$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: oKGToK41kBzrcIcYcTqw0Mti/tyDkcHaN38JNLluQfE= Subject key identifier: 09:C1:00:73:E6:99:C7:6B:4F:1E:84:CA:6A:F8:60:5A:0E:4D:B8:B8 Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 0247 Signing time: Sat 26 Sep 2026 17:37:12 +0000 Manifest this update: Sat 26 Sep 2026 17:37:12 +0000 Manifest next update: Sat 03 Oct 2026 17:37:12 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: Kl60Zp0xL5n+JoYFf/7zYgMKpCifyvvJG9cGnS/WZl4=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: 8UoEC8xsE/JTgByqgA9fCAgCWLlJeeUor6dWgZpCQrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Sep 26 17:37:12 2026 GMT Not After : Oct 3 17:37:12 2026 GMT Subject: CN=6ab802c8-628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:71:25:1d:d2:de:65:81:de:75:25:53:8f: 0c:fc:3c:26:bf:67:c1:9b:ea:89:6b:34:82:1c:f8: b1:db:ca:33:5e:bc:81:21:ef:cf:98:e7:be:ff:f8: 9b:33:9a:fa:0a:17:b6:b8:0c:c9:aa:f7:b6:cf:52: 9a:ce:c5:ff:3b:8c:61:6d:f1:a6:13:d8:fa:e3:81: df:85:ad:0b:a8:99:32:3e:53:cf:d0:72:fb:ac:2b: f0:4d:a8:01:62:f6:bf:06:40:9a:8a:b6:81:99:c0: 4c:53:b7:8c:b6:5c:4a:f4:d2:43:08:bf:51:91:a7: 6b:a4:b7:d6:bf:d3:a0:c7:d1:5e:b8:c8:d8:ed:af: af:d4:e4:bc:31:64:42:3c:35:2d:6e:ab:19:00:d0: a3:a6:26:17:4e:9e:c6:f6:43:8c:5d:89:af:04:59: c3:92:a0:7f:e6:8b:10:99:be:2c:98:93:8a:44:29: 5e:8d:6c:54:85:76:72:62:63:12:38:fb:48:80:c9: 58:88:b0:f9:53:c2:a4:d7:13:82:a3:e6:22:a4:12: 16:57:26:27:55:96:8f:49:54:51:3e:bd:50:3b:cc: fe:b0:44:2f:19:b3:7b:29:1b:15:5f:da:73:53:63: 07:cb:b8:1d:08:39:65:f2:c8:2f:2b:40:90:ea:ab: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:00:73:E6:99:C7:6B:4F:1E:84:CA:6A:F8:60:5A:0E:4D:B8:B8 X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:08:23:fa:11:89:09:75:e8:6e:f6:26:41:20:9c:6c:c3:42: 4b:69:e2:79:3f:34:7f:45:4c:f4:f7:f8:52:d8:0a:68:77:17: 7c:fd:9b:fb:fd:83:69:45:22:ed:68:e7:47:a8:83:b2:c0:01: 77:30:ac:88:f4:46:56:d4:21:0e:62:ef:66:54:61:67:bd:d2: de:ad:94:9e:7c:f3:d4:19:04:5a:9b:e7:2c:6f:1f:f3:ef:89: 12:3b:e4:b5:4f:c9:38:bf:2f:f4:2e:53:96:34:f0:63:d3:b6: 30:e8:49:ec:69:62:e4:a9:1c:78:95:c4:a1:32:33:11:1a:d9: ed:9e:a0:c7:d1:08:03:d1:c9:35:3e:2e:02:de:86:34:c9:ff: e1:82:d0:3d:5e:a8:9d:cd:fc:5c:67:6f:b1:36:c6:b1:81:05: 1e:f1:e7:1c:cf:b7:95:3d:dd:d5:86:45:43:71:02:99:de:5b: 74:dc:a3:03:35:51:7b:5c:f8:52:1e:cf:47:1d:7d:d9:94:09: 93:92:95:30:d4:b1:4d:b4:84:de:ca:ea:d4:bc:4d:c8:15:2e: d2:58:af:70:04:2e:7e:1a:ac:58:61:55:21:12:b5:f7:ed:19: a1:8d:52:a7:f5:a5:94:ea:c3:19:be:72:86:c4:47:29:0f:4b: b0:81:d8:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwOTI2MTczNzEyWhcNMjYxMDAzMTczNzEyWjAYMRYwFAYD VQQDEw02YWI4MDJjOC02MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/lxJR3S3mWB3nUlU48M/Dwmv2fBm+qJazSCHPix28ozXryBIe/PmOe+//ib M5r6Che2uAzJqve2z1KazsX/O4xhbfGmE9j644Hfha0LqJkyPlPP0HL7rCvwTagB Yva/BkCairaBmcBMU7eMtlxK9NJDCL9RkadrpLfWv9Ogx9FeuMjY7a+v1OS8MWRC PDUtbqsZANCjpiYXTp7G9kOMXYmvBFnDkqB/5osQmb4smJOKRClejWxUhXZyYmMS OPtIgMlYiLD5U8Kk1xOCo+YipBIWVyYnVZaPSVRRPr1QO8z+sEQvGbN7KRsVX9pz U2MHy7gdCDll8sgvK0CQ6qtUrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnBAHPm mcdrTx6Eymr4YFoOTbi4MB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuwgj+hGJCXXobvYmQSCcbMNCS2nieT80f0VM9Pf4UtgKaHcXfP2b+/2DaUUi 7WjnR6iDssABdzCsiPRGVtQhDmLvZlRhZ73S3q2Unnzz1BkEWpvnLG8f8++JEjvk tU/JOL8v9C5TljTwY9O2MOhJ7Gli5KkceJXEoTIzERrZ7Z6gx9EIA9HJNT4uAt6G NMn/4YLQPV6onc38XGdvsTbGsYEFHvHnHM+3lT3d1YZFQ3ECmd5bdNyjAzVRe1z4 Uh7PRx192ZQJk5KVMNSxTbSE3srq1LxNyBUu0livcAQufhqsWGFVIRK19+0ZoY1S p/WllOrDGb5yhsRHKQ9LsIHYUg== -----END CERTIFICATE-----Generated at Sun Sep 27 08:00:32 2026 by rpki-client