$ rpki-client -vvvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json) Hash identifier: QnzwF1c1gXP6o2BopMLc+lUfWcfSNlrfTJwN8JPxW94= Subject key identifier: 83:6C:AC:86:12:B9:21:43:77:1A:7E:E5:3E:6C:27:68:65:73:12:24 Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft Manifest number: 042A Signing time: Mon 21 Sep 2026 00:06:32 +0000 Manifest this update: Mon 21 Sep 2026 00:06:31 +0000 Manifest next update: Mon 28 Sep 2026 00:06:31 +0000 Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: jkvw4uAzes44je6SFKnm/3VsUy81Yb7y16eHJWMPR5U=) 2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: CldvSs/M5ZiWN5Du12GJRc0WhEtY3OpvQfzL4bZReRM=) 3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: lEva1qsHLGxJxjBIgGtQFKUdKFRPRCiOTXaXyoGN6Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: Sep 21 00:06:31 2026 GMT Not After : Sep 28 00:06:31 2026 GMT Subject: CN=6ab07508-5ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:63:72:42:d3:d6:4d:29:4c:38:95:dd:bc: 55:0b:f0:8f:fa:36:98:31:90:7e:69:06:b1:c9:58: 42:f9:58:e7:15:97:e7:88:d5:5b:2e:47:de:39:da: e2:a1:35:b0:ce:59:0e:2c:45:76:db:c0:9b:83:40: fa:2a:92:08:6f:cf:20:ad:a8:90:03:78:33:5e:14: b6:3b:a4:9b:71:0e:4b:8c:79:96:2f:e2:28:12:d2: 93:7e:5c:ea:fe:b1:7d:7c:5c:3e:82:13:13:73:30: 2c:d4:20:ab:33:27:12:e2:0b:24:e4:07:6c:8f:fd: 14:b8:fb:2c:56:9b:8e:1b:18:86:e7:1c:2f:4d:c4: a8:13:5b:f7:c3:f9:25:37:d7:f9:48:dc:cd:69:17: be:77:c0:fa:7a:0d:85:29:7e:e6:68:c5:b3:2c:5d: 24:a0:5c:cd:c8:27:96:58:85:94:20:5e:9f:87:a8: 67:96:4c:06:fe:b9:9e:a0:15:92:7c:e6:27:8e:ba: e8:26:7d:84:d3:09:cb:a2:a0:03:6f:63:47:c1:76: f7:73:3f:d3:21:7c:2f:90:27:2f:18:f9:a5:b1:b8: 6c:35:ef:a6:ee:16:d5:ee:d8:33:68:47:9c:d5:ae: 91:11:89:73:e2:f1:2a:01:e9:ed:35:62:40:56:dd: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6C:AC:86:12:B9:21:43:77:1A:7E:E5:3E:6C:27:68:65:73:12:24 X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:21:df:82:a2:64:08:16:27:db:71:e2:b5:79:e4:d5:10:af: 07:b6:a1:e1:2b:f5:07:ea:3e:dc:7c:47:77:42:cc:57:b3:4e: df:03:dc:42:83:09:a4:df:0a:1d:50:2d:53:0e:96:a1:68:0d: 90:de:ac:19:93:f4:14:2c:1c:71:1f:a1:5a:3d:e4:69:16:e1: fa:8e:d9:fc:d2:9f:74:d1:08:d5:c8:92:f1:c6:0d:63:be:92: 80:b9:fc:ed:ff:ad:b9:d9:64:20:6d:d8:e5:bb:82:be:79:81: 96:68:56:1a:11:fa:ed:16:d6:ac:9a:f7:e5:58:3d:f2:24:0a: bd:12:41:0d:11:44:b2:4d:b1:ca:e9:e1:0e:d7:96:a0:6f:70: d3:3b:2e:73:a4:c6:d5:e7:67:f0:9f:0e:c5:1d:fa:04:d8:71: 4f:d5:d4:c8:e5:03:a0:88:eb:5d:16:39:8c:23:f8:f7:c5:72: 66:d0:54:63:ea:90:94:41:c2:ca:49:ea:80:b4:98:60:98:78: 7c:9c:5c:70:8c:29:ca:7f:0b:62:7b:61:cb:50:4f:0d:8d:dc: 42:39:d3:8e:6a:c3:cc:93:3d:6f:73:8f:13:d3:86:7f:bd:e3: 5d:0a:bb:a4:68:a2:72:3d:31:f1:f4:ca:d8:2f:a0:86:33:a0: 32:58:53:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjYwOTIxMDAwNjMxWhcNMjYwOTI4MDAwNjMxWjAYMRYwFAYD VQQDEw02YWIwNzUwOC01ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn31jckLT1k0pTDiV3bxVC/CP+jaYMZB+aQaxyVhC+VjnFZfniNVbLkfeOdri oTWwzlkOLEV228Cbg0D6KpIIb88graiQA3gzXhS2O6SbcQ5LjHmWL+IoEtKTflzq /rF9fFw+ghMTczAs1CCrMycS4gsk5Adsj/0UuPssVpuOGxiG5xwvTcSoE1v3w/kl N9f5SNzNaRe+d8D6eg2FKX7maMWzLF0koFzNyCeWWIWUIF6fh6hnlkwG/rmeoBWS fOYnjrroJn2E0wnLoqADb2NHwXb3cz/TIXwvkCcvGPmlsbhsNe+m7hbV7tgzaEec 1a6REYlz4vEqAentNWJAVt1f/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINsrIYS uSFDdxp+5T5sJ2hlcxIkMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDJCOS8zQjcyRUU5MEM2MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBo czNCRlN3RG10Wk92S0lZdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAECHfgqJkCBYn23HitXnk1RCvB7ah4Sv1B+o+3HxHd0LMV7NO3wPcQoMJpN8K HVAtUw6WoWgNkN6sGZP0FCwccR+hWj3kaRbh+o7Z/NKfdNEI1ciS8cYNY76SgLn8 7f+tudlkIG3Y5buCvnmBlmhWGhH67RbWrJr35Vg98iQKvRJBDRFEsk2xyunhDteW oG9w0zsuc6TG1edn8J8OxR36BNhxT9XUyOUDoIjrXRY5jCP498VyZtBUY+qQlEHC yknqgLSYYJh4fJxccIwpyn8LYnthy1BPDY3cQjnTjmrDzJM9b3OPE9OGf73jXQq7 pGiicj0x8fTK2C+ghjOgMlhT5Q== -----END CERTIFICATE-----Generated at Tue Sep 22 20:17:49 2026 by rpki-client