNEYyREMxOTVDQ0Yy NjM5MjNDMzAeFw0yNjA5MjEwODQ3MDVaFw0yNjA5MjgwODQ3MDVaMBgxFjAUBgNV BAMTDTZhYjBlZjA5LThmZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8u42g/9lsywpKjB6AgZ6/UDXxQfFqwRopxPaGTAI+ER3lJEh+sJ7Od1I/FL7T He5v1IVrNr/UizWVYwo9tiU7TY8Vq7XFUlW+H+VCJ4t+HwHRfiFbcGS9gUEqkalI WQ0wQEbGDa2JFXzB+d30C6uhVZWY0i6DNSVQTcSSIgZmU700pDbViXusYSJ92Iol i7On0/tiR+78rw9Z8ZMQC3uKz6dHy0DU4TDttcYCCQPGpKu+bZpFz/eLi+i+/0N5 ZGECG/I6d52QxMJ64lQgS1Ib1I5kH9UFxgufYuCjqgqIJ2bJtMKwifopbJCyhtX0 c+RYhwcWq9yOR/RePBKVLcq5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURtMt89bx JPTZXQkT27j4SixOLn4wHwYDVR0jBBgwFoAU0F9LZe+AtS0/ehTy3BlczyY5I8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3ODM2L0ZEMkY3MDVDODAx NTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMwX2VoVHkzQmxjenlZNUk4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMEY5TFplLUF0UzBfZWhUeTNCbGN6eVk1SThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 ODM2L0ZEMkY3MDVDODAxNTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMw X2VoVHkzQmxjenlZNUk4TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBg8voiKpCoDwrcleK8rExUau9BhQnRbEgBDJtbwNN3L7Ubt2I/+ChNwwEXT3mW 5Q2Z+0Neb/tOeQL2ueAMsk3VMETD/WeSDICnJFoYwLv9nyAG6EgTUTuhPA2eQ/0S bsOCiLFvcxubFDXu3oG69JRJpsgO6F92XYixjlR84rGtYh3FBp3SQ0gVdDpOiyDk y6cDilG6lHn2Wyebg9lMDcXIHrL2ST7YXBeaf/uM11w3vXJxi9EhqVwifAxCCzs4 8kbwvGjryBi42cb7M/0SiKa9aR+KrZh065aAGCZqcLbcenZFfQM+L8qJckRMKQbG waKsYcwybI7WtcZbVg9naJp0 -----END CERTIFICATE-----Generated at Wed Sep 23 10:42:45 2026 by rpki-client