$ rpki-client -vvvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: eB6VAwdWM9tq7AmRVTf+T5iQ5WzcY/EAUuEusfEDIRk= Subject key identifier: 57:BC:7F:1B:5F:03:D9:12:05:8F:A2:F2:D7:52:C7:02:6B:52:E0:14 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 01DE Signing time: Mon 21 Sep 2026 03:46:03 +0000 Manifest this update: Mon 21 Sep 2026 03:46:02 +0000 Manifest next update: Mon 28 Sep 2026 03:46:02 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: ccHe+9SrjBD0FXzGpw9Y1nAfmFP00hBlduaE6X8N8Fg=) 2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=) 3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=) 4: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Sep 21 03:46:02 2026 GMT Not After : Sep 28 03:46:02 2026 GMT Subject: CN=6ab0a87b-ea9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:38:5b:99:d7:f8:d1:cd:c0:79:6c:0c:db: 11:fa:f5:84:0f:84:8c:28:de:24:b9:1d:90:1c:d8: 7b:47:b3:bd:80:4d:d6:ef:bd:dc:02:b3:a0:40:f3: 0f:cd:64:66:3b:57:bd:9e:96:cd:43:d4:65:ef:3c: 75:53:26:0c:cc:3e:99:ee:e9:2e:f2:fd:b5:fa:c4: 9c:8e:e3:39:20:47:34:6f:71:44:b0:50:2b:30:28: 33:13:8c:0e:3d:a3:41:ec:c0:6d:73:6e:b7:26:02: 91:7b:35:2e:c2:84:75:2a:43:2e:54:4f:ac:13:9b: cd:e0:f0:d6:a7:63:f9:76:64:4f:f6:55:2d:5a:28: 69:1d:9c:4a:a0:f1:98:79:2e:4f:fd:d3:8b:db:f9: 15:c7:53:37:63:7d:a2:33:73:89:7d:d7:b0:b2:70: c2:ef:fe:77:eb:e2:ab:ee:2b:94:af:d6:45:ca:b2: 15:6e:50:a5:10:a1:80:c9:c7:1a:18:8d:8b:7f:88: c7:48:4f:1e:f8:81:09:f1:8c:dd:26:b9:52:05:f3: c4:2c:08:dc:ea:e7:76:7e:01:3b:61:db:07:f9:85: 10:dd:3c:d1:5a:e8:06:4d:6b:02:39:ea:66:b7:c9: 19:c2:86:a7:8b:be:72:21:0d:a4:42:84:f5:f9:ca: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:7F:1B:5F:03:D9:12:05:8F:A2:F2:D7:52:C7:02:6B:52:E0:14 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:94:db:c1:6e:26:b4:7a:a4:64:5b:5b:50:35:3d:95:5b: ec:f6:e4:d9:fa:fd:22:14:ac:81:a1:8e:09:0d:36:50:aa:b6: fb:56:26:5c:11:a3:1c:16:7a:05:0a:6c:21:8b:55:6f:69:8e: 9a:59:7c:8b:43:0d:38:54:dd:9e:7d:34:cf:c6:3f:f0:13:80: 52:a7:05:c4:81:22:30:a5:7f:d9:25:6e:8a:2e:c9:f2:bb:7e: b5:f5:70:53:9c:e5:d6:18:79:9e:6f:18:09:d5:49:4a:ed:56: 74:ac:30:f9:87:60:ef:db:b7:63:28:45:32:aa:b1:dd:10:b4: 8b:c5:47:2c:77:f3:5b:d3:62:c8:62:c9:da:c7:79:c0:34:a9: 35:30:3f:88:35:a4:c6:b2:a4:fa:95:d9:8b:ac:02:28:52:6f: 2e:75:ea:0a:1a:a5:1e:13:c5:30:a3:a9:f7:10:b0:fd:9d:00: e9:44:48:94:9d:68:ea:5d:29:0a:a5:30:e1:d5:59:58:96:93: f5:8c:2a:c5:80:d1:d0:cd:4f:d6:5a:cd:0f:ec:82:ad:29:b8: 3a:83:99:3c:c1:69:85:5c:fd:fb:0e:d8:07:bf:e1:9e:07:6a: 41:6f:cd:09:46:50:1e:b7:d3:73:f9:66:f8:3f:c1:be:95:e1: 05:10:41:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwOTIxMDM0NjAyWhcNMjYwOTI4MDM0NjAyWjAYMRYwFAYD VQQDEw02YWIwYTg3Yi1lYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAme84W5nX+NHNwHlsDNsR+vWED4SMKN4kuR2QHNh7R7O9gE3W773cArOgQPMP zWRmO1e9npbNQ9Rl7zx1UyYMzD6Z7uku8v21+sScjuM5IEc0b3FEsFArMCgzE4wO PaNB7MBtc263JgKRezUuwoR1KkMuVE+sE5vN4PDWp2P5dmRP9lUtWihpHZxKoPGY eS5P/dOL2/kVx1M3Y32iM3OJfdewsnDC7/536+Kr7iuUr9ZFyrIVblClEKGAycca GI2Lf4jHSE8e+IEJ8YzdJrlSBfPELAjc6ud2fgE7YdsH+YUQ3TzRWugGTWsCOepm t8kZwoani75yIQ2kQoT1+crbvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFe8fxtf A9kSBY+i8tdSxwJrUuAUMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFG6U28FuJrR6pGRbW1A1PZVb7Pbk2fr9IhSsgaGOCQ02UKq2+1YmXBGjHBZ6 BQpsIYtVb2mOmll8i0MNOFTdnn00z8Y/8BOAUqcFxIEiMKV/2SVuii7J8rt+tfVw U5zl1hh5nm8YCdVJSu1WdKww+Ydg79u3YyhFMqqx3RC0i8VHLHfzW9NiyGLJ2sd5 wDSpNTA/iDWkxrKk+pXZi6wCKFJvLnXqChqlHhPFMKOp9xCw/Z0A6URIlJ1o6l0p CqUw4dVZWJaT9YwqxYDR0M1P1lrND+yCrSm4OoOZPMFphVz9+w7YB7/hngdqQW/N CUZQHrfTc/lm+D/BvpXhBRBBRg== -----END CERTIFICATE-----Generated at Tue Sep 22 07:53:02 2026 by rpki-client