$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: Mowmq638RPZrR9xudYK0KEwHd+fZCbFwy9YVViqUHNE= Subject key identifier: 10:50:BA:4E:BF:75:CB:1B:DD:22:16:01:C3:45:EA:21:B3:2B:DB:C6 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0292 Signing time: Wed 23 Sep 2026 01:58:13 +0000 Manifest this update: Wed 23 Sep 2026 01:58:12 +0000 Manifest next update: Wed 30 Sep 2026 01:58:12 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: oMnGGqAtC/zdb2lpEVcxz9w3E5g+Lr9UfdxgWpFfEWI=) 2: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=) 3: A78C8AB896E511F195E2E0D45C11F970.roa (hash: y6k5gAl70xPgm1PdqA0djO2XSJUwhklLEIGZFO4hIJc=) 4: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Sep 23 01:58:12 2026 GMT Not After : Sep 30 01:58:12 2026 GMT Subject: CN=6ab33235-1049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:ec:13:bb:a1:1a:1b:dd:db:a0:17:b2:87: 6d:20:72:fc:8b:39:11:86:aa:9e:e2:84:7d:01:32: 38:18:ac:6c:42:d0:4e:e7:f7:c9:f9:39:a3:25:4a: 5a:17:ab:e6:b8:83:cf:2b:e9:65:71:48:2b:4e:b7: 44:57:c8:b6:41:55:5e:c7:40:c0:d1:da:bb:5a:0b: 65:3f:d5:16:8e:f8:a1:3a:91:e8:4f:d6:cc:9f:de: 52:d5:fe:57:77:1a:85:5f:e4:c4:7f:41:72:4e:f5: e4:a4:bf:de:0f:e5:ed:64:04:fa:c9:cc:25:77:3a: d9:45:57:4a:15:80:d7:33:8f:f5:46:29:6f:bd:94: 8d:48:70:19:de:bc:e7:57:d5:e4:d2:12:91:cc:73: 8a:e1:57:96:84:77:95:c1:06:4a:c9:8a:c8:ab:71: ee:97:1d:10:4a:70:67:01:83:13:fc:04:9c:9b:ed: ea:35:a2:c8:d8:59:c4:e8:69:f9:0d:8f:65:ea:65: b3:a6:5e:e6:05:46:d8:0e:0e:bf:16:7e:7e:82:9a: 21:83:b7:7d:de:80:bd:5f:24:e7:0b:52:30:ff:7e: 3e:33:b2:57:02:3c:98:15:fd:5b:15:9b:65:6a:dc: 92:04:c2:f1:7a:06:e6:ba:30:13:f3:0a:66:5f:0d: 22:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:50:BA:4E:BF:75:CB:1B:DD:22:16:01:C3:45:EA:21:B3:2B:DB:C6 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d0:f4:a4:2f:3b:60:4b:be:42:f7:58:54:af:c1:0d:b1:f9: df:84:f8:63:26:dd:17:e2:a9:e7:18:af:46:ea:c5:ea:12:49: 49:97:80:e3:6f:59:13:1e:1f:8d:53:fe:6a:2d:b5:bb:30:eb: 46:37:2c:a9:f9:b5:9d:b3:55:23:b8:c8:e5:07:9b:03:f0:d4: c0:31:d2:4a:8b:d2:7f:1f:31:f8:2c:2d:f8:b0:0f:4f:dc:c8: cf:fc:40:bf:d2:e5:49:75:18:99:20:7f:18:26:0e:1b:66:06: 93:8c:ba:a0:c7:e5:35:59:bf:72:a1:17:44:89:a9:57:5d:74: e7:63:1c:60:15:ba:7e:1a:83:e9:ea:df:71:d9:ea:33:f2:0b: c6:fd:5f:8e:b6:d7:fe:60:0e:64:99:e2:0f:3d:6e:bd:1d:24: 15:1e:1e:a2:15:72:07:2a:9d:53:1e:48:52:17:18:af:c0:dc: 03:5a:07:29:ed:8d:36:b4:5b:c0:33:d5:a6:00:af:b1:05:15: 5c:79:dd:d2:4c:83:f0:a2:49:ea:af:ec:91:db:b0:67:ea:cb: 33:cf:40:77:10:4a:81:3a:df:3e:ef:51:e6:73:77:e9:d0:fd: 2c:01:92:41:e9:d0:49:b9:55:b5:3d:e4:02:df:43:d9:4e:01: 4c:a0:92:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwOTIzMDE1ODEyWhcNMjYwOTMwMDE1ODEyWjAYMRYwFAYD VQQDEw02YWIzMzIzNS0xMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vrsE7uhGhvd26AXsodtIHL8izkRhqqe4oR9ATI4GKxsQtBO5/fJ+TmjJUpa F6vmuIPPK+llcUgrTrdEV8i2QVVex0DA0dq7WgtlP9UWjvihOpHoT9bMn95S1f5X dxqFX+TEf0FyTvXkpL/eD+XtZAT6ycwldzrZRVdKFYDXM4/1RilvvZSNSHAZ3rzn V9Xk0hKRzHOK4VeWhHeVwQZKyYrIq3Hulx0QSnBnAYMT/AScm+3qNaLI2FnE6Gn5 DY9l6mWzpl7mBUbYDg6/Fn5+gpohg7d93oC9XyTnC1Iw/34+M7JXAjyYFf1bFZtl atySBMLxegbmujAT8wpmXw0iYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBQuk6/ dcsb3SIWAcNF6iGzK9vGMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApdD0pC87YEu+QvdYVK/BDbH534T4YybdF+Kp5xivRurF6hJJSZeA429ZEx4f jVP+ai21uzDrRjcsqfm1nbNVI7jI5QebA/DUwDHSSovSfx8x+Cwt+LAPT9zIz/xA v9LlSXUYmSB/GCYOG2YGk4y6oMflNVm/cqEXRImpV11052McYBW6fhqD6erfcdnq M/ILxv1fjrbX/mAOZJniDz1uvR0kFR4eohVyByqdUx5IUhcYr8DcA1oHKe2NNrRb wDPVpgCvsQUVXHnd0kyD8KJJ6q/skduwZ+rLM89AdxBKgTrfPu9R5nN36dD9LAGS QenQSblVtT3kAt9D2U4BTKCSVw== -----END CERTIFICATE-----Generated at Thu Sep 24 02:43:48 2026 by rpki-client