$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: A80Xo05SimZYUaioO1ql2WZ9Vy/3h5p2hq3iUDZK5C0= Subject key identifier: E9:BE:66:65:23:2A:5A:D4:8D:56:B3:D2:99:79:DD:77:F8:C7:BB:67 Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 013F Signing time: Fri 25 Sep 2026 05:43:37 +0000 Manifest this update: Fri 25 Sep 2026 05:43:37 +0000 Manifest next update: Fri 02 Oct 2026 05:43:37 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: G70EmG+f0w+Pb4Bcqet8wUBM9KGHptWIUnDCh6+d2Oc=) 2: 965254F8278811F09217002CC4F9AE02.roa (hash: 0RhsOifNGasCmCxCAJFq65+7Iqu3gbPwoj7AcEDMVxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Sep 25 05:43:37 2026 GMT Not After : Oct 2 05:43:37 2026 GMT Subject: CN=6ab60a09-26d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:c8:93:fa:5a:33:e2:c0:1e:7e:1d:f5:c3: 34:b9:6c:05:c5:71:0f:14:26:d7:23:ec:e9:82:ef: a9:9f:50:fb:c7:83:b6:9e:a6:97:22:c1:44:4e:9c: f6:07:6f:9e:4d:e0:fa:7c:bf:80:51:cc:da:be:ca: 9c:d1:d9:da:ce:cc:d4:6d:25:8e:71:cb:d3:cb:fb: 16:f5:21:dc:1f:3b:20:3f:d9:de:3a:fe:d0:63:31: 87:d0:98:0e:d0:07:cc:72:3c:b8:6a:83:00:05:6e: 28:64:0c:af:8e:23:ee:97:f5:25:a7:09:3f:4e:d4: d5:93:d3:07:43:18:9c:a4:38:97:6e:a3:30:55:f8: 8d:4f:08:91:aa:37:f0:21:14:eb:26:d0:22:4e:5e: b1:df:18:85:d7:ae:0d:94:43:f6:86:27:6f:61:fc: fa:0c:97:c8:00:25:16:ff:37:89:ee:af:44:32:d7: b8:0f:12:09:e4:ca:b5:88:51:94:84:ea:9b:d0:64: 4f:4f:d3:e9:fc:f9:1e:f0:9f:20:bd:76:c9:62:7b: f9:f4:71:94:84:ae:9f:60:a5:4e:bd:9b:77:79:71: 97:61:a5:a3:0e:a5:ff:24:20:33:d7:19:64:44:02: 2b:fb:04:e1:44:6c:3c:ae:24:3c:8d:d3:4c:f1:52: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BE:66:65:23:2A:5A:D4:8D:56:B3:D2:99:79:DD:77:F8:C7:BB:67 X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:94:d1:24:02:77:16:f9:c5:c0:34:f1:f3:73:9b:cf:dc:da: b2:f7:89:20:d3:52:61:f4:97:ab:9e:1a:94:45:3c:5e:3f:1d: 14:24:69:12:8b:6e:aa:b6:38:4b:f1:e8:b7:41:50:62:4a:db: 04:68:34:05:22:16:86:c2:e7:db:8a:bf:94:e6:27:1a:78:15: fc:c0:bf:95:9f:db:07:ce:c5:a2:2c:c5:9e:eb:c1:d4:d6:1b: cb:76:04:6a:b4:ba:de:01:26:ad:d4:82:ad:ba:78:41:88:e9: 6c:2a:cc:df:7c:41:f2:df:04:f6:6b:48:a3:f0:21:23:b4:ac: f8:a1:a4:2c:8f:86:e2:34:b9:11:c2:f2:2e:c8:7a:50:b2:94: 77:ac:01:7c:f2:50:cb:0f:12:c5:53:c1:de:be:92:d0:8b:e6: cb:44:b3:ba:60:b5:f7:02:59:c1:56:69:35:ec:39:ec:0b:81: 98:ee:f5:05:e3:e3:26:9e:1c:00:2d:36:9b:70:bb:2e:c9:aa: dc:5e:4d:40:f5:d0:e4:9c:d6:8d:2e:ad:bb:c0:c1:42:75:67: 94:bb:45:93:96:f0:1d:fc:8a:d2:fb:62:ba:a0:4c:84:b7:8e: d6:92:96:39:1c:41:6e:41:23:7c:b1:3c:ff:e1:fd:e0:43:50: 63:40:43:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI2OEMxMTAvBgNVBAUTKEEyMjg4Rjg5NjRENjE2OUE4Nzk1RjJGNEVGMDVFMEQ1 RTZFMTNCMDkwHhcNMjYwOTI1MDU0MzM3WhcNMjYxMDAyMDU0MzM3WjAYMRYwFAYD VQQDEw02YWI2MGEwOS0yNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGXIk/paM+LAHn4d9cM0uWwFxXEPFCbXI+zpgu+pn1D7x4O2nqaXIsFETpz2 B2+eTeD6fL+AUczavsqc0dnazszUbSWOccvTy/sW9SHcHzsgP9neOv7QYzGH0JgO 0AfMcjy4aoMABW4oZAyvjiPul/Ulpwk/TtTVk9MHQxicpDiXbqMwVfiNTwiRqjfw IRTrJtAiTl6x3xiF164NlEP2hidvYfz6DJfIACUW/zeJ7q9EMte4DxIJ5Mq1iFGU hOqb0GRPT9Pp/Pke8J8gvXbJYnv59HGUhK6fYKVOvZt3eXGXYaWjDqX/JCAz1xlk RAIr+wThRGw8riQ8jdNM8VL8GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOm+ZmUj KlrUjVaz0pl53Xf4x7tnMB8GA1UdIwQYMBaAFKIoj4lk1haah5Xy9O8F4NXm4TsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjY4Qy8xN0QxMDNBOEVB QjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0ZwcUhsZkwwN3dYZzFlYmhP d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY4Qy8xN0QxMDNBOEVBQjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0Zw cUhsZkwwN3dYZzFlYmhPd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgJTRJAJ3FvnFwDTx83Obz9zasveJINNSYfSXq54alEU8Xj8dFCRpEotuqrY4 S/Hot0FQYkrbBGg0BSIWhsLn24q/lOYnGngV/MC/lZ/bB87FoizFnuvB1NYby3YE arS63gEmrdSCrbp4QYjpbCrM33xB8t8E9mtIo/AhI7Ss+KGkLI+G4jS5EcLyLsh6 ULKUd6wBfPJQyw8SxVPB3r6S0Ivmy0SzumC19wJZwVZpNew57AuBmO71BePjJp4c AC02m3C7Lsmq3F5NQPXQ5JzWjS6tu8DBQnVnlLtFk5bwHfyK0vtiuqBMhLeO1pKW ORxBbkEjfLE8/+H94ENQY0BDQw== -----END CERTIFICATE-----Generated at Sat Sep 26 15:59:50 2026 by rpki-client