$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: 9yU+sd2cLeY8C86fjV+uNcmfxzqv0N/H3Z1Z61Xql5Q= Subject key identifier: D6:CC:E5:02:97:51:8C:60:2D:DB:46:43:97:8F:CF:6A:10:F9:FE:36 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0DA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0D99 Signing time: Thu 24 Sep 2026 17:53:23 +0000 Manifest this update: Thu 24 Sep 2026 17:53:23 +0000 Manifest next update: Thu 01 Oct 2026 17:53:23 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: jPrwPOvMZDPKj6FtEZPyPFakxI1907gkDuO5JuTP3EQ=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3493 (0xda5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Sep 24 17:53:23 2026 GMT Not After : Oct 1 17:53:23 2026 GMT Subject: CN=6ab56393-837b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:3f:b4:d9:03:f6:ab:f0:6f:28:82:92:0f: 0e:0a:66:02:c7:4b:24:31:c4:ba:e0:44:56:f1:d8: e4:85:b8:49:12:ca:96:99:ce:7b:0c:6a:f9:ef:98: d2:63:bf:1f:a9:10:f3:24:80:54:eb:e5:78:62:63: 42:32:31:1e:9f:41:14:07:eb:87:18:ee:6a:34:e4: 94:a8:ce:f0:96:4c:c5:b2:17:bb:6c:8c:8e:26:ab: b3:68:48:f6:11:cb:28:d6:35:63:6c:51:0c:6d:78: 1c:02:00:a7:24:e4:04:f4:9d:ae:21:bd:84:2b:f0: 5a:f5:bc:b1:a3:10:81:45:09:84:dc:4f:2b:a3:92: 3a:a9:b8:d7:14:05:ff:ef:01:52:f7:79:4e:bb:0e: ee:04:0c:04:8c:51:60:8d:c7:20:ba:fd:bf:3b:f2: df:44:83:4c:47:46:76:f5:20:30:4b:93:a9:18:60: 25:59:d0:41:3d:0c:c3:11:fd:6f:1e:76:56:8d:95: ca:c8:f6:f1:fa:0f:34:52:23:5f:e3:9f:0a:68:ee: b3:b6:81:2f:28:24:47:21:01:be:af:ed:d2:ac:d4: 5c:77:63:31:53:5e:ea:c2:89:dc:0a:c8:5f:50:64: bf:9f:a8:4d:35:0c:cd:e4:4b:5b:9a:83:88:9d:fe: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CC:E5:02:97:51:8C:60:2D:DB:46:43:97:8F:CF:6A:10:F9:FE:36 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:91:69:b8:02:08:0c:10:a7:22:5d:ea:bc:f9:d4:85:ae:ef: 5f:5b:4d:50:fb:6b:d7:33:66:c2:6e:17:e6:42:8b:d4:27:a2: 63:08:2d:61:1d:20:7a:eb:dc:83:12:71:7c:b6:c0:ec:d8:32: 0a:0e:75:a3:1d:91:62:a7:a0:61:1b:d1:9e:77:0d:a2:be:99: bb:0b:22:5c:7a:fd:18:80:a7:0d:d3:0a:dd:ba:55:7c:ff:36: 35:03:d6:3c:e8:77:8b:e5:5a:ca:7d:53:4f:56:56:31:f1:13: 6e:c3:b7:20:44:d5:05:76:33:a3:95:ca:10:02:78:30:ae:c6: 99:e1:8d:ce:76:94:68:66:1c:f5:ed:40:96:82:e4:72:d4:30: e7:c4:10:90:ad:ef:78:64:0d:8f:46:95:d0:12:5e:be:48:59: d7:2e:58:89:40:5a:37:83:8d:bb:b5:69:77:8c:d7:71:77:b6: 5b:8d:df:3b:a1:0e:33:52:f2:d4:52:15:cc:5c:4e:9b:cb:5d: cb:a7:6e:d2:86:f9:59:96:c3:8a:a4:7b:f8:b1:20:ff:fd:1c: b9:fb:f3:91:91:2d:ce:a3:ef:c1:30:d0:2d:e8:f4:98:97:bc: 13:ee:60:cd:7d:32:02:49:1c:0a:a6:9b:9a:69:a5:22:6d:84: 83:11:f7:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjYwOTI0MTc1MzIzWhcNMjYxMDAxMTc1MzIzWjAYMRYwFAYD VQQDEw02YWI1NjM5My04MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGQ/tNkD9qvwbyiCkg8OCmYCx0skMcS64ERW8djkhbhJEsqWmc57DGr575jS Y78fqRDzJIBU6+V4YmNCMjEen0EUB+uHGO5qNOSUqM7wlkzFshe7bIyOJquzaEj2 Ecso1jVjbFEMbXgcAgCnJOQE9J2uIb2EK/Ba9byxoxCBRQmE3E8ro5I6qbjXFAX/ 7wFS93lOuw7uBAwEjFFgjccguv2/O/LfRINMR0Z29SAwS5OpGGAlWdBBPQzDEf1v HnZWjZXKyPbx+g80UiNf458KaO6ztoEvKCRHIQG+r+3SrNRcd2MxU17qwoncCshf UGS/n6hNNQzN5EtbmoOInf5s5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbM5QKX UYxgLdtGQ5ePz2oQ+f42MB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPpFpuAIIDBCnIl3qvPnUha7vX1tNUPtr1zNmwm4X5kKL1CeiYwgtYR0geuvc gxJxfLbA7NgyCg51ox2RYqegYRvRnncNor6ZuwsiXHr9GICnDdMK3bpVfP82NQPW POh3i+Vayn1TT1ZWMfETbsO3IETVBXYzo5XKEAJ4MK7GmeGNznaUaGYc9e1AloLk ctQw58QQkK3veGQNj0aV0BJevkhZ1y5YiUBaN4ONu7Vpd4zXcXe2W43fO6EOM1Ly 1FIVzFxOm8tdy6du0ob5WZbDiqR7+LEg//0cufvzkZEtzqPvwTDQLej0mJe8E+5g zX0yAkkcCqabmmmlIm2EgxH3Lg== -----END CERTIFICATE-----Generated at Fri Sep 25 18:16:12 2026 by rpki-client