$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: mL+7SA3hZKTNC1htvM6XWFjFFvJEm7flED9VRnYdNEI= Subject key identifier: 85:25:0D:DC:98:34:9D:A0:15:41:EE:57:06:1A:5D:B8:9E:1D:3E:FE Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 0124 Signing time: Wed 23 Sep 2026 05:38:39 +0000 Manifest this update: Wed 23 Sep 2026 05:38:39 +0000 Manifest next update: Wed 30 Sep 2026 05:38:39 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: 41PRfkTOv9Y83uxW/42qFWsPGwhUzNNkE1jeRDCKKXA=) 2: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=) 4: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Sep 23 05:38:39 2026 GMT Not After : Sep 30 05:38:39 2026 GMT Subject: CN=6ab365df-6b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:97:59:72:42:a3:3a:e7:c2:63:c7:a1:2b: 28:11:eb:2b:4d:6c:70:b3:26:c5:d2:d7:53:54:b7: 02:67:a7:c9:33:38:78:d0:b4:44:e0:06:b4:f0:e4: 11:70:99:41:4e:7f:69:48:05:f3:23:9b:d1:73:3c: e0:a3:a9:99:46:9c:0a:83:5d:ad:a9:c6:af:a0:06: 11:91:25:2b:e6:b7:6c:7e:91:12:dd:ad:10:29:2e: ef:cd:0f:bc:9c:cd:a2:2d:62:95:34:4f:07:f2:99: 4c:03:81:ae:74:4d:b9:36:9a:13:c9:e0:36:90:1b: 70:48:a5:02:db:9b:bb:06:99:56:83:37:92:2f:4c: 5b:e5:f6:e9:74:3d:5b:f8:77:0b:5b:f1:27:99:98: b3:7a:82:d9:e5:ee:43:c5:30:9f:55:91:b4:6c:37: 23:4a:c0:f7:ea:d1:0e:66:24:e0:5a:70:15:b4:3e: 61:c2:45:0e:ac:fa:dd:a3:80:0a:8a:fe:e7:47:22: 97:8f:3e:fc:f5:9a:44:ad:cb:84:9f:19:e2:1c:6a: 31:05:8c:b1:6a:c1:46:4f:e8:7d:81:ce:9f:d5:b8: 1d:10:b7:b5:a2:9f:dd:83:c7:cd:1f:ef:68:a2:a5: 0a:f2:f9:01:48:2b:4f:e3:65:89:7b:50:74:cf:17: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:0D:DC:98:34:9D:A0:15:41:EE:57:06:1A:5D:B8:9E:1D:3E:FE X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:45:48:b8:eb:2e:de:15:e1:8a:a6:fb:6c:2b:7d:a0:01: f4:e5:8b:80:fa:df:1d:91:07:49:48:6b:ea:ed:a4:0f:66:36: 4d:e9:70:f0:b5:c1:80:6a:3b:7f:f4:3a:32:82:a0:a0:65:de: 07:ab:97:49:dd:d4:20:6e:bb:cf:d7:38:e3:95:f9:ca:22:a6: af:76:71:5a:f7:47:ce:68:db:1f:1f:25:bb:76:98:6c:bc:53: 4d:92:de:b0:eb:76:bf:42:1c:40:5b:3f:b9:fd:b2:27:76:45: 8f:78:90:6c:df:cf:e2:a3:fd:cb:3a:65:8e:5f:63:90:21:43: 54:58:72:3a:7b:49:08:ca:33:e7:77:fc:55:d2:35:73:01:f7: 99:8a:8c:96:31:e0:0e:98:46:8e:dc:dc:f1:b2:6d:57:86:e6: 84:10:67:37:54:cd:0e:08:7e:e1:41:db:5a:75:35:67:d5:54: 4c:49:12:60:d1:43:7d:ed:c4:3c:08:8d:39:d9:5f:b9:2b:8c: a3:4d:a4:b1:78:24:e3:ea:b8:0f:3f:a6:74:b1:6e:81:25:8a: e8:d8:3f:4d:34:58:e9:1b:f8:a0:04:a4:8e:a2:0a:d3:ac:a0: 5f:64:22:01:3b:4d:6a:52:d3:39:db:79:8a:7e:91:46:76:1a: 8e:21:de:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjYwOTIzMDUzODM5WhcNMjYwOTMwMDUzODM5WjAYMRYwFAYD VQQDEw02YWIzNjVkZi02YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFOXWXJCozrnwmPHoSsoEesrTWxwsybF0tdTVLcCZ6fJMzh40LRE4Aa08OQR cJlBTn9pSAXzI5vRczzgo6mZRpwKg12tqcavoAYRkSUr5rdsfpES3a0QKS7vzQ+8 nM2iLWKVNE8H8plMA4GudE25NpoTyeA2kBtwSKUC25u7BplWgzeSL0xb5fbpdD1b +HcLW/EnmZizeoLZ5e5DxTCfVZG0bDcjSsD36tEOZiTgWnAVtD5hwkUOrPrdo4AK iv7nRyKXjz789ZpErcuEnxniHGoxBYyxasFGT+h9gc6f1bgdELe1op/dg8fNH+9o oqUK8vkBSCtP42WJe1B0zxdAbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUlDdyY NJ2gFUHuVwYaXbieHT7+MB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI3hFSLjrLt4V4Yqm+2wrfaAB9OWLgPrfHZEHSUhr6u2kD2Y2Telw8LXBgGo7 f/Q6MoKgoGXeB6uXSd3UIG67z9c445X5yiKmr3ZxWvdHzmjbHx8lu3aYbLxTTZLe sOt2v0IcQFs/uf2yJ3ZFj3iQbN/P4qP9yzpljl9jkCFDVFhyOntJCMoz53f8VdI1 cwH3mYqMljHgDphGjtzc8bJtV4bmhBBnN1TNDgh+4UHbWnU1Z9VUTEkSYNFDfe3E PAiNOdlfuSuMo02ksXgk4+q4Dz+mdLFugSWK6Ng/TTRY6Rv4oASkjqIK06ygX2Qi ATtNalLTOdt5in6RRnYajiHeNw== -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:44 2026 by rpki-client