$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft File: O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft (raw, json) Hash identifier: 7DiQC6SG6a2BJh5SYyAJy4Cyzs5j/cO+GDLhr4avR78= Subject key identifier: A6:AE:51:D9:87:93:28:E0:7A:C6:98:D4:A0:2A:23:03:89:87:C5:07 Authority key identifier: 3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 Certificate issuer: /CN=A91A3ED9/serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft Manifest number: 2A Signing time: Sat 19 Sep 2026 08:47:01 +0000 Manifest this update: Sat 19 Sep 2026 08:47:01 +0000 Manifest next update: Sat 26 Sep 2026 08:47:01 +0000 Files and hashes: 1: O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl (hash: tIg/ECNlDQzLldIotEaNAdbD+/ZznJYJ8KsKurSFpk4=) 2: BFA8061876AB11F1AAE01A3C6EA30FBC.roa (hash: 9EIg/lWcSvk9v2gRzJROOuHZdpxkm+Aa8Ro0+T1ph54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3ED9, serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Validity Not Before: Sep 19 08:47:01 2026 GMT Not After : Sep 26 08:47:01 2026 GMT Subject: CN=6aae4c05-51fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:b6:0f:de:5d:8d:67:8b:f8:b8:33:5b:c5: 47:38:21:16:4b:8b:69:c7:37:e5:b0:3d:dd:5b:2e: 9b:07:3c:a3:b1:ed:d3:1f:e3:74:bc:3c:dc:26:6c: a8:30:a6:a8:33:2f:e4:b5:67:7e:4a:2f:f9:d6:5b: 4f:94:6b:9b:e3:dc:86:14:9d:e5:35:09:4b:82:b5: 86:a2:91:e4:0a:85:48:ad:5d:27:6a:77:d8:fe:bc: 65:47:69:f2:ee:17:c2:85:6b:06:d3:b4:06:87:d6: a6:1c:a9:f4:49:e5:d1:88:d2:4b:cf:2e:ac:bf:96: cd:e3:be:1d:b9:32:a3:4b:fa:6a:63:8e:d0:46:2c: f4:93:06:18:0f:38:92:89:af:47:03:20:d3:06:fd: 8a:69:90:ba:c5:49:a1:01:44:6b:99:86:ba:42:01: dd:5f:0e:1b:e4:1a:d8:e8:60:99:10:8f:0a:e8:b0: 3a:71:0a:29:8e:06:33:41:65:6c:b1:2f:30:53:87: a1:81:25:5b:f2:dd:7d:bd:99:1f:5b:5c:c4:7f:13: a6:3d:a2:a8:52:5d:62:20:0d:4f:b8:ff:ae:61:5d: 90:16:cf:80:06:ca:15:42:48:5d:61:1b:ca:c2:6a: 76:fb:36:7f:8c:7f:6a:b1:b5:d8:5b:58:20:13:41: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AE:51:D9:87:93:28:E0:7A:C6:98:D4:A0:2A:23:03:89:87:C5:07 X509v3 Authority Key Identifier: keyid:3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ad:39:ea:b4:36:a2:ac:9d:ac:f2:73:cd:40:90:4c:4a:f0: 64:ea:1d:ff:1a:f2:84:f8:fd:9e:8e:8c:48:3a:56:fe:01:99: c0:fd:50:40:0f:c2:d2:5b:d1:99:98:53:ad:4b:4b:8e:d0:b6: 26:06:a3:32:bd:00:ba:c2:2c:a8:01:82:04:06:c1:fa:28:51: 57:f9:8b:e7:b1:b8:18:c7:b4:46:11:cd:ac:9c:d0:55:8b:9e: fc:fc:0a:44:8a:fa:01:02:36:5a:29:37:51:da:da:29:02:d1: 36:5f:e1:88:13:a4:ef:ab:d2:dc:29:34:a0:2a:8b:57:29:3b: 99:46:f9:ae:75:86:29:a7:cc:20:bf:fd:2f:91:c1:b3:23:f6: 64:c6:3d:ae:af:be:ee:f7:6f:06:88:c9:ca:63:4d:dc:98:c0: ba:58:5e:2c:85:5d:b6:af:6f:9a:fa:8d:bf:e6:f5:f6:61:59: 86:52:1a:cd:3f:04:bd:f0:e9:49:52:44:de:6f:5d:31:24:09: 4d:a5:15:71:10:87:20:68:2b:6d:83:7f:80:69:32:7d:42:6b: 8e:a4:70:2c:f0:3e:81:f2:1f:45:20:a7:72:88:07:84:43:69: 0e:dd:3d:69:11:1a:5d:ff:17:cb:b6:f8:79:25:ba:0c:1a:92: d6:ca:87:18 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0VEOTExMC8GA1UEBRMoM0I2M0UxRTRGMTFGMEY5Nzk1ODM2MTAxRUE2NkU2MkE1 OUZDNkVGODAeFw0yNjA5MTkwODQ3MDFaFw0yNjA5MjYwODQ3MDFaMBgxFjAUBgNV BAMTDTZhYWU0YzA1LTUxZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiT7YP3l2NZ4v4uDNbxUc4IRZLi2nHN+WwPd1bLpsHPKOx7dMf43S8PNwmbKgw pqgzL+S1Z35KL/nWW0+Ua5vj3IYUneU1CUuCtYaikeQKhUitXSdqd9j+vGVHafLu F8KFawbTtAaH1qYcqfRJ5dGI0kvPLqy/ls3jvh25MqNL+mpjjtBGLPSTBhgPOJKJ r0cDINMG/YppkLrFSaEBRGuZhrpCAd1fDhvkGtjoYJkQjwrosDpxCimOBjNBZWyx LzBTh6GBJVvy3X29mR9bXMR/E6Y9oqhSXWIgDU+4/65hXZAWz4AGyhVCSF1hG8rC anb7Nn+Mf2qxtdhbWCATQZ3bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpq5R2YeT KOB6xpjUoCojA4mHxQcwHwYDVR0jBBgwFoAUO2Ph5PEfD5eVg2EB6mbmKln8bvgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzRUQ5LzE5MjZDQTdDNzZB NjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVlVmcyRUI2bWJtS2xuOGJ2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzJQaDVQRWZENWVWZzJFQjZtYm1LbG44YnZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz RUQ5LzE5MjZDQTdDNzZBNjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVl VmcyRUI2bWJtS2xuOGJ2Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWrTnqtDairJ2s8nPNQJBMSvBk6h3/GvKE+P2ejoxIOlb+AZnA/VBAD8LSW9GZ mFOtS0uO0LYmBqMyvQC6wiyoAYIEBsH6KFFX+YvnsbgYx7RGEc2snNBVi578/ApE ivoBAjZaKTdR2topAtE2X+GIE6Tvq9LcKTSgKotXKTuZRvmudYYpp8wgv/0vkcGz I/Zkxj2ur77u928GiMnKY03cmMC6WF4shV22r2+a+o2/5vX2YVmGUhrNPwS98OlJ UkTeb10xJAlNpRVxEIcgaCttg3+AaTJ9QmuOpHAs8D6B8h9FIKdyiAeEQ2kO3T1p ERpd/xfLtvh5JboMGpLWyocY -----END CERTIFICATE-----Generated at Mon Sep 21 01:26:57 2026 by rpki-client