$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: QDbpa5zyzFxB6N4VMoeREsOWOyfAoN+WMKmIQXetgac= Subject key identifier: 99:5F:68:DF:4D:B7:DB:82:EF:90:73:CB:6F:A4:D0:F3:BF:1E:84:DC Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 2677 Signing time: Tue 22 Sep 2026 15:39:32 +0000 Manifest this update: Tue 22 Sep 2026 15:39:32 +0000 Manifest next update: Tue 29 Sep 2026 15:39:32 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: 1ppG5FtoEvr2lOQ8Sf18+Zz1cBCh3WNrXNbFqeuRXjs=) 2: 86D7036A0E1011F1BB4320E6093D8C67.roa (hash: 1LNNXkd+Q9F2+XYaHqlpvMElvIg5HAkgkTyIWH3Jb34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9863 (0x2687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Sep 22 15:39:32 2026 GMT Not After : Sep 29 15:39:32 2026 GMT Subject: CN=6ab2a134-c551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:94:55:b0:43:b4:f4:b4:67:91:74:d8:65: 90:34:b6:e4:1f:cb:a3:36:09:94:0b:5e:fe:30:ca: 7c:28:68:a5:b9:3a:a8:e0:69:7d:68:57:91:5a:91: 51:05:ea:88:fc:2e:c1:d6:34:2a:1a:43:c4:2f:ad: cc:b1:b4:f0:95:d2:74:2a:2c:fe:d3:13:db:de:99: 36:ab:f7:0e:4b:64:65:9a:f9:7a:a2:92:fa:67:50: b7:3c:47:01:33:d7:a5:b9:d3:05:5c:5e:f6:25:fb: 05:9a:d7:a5:a8:c8:d9:f5:da:19:b8:dd:b8:6c:dc: 3c:02:96:f5:4d:e3:21:14:9c:6c:45:4d:15:db:70: c7:17:87:dc:80:86:f2:a9:a7:b7:47:88:09:5a:1a: 19:85:66:46:57:7a:53:0a:e9:66:7f:c2:61:37:66: ad:77:c5:c5:d4:43:96:0d:8b:01:59:77:16:72:6a: 51:59:bf:59:88:45:56:98:4b:04:2e:86:e6:8c:33: fc:be:79:a8:bf:28:47:ef:d5:de:08:db:69:15:3a: 4f:be:ac:5c:8f:42:b2:91:3d:31:06:a2:26:9f:78: c2:77:92:29:75:50:08:b6:c1:2a:ec:79:53:0d:49: 6d:0d:db:58:08:3b:ca:fc:2b:b5:57:4c:a4:10:81: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:68:DF:4D:B7:DB:82:EF:90:73:CB:6F:A4:D0:F3:BF:1E:84:DC X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3b:fc:6b:1f:85:10:19:7a:04:eb:2b:ab:7f:6c:dc:e7:86: 59:5d:bb:68:d8:a2:7e:f0:c4:ce:d8:4a:9a:61:7a:39:92:e6: 2c:5b:bc:6f:f7:44:6d:1e:9b:84:46:aa:31:55:e0:16:41:51: 89:66:1b:c7:cb:a4:10:46:9b:86:a9:b0:7e:e9:76:04:ae:7a: a8:63:31:df:56:74:0d:bc:7c:66:60:05:e0:be:7d:27:91:ce: a6:9f:fa:3a:8d:18:06:79:e6:b6:79:91:ce:e7:60:6b:de:e0: 66:27:d9:8e:37:6e:8d:73:2a:0a:64:16:40:64:80:dc:8d:a8: f1:fb:ad:7d:bc:31:c6:ff:a7:f7:a9:b9:60:5a:a8:e4:50:45: 1c:82:ef:da:68:bb:9a:37:0c:f5:22:16:90:b4:e5:9d:df:f3: 64:81:d7:ee:48:07:92:0d:69:d0:e7:07:43:db:db:fe:ea:d1: 25:5d:09:98:c5:49:47:40:27:19:92:1e:f7:f9:90:65:5d:b9: 88:e5:20:45:ce:ef:43:db:d8:28:b5:a4:9f:51:99:d7:af:5e: 81:b8:5c:97:9e:2a:72:21:d5:b6:52:2d:d9:f0:f1:f8:95:99: e5:33:4e:8c:e7:bc:89:37:41:2c:ad:3d:cc:95:a0:bd:eb:5c: 7b:25:24:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwOTIyMTUzOTMyWhcNMjYwOTI5MTUzOTMyWjAYMRYwFAYD VQQDEw02YWIyYTEzNC1jNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFKUVbBDtPS0Z5F02GWQNLbkH8ujNgmUC17+MMp8KGiluTqo4Gl9aFeRWpFR BeqI/C7B1jQqGkPEL63MsbTwldJ0Kiz+0xPb3pk2q/cOS2Rlmvl6opL6Z1C3PEcB M9eludMFXF72JfsFmtelqMjZ9doZuN24bNw8Apb1TeMhFJxsRU0V23DHF4fcgIby qae3R4gJWhoZhWZGV3pTCulmf8JhN2atd8XF1EOWDYsBWXcWcmpRWb9ZiEVWmEsE LobmjDP8vnmovyhH79XeCNtpFTpPvqxcj0KykT0xBqImn3jCd5IpdVAItsEq7HlT DUltDdtYCDvK/Cu1V0ykEIGs2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlfaN9N t9uC75Bzy2+k0PO/HoTcMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTv8ax+FEBl6BOsrq39s3OeGWV27aNiifvDEzthKmmF6OZLmLFu8b/dEbR6b hEaqMVXgFkFRiWYbx8ukEEabhqmwful2BK56qGMx31Z0Dbx8ZmAF4L59J5HOpp/6 Oo0YBnnmtnmRzudga97gZifZjjdujXMqCmQWQGSA3I2o8futfbwxxv+n96m5YFqo 5FBFHILv2mi7mjcM9SIWkLTlnd/zZIHX7kgHkg1p0OcHQ9vb/urRJV0JmMVJR0An GZIe9/mQZV25iOUgRc7vQ9vYKLWkn1GZ169egbhcl54qciHVtlIt2fDx+JWZ5TNO jOe8iTdBLK09zJWgvetceyUkiA== -----END CERTIFICATE-----Generated at Wed Sep 23 07:27:17 2026 by rpki-client