$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: mge0QTZgNgaGZmxLlXsoiXWYvPXmj3NYgpImwBU8VOg= Subject key identifier: DC:88:10:9F:A3:87:AD:B1:CC:4C:6A:C0:68:C1:45:A8:46:0E:6B:75 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0946 Signing time: Sun 20 Sep 2026 20:05:20 +0000 Manifest this update: Sun 20 Sep 2026 20:05:20 +0000 Manifest next update: Sun 27 Sep 2026 20:05:20 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: tYAiTpaiGx46mk7v+rzYS/P9mKn6ZtQa+yw+H7W61sU=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: FHR5X9UUHIe+lbh333dtqmnv9RGCApUiICBVfwjLgCs=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: T90KWb99cEbWcYjxKrcTOKfx/Qq8bgV36JoCAoZr1DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Sep 20 20:05:20 2026 GMT Not After : Sep 27 20:05:20 2026 GMT Subject: CN=6ab03c80-406b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:e7:d7:ee:5a:99:0b:7c:e3:a1:62:29:ae: 97:aa:cd:bb:5d:9d:c1:3f:83:4b:fb:f7:5e:2b:27: 38:d5:f6:ad:c1:0a:0e:f5:a5:d3:b9:3d:08:5c:d3: 88:b6:4c:2e:73:b2:cb:48:e7:1f:86:d6:af:fe:38: 23:f9:33:e0:e1:3e:2f:3d:bd:08:9d:fd:64:91:ca: 3c:3e:4e:d9:a0:19:4e:8c:20:10:c8:c4:f5:a1:19: 88:0e:cd:24:a2:47:4a:71:d8:a1:8b:e9:43:ab:ba: 69:7a:24:e8:01:83:18:b0:6a:36:0c:2e:fe:30:09: 50:57:89:52:24:2f:bb:fa:d7:44:2c:fd:b4:58:2b: 43:f4:4b:71:3d:16:1a:32:a3:ec:a6:ca:9d:38:0f: c1:cf:f9:08:cb:74:cf:f8:8b:c6:5a:85:35:23:e0: c1:32:40:bc:8c:45:fb:70:7b:23:70:1b:11:5b:b4: 5c:d1:a0:50:26:bb:21:0b:c9:56:83:11:c8:3f:bf: 24:35:9f:c9:6f:d3:ff:27:17:01:6d:e8:2e:d5:95: 72:5a:02:74:cb:0b:0f:89:d7:df:88:f9:e9:b2:ef: 23:8b:c4:bc:0a:98:2c:a0:a5:2a:6f:bb:75:ea:11: 65:c4:44:d1:5c:53:0b:f4:f4:a2:fe:ad:1b:eb:0f: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:88:10:9F:A3:87:AD:B1:CC:4C:6A:C0:68:C1:45:A8:46:0E:6B:75 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e1:33:b4:2c:48:47:5e:ce:5a:f9:26:c5:47:41:12:d7:aa: 36:4c:c5:45:6e:6d:d4:68:16:41:56:11:c2:ee:a2:ae:f3:ed: 2a:96:a4:05:d6:ae:2c:6c:ab:6e:56:ab:c3:0d:e0:1a:85:3d: 05:b3:a8:e6:3b:3c:06:5a:7f:93:70:0c:17:ef:63:16:ea:e2: e5:63:dd:71:99:4f:2c:ff:be:6b:c4:93:73:75:a5:60:49:31: 78:3f:a8:a7:70:b4:ce:b2:40:b0:c8:77:c3:e3:2a:84:a8:29: 6e:9b:2c:96:5c:80:c2:e7:d4:4d:b3:39:a5:aa:7b:ad:52:c8: c1:16:c7:60:98:d4:9d:5a:7e:42:91:fe:97:3e:ce:04:b3:b2: 90:57:f5:94:8a:9d:00:f6:d1:b9:19:6d:d6:82:b3:18:a1:10: 97:1a:c6:8f:6b:c4:55:0b:08:40:02:6c:ed:83:cc:4f:3f:7a: 5e:44:ba:1d:a0:ed:88:5e:b4:4c:84:99:e0:e3:a3:4f:7d:77: af:2f:12:48:06:6d:59:2a:15:bf:ad:34:ce:10:bd:1e:df:7f: 65:33:1f:9d:24:68:6b:99:50:d9:05:c4:17:d5:7e:39:ee:35: d7:fc:de:38:0e:b9:b3:9d:6d:45:88:ea:f8:1c:1e:2e:59:ac: d5:86:85:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjYwOTIwMjAwNTIwWhcNMjYwOTI3MjAwNTIwWjAYMRYwFAYD VQQDEw02YWIwM2M4MC00MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03bn1+5amQt846FiKa6Xqs27XZ3BP4NL+/deKyc41fatwQoO9aXTuT0IXNOI tkwuc7LLSOcfhtav/jgj+TPg4T4vPb0Inf1kkco8Pk7ZoBlOjCAQyMT1oRmIDs0k okdKcdihi+lDq7ppeiToAYMYsGo2DC7+MAlQV4lSJC+7+tdELP20WCtD9EtxPRYa MqPspsqdOA/Bz/kIy3TP+IvGWoU1I+DBMkC8jEX7cHsjcBsRW7Rc0aBQJrshC8lW gxHIP78kNZ/Jb9P/JxcBbegu1ZVyWgJ0ywsPidffiPnpsu8ji8S8CpgsoKUqb7t1 6hFlxETRXFML9PSi/q0b6w+0LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyIEJ+j h62xzExqwGjBRahGDmt1MB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIeEztCxIR17OWvkmxUdBEteqNkzFRW5t1GgWQVYRwu6irvPtKpakBdauLGyr blarww3gGoU9BbOo5js8Blp/k3AMF+9jFuri5WPdcZlPLP++a8STc3WlYEkxeD+o p3C0zrJAsMh3w+MqhKgpbpssllyAwufUTbM5pap7rVLIwRbHYJjUnVp+QpH+lz7O BLOykFf1lIqdAPbRuRlt1oKzGKEQlxrGj2vEVQsIQAJs7YPMTz96XkS6HaDtiF60 TISZ4OOjT313ry8SSAZtWSoVv600zhC9Ht9/ZTMfnSRoa5lQ2QXEF9V+Oe411/ze OA65s51tRYjq+BweLlms1YaFow== -----END CERTIFICATE-----Generated at Tue Sep 22 14:43:17 2026 by rpki-client