$ rpki-client -vvvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: FykcFz7pMi/nolofvI/EzFmH+UrF1ka+/ANF5IFv35M= Subject key identifier: 84:BF:64:40:87:87:33:C6:CD:2A:52:C6:C2:94:4C:BF:BD:CC:42:BD Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 02D8 Signing time: Mon 21 Sep 2026 01:15:07 +0000 Manifest this update: Mon 21 Sep 2026 01:15:06 +0000 Manifest next update: Mon 28 Sep 2026 01:15:06 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: AcDw+ZghEFeyCg9M+c9j4u84/FjMiH9XG6EHGx3wneE=) 2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=) 3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Sep 21 01:15:06 2026 GMT Not After : Sep 28 01:15:06 2026 GMT Subject: CN=6ab0851a-a68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:85:5d:9b:95:f8:cc:88:af:95:c6:80:4f: f6:7f:83:49:7b:b5:47:a3:97:cb:e9:75:09:23:c5: ac:99:a3:0b:4e:73:d3:22:ae:77:d0:19:dd:9c:a2: f3:06:50:50:a4:d0:d7:e8:92:1a:85:3f:22:fe:76: 7d:06:c4:26:b7:7a:28:f2:69:de:21:eb:08:95:85: 1e:85:a3:de:0d:63:fa:db:db:fc:58:ce:c6:64:c0: 60:69:2c:a8:60:30:b3:42:68:df:14:be:e7:60:33: 43:77:b7:2f:62:a8:3d:97:b4:e5:6e:70:e9:10:6a: 79:e9:cf:17:33:f4:02:6f:1f:9c:61:4b:32:b7:04: d4:a8:e7:17:29:d6:55:be:2d:6e:4c:db:e3:12:f0: 03:9b:38:32:57:94:2b:b7:af:1b:ed:57:b8:2a:d4: c3:cd:43:68:17:1f:d9:71:f9:4c:14:b2:02:cc:e4: 9f:2c:79:04:79:5b:c0:1d:9f:ac:27:a5:60:62:75: af:18:a6:5d:03:fa:a3:35:63:c4:7c:6a:6d:9b:81: a5:44:56:b6:be:d8:18:29:96:53:91:d3:d2:6e:1d: 0e:24:e3:28:d7:68:11:cb:c9:95:2e:32:c1:fc:ae: dd:ba:9d:a6:62:92:71:a1:42:3f:8b:b2:a7:76:50: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:64:40:87:87:33:C6:CD:2A:52:C6:C2:94:4C:BF:BD:CC:42:BD X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:81:f8:7f:4a:ac:15:d3:68:a3:89:1f:14:bc:4f:36:d8:f2: 6a:49:b6:39:fa:d6:72:d9:3a:f2:18:68:f4:ed:05:ef:2e:47: 62:67:69:19:fe:83:2f:78:b2:37:5f:55:ab:10:13:b2:f2:f8: 68:1b:19:bf:a5:2d:c4:f8:27:6b:f5:50:52:76:09:f0:93:66: 33:79:28:5d:e5:89:48:60:44:4e:81:be:1c:b9:77:ad:90:10: 98:6a:95:86:8a:13:a6:97:c1:9f:49:fc:08:53:c5:d1:90:ed: 1e:3a:5a:52:1f:a6:f2:1d:08:fa:18:e0:1b:b2:74:57:15:cf: 0a:c2:21:d7:7e:4f:7a:28:b0:d4:c7:a1:1a:7a:bf:83:fd:0e: 32:72:94:3e:59:e2:b2:4f:91:ae:7b:2e:47:5b:9b:b7:66:18: 22:f9:ba:38:a6:f5:8b:d6:fa:67:55:16:54:73:84:3d:9a:19: d1:bb:53:10:9c:80:9f:22:f9:c2:4f:1f:90:70:df:13:c5:08: 1c:c4:4b:26:5a:40:d0:4c:6f:3c:9a:d5:03:91:b9:c4:81:a3: c2:81:dd:03:06:e8:07:c3:fa:8e:53:92:8e:48:af:dc:9a:97: 50:81:28:b3:db:7e:71:0e:b8:99:8e:9c:d7:c5:38:00:ae:58: 14:58:30:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjYwOTIxMDExNTA2WhcNMjYwOTI4MDExNTA2WjAYMRYwFAYD VQQDEw02YWIwODUxYS1hNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro+FXZuV+MyIr5XGgE/2f4NJe7VHo5fL6XUJI8WsmaMLTnPTIq530BndnKLz BlBQpNDX6JIahT8i/nZ9BsQmt3oo8mneIesIlYUehaPeDWP629v8WM7GZMBgaSyo YDCzQmjfFL7nYDNDd7cvYqg9l7TlbnDpEGp56c8XM/QCbx+cYUsytwTUqOcXKdZV vi1uTNvjEvADmzgyV5Qrt68b7Ve4KtTDzUNoFx/ZcflMFLICzOSfLHkEeVvAHZ+s J6VgYnWvGKZdA/qjNWPEfGptm4GlRFa2vtgYKZZTkdPSbh0OJOMo12gRy8mVLjLB /K7dup2mYpJxoUI/i7KndlAlbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIS/ZECH hzPGzSpSxsKUTL+9zEK9MB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIIH4f0qsFdNoo4kfFLxPNtjyakm2OfrWctk68hho9O0F7y5HYmdpGf6DL3iy N19VqxATsvL4aBsZv6UtxPgna/VQUnYJ8JNmM3koXeWJSGBEToG+HLl3rZAQmGqV hooTppfBn0n8CFPF0ZDtHjpaUh+m8h0I+hjgG7J0VxXPCsIh135Peiiw1MehGnq/ g/0OMnKUPlnisk+RrnsuR1ubt2YYIvm6OKb1i9b6Z1UWVHOEPZoZ0btTEJyAnyL5 wk8fkHDfE8UIHMRLJlpA0ExvPJrVA5G5xIGjwoHdAwboB8P6jlOSjkiv3JqXUIEo s9t+cQ64mY6c18U4AK5YFFgwCw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:53:31 2026 by rpki-client