$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: NCPi0sHo3DTiIe28jSSgULwiyfB4AJyJK68ydPscUUs= Subject key identifier: 70:6E:34:A7:25:BA:91:52:A2:FD:CA:B7:A9:FB:4C:CA:7F:A8:1F:FA Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 35C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 35A5 Signing time: Thu 24 Sep 2026 14:30:29 +0000 Manifest this update: Thu 24 Sep 2026 14:30:28 +0000 Manifest next update: Thu 01 Oct 2026 14:30:28 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: hsIEwzoK/XKlpv8kZW0gSoL1foFkIvtkKbXxyEe+vFs=) 2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13765 (0x35c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Sep 24 14:30:28 2026 GMT Not After : Oct 1 14:30:28 2026 GMT Subject: CN=6ab53404-e11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:87:f3:8a:e7:a5:16:12:c1:27:0c:b3:09: f8:ae:9d:7c:b8:5f:ec:75:db:a5:34:98:e3:3e:40: e1:23:70:c5:4f:31:16:78:df:0c:10:e5:dc:3c:7b: 93:c1:2e:e5:ee:9d:22:ae:0c:75:9c:bd:e1:e6:4e: 74:40:35:39:0a:0e:9b:33:11:87:1a:dc:1b:dc:74: d3:52:2d:84:53:51:83:19:09:7c:ad:4a:56:d9:e2: 8a:6a:36:3a:a3:99:c5:16:20:6f:2b:b5:67:6c:67: 22:1e:ed:23:78:36:b2:dc:22:52:8a:14:6f:05:42: 59:61:22:f5:6f:b0:b2:e6:56:17:13:c7:d7:b7:63: 90:be:74:ac:a8:ab:fb:07:2e:02:00:1b:a5:b4:bf: ac:41:56:52:de:47:da:36:96:0f:b2:9e:3d:c5:27: 91:78:e2:f3:b5:7c:19:02:0a:dd:f3:91:87:56:a8: 6f:51:01:02:69:ba:25:5a:15:ff:4f:67:fe:83:dc: 03:0c:b0:38:7f:7b:cc:27:38:2d:68:e3:6c:8d:bc: 3b:4e:34:f9:a5:a6:6d:c0:1c:81:75:e5:7b:e1:84: 37:e1:6c:e5:63:10:f4:9d:44:b5:84:19:05:f8:72: 0f:e6:bc:63:ca:80:bd:3e:e1:59:61:ec:ec:b2:e1: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6E:34:A7:25:BA:91:52:A2:FD:CA:B7:A9:FB:4C:CA:7F:A8:1F:FA X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:49:d1:b8:32:5e:fb:e8:47:bd:7a:36:9d:2e:1b:5b:bf:0d: 96:ab:2e:b9:fd:e7:5c:ed:c6:01:79:87:64:48:b5:c2:dc:fe: a4:0f:cb:e7:11:ab:a3:cf:58:2a:73:3b:75:ea:a5:79:5e:bd: a9:f5:d4:86:63:13:59:5b:7b:8c:f5:f8:57:8e:97:41:16:f8: 50:a1:d0:db:c5:7e:d9:4f:ae:41:bb:c0:57:a8:f2:45:02:17: d7:5f:21:4c:04:0c:58:5d:5d:48:42:8a:23:dd:76:8e:05:e4: a9:d1:9b:04:ee:12:b5:78:d0:60:3f:ef:a7:b0:09:cd:ea:29: aa:03:15:63:f3:30:54:75:c5:86:0b:c1:3f:e2:cf:0f:e3:ed: d9:85:9a:db:04:96:ac:f4:c9:6b:4a:17:1e:f2:43:ce:16:8b: 86:3c:1e:a9:3b:db:6b:c9:a8:7f:76:48:af:f4:c6:3a:df:9c: d4:30:4d:9c:28:66:0b:f8:85:38:26:80:04:42:42:20:bd:02: 8c:fc:70:ba:33:cc:ab:5d:2b:02:97:33:b3:17:d6:5d:7b:d5: cb:e7:5c:6e:67:2f:67:fa:8a:3a:fb:0e:45:1f:d4:88:62:54: 7f:15:10:43:a9:a9:cf:1a:e3:91:ec:8a:6d:69:30:93:e0:fd: 2a:cc:13:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwOTI0MTQzMDI4WhcNMjYxMDAxMTQzMDI4WjAYMRYwFAYD VQQDEw02YWI1MzQwNC1lMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSWH84rnpRYSwScMswn4rp18uF/sddulNJjjPkDhI3DFTzEWeN8MEOXcPHuT wS7l7p0irgx1nL3h5k50QDU5Cg6bMxGHGtwb3HTTUi2EU1GDGQl8rUpW2eKKajY6 o5nFFiBvK7VnbGciHu0jeDay3CJSihRvBUJZYSL1b7Cy5lYXE8fXt2OQvnSsqKv7 By4CABultL+sQVZS3kfaNpYPsp49xSeReOLztXwZAgrd85GHVqhvUQECabolWhX/ T2f+g9wDDLA4f3vMJzgtaONsjbw7TjT5paZtwByBdeV74YQ34WzlYxD0nUS1hBkF +HIP5rxjyoC9PuFZYezssuHIIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBuNKcl upFSov3Kt6n7TMp/qB/6MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0nRuDJe++hHvXo2nS4bW78Nlqsuuf3nXO3GAXmHZEi1wtz+pA/L5xGro89Y KnM7deqleV69qfXUhmMTWVt7jPX4V46XQRb4UKHQ28V+2U+uQbvAV6jyRQIX118h TAQMWF1dSEKKI912jgXkqdGbBO4StXjQYD/vp7AJzeopqgMVY/MwVHXFhgvBP+LP D+Pt2YWa2wSWrPTJa0oXHvJDzhaLhjweqTvba8mof3ZIr/TGOt+c1DBNnChmC/iF OCaABEJCIL0CjPxwujPMq10rApczsxfWXXvVy+dcbmcvZ/qKOvsORR/UiGJUfxUQ Q6mpzxrjkeyKbWkwk+D9KswTog== -----END CERTIFICATE-----Generated at Thu Sep 24 20:34:43 2026 by rpki-client