$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: MXFLZqqBEj4MlguTtKy4ebnzSLSbOPaRRWuwPxmS5xc= Subject key identifier: FD:11:F1:6A:9E:6D:BF:81:C1:10:0C:FC:51:85:CD:B0:CA:E9:70:1E Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 85 Signing time: Wed 23 Sep 2026 07:25:37 +0000 Manifest this update: Wed 23 Sep 2026 07:25:37 +0000 Manifest next update: Wed 30 Sep 2026 07:25:37 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: Kx+0+2/ouPaJJ7eV7x+Tta8x9km/7aNVJQJXts6adTY=) 2: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) 3: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Sep 23 07:25:37 2026 GMT Not After : Sep 30 07:25:37 2026 GMT Subject: CN=6ab37ef1-1d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:fc:33:18:40:20:8c:26:23:e4:78:f1:fd: a1:a1:6f:49:f7:46:f5:a6:8d:8a:13:9f:91:04:5c: 59:ba:88:0b:0e:65:7a:7a:64:8c:10:f3:f3:bb:38: a6:91:7e:73:1b:53:35:aa:c6:35:4b:e2:65:9f:bf: 28:80:b2:56:e4:00:51:fb:fe:d3:e6:be:a6:79:2a: e4:10:8f:2d:98:14:f0:b0:cc:1b:d3:64:16:31:e2: f7:56:88:08:03:77:a2:0d:fb:8f:fe:cf:2f:b5:67: 0a:0c:65:34:8f:63:64:c4:aa:75:51:a0:64:d0:16: 65:a5:f7:c9:37:ca:b8:e3:cb:c5:9c:a4:c8:b7:fc: 4d:3d:86:ab:a6:a2:54:50:06:ce:ac:03:d4:db:e9: 06:7b:23:ef:9f:64:e2:2a:69:6e:df:3b:4e:9c:4f: 64:fe:3e:4d:5c:d6:74:57:94:97:df:eb:25:75:51: d8:f1:b0:58:9b:ec:a6:c5:ef:0d:55:ad:44:6d:9c: 98:ff:93:dc:34:64:55:ac:ba:ee:8c:f2:6a:99:10: e6:89:88:41:c4:e6:17:36:9b:c9:12:6e:0e:82:8f: e7:f2:9a:79:97:c0:bb:e9:a8:cf:59:65:2d:a4:e4: 6b:30:ac:da:d0:7b:b4:5a:54:d0:16:29:85:fb:55: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:11:F1:6A:9E:6D:BF:81:C1:10:0C:FC:51:85:CD:B0:CA:E9:70:1E X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:df:7d:5a:bb:d0:4c:37:8e:94:7b:65:a4:72:11:21:ae:2a: 0c:d8:29:b7:e8:0c:7b:32:69:00:0c:b5:0c:22:ef:c5:45:e9: a6:d4:bf:5d:5c:80:56:b5:b6:69:34:37:ef:b3:f6:1b:28:87: 72:e7:b1:43:fa:51:ca:a6:97:af:0a:bb:94:74:b7:f5:91:20: f4:f9:22:cf:8f:b5:4a:ec:2e:11:f3:d6:3e:31:43:d3:d1:fb: 66:e4:59:b1:7e:bb:ad:47:0a:b1:47:1f:3f:09:12:89:4b:9b: 8e:89:24:4c:9f:ed:06:aa:70:79:83:6f:f1:8d:a4:f6:d9:cd: 2d:c7:cf:b3:95:5a:a2:0e:ea:cb:e9:96:0e:67:ae:a5:d9:e3: 2a:43:fb:ca:58:cc:cb:9b:7f:de:e5:1b:e8:80:ce:a3:f2:9e: 24:64:7b:14:6a:44:b9:6d:52:bf:10:32:ba:fb:d2:c8:3e:a1: 56:08:40:06:9d:f4:15:fa:75:8e:56:6a:19:fa:ed:4b:02:f8: f5:0d:8a:f6:8f:95:52:c2:06:f2:4a:76:f9:2b:66:aa:5c:5f: e0:79:7b:bb:44:b6:5b:53:0c:93:4d:ec:8d:38:c7:63:63:30: 07:0d:d6:52:7c:30:bf:29:06:f6:75:c5:11:af:34:ca:3c:b5: b9:d7:70:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RjcxMTAvBgNVBAUTKDk4RTk5NUJDM0E0RkYyQ0QwOEM2RTM1NTRCNjYzNzRC NjY5NzkyNzAwHhcNMjYwOTIzMDcyNTM3WhcNMjYwOTMwMDcyNTM3WjAYMRYwFAYD VQQDEw02YWIzN2VmMS0xZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzb8MxhAIIwmI+R48f2hoW9J90b1po2KE5+RBFxZuogLDmV6emSMEPPzuzim kX5zG1M1qsY1S+Jln78ogLJW5ABR+/7T5r6meSrkEI8tmBTwsMwb02QWMeL3VogI A3eiDfuP/s8vtWcKDGU0j2NkxKp1UaBk0BZlpffJN8q448vFnKTIt/xNPYarpqJU UAbOrAPU2+kGeyPvn2TiKmlu3ztOnE9k/j5NXNZ0V5SX3+sldVHY8bBYm+ymxe8N Va1EbZyY/5PcNGRVrLrujPJqmRDmiYhBxOYXNpvJEm4Ogo/n8pp5l8C76ajPWWUt pORrMKza0Hu0WlTQFimF+1UvLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0R8Wqe bb+BwRAM/FGFzbDK6XAeMB8GA1UdIwQYMBaAFJjplbw6T/LNCMbjVUtmN0tml5Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGNy9GMERDQ0RENEYx RjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhzMEl4dU5WUzJZM1MyYVhr bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGNy9GMERDQ0RENEYxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhz MEl4dU5WUzJZM1MyYVhrbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQd99WrvQTDeOlHtlpHIRIa4qDNgpt+gMezJpAAy1DCLvxUXpptS/XVyAVrW2 aTQ377P2GyiHcuexQ/pRyqaXrwq7lHS39ZEg9Pkiz4+1SuwuEfPWPjFD09H7ZuRZ sX67rUcKsUcfPwkSiUubjokkTJ/tBqpweYNv8Y2k9tnNLcfPs5Vaog7qy+mWDmeu pdnjKkP7yljMy5t/3uUb6IDOo/KeJGR7FGpEuW1SvxAyuvvSyD6hVghABp30Ffp1 jlZqGfrtSwL49Q2K9o+VUsIG8kp2+Stmqlxf4Hl7u0S2W1MMk03sjTjHY2MwBw3W UnwwvykG9nXFEa80yjy1uddwew== -----END CERTIFICATE-----Generated at Thu Sep 24 06:11:05 2026 by rpki-client