$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: 2iA0s5O+T8If11B1Ay80hqVPiQJ/2njnjQj2YieB9ew= Subject key identifier: 44:12:54:6A:69:3B:1E:C1:66:88:24:37:66:A6:BC:19:E0:06:3F:60 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 2299 Signing time: Tue 22 Sep 2026 15:48:11 +0000 Manifest this update: Tue 22 Sep 2026 15:48:11 +0000 Manifest next update: Tue 29 Sep 2026 15:48:11 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: G4INyUeCqQaIFWyILErbtd+G/pbqLFxlPV++UKvDTww=) 2: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=) 3: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=) 4: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=) 5: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=) 6: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=) 7: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=) 8: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8947 (0x22f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 22 15:48:11 2026 GMT Not After : Sep 29 15:48:11 2026 GMT Subject: CN=6ab2a33b-de12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:0e:44:dd:5f:23:7d:66:f6:9a:9f:81:7b: e4:d0:77:d3:b0:29:8f:ba:4f:79:64:1d:c0:c8:6c: 62:86:90:7c:0f:c2:33:92:5c:1e:1e:b1:44:c6:69: 0e:2d:e8:1d:e1:11:31:2a:00:0b:56:1f:1c:6f:bc: 6b:69:7e:36:ea:74:3a:be:be:8d:04:43:60:d3:27: 95:c8:52:a0:a6:93:63:1f:e4:fe:75:29:9d:78:2d: 90:ca:a0:57:b0:d9:1e:1d:cd:9d:56:1d:b2:92:ed: 60:76:67:e8:cd:b6:9e:4c:7b:b9:f3:11:3f:6a:df: 0d:60:92:0f:08:55:78:46:4a:b7:1d:8e:a5:04:00: 47:b8:75:f7:ef:85:79:b7:fb:5f:64:a1:b5:fb:60: 6e:2f:35:59:a5:2e:9c:a4:1a:4b:eb:9f:ca:19:02: 3b:6e:b5:42:f6:5f:6b:ad:9b:30:63:df:a3:71:4f: f5:8e:58:48:78:ff:bc:6b:c6:f3:b3:47:98:da:ca: f2:64:16:11:53:20:80:86:16:23:38:56:96:47:46: 83:da:a1:bb:04:f4:97:2c:85:e5:4a:12:25:7d:15: 75:0b:6b:0d:e4:6b:e7:56:b7:43:ac:5d:35:32:cb: e6:0d:3b:41:ed:96:54:76:b8:ca:ec:fc:0f:52:e1: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:12:54:6A:69:3B:1E:C1:66:88:24:37:66:A6:BC:19:E0:06:3F:60 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1e:e1:13:4e:13:33:99:f6:d1:64:40:fb:e9:63:02:c6:54: eb:65:6f:ea:ac:a3:4a:93:a8:4f:14:ea:44:d2:a6:20:83:d5: 72:79:5d:ed:23:ee:92:c7:5f:90:16:77:88:aa:83:2a:fe:ad: d7:07:b4:13:4f:89:2e:c7:05:8b:fb:4b:33:d9:3d:7c:89:41: 58:10:8a:f7:48:3b:13:b0:e9:99:c7:e9:c0:03:19:c5:8b:6a: 08:eb:fc:cf:9a:e3:05:ac:f8:e1:7b:f8:85:00:36:f8:3e:28: 6c:51:e8:dc:60:e5:bc:48:cc:16:17:ed:56:2d:e7:54:e6:eb: f5:6b:f5:c0:c6:e0:11:73:e8:dc:df:41:f0:24:ac:0d:f9:2b: 6b:c7:9c:4c:84:9b:6b:0f:33:7c:ef:42:a0:66:b9:db:57:ed: b1:9c:eb:92:87:60:13:5a:36:48:59:ae:4d:a8:4c:e4:1f:2d: da:39:65:4a:57:85:dc:e1:9b:1f:aa:61:47:54:42:b5:c1:cf: e7:0a:11:6f:d4:68:a3:5b:15:7d:f0:f9:47:55:e3:f4:39:82: d7:0a:35:08:7a:63:76:19:fe:2a:62:04:8b:9d:40:09:0e:11: 22:b2:ef:56:49:da:9e:17:b2:79:8f:df:e2:0a:b1:10:85:57: 1d:5e:4a:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTIyMTU0ODExWhcNMjYwOTI5MTU0ODExWjAYMRYwFAYD VQQDEw02YWIyYTMzYi1kZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1AORN1fI31m9pqfgXvk0HfTsCmPuk95ZB3AyGxihpB8D8IzklweHrFExmkO Legd4RExKgALVh8cb7xraX426nQ6vr6NBENg0yeVyFKgppNjH+T+dSmdeC2QyqBX sNkeHc2dVh2yku1gdmfozbaeTHu58xE/at8NYJIPCFV4Rkq3HY6lBABHuHX374V5 t/tfZKG1+2BuLzVZpS6cpBpL65/KGQI7brVC9l9rrZswY9+jcU/1jlhIeP+8a8bz s0eY2sryZBYRUyCAhhYjOFaWR0aD2qG7BPSXLIXlShIlfRV1C2sN5GvnVrdDrF01 MsvmDTtB7ZZUdrjK7PwPUuGpmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQSVGpp Ox7BZogkN2amvBngBj9gMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjh7hE04TM5n20WRA++ljAsZU62Vv6qyjSpOoTxTqRNKmIIPVcnld7SPuksdf kBZ3iKqDKv6t1we0E0+JLscFi/tLM9k9fIlBWBCK90g7E7DpmcfpwAMZxYtqCOv8 z5rjBaz44Xv4hQA2+D4obFHo3GDlvEjMFhftVi3nVObr9Wv1wMbgEXPo3N9B8CSs Dfkra8ecTISbaw8zfO9CoGa521ftsZzrkodgE1o2SFmuTahM5B8t2jllSleF3OGb H6phR1RCtcHP5woRb9Roo1sVffD5R1Xj9DmC1wo1CHpjdhn+KmIEi51ACQ4RIrLv VknanheyeY/f4gqxEIVXHV5Klg== -----END CERTIFICATE-----Generated at Thu Sep 24 02:38:46 2026 by rpki-client