$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: UzcTcyhEgKAPyvunHsfdpDLA2fwQ0mQeKNDOEEQ8AgU= Subject key identifier: E9:5B:90:1E:B2:6B:FB:60:DC:F7:AD:CC:F4:BC:C4:2C:78:45:4A:2E Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 229A Signing time: Thu 24 Sep 2026 15:49:38 +0000 Manifest this update: Thu 24 Sep 2026 15:49:38 +0000 Manifest next update: Thu 01 Oct 2026 15:49:38 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: uuS0BNwgHKMIRwk48OlVY6AsrSsP1J91NNjAjaKIsLg=) 2: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=) 3: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=) 4: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=) 5: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=) 6: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=) 7: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=) 8: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8948 (0x22f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 24 15:49:38 2026 GMT Not After : Oct 1 15:49:38 2026 GMT Subject: CN=6ab54692-dda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:1f:e9:f1:70:0b:0f:94:2d:4d:92:1e:a3: 88:8a:dc:4b:5d:b3:11:61:8e:12:3b:36:0b:fa:fd: 43:fd:db:49:bc:e9:39:81:39:9e:a3:2c:89:4b:14: e0:d4:d3:99:d0:49:bf:25:aa:ac:3f:70:46:d1:85: 11:3e:ab:6c:61:59:e7:52:22:3e:61:52:fe:12:c2: 9b:90:d2:30:3a:09:b2:8e:0e:a9:af:22:40:6a:6d: 7c:fb:ce:97:24:29:ad:d4:1a:a1:1c:8a:08:25:83: 16:57:b0:f5:96:37:28:39:52:25:1e:63:97:58:55: c8:dd:82:91:e7:c3:35:21:d0:53:6a:a7:40:25:19: b9:c7:f3:8c:6f:d4:dc:fb:26:c0:84:9a:34:1d:4f: 01:4b:fd:ab:06:2a:df:f2:55:fa:06:62:bc:cc:6e: d6:95:5f:76:12:f2:74:ff:1f:41:86:2a:cd:48:63: ab:5f:92:ba:c0:a4:57:52:d2:d8:55:4c:90:67:05: f8:9f:ec:d4:8b:96:a7:f7:80:2c:8c:56:18:84:8d: 87:4e:79:f8:52:43:b3:1a:bd:a7:f3:4e:a1:ff:d3: 77:2f:0d:bf:32:55:3c:7b:40:3e:ea:17:46:a4:4c: 52:de:c5:28:dd:c4:df:dc:14:2e:73:eb:a0:29:93: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5B:90:1E:B2:6B:FB:60:DC:F7:AD:CC:F4:BC:C4:2C:78:45:4A:2E X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3a:c0:70:00:25:12:74:ba:9b:a6:6b:b8:90:cd:8c:10:fa: fd:a4:43:bc:91:26:1a:b2:91:2a:72:23:b8:23:81:b7:e8:26: 18:a4:9d:46:b3:2f:30:00:8d:34:7e:37:8c:9f:92:fd:42:b7: 1a:07:5b:e6:ba:a9:1b:13:96:2b:62:66:17:54:cc:0a:b4:54: 7d:49:d7:f2:db:7c:b2:92:1b:50:58:8a:35:ca:28:ad:71:d4: 7e:67:50:31:b9:72:46:28:c9:fd:23:ad:85:da:ae:de:ca:10: 7f:43:f4:54:2b:b3:38:53:2f:23:b9:ed:5d:65:c9:d9:28:55: de:3d:9a:28:5e:28:72:1e:90:dc:ca:e2:01:bc:47:80:21:fd: b0:5e:e8:37:93:9b:56:f6:fa:ff:0c:33:63:f7:c8:a2:1e:4e: 14:31:f8:3c:19:40:93:b8:de:4b:86:fa:c1:69:bd:2c:b6:3f: 0a:7c:b0:8c:0d:77:e1:88:1e:49:6e:f8:f6:92:6b:27:3d:86: a1:c8:b9:b9:e4:57:02:a7:e2:9c:ad:86:17:09:7d:d5:85:c9: 4c:ed:c0:57:01:ed:b7:b1:2d:a9:b4:c2:5b:ca:f2:9a:4d:66: 13:fc:2f:8f:17:b1:8f:32:95:92:87:86:03:cd:86:da:4c:89: aa:4b:aa:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI0MTU0OTM4WhcNMjYxMDAxMTU0OTM4WjAYMRYwFAYD VQQDEw02YWI1NDY5Mi1kZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOof6fFwCw+ULU2SHqOIitxLXbMRYY4SOzYL+v1D/dtJvOk5gTmeoyyJSxTg 1NOZ0Em/JaqsP3BG0YURPqtsYVnnUiI+YVL+EsKbkNIwOgmyjg6pryJAam18+86X JCmt1BqhHIoIJYMWV7D1ljcoOVIlHmOXWFXI3YKR58M1IdBTaqdAJRm5x/OMb9Tc +ybAhJo0HU8BS/2rBirf8lX6BmK8zG7WlV92EvJ0/x9BhirNSGOrX5K6wKRXUtLY VUyQZwX4n+zUi5an94AsjFYYhI2HTnn4UkOzGr2n806h/9N3Lw2/MlU8e0A+6hdG pExS3sUo3cTf3BQuc+ugKZMgYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlbkB6y a/tg3PetzPS8xCx4RUouMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAezrAcAAlEnS6m6ZruJDNjBD6/aRDvJEmGrKRKnIjuCOBt+gmGKSdRrMvMACN NH43jJ+S/UK3Ggdb5rqpGxOWK2JmF1TMCrRUfUnX8tt8spIbUFiKNcoorXHUfmdQ MblyRijJ/SOthdqu3soQf0P0VCuzOFMvI7ntXWXJ2ShV3j2aKF4och6Q3MriAbxH gCH9sF7oN5ObVvb6/wwzY/fIoh5OFDH4PBlAk7jeS4b6wWm9LLY/CnywjA134Yge SW749pJrJz2Goci5ueRXAqfinK2GFwl91YXJTO3AVwHtt7EtqbTCW8rymk1mE/wv jxexjzKVkoeGA82G2kyJqkuqeg== -----END CERTIFICATE-----Generated at Fri Sep 25 16:28:12 2026 by rpki-client