$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json) Hash identifier: Kz7BNs4MYRtDZ7oWFmPKYzS8GIrcL6WFlDE4R3vh93I= Subject key identifier: 66:BF:DA:C8:76:E2:96:D0:7A:DF:3C:EC:99:CA:33:A6:F8:23:D8:74 Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Certificate serial: 0E40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft Manifest number: 0E35 Signing time: Thu 24 Sep 2026 17:45:29 +0000 Manifest this update: Thu 24 Sep 2026 17:45:28 +0000 Manifest next update: Thu 01 Oct 2026 17:45:28 +0000 Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: tdix0zjfYXvdnVeI1w5o/cGB3L29IwpUTfNCX/JZKsU=) 2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Validity Not Before: Sep 24 17:45:28 2026 GMT Not After : Oct 1 17:45:28 2026 GMT Subject: CN=6ab561b9-2b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:b6:51:4d:57:4d:e7:97:8b:b7:60:09:c8: 6e:48:28:41:67:23:77:77:9d:0a:cc:ed:53:04:c7: d5:e4:72:bc:d3:3d:7c:0c:62:3a:72:b5:89:8f:a4: 2d:73:59:70:e5:8c:63:9a:49:a5:60:cd:fc:91:fe: d8:a3:31:2b:2f:f2:54:00:4c:85:4a:0c:7d:04:a0: 8e:e0:25:55:b7:48:96:12:2b:a3:ea:f7:d4:37:d8: 08:5f:27:72:e8:f5:54:30:d6:7a:1f:f0:56:10:52: 5c:93:76:00:7d:aa:7f:e2:a6:da:32:2e:87:64:4e: a9:1b:87:4f:06:e1:f5:6a:e5:2e:d6:31:0d:c4:78: 42:0c:ce:f3:52:67:34:6c:13:25:06:64:da:2b:f3: fe:a0:49:62:8c:b6:d2:5d:0e:74:4d:d3:8a:eb:79: d6:ec:b5:8c:94:6b:ee:72:f0:22:ea:1f:e3:10:13: 5f:4c:2e:5f:46:da:7c:ff:61:82:c4:9f:67:f4:fb: a7:d6:3a:c9:74:a7:c9:95:ea:ad:b7:7a:1f:60:1c: a9:41:59:bb:29:e0:ab:9e:78:d1:75:7c:ab:36:a0: 54:97:d3:c3:1f:28:74:62:16:2d:d8:07:7f:db:d3: 47:13:1e:9d:33:25:62:da:a3:e6:55:5c:dd:d0:b6: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BF:DA:C8:76:E2:96:D0:7A:DF:3C:EC:99:CA:33:A6:F8:23:D8:74 X509v3 Authority Key Identifier: keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:0c:84:9d:40:20:1b:1c:7e:c3:6a:14:22:71:32:74:05:98: d2:04:3b:59:99:d0:e7:f3:e9:bb:45:f4:f8:da:35:6b:2c:69: 4b:06:f8:ed:54:3e:65:0b:79:be:e1:6b:13:47:9b:02:7c:38: 17:54:68:6e:bc:5a:c0:6b:22:dd:41:b5:ec:a1:3f:34:61:19: ff:68:10:ec:ba:1b:87:36:49:97:ea:69:03:f6:d6:13:8f:e0: d9:dd:b9:40:57:3f:ae:e6:44:90:b7:36:4b:00:71:ff:40:f1: 1b:27:af:7a:e8:18:60:27:33:17:b2:33:15:4b:00:ab:09:42: 7e:cf:81:34:68:ae:33:70:50:00:b2:58:62:e8:41:3d:83:92: e2:bc:3a:66:66:43:f2:8b:1b:bb:d1:4f:0c:07:58:d5:e5:83: 8d:90:db:24:c9:cb:c3:54:2c:74:cd:17:92:97:e1:d2:4f:e4: d6:92:59:9d:17:6c:02:ba:49:81:1c:f0:35:4f:6b:f2:4d:23: 3b:cb:49:07:f1:93:52:8c:29:30:77:6a:91:1c:cb:1b:eb:30: 47:f7:f0:bc:3d:84:3a:63:c0:3d:72:5c:b9:f1:91:64:ef:9f: 12:3f:4c:d8:08:29:43:59:2d:13:5f:b5:85:20:b4:84:a0:c8: fc:46:70:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0 NjIyRkQ2MjcwHhcNMjYwOTI0MTc0NTI4WhcNMjYxMDAxMTc0NTI4WjAYMRYwFAYD VQQDEw02YWI1NjFiOS0yYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqni2UU1XTeeXi7dgCchuSChBZyN3d50KzO1TBMfV5HK80z18DGI6crWJj6Qt c1lw5YxjmkmlYM38kf7YozErL/JUAEyFSgx9BKCO4CVVt0iWEiuj6vfUN9gIXydy 6PVUMNZ6H/BWEFJck3YAfap/4qbaMi6HZE6pG4dPBuH1auUu1jENxHhCDM7zUmc0 bBMlBmTaK/P+oElijLbSXQ50TdOK63nW7LWMlGvucvAi6h/jEBNfTC5fRtp8/2GC xJ9n9Pun1jrJdKfJleqtt3ofYBypQVm7KeCrnnjRdXyrNqBUl9PDHyh0YhYt2Ad/ 29NHEx6dMyVi2qPmVVzd0LbAowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa/2sh2 4pbQet887JnKM6b4I9h0MB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yNjFEMjgzMEQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xi OEZvTFVqQ3hOeDFHSXYxaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlgyEnUAgGxx+w2oUInEydAWY0gQ7WZnQ5/Ppu0X0+No1ayxpSwb47VQ+ZQt5 vuFrE0ebAnw4F1RobrxawGsi3UG17KE/NGEZ/2gQ7LobhzZJl+ppA/bWE4/g2d25 QFc/ruZEkLc2SwBx/0DxGyeveugYYCczF7IzFUsAqwlCfs+BNGiuM3BQALJYYuhB PYOS4rw6ZmZD8osbu9FPDAdY1eWDjZDbJMnLw1QsdM0Xkpfh0k/k1pJZnRdsArpJ gRzwNU9r8k0jO8tJB/GTUowpMHdqkRzLG+swR/fwvD2EOmPAPXJcufGRZO+fEj9M 2AgpQ1ktE1+1hSC0hKDI/EZw3A== -----END CERTIFICATE-----Generated at Thu Sep 24 22:28:00 2026 by rpki-client