$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: vGBZ9VwwdGeHt3trkB3eYgyoFwam/dl2ssdfdP2rBxE= Subject key identifier: BD:BF:1C:6F:BA:84:91:8B:1E:6B:8C:CD:F7:4D:D8:B5:98:BA:82:8F Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 04A9 Signing time: Sun 20 Sep 2026 23:45:42 +0000 Manifest this update: Sun 20 Sep 2026 23:45:42 +0000 Manifest next update: Sun 27 Sep 2026 23:45:42 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: rz982goQ20eAowQt4fmz4hrrJIQ4KNId6ln9MWR7ub4=) 2: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=) 3: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=) 4: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Sep 20 23:45:42 2026 GMT Not After : Sep 27 23:45:42 2026 GMT Subject: CN=6ab07026-1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:62:18:b7:6b:af:f6:44:a5:10:97:44:23: df:cd:72:09:de:5c:7d:e1:64:6a:75:2f:e3:06:c3: 36:39:94:87:3b:99:56:41:b6:7b:dc:ed:33:2a:b8: fe:93:2c:e9:67:1b:11:db:08:e7:d7:31:8e:72:03: 7c:70:f4:3a:58:af:9a:c1:48:3a:1c:0e:ac:e2:04: 77:fa:68:67:36:97:18:f3:b0:b9:95:d2:5d:5a:18: b8:4a:7d:4f:b1:f7:a5:28:aa:05:f1:2e:d9:cc:2e: f3:cd:74:21:c0:3a:b3:2b:d6:cf:6a:2d:a1:5a:29: ad:ff:9f:88:02:4b:b4:fd:00:47:b1:d1:97:4c:3c: 39:cc:31:89:ef:18:1b:1e:fb:a9:db:6e:5b:76:c1: cd:58:0c:74:ef:2b:a7:71:88:00:e6:39:a8:02:cb: 8b:0b:de:2f:3e:57:53:92:11:91:c4:7b:81:9a:5e: be:60:d0:5a:fb:37:b2:6f:bb:e0:10:fc:5e:6c:e6: f2:18:62:90:3d:0e:52:6e:4a:98:77:4e:9c:70:b8: 9c:0b:bd:ae:fb:90:b8:d0:15:56:2c:3e:f1:18:b7: 0e:2b:b0:2c:88:c6:9f:d9:98:e5:be:56:74:23:cb: dd:7f:11:88:6f:fa:aa:4f:b1:cc:5a:c7:96:fb:24: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BF:1C:6F:BA:84:91:8B:1E:6B:8C:CD:F7:4D:D8:B5:98:BA:82:8F X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f6:72:df:d4:57:9f:96:07:82:20:71:e6:11:4f:63:eb:91: 75:ff:8a:cc:94:95:f5:0a:a2:13:60:1f:b4:83:6c:26:66:a8: 0d:68:1a:62:5f:25:2d:80:ca:bf:1b:33:59:77:de:80:41:89: b4:49:2d:b3:3e:79:e4:69:22:57:93:46:e4:b6:09:d1:ca:fe: 99:f3:33:37:96:28:3a:5f:80:39:16:a9:c7:1c:e1:a1:1e:b0: 14:1b:f3:3e:5b:c0:c1:c0:af:2d:da:91:0c:a6:f0:27:de:9a: 8e:0d:31:d8:f0:8e:16:96:03:f4:6a:3f:0c:86:bb:28:fd:26: 11:eb:24:b0:b2:34:01:ce:b8:24:56:f9:6b:a9:c6:f4:4d:47: c4:83:21:2d:ef:10:2a:7f:46:00:37:54:09:e1:6c:74:e1:bb: 7f:70:2b:1d:34:5c:99:c9:e1:f5:b5:03:09:b0:91:ca:91:c6: b2:90:52:ec:d4:f4:f5:39:87:9a:c4:be:26:c5:36:e0:65:3d: a1:91:b3:1c:6c:d1:b7:89:d1:09:f9:bd:2e:10:d8:0a:7b:a7: 61:6d:87:b5:a2:95:2f:58:ba:6c:42:33:40:8b:34:6e:88:5e: f5:6d:59:13:b3:f2:68:97:45:67:c9:07:0e:d5:38:4f:b9:9d: 28:e1:ba:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjYwOTIwMjM0NTQyWhcNMjYwOTI3MjM0NTQyWjAYMRYwFAYD VQQDEw02YWIwNzAyNi0xNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCRiGLdrr/ZEpRCXRCPfzXIJ3lx94WRqdS/jBsM2OZSHO5lWQbZ73O0zKrj+ kyzpZxsR2wjn1zGOcgN8cPQ6WK+awUg6HA6s4gR3+mhnNpcY87C5ldJdWhi4Sn1P sfelKKoF8S7ZzC7zzXQhwDqzK9bPai2hWimt/5+IAku0/QBHsdGXTDw5zDGJ7xgb Hvup225bdsHNWAx07yuncYgA5jmoAsuLC94vPldTkhGRxHuBml6+YNBa+zeyb7vg EPxebObyGGKQPQ5SbkqYd06ccLicC72u+5C40BVWLD7xGLcOK7AsiMaf2ZjlvlZ0 I8vdfxGIb/qqT7HMWseW+yRrCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2/HG+6 hJGLHmuMzfdN2LWYuoKPMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx/Zy39RXn5YHgiBx5hFPY+uRdf+KzJSV9QqiE2AftINsJmaoDWgaYl8lLYDK vxszWXfegEGJtEktsz555GkiV5NG5LYJ0cr+mfMzN5YoOl+AORapxxzhoR6wFBvz PlvAwcCvLdqRDKbwJ96ajg0x2PCOFpYD9Go/DIa7KP0mEesksLI0Ac64JFb5a6nG 9E1HxIMhLe8QKn9GADdUCeFsdOG7f3ArHTRcmcnh9bUDCbCRypHGspBS7NT09TmH msS+JsU24GU9oZGzHGzRt4nRCfm9LhDYCnunYW2HtaKVL1i6bEIzQIs0bohe9W1Z E7PyaJdFZ8kHDtU4T7mdKOG6zQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:57:12 2026 by rpki-client