$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: fdTC97NhV1DnAFCAWSJJdvEFMsRLXdOro7HrYP/SKp0= Subject key identifier: 4B:70:40:20:09:FC:69:6F:EB:A2:94:16:99:88:60:5C:60:2D:5C:39 Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 0426 Signing time: Tue 22 Sep 2026 23:55:36 +0000 Manifest this update: Tue 22 Sep 2026 23:55:36 +0000 Manifest next update: Tue 29 Sep 2026 23:55:36 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: cJx/CEl02ovfezyzijeAYX2Ug9xVD2/CsXSzzV2vNAo=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: KAxFLc+FLLZOJvFJVgYgukA8YPHsfP0aBf1XAimFPsM=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: 67X+V4SbIsN8VDgrAgyzL2jNTp6iwkJqm5Q8Ye8FUJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Sep 22 23:55:36 2026 GMT Not After : Sep 29 23:55:36 2026 GMT Subject: CN=6ab31578-eb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:a1:92:08:c7:6a:b3:4c:2d:d2:cd:76:f0: f1:e7:67:34:be:8f:a4:b4:8d:bc:27:7b:17:93:a9: 96:da:b0:4b:0c:51:38:88:77:61:22:de:e7:b5:c0: 64:d1:3b:a0:d0:9c:40:55:58:3b:77:96:c0:c6:32: 7b:93:55:a2:bc:79:d9:20:e2:30:a0:6a:7d:0a:ce: 2c:46:a8:0c:40:8c:b2:49:d1:cb:fe:f7:c2:47:bc: 21:24:29:b2:93:25:94:5f:09:ad:bb:88:13:23:68: de:99:d9:f3:df:53:d0:7d:de:20:25:61:1c:ca:dd: 4d:84:9e:c0:3c:aa:f3:8f:f9:f7:48:0e:67:02:fb: 3b:5e:86:f3:20:c0:82:27:51:18:3e:01:60:63:8b: 50:cf:3c:37:17:6a:97:22:a3:79:70:59:1c:d2:29: 65:ff:09:8d:33:6c:da:aa:62:61:1f:55:95:24:2b: 21:e0:63:6b:6e:ad:23:46:e5:71:14:20:5f:6b:35: 73:89:f8:b5:fd:42:73:90:bd:e2:a5:62:1e:8f:94: 22:68:e0:07:e1:c7:54:35:9f:03:07:29:0c:75:05: 9f:19:2b:e8:5d:d4:76:b4:c0:69:61:ef:41:27:2a: f0:7d:6e:0a:5e:27:61:3f:f7:c0:05:d8:a6:84:09: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:70:40:20:09:FC:69:6F:EB:A2:94:16:99:88:60:5C:60:2D:5C:39 X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4a:8f:5c:61:64:c5:a1:f7:e6:0a:ad:31:df:62:f5:54:02: 29:7c:70:ca:3d:e5:11:7d:2c:95:6e:23:f6:e2:de:a6:73:c8: 3c:11:8d:11:b2:e3:87:cb:7f:ac:ee:a0:a2:4b:58:28:97:d0: 43:0c:25:a7:76:62:49:7b:d3:54:3c:52:54:63:8f:de:98:5f: 69:6d:6d:d9:cc:10:e9:bd:2e:26:22:33:1c:2b:d0:fe:f9:2f: 95:af:27:1c:b1:8c:54:56:0c:f1:b9:77:cc:5c:75:28:9e:6a: e4:ad:ae:26:9d:6b:5c:7a:33:79:bf:8a:19:42:b6:5d:9b:5b: bf:75:12:d3:68:45:7f:bb:1c:c2:9e:52:37:0f:ef:e4:6b:1b: 6a:c9:88:68:b0:80:36:a6:54:8c:c9:a2:e3:56:0d:c1:8d:99: b8:d9:b4:5a:23:07:0d:98:72:70:8a:ef:5d:e6:4d:51:09:01: 62:b5:48:dc:79:e3:2b:66:f8:ac:71:dd:e0:25:0b:b9:7b:31: 22:55:e1:28:f5:ee:e9:5f:17:fa:4c:d9:8b:07:b3:d6:a0:c1: a6:9a:a1:59:7c:18:3f:29:8b:0e:43:79:19:fc:ab:b4:38:d8: d2:17:02:c6:ad:b0:a3:f7:08:d4:8c:87:22:89:97:90:a6:30: 7a:06:44:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjYwOTIyMjM1NTM2WhcNMjYwOTI5MjM1NTM2WjAYMRYwFAYD VQQDEw02YWIzMTU3OC1lYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO6hkgjHarNMLdLNdvDx52c0vo+ktI28J3sXk6mW2rBLDFE4iHdhIt7ntcBk 0Tug0JxAVVg7d5bAxjJ7k1WivHnZIOIwoGp9Cs4sRqgMQIyySdHL/vfCR7whJCmy kyWUXwmtu4gTI2jemdnz31PQfd4gJWEcyt1NhJ7APKrzj/n3SA5nAvs7XobzIMCC J1EYPgFgY4tQzzw3F2qXIqN5cFkc0ill/wmNM2zaqmJhH1WVJCsh4GNrbq0jRuVx FCBfazVzifi1/UJzkL3ipWIej5QiaOAH4cdUNZ8DBykMdQWfGSvoXdR2tMBpYe9B JyrwfW4KXidhP/fABdimhAmFpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtwQCAJ /Glv66KUFpmIYFxgLVw5MB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAekqPXGFkxaH35gqtMd9i9VQCKXxwyj3lEX0slW4j9uLepnPIPBGNEbLjh8t/ rO6goktYKJfQQwwlp3ZiSXvTVDxSVGOP3phfaW1t2cwQ6b0uJiIzHCvQ/vkvla8n HLGMVFYM8bl3zFx1KJ5q5K2uJp1rXHozeb+KGUK2XZtbv3US02hFf7scwp5SNw/v 5GsbasmIaLCANqZUjMmi41YNwY2ZuNm0WiMHDZhycIrvXeZNUQkBYrVI3HnjK2b4 rHHd4CULuXsxIlXhKPXu6V8X+kzZiwez1qDBppqhWXwYPymLDkN5GfyrtDjY0hcC xq2wo/cI1IyHIomXkKYwegZEQw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:13:35 2026 by rpki-client