$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: BE4TQNiIaSn0SPelluvTfQbwd/5sREuBhsM+OWnWta8= Subject key identifier: B7:36:30:14:4A:22:A4:EB:9E:75:C3:74:B7:D4:80:5E:53:62:79:7C Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 0563 Signing time: Thu 08 Oct 2026 23:37:51 +0000 Manifest this update: Thu 08 Oct 2026 23:37:51 +0000 Manifest next update: Thu 15 Oct 2026 23:37:51 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: MephNIF3Pps733Vaay7RZkvQVUfL1bC/ghtHYwp9tyw=) 2: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) 3: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 23:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Oct 8 23:37:51 2026 GMT Not After : Oct 15 23:37:51 2026 GMT Subject: CN=6ac8294f-90ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:b6:35:88:51:e0:fe:99:54:20:e9:06:7e: 71:d5:d1:98:07:b4:89:6c:4c:54:90:4b:44:b3:06: 09:43:c8:21:96:22:b8:8e:bc:ed:23:63:95:ea:4f: 37:6f:03:c8:8a:8e:8b:df:1f:ce:a4:67:83:cc:35: d1:89:bb:98:bb:d7:9e:dd:dc:aa:92:45:f4:93:04: ed:39:0d:2b:d1:98:77:f8:1e:f1:5a:2c:02:6f:f8: d0:7a:af:55:98:20:ff:84:26:27:74:ef:18:9d:6f: 46:b6:71:99:5d:ae:9a:37:ee:ee:8a:0b:12:53:de: cc:c0:48:23:2f:72:e7:43:53:30:69:79:34:2c:04: 48:c0:fd:5a:f6:fb:a4:d0:37:fd:e5:67:4e:33:90: 5a:20:9a:48:9e:53:85:90:b6:96:7a:be:58:2c:15: 78:97:f3:85:f4:76:d8:aa:cb:a9:fa:e3:b4:42:13: 4f:28:58:7e:b6:61:a7:5f:60:3d:dc:f2:88:5e:ed: 79:95:d7:95:d9:5f:5a:aa:e1:20:16:c9:37:c8:55: 8f:78:81:b3:7f:69:2d:4f:7a:c9:f0:48:a8:01:68: 71:43:82:7e:a5:91:9b:88:c2:a8:f6:6e:e6:ef:30: a6:79:a1:b7:b6:e9:77:95:9e:c6:84:25:f5:7d:11: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:36:30:14:4A:22:A4:EB:9E:75:C3:74:B7:D4:80:5E:53:62:79:7C X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:86:13:89:dd:ae:9a:7f:e4:b0:cc:e6:ea:3f:5b:63:51:41: 10:8b:ed:fa:a9:80:d5:06:1c:6e:3c:c9:f2:d9:d7:d4:cd:dd: 87:10:c3:02:0b:66:a7:1a:ec:53:d5:30:c4:11:f2:bc:11:ad: e9:4f:0f:8c:94:cf:1e:ac:cb:3a:70:f2:f2:2e:06:db:dd:21: 99:a9:00:d8:e2:6c:ea:9f:68:9d:b1:70:e0:fa:fb:9e:e3:31: 5d:e3:63:ee:13:1b:1a:15:0b:3f:76:ad:6b:ff:e1:b2:e3:48: ac:3f:8f:49:a0:6a:4b:f9:34:1c:2a:a8:21:64:ea:ac:bf:9f: b1:6e:52:e9:79:c2:d8:bd:55:36:b9:61:ed:f7:31:e3:28:fc: 2a:5d:82:7b:c6:03:cf:44:c4:e2:b1:82:69:9d:6c:a1:0c:06: 0d:f4:b0:b0:31:63:a2:33:a7:80:ad:05:dd:f2:1c:14:52:f5: 1b:a0:0c:40:81:3b:e0:d6:7e:5f:4e:b8:7f:11:53:38:0b:19: e4:75:57:af:f2:ec:26:9c:87:d9:88:a2:2f:e9:c3:5f:ba:2d: 0e:b3:ae:2e:70:95:a6:3e:49:1a:72:90:61:09:09:21:c0:1e: c2:2b:6d:5c:d5:5d:f1:4b:8f:36:3d:e5:91:ba:9f:94:3d:ea: 46:df:50:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYxMDA4MjMzNzUxWhcNMjYxMDE1MjMzNzUxWjAYMRYwFAYD VQQDEw02YWM4Mjk0Zi05MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZe2NYhR4P6ZVCDpBn5x1dGYB7SJbExUkEtEswYJQ8ghliK4jrztI2OV6k83 bwPIio6L3x/OpGeDzDXRibuYu9ee3dyqkkX0kwTtOQ0r0Zh3+B7xWiwCb/jQeq9V mCD/hCYndO8YnW9GtnGZXa6aN+7uigsSU97MwEgjL3LnQ1MwaXk0LARIwP1a9vuk 0Df95WdOM5BaIJpInlOFkLaWer5YLBV4l/OF9HbYqsup+uO0QhNPKFh+tmGnX2A9 3PKIXu15ldeV2V9aquEgFsk3yFWPeIGzf2ktT3rJ8EioAWhxQ4J+pZGbiMKo9m7m 7zCmeaG3tul3lZ7GhCX1fRGJNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLc2MBRK IqTrnnXDdLfUgF5TYnl8MB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGYYTid2umn/ksMzm6j9bY1FBEIvt+qmA1QYcbjzJ8tnX1M3dhxDDAgtmpxrs U9UwxBHyvBGt6U8PjJTPHqzLOnDy8i4G290hmakA2OJs6p9onbFw4Pr7nuMxXeNj 7hMbGhULP3ata//hsuNIrD+PSaBqS/k0HCqoIWTqrL+fsW5S6XnC2L1VNrlh7fcx 4yj8Kl2Ce8YDz0TE4rGCaZ1soQwGDfSwsDFjojOngK0F3fIcFFL1G6AMQIE74NZ+ X064fxFTOAsZ5HVXr/LsJpyH2YiiL+nDX7otDrOuLnCVpj5JGnKQYQkJIcAewitt XNVd8UuPNj3lkbqflD3qRt9Q1A== -----END CERTIFICATE-----Generated at Sat Oct 10 17:57:22 2026 by rpki-client