$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: KkcvX8aE6FLIzv7I03xwHDCM5dttfi/Qy8BT52PIgpA= Subject key identifier: DF:1A:F3:B9:95:65:D1:CA:8D:0C:A1:4D:76:BF:EE:10:0E:2D:82:C9 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 0321 Signing time: Wed 23 Sep 2026 00:40:23 +0000 Manifest this update: Wed 23 Sep 2026 00:40:23 +0000 Manifest next update: Wed 30 Sep 2026 00:40:23 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: 3yrqMLZiBkSekvXBl3Po/fPMLVkD36MsHAbx2YSYuYc=) 2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: oMJnsHEpWXXhDLwnF6dufDjEuC/WH5wJQLw5rJAWOBE=) 3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: Ip48cdazW4hM6iIWRAVgf+gNfgujxIpBb+M6ahRdDTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Sep 23 00:40:23 2026 GMT Not After : Sep 30 00:40:23 2026 GMT Subject: CN=6ab31ff7-fa81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:83:b3:ad:90:28:5b:94:e2:c1:a2:3d:4d: 8d:05:03:d7:16:96:79:41:1d:a3:aa:ec:b5:a5:ec: 77:9d:62:a3:ab:13:40:77:c0:05:45:aa:70:6f:ca: 38:09:2f:4f:81:09:c6:99:b9:2f:25:77:e9:70:aa: c1:bb:62:a9:f9:94:1e:fa:41:3a:06:0c:84:2c:f9: 8e:c6:fd:1f:4e:23:75:8d:0e:03:73:a4:46:bc:06: b1:df:37:a4:c4:56:ee:9e:c5:74:75:73:43:be:de: ee:91:13:59:8d:90:18:9c:52:8e:d4:99:0c:cd:1f: 6e:07:dd:ae:bc:ed:db:32:bb:3c:88:da:7f:d4:f9: 06:ef:9b:79:a3:68:c6:6c:3e:34:2b:79:aa:0b:6d: 43:c0:cc:16:63:27:98:b3:91:a6:16:4c:04:d5:72: 97:22:18:fc:c1:88:e9:a6:9a:29:bb:37:7d:75:32: fa:95:a4:df:32:a3:d7:b7:c8:29:56:0f:a1:b0:39: 23:6c:d9:19:30:43:30:54:9c:5c:d8:e7:c2:b5:30: 86:36:4a:98:7f:f8:a3:c9:92:72:1f:d0:28:dd:d8: bb:6c:8e:45:3a:91:fa:df:db:0b:ba:b9:37:87:09: 91:42:bb:e8:a7:92:a4:68:c4:2d:0c:cb:de:f5:cc: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1A:F3:B9:95:65:D1:CA:8D:0C:A1:4D:76:BF:EE:10:0E:2D:82:C9 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:14:d7:93:fc:e0:64:b9:6c:34:aa:9e:84:34:47:5a:4e:06: 59:1c:51:bb:d7:73:b3:d7:ae:d4:82:bc:99:85:fe:9a:cb:6d: df:54:40:7b:75:c7:2f:58:9c:c6:ad:1c:7a:03:5f:28:8d:36: 8a:8e:4e:d0:9b:74:1b:a4:ff:de:a8:26:63:33:f3:98:7f:bb: bb:24:86:08:86:8d:75:c8:65:b6:85:21:0c:1b:4f:66:6e:37: 8f:95:38:28:0d:10:46:e4:7f:42:6c:38:06:dc:80:94:83:5b: 84:58:50:c3:5c:8e:dd:69:e4:33:e2:01:49:ab:44:65:28:56: 60:13:4a:f7:ed:94:d7:e8:50:1b:41:1a:db:6b:67:ad:7a:f1: 52:5c:4f:41:76:92:22:62:21:49:98:98:b7:d3:34:1a:b9:de: a2:04:e6:b9:e5:4b:f9:34:91:86:13:0e:53:c7:e5:a6:97:06: a2:d7:4e:e6:d5:ae:e5:33:33:bf:e2:2d:0a:a6:64:e5:12:96: d4:c0:60:d7:20:3a:6a:2f:65:a2:ae:88:1b:fc:bc:c0:22:c3: 4f:8f:40:05:7f:09:a8:7e:0d:39:54:0a:ad:00:91:b6:75:3e: c6:6e:91:68:b7:50:f9:71:79:ed:ff:71:ca:18:49:3c:4f:6a: 86:30:c9:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjYwOTIzMDA0MDIzWhcNMjYwOTMwMDA0MDIzWjAYMRYwFAYD VQQDEw02YWIzMWZmNy1mYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwGDs62QKFuU4sGiPU2NBQPXFpZ5QR2jquy1pex3nWKjqxNAd8AFRapwb8o4 CS9PgQnGmbkvJXfpcKrBu2Kp+ZQe+kE6BgyELPmOxv0fTiN1jQ4Dc6RGvAax3zek xFbunsV0dXNDvt7ukRNZjZAYnFKO1JkMzR9uB92uvO3bMrs8iNp/1PkG75t5o2jG bD40K3mqC21DwMwWYyeYs5GmFkwE1XKXIhj8wYjpppopuzd9dTL6laTfMqPXt8gp Vg+hsDkjbNkZMEMwVJxc2OfCtTCGNkqYf/ijyZJyH9Ao3di7bI5FOpH639sLurk3 hwmRQrvop5KkaMQtDMve9cxWhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8a87mV ZdHKjQyhTXa/7hAOLYLJMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAURTXk/zgZLlsNKqehDRHWk4GWRxRu9dzs9eu1IK8mYX+mstt31RAe3XHL1ic xq0cegNfKI02io5O0Jt0G6T/3qgmYzPzmH+7uySGCIaNdchltoUhDBtPZm43j5U4 KA0QRuR/Qmw4BtyAlINbhFhQw1yO3WnkM+IBSatEZShWYBNK9+2U1+hQG0Ea22tn rXrxUlxPQXaSImIhSZiYt9M0GrneogTmueVL+TSRhhMOU8flppcGotdO5tWu5TMz v+ItCqZk5RKW1MBg1yA6ai9loq6IG/y8wCLDT49ABX8JqH4NOVQKrQCRtnU+xm6R aLdQ+XF57f9xyhhJPE9qhjDJoQ== -----END CERTIFICATE-----Generated at Wed Sep 23 07:22:32 2026 by rpki-client