$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: RtLDUb7E1+dJ39eDSH6kh1A+9wmRmpg8IRe4TdEbrTY= Subject key identifier: C4:E3:92:D5:62:2D:55:1D:DF:4C:A7:99:54:E3:A3:0A:FC:AA:94:31 Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0D1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0D13 Signing time: Sat 26 Sep 2026 18:24:37 +0000 Manifest this update: Sat 26 Sep 2026 18:24:37 +0000 Manifest next update: Sat 03 Oct 2026 18:24:37 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: /3k0GVQKKjvLpfpgUGN8uxwci9/wynNw68PuBuXMf6Q=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) 3: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=) 4: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3357 (0xd1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Sep 26 18:24:37 2026 GMT Not After : Oct 3 18:24:37 2026 GMT Subject: CN=6ab80de5-1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:26:62:54:b2:89:a4:15:46:af:a8:0e:f7: ca:6c:45:de:9c:01:38:46:11:14:e6:f7:d5:92:49: 22:60:72:4d:a7:77:dc:f6:8a:89:8a:f3:da:12:8d: 12:18:6c:d3:89:01:1b:8e:c8:00:df:b8:71:56:a1: 5f:03:a5:d0:f7:81:99:0f:80:97:dc:c3:59:0a:48: c5:70:69:a3:83:b6:57:01:9d:e5:a2:18:1c:6d:3f: d5:78:ee:d2:1d:ff:fe:3f:58:35:d1:f0:2d:40:ed: 3d:56:66:1c:4f:2e:a0:2f:37:c7:1a:c4:ff:ac:fe: ae:df:78:dd:85:d5:6d:a9:77:59:be:05:93:ee:eb: 70:ec:fb:c8:bc:3b:8e:19:59:23:8a:89:5f:cf:6b: ed:38:65:d2:02:85:26:d0:25:65:e4:28:4f:f0:3f: 0e:a0:de:d0:13:25:ee:6a:76:ba:78:51:f3:59:c5: 9a:20:63:7b:03:00:1e:8d:5e:af:98:53:fd:f9:b4: dd:78:37:36:97:a1:6b:95:b0:54:83:41:6b:5d:7c: 69:b5:ee:05:bd:17:27:f5:52:0e:26:de:ae:39:49: ef:4c:e2:06:41:9b:d9:4d:5d:2a:f2:cb:ab:f1:b8: 14:3b:50:f3:93:0e:b9:26:b2:42:e2:de:08:70:28: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E3:92:D5:62:2D:55:1D:DF:4C:A7:99:54:E3:A3:0A:FC:AA:94:31 X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c3:ce:81:59:9e:a2:d6:44:91:c2:96:4d:1c:33:46:99:ea: 9e:27:33:51:e3:ef:ae:c8:50:35:6b:6e:da:1b:67:9c:be:a1: 9d:99:8e:22:ec:75:b5:b8:97:c8:96:03:7d:a2:e3:55:46:a0: b7:67:66:f4:f0:bb:97:f6:ce:25:55:85:9b:b8:a1:bf:ba:7d: f4:46:2a:e5:ca:00:cf:e4:84:32:96:c4:75:6f:b0:fc:e8:15: 80:8c:86:1f:e6:69:0c:7f:2f:79:97:b8:9b:c7:b1:15:cb:f2: 33:b9:e0:69:ff:8d:0d:04:b4:d8:a4:8e:46:4e:12:51:c0:65: 27:25:b9:d7:1f:3d:98:07:25:eb:06:3c:9c:44:7a:f9:f8:bb: 61:05:33:cc:9c:28:43:a8:cd:c1:bc:eb:32:22:89:55:cf:bf: 66:d9:a5:c2:0e:d0:86:fb:e1:19:06:19:5b:59:93:d9:f5:b0: 3d:53:72:94:1f:16:50:81:05:34:5d:a4:47:98:1a:47:35:22: ad:2d:22:fc:e5:92:7b:21:fa:90:c6:16:29:6e:1e:32:52:c3: bf:0c:61:e7:00:ae:b8:3e:83:37:69:c4:6b:9d:1c:e1:e3:8f: aa:98:8d:0d:13:34:9a:5e:9f:9e:63:38:d7:04:65:a8:cb:4f: e6:4d:21:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYwOTI2MTgyNDM3WhcNMjYxMDAzMTgyNDM3WjAYMRYwFAYD VQQDEw02YWI4MGRlNS0xYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgoQmYlSyiaQVRq+oDvfKbEXenAE4RhEU5vfVkkkiYHJNp3fc9oqJivPaEo0S GGzTiQEbjsgA37hxVqFfA6XQ94GZD4CX3MNZCkjFcGmjg7ZXAZ3lohgcbT/VeO7S Hf/+P1g10fAtQO09VmYcTy6gLzfHGsT/rP6u33jdhdVtqXdZvgWT7utw7PvIvDuO GVkjiolfz2vtOGXSAoUm0CVl5ChP8D8OoN7QEyXuana6eFHzWcWaIGN7AwAejV6v mFP9+bTdeDc2l6FrlbBUg0FrXXxpte4FvRcn9VIOJt6uOUnvTOIGQZvZTV0q8sur 8bgUO1Dzkw65JrJC4t4IcCjdgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTjktVi LVUd30ynmVTjowr8qpQxMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOcPOgVmeotZEkcKWTRwzRpnqniczUePvrshQNWtu2htnnL6hnZmOIux1tbiX yJYDfaLjVUagt2dm9PC7l/bOJVWFm7ihv7p99EYq5coAz+SEMpbEdW+w/OgVgIyG H+ZpDH8veZe4m8exFcvyM7ngaf+NDQS02KSORk4SUcBlJyW51x89mAcl6wY8nER6 +fi7YQUzzJwoQ6jNwbzrMiKJVc+/Ztmlwg7QhvvhGQYZW1mT2fWwPVNylB8WUIEF NF2kR5gaRzUirS0i/OWSeyH6kMYWKW4eMlLDvwxh5wCuuD6DN2nEa50c4eOPqpiN DRM0ml6fnmM41wRlqMtP5k0hfA== -----END CERTIFICATE-----Generated at Sun Sep 27 11:40:06 2026 by rpki-client