$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: 5yGW4BdLEe+Eet2oSSnVXF6QSqesCGIlaCiGbmISdgw= Subject key identifier: F2:4C:97:F5:63:34:E6:5D:87:56:AD:C1:7E:2C:32:3D:B8:DC:12:FB Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 0392 Signing time: Sun 27 Sep 2026 00:47:17 +0000 Manifest this update: Sun 27 Sep 2026 00:47:16 +0000 Manifest next update: Sun 04 Oct 2026 00:47:16 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: sZdurHwbsWMbYwH3oazA1+4GVwvIR5QAvyZipKzMryo=) 2: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=) 3: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: Sep 27 00:47:16 2026 GMT Not After : Oct 4 00:47:16 2026 GMT Subject: CN=6ab86795-dced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:c2:d1:28:57:0c:f9:a9:d5:1f:38:e4:5d: 07:e8:51:a2:b5:5a:28:b2:56:18:b2:ce:af:a4:ea: 5a:f3:1b:90:be:7d:b4:c6:f7:4a:d1:27:36:38:ce: e9:d8:7e:e3:bf:9f:8e:ae:b3:0c:dd:28:b6:21:83: 85:1a:6d:49:74:2b:7f:04:29:46:f2:16:8e:d2:5f: 15:1e:74:0e:62:c2:e6:74:ff:29:be:49:50:ac:9f: 43:c1:d5:0e:8b:63:c7:2a:a3:be:0f:01:e7:fb:77: 77:53:17:ae:36:c2:a7:14:87:20:16:cd:40:8e:dc: df:67:2a:6d:d8:c9:86:4d:0e:34:bf:49:2d:59:a9: cb:2d:41:29:2d:bd:d8:34:ed:3f:85:1a:4e:f6:fe: 2e:66:22:05:8b:f0:bc:08:67:d2:27:65:b8:b6:59: 7c:ad:c9:68:2d:05:63:38:18:b4:d4:21:12:01:6a: 39:63:03:16:41:00:0c:95:cf:fc:a3:67:e8:c9:93: eb:a0:2b:a2:5a:61:bd:3d:19:26:01:a0:34:c5:81: c3:97:0d:ed:f1:14:ff:f1:69:01:66:8b:ec:7d:85: ea:e6:56:37:70:5b:ab:00:f6:c0:e1:64:00:cd:8b: f2:dc:47:33:ab:fb:75:f1:f2:71:b8:00:66:e9:35: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4C:97:F5:63:34:E6:5D:87:56:AD:C1:7E:2C:32:3D:B8:DC:12:FB X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fc:53:0f:e1:e5:a4:76:70:25:41:45:8f:97:46:5c:53:03: 74:6d:01:91:6a:a6:6b:30:0e:11:c0:a1:7d:c9:49:f3:30:81: 1a:03:b0:3e:a1:a2:1c:f3:fb:b2:c1:93:92:db:b3:d2:9a:f5: c9:b2:da:15:f5:df:29:1e:49:bd:db:3d:4d:df:52:05:7b:07: f6:b3:4b:d9:06:dd:97:3a:fa:ca:b7:f4:6e:89:e6:6a:2c:40: 11:13:40:c6:d9:bd:13:fd:68:99:39:b0:14:1f:b2:72:b9:b7: c4:16:7e:02:36:8f:a1:59:1c:50:e1:84:6a:a8:8c:21:8c:d6: f8:54:35:25:43:29:e2:b3:fa:ba:e2:1d:b8:03:20:ed:90:45: 78:f4:25:1e:8c:1d:4c:12:15:40:59:1b:82:d9:4c:9f:c4:7f: c1:b2:54:5c:63:48:91:d3:a9:79:b3:ed:eb:10:80:ae:6d:31: 22:61:52:1a:0d:8e:22:06:ca:a9:b6:24:d7:1e:9f:72:d4:8d: 64:b8:e4:b4:75:98:c6:aa:ac:75:51:99:96:56:21:13:1b:a6: 44:e9:33:df:60:56:bc:99:c4:2d:93:27:47:f6:2c:d0:22:da: 78:e9:7d:e4:37:dd:14:84:a0:80:20:c1:d0:e6:00:92:fd:16: 3c:cb:31:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjYwOTI3MDA0NzE2WhcNMjYxMDA0MDA0NzE2WjAYMRYwFAYD VQQDEw02YWI4Njc5NS1kY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gXC0ShXDPmp1R845F0H6FGitVooslYYss6vpOpa8xuQvn20xvdK0Sc2OM7p 2H7jv5+OrrMM3Si2IYOFGm1JdCt/BClG8haO0l8VHnQOYsLmdP8pvklQrJ9DwdUO i2PHKqO+DwHn+3d3UxeuNsKnFIcgFs1AjtzfZypt2MmGTQ40v0ktWanLLUEpLb3Y NO0/hRpO9v4uZiIFi/C8CGfSJ2W4tll8rcloLQVjOBi01CESAWo5YwMWQQAMlc/8 o2foyZProCuiWmG9PRkmAaA0xYHDlw3t8RT/8WkBZovsfYXq5lY3cFurAPbA4WQA zYvy3Eczq/t18fJxuABm6TX4FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJMl/Vj NOZdh1atwX4sMj243BL7MB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGvxTD+HlpHZwJUFFj5dGXFMDdG0BkWqmazAOEcChfclJ8zCBGgOwPqGiHPP7 ssGTktuz0pr1ybLaFfXfKR5Jvds9Td9SBXsH9rNL2Qbdlzr6yrf0bonmaixAERNA xtm9E/1omTmwFB+ycrm3xBZ+AjaPoVkcUOGEaqiMIYzW+FQ1JUMp4rP6uuIduAMg 7ZBFePQlHowdTBIVQFkbgtlMn8R/wbJUXGNIkdOpebPt6xCArm0xImFSGg2OIgbK qbYk1x6fctSNZLjktHWYxqqsdVGZllYhExumROkz32BWvJnELZMnR/Ys0CLaeOl9 5DfdFISggCDB0OYAkv0WPMsxAw== -----END CERTIFICATE-----Generated at Sun Sep 27 23:41:26 2026 by rpki-client