$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: T8/poe/X485m8dv7jJc7zifdrCLkpMgLzOy/CbBD+iE= Subject key identifier: 53:53:B3:C8:A3:B2:C6:C8:C2:36:7D:6B:B1:44:D5:55:17:DD:59:2A Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B63 Signing time: Fri 02 Oct 2026 19:32:42 +0000 Manifest this update: Fri 02 Oct 2026 19:32:42 +0000 Manifest next update: Fri 09 Oct 2026 19:32:42 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: pxMfG12c4fUtOBAr4L12EL/T4N+AJPt5KWhqtW35B80=) 2: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) 3: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) 4: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Oct 2 19:32:42 2026 GMT Not After : Oct 9 19:32:42 2026 GMT Subject: CN=6ac006da-c8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:ed:42:ca:22:40:c4:ce:c0:b2:4f:a6:b8: e3:3b:4d:09:34:fa:cd:29:6c:9a:ad:0a:d7:8b:d1: 63:a6:e1:a3:2f:47:67:d6:14:99:ef:a4:8c:c9:8b: 36:55:3c:0b:7c:43:64:57:5c:bd:6c:30:7d:9c:01: 0e:fd:b6:c7:7a:c8:5d:c5:56:ee:d0:42:4e:84:1c: 7e:70:c9:e2:9f:29:48:65:80:4e:34:88:fa:77:13: bc:5e:9f:97:63:73:d1:7d:05:3b:ed:a2:3d:61:b5: c4:89:d0:5b:12:22:40:c1:75:d6:ac:ab:b1:31:68: 34:19:ea:15:52:8f:e4:af:e7:61:e3:68:fc:7c:d9: e3:ea:28:c3:c2:c9:19:0f:49:60:05:08:7f:75:7c: d6:f6:89:11:78:a7:87:a2:37:0b:c8:0f:08:a1:69: 79:59:74:00:57:60:4c:b7:06:90:a1:2f:55:9f:46: 36:78:23:b1:22:a4:ee:94:e8:33:40:d0:2c:16:08: 98:cf:b9:28:20:32:03:7c:5b:f0:a3:59:62:e0:9a: 04:2b:80:c7:87:91:21:63:71:94:21:b6:36:de:6c: 22:b5:b2:27:bb:d8:dd:c9:31:ae:6e:d2:06:fd:2e: be:ea:55:73:20:e1:79:4d:9e:1b:0b:d4:d5:f3:a3: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:B3:C8:A3:B2:C6:C8:C2:36:7D:6B:B1:44:D5:55:17:DD:59:2A X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:05:d4:7f:ba:9f:86:ba:77:f6:60:09:70:db:57:a5:60:1b: 19:5c:ed:0e:e9:6f:81:cd:05:c8:dd:65:91:87:cf:5f:1c:bf: fe:ca:d4:52:33:88:cc:54:13:23:fa:a2:a3:93:f1:2a:37:40: 67:e9:2c:00:f3:ec:7d:d8:50:b1:26:76:f6:0a:91:53:cf:e9: c2:34:5f:7f:33:30:76:f1:5f:d0:e7:13:c9:c7:d3:c0:1f:8a: 37:c5:f2:e6:a0:0c:81:9c:63:ba:7b:71:0f:9e:e8:0d:5b:85: 51:01:22:33:23:3f:1b:59:47:9c:55:53:0f:40:75:7a:fc:af: 31:be:1e:c8:b5:7e:a8:5e:7c:c2:0a:28:20:b4:4d:a3:71:bf: 91:a9:2e:70:95:45:a1:d3:38:53:66:13:73:45:e1:75:cd:d0: 1c:a4:5c:6a:a8:30:d5:ce:e4:9a:35:63:40:eb:cb:66:ed:39: bd:4f:f1:aa:8e:71:75:22:57:16:78:12:2b:51:3c:81:27:b8: 1e:40:03:bd:11:c4:2c:8b:96:4f:e5:ab:be:5f:c1:43:98:38: 42:c1:00:f7:67:09:f0:a3:83:12:f1:94:7c:dd:6b:30:6c:0e: 33:32:77:31:63:7f:bf:7e:8b:a4:45:71:ee:ab:ad:4a:3a:dc: c2:89:33:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYxMDAyMTkzMjQyWhcNMjYxMDA5MTkzMjQyWjAYMRYwFAYD VQQDEw02YWMwMDZkYS1jOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3vtQsoiQMTOwLJPprjjO00JNPrNKWyarQrXi9FjpuGjL0dn1hSZ76SMyYs2 VTwLfENkV1y9bDB9nAEO/bbHeshdxVbu0EJOhBx+cMninylIZYBONIj6dxO8Xp+X Y3PRfQU77aI9YbXEidBbEiJAwXXWrKuxMWg0GeoVUo/kr+dh42j8fNnj6ijDwskZ D0lgBQh/dXzW9okReKeHojcLyA8IoWl5WXQAV2BMtwaQoS9Vn0Y2eCOxIqTulOgz QNAsFgiYz7koIDIDfFvwo1li4JoEK4DHh5EhY3GUIbY23mwitbInu9jdyTGubtIG /S6+6lVzIOF5TZ4bC9TV86MCNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNTs8ij ssbIwjZ9a7FE1VUX3VkqMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMwXUf7qfhrp39mAJcNtXpWAbGVztDulvgc0FyN1lkYfPXxy//srUUjOIzFQT I/qio5PxKjdAZ+ksAPPsfdhQsSZ29gqRU8/pwjRffzMwdvFf0OcTycfTwB+KN8Xy 5qAMgZxjuntxD57oDVuFUQEiMyM/G1lHnFVTD0B1evyvMb4eyLV+qF58wgooILRN o3G/kakucJVFodM4U2YTc0Xhdc3QHKRcaqgw1c7kmjVjQOvLZu05vU/xqo5xdSJX FngSK1E8gSe4HkADvRHELIuWT+Wrvl/BQ5g4QsEA92cJ8KODEvGUfN1rMGwOMzJ3 MWN/v36LpEVx7qutSjrcwokzIg== -----END CERTIFICATE-----Generated at Sun Oct 4 08:38:32 2026 by rpki-client