$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json) Hash identifier: KM35FAWSfvL7UO7aMDfMMcRx/QBE+eNaxzMrtexaFfQ= Subject key identifier: 42:B3:5A:FB:8B:7D:5B:64:2A:EA:82:C4:DA:67:25:C4:FB:48:8D:68 Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft Manifest number: 02E2 Signing time: Wed 23 Sep 2026 00:54:13 +0000 Manifest this update: Wed 23 Sep 2026 00:54:12 +0000 Manifest next update: Wed 30 Sep 2026 00:54:12 +0000 Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: kqQzyG6v+EDwGVCof0vTHrbSdiDPlV2+M+l+0jS+aFM=) 2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: cXCRp9D8nLh2OADm8x+9jvTxFsaNkGvRt8yDC/0Utus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36 Validity Not Before: Sep 23 00:54:12 2026 GMT Not After : Sep 30 00:54:12 2026 GMT Subject: CN=6ab32335-da5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:8f:da:7e:7e:81:b8:8c:4f:f5:6b:62:e1: f0:ad:56:f6:59:6b:af:89:21:67:33:77:e4:dd:e1: 5e:e7:ff:82:c2:d7:d4:03:5c:f0:50:fd:45:09:b4: 66:46:2a:52:c5:1b:24:46:ce:98:1d:ce:a1:69:df: bd:fb:53:88:f2:4b:c2:ef:c4:c1:e3:62:c1:2d:e4: b0:df:11:b3:53:12:fa:83:fe:3c:8b:df:8c:60:9a: c8:7e:3c:7f:3f:78:7c:34:4e:16:c9:cb:83:6e:3e: 4d:70:83:11:c0:f8:f3:52:55:f0:17:8c:0e:4c:66: 14:4e:fb:a6:83:f9:2c:7b:90:50:ce:82:e5:ff:30: 20:24:62:0a:84:16:75:c1:ef:e5:ed:e9:21:fd:0e: e4:5d:ad:19:a4:30:36:33:06:9d:de:9e:d7:03:31: 8e:57:e8:6e:b2:4a:9a:ad:cd:d9:f1:5b:b6:b1:b8: c3:5f:05:fe:b1:0d:d0:f3:2a:5b:81:1b:c2:d0:32: 3d:92:4e:75:e5:ec:3c:0c:19:43:b1:7a:8d:ab:75: 1e:16:1c:cf:4f:ec:0e:08:07:85:1b:2b:7b:e1:66: 47:85:0b:a8:ff:95:5f:22:a1:4d:aa:6b:e3:55:34: 6e:1f:72:fe:11:a7:9d:d3:f4:6d:29:9a:65:c0:b7: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:5A:FB:8B:7D:5B:64:2A:EA:82:C4:DA:67:25:C4:FB:48:8D:68 X509v3 Authority Key Identifier: keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4a:5f:d2:47:00:c2:24:86:51:92:31:f5:11:ca:86:f9:b3: 68:58:d9:ce:3d:4f:6b:5a:a6:36:95:99:0d:fd:db:df:66:cc: 00:a5:ea:15:c1:b3:2f:20:8d:c6:e8:58:31:09:b2:28:2d:e0: c2:f4:b2:ef:74:23:92:07:a9:32:7a:98:a6:fc:e8:89:b8:ef: 5f:51:d9:dc:9c:e8:50:39:4b:55:04:9c:82:cc:78:35:f1:6d: bf:32:b4:06:61:fb:ef:3a:fa:22:42:a9:65:ec:3d:12:c8:6d: 94:e6:49:fb:79:78:e3:7d:11:9a:f0:32:c1:42:c2:56:54:c2: aa:77:6c:1d:fb:df:9e:5d:2e:cc:0a:4a:5f:13:99:f4:33:ff: 9c:0a:ed:f8:d0:b8:20:b6:29:75:59:85:ec:09:fd:4c:d4:29: 77:78:03:ef:0c:73:de:63:d4:68:f9:00:5e:fe:c7:71:39:9f: e9:09:f2:c9:b5:c0:20:04:07:b2:54:31:e2:c3:66:c6:be:5f: ff:1e:73:6b:77:02:65:e3:e4:1e:e1:61:b1:5d:8a:49:da:e4: 34:ef:1d:36:fa:45:f7:ef:d0:1d:d5:cf:3c:e3:cf:66:3f:90: 6c:1c:a6:00:6e:32:3d:57:9e:6f:e0:cc:ff:5b:7f:69:99:db: ce:84:8d:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1 OEMyNjdDMzYwHhcNMjYwOTIzMDA1NDEyWhcNMjYwOTMwMDA1NDEyWjAYMRYwFAYD VQQDEw02YWIzMjMzNS1kYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSmP2n5+gbiMT/VrYuHwrVb2WWuviSFnM3fk3eFe5/+CwtfUA1zwUP1FCbRm RipSxRskRs6YHc6had+9+1OI8kvC78TB42LBLeSw3xGzUxL6g/48i9+MYJrIfjx/ P3h8NE4WycuDbj5NcIMRwPjzUlXwF4wOTGYUTvumg/kse5BQzoLl/zAgJGIKhBZ1 we/l7ekh/Q7kXa0ZpDA2Mwad3p7XAzGOV+huskqarc3Z8Vu2sbjDXwX+sQ3Q8ypb gRvC0DI9kk515ew8DBlDsXqNq3UeFhzPT+wOCAeFGyt74WZHhQuo/5VfIqFNqmvj VTRuH3L+Eaed0/RtKZplwLecJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKzWvuL fVtkKuqCxNpnJcT7SI1oMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3 NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V QzljcDJSTHpaakZZd21mRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkpf0kcAwiSGUZIx9RHKhvmzaFjZzj1Pa1qmNpWZDf3b32bMAKXqFcGzLyCN xuhYMQmyKC3gwvSy73QjkgepMnqYpvzoibjvX1HZ3JzoUDlLVQScgsx4NfFtvzK0 BmH77zr6IkKpZew9EshtlOZJ+3l4430RmvAywULCVlTCqndsHfvfnl0uzApKXxOZ 9DP/nArt+NC4ILYpdVmF7An9TNQpd3gD7wxz3mPUaPkAXv7HcTmf6QnyybXAIAQH slQx4sNmxr5f/x5za3cCZePkHuFhsV2KSdrkNO8dNvpF9+/QHdXPPOPPZj+QbBym AG4yPVeeb+DM/1t/aZnbzoSNlA== -----END CERTIFICATE-----Generated at Wed Sep 23 17:28:13 2026 by rpki-client