$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft File: ojnN7_dPIz48Qo4CDpx5vds1KSg.mft (raw, json) Hash identifier: JrISoHU8WZGlAGHZeJ8ifypxLBTLIkL3qHGAaXxaQ+o= Subject key identifier: F7:72:2D:31:42:1B:BF:B0:FA:39:85:CA:56:10:F9:A8:52:60:C9:7A Authority key identifier: A2:39:CD:EF:F7:4F:23:3E:3C:42:8E:02:0E:9C:79:BD:DB:35:29:28 Certificate issuer: /CN=A91E4704/serialNumber=A239CDEFF74F233E3C428E020E9C79BDDB352928 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft Manifest number: 18 Signing time: Wed 23 Sep 2026 08:44:21 +0000 Manifest this update: Wed 23 Sep 2026 08:44:20 +0000 Manifest next update: Wed 30 Sep 2026 08:44:20 +0000 Files and hashes: 1: ojnN7_dPIz48Qo4CDpx5vds1KSg.crl (hash: cqP7ppfHRvOz7gzFyuD6WbiTGP0fDre6WFKnBhtnzx8=) 2: 422FEB0E960B11F1882391855A11F970.roa (hash: B/i3KVph+rvj3AkSdH9oCSSR9OyCeTsar/y4bMbulQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.crl rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4704, serialNumber=A239CDEFF74F233E3C428E020E9C79BDDB352928 Validity Not Before: Sep 23 08:44:20 2026 GMT Not After : Sep 30 08:44:20 2026 GMT Subject: CN=6ab39164-7de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:e1:3a:a8:bb:f0:d8:58:dc:83:d2:2a:a8: d4:bd:51:3d:65:41:16:fe:b6:af:c6:3f:5b:f1:52: ec:eb:4f:11:35:82:cb:f6:2a:7d:67:4a:fe:18:c8: 6b:63:ee:1e:33:a7:de:df:ea:9d:23:53:cd:89:8d: ae:ee:31:ae:ce:d3:66:4e:e6:68:79:71:a4:6a:31: 12:59:fa:73:40:ca:14:87:77:13:d5:27:46:ae:f6: 10:4c:52:1b:ed:14:88:24:b1:ea:9a:67:1e:33:65: 31:30:78:54:da:d3:e7:2e:7e:1f:85:79:8d:d5:95: 65:34:f3:cf:3a:85:38:de:5e:ac:0b:54:34:c5:bb: 5c:56:71:a8:98:d3:4c:cd:21:de:61:85:aa:e2:5e: a1:0e:b7:6e:02:03:ee:f2:ae:e3:e9:ad:4e:d3:3f: 82:4b:98:6b:2a:5e:8d:54:41:03:0a:fd:50:ed:9c: c9:12:33:0a:7d:2e:f6:5a:ab:ba:3f:f8:68:fe:6a: 1c:c3:89:2d:31:e2:1b:c4:8d:95:7d:92:92:19:b0: 31:d8:61:da:2a:63:d5:5c:5a:cd:87:77:fd:9f:3e: 2a:0f:2a:39:ae:de:94:f3:58:e8:a8:32:3a:41:6b: f3:b0:4d:87:92:b8:1b:fc:97:49:7b:45:7d:06:b4: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:72:2D:31:42:1B:BF:B0:FA:39:85:CA:56:10:F9:A8:52:60:C9:7A X509v3 Authority Key Identifier: keyid:A2:39:CD:EF:F7:4F:23:3E:3C:42:8E:02:0E:9C:79:BD:DB:35:29:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3e:b1:22:0c:33:0a:8a:af:6a:1e:a7:9a:f4:35:4b:26:11: 11:05:b9:45:6d:71:5f:82:c6:b3:fb:0d:e6:b0:11:4e:7a:02: e0:52:94:e9:69:69:62:6e:5e:40:1e:3c:cc:e6:80:07:de:ce: 73:35:dc:85:8f:19:b3:e0:21:9e:1c:b1:80:c6:34:a1:2f:68: 28:4a:95:e7:90:0e:57:ee:b0:45:25:68:67:7b:26:51:ee:03: 3d:d3:b3:7b:d6:ac:f5:70:96:1b:b6:e9:d1:02:42:bd:12:2a: a4:60:a5:5f:14:4c:32:b4:e1:72:24:55:86:7d:b7:ad:42:81: 15:30:9e:2f:b4:58:62:01:cb:58:85:d7:f5:7d:c9:e8:f9:89: 32:53:df:e0:b5:a7:00:15:85:66:2a:8e:7a:fb:33:42:be:1e: 9c:35:f1:2d:13:e7:f2:db:9a:1b:50:83:da:19:24:34:44:37: 8e:c5:8a:b7:84:83:c4:27:5f:7d:be:b0:26:27:f9:c9:0f:7a: cc:69:62:6a:82:dc:64:5d:4d:bf:7e:e2:0a:61:92:99:81:cf: 80:18:2b:39:43:07:33:4c:6f:30:76:49:aa:90:8b:80:20:35: ec:a6:b3:2e:16:dd:f2:0d:50:4b:75:14:93:ed:b1:7f:3f:11: 7b:e0:41:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwNDExMC8GA1UEBRMoQTIzOUNERUZGNzRGMjMzRTNDNDI4RTAyMEU5Qzc5QkRE QjM1MjkyODAeFw0yNjA5MjMwODQ0MjBaFw0yNjA5MzAwODQ0MjBaMBgxFjAUBgNV BAMTDTZhYjM5MTY0LTdkZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzVuE6qLvw2Fjcg9IqqNS9UT1lQRb+tq/GP1vxUuzrTxE1gsv2Kn1nSv4YyGtj 7h4zp97f6p0jU82Jja7uMa7O02ZO5mh5caRqMRJZ+nNAyhSHdxPVJ0au9hBMUhvt FIgkseqaZx4zZTEweFTa0+cufh+FeY3VlWU08886hTjeXqwLVDTFu1xWcaiY00zN Id5hhariXqEOt24CA+7yruPprU7TP4JLmGsqXo1UQQMK/VDtnMkSMwp9LvZaq7o/ +Gj+ahzDiS0x4hvEjZV9kpIZsDHYYdoqY9VcWs2Hd/2fPioPKjmu3pTzWOioMjpB a/OwTYeSuBv8l0l7RX0GtFy/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU93ItMUIb v7D6OYXKVhD5qFJgyXowHwYDVR0jBBgwFoAUojnN7/dPIz48Qo4CDpx5vds1KSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzA0L0I4REE0RjdBOTYw QTExRjFBQTBBNEUzMTVBMTFGOTcwL29qbk43X2RQSXo0OFFvNENEcHg1dmRzMUtT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2puTjdfZFBJejQ4UW80Q0RweDV2ZHMxS1NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 NzA0L0I4REE0RjdBOTYwQTExRjFBQTBBNEUzMTVBMTFGOTcwL29qbk43X2RQSXo0 OFFvNENEcHg1dmRzMUtTZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaPrEiDDMKiq9qHqea9DVLJhERBblFbXFfgsaz+w3msBFOegLgUpTpaWlibl5A HjzM5oAH3s5zNdyFjxmz4CGeHLGAxjShL2goSpXnkA5X7rBFJWhneyZR7gM907N7 1qz1cJYbtunRAkK9EiqkYKVfFEwytOFyJFWGfbetQoEVMJ4vtFhiActYhdf1fcno +YkyU9/gtacAFYVmKo56+zNCvh6cNfEtE+fy25obUIPaGSQ0RDeOxYq3hIPEJ199 vrAmJ/nJD3rMaWJqgtxkXU2/fuIKYZKZgc+AGCs5QwczTG8wdkmqkIuAIDXsprMu Ft3yDVBLdRST7bF/PxF74EFI -----END CERTIFICATE-----Generated at Thu Sep 24 06:25:44 2026 by rpki-client