$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: KiTWedMyBWompWT+Y4sYlfOkvjKehZh86dwQKuZ+A+k= Subject key identifier: 5B:38:D4:4D:46:4C:DE:01:FD:00:5A:DE:5A:7F:06:86:72:A3:CE:50 Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 09E0 Signing time: Sun 20 Sep 2026 19:47:31 +0000 Manifest this update: Sun 20 Sep 2026 19:47:30 +0000 Manifest next update: Sun 27 Sep 2026 19:47:30 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: 8+H7jilaWmWfUVzo10RsH4MtCPM/InCCEr/gbh3g4U0=) 2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: JxvxI6LJ6TE3o05TEr7Y6rv7xRaFRfn8yJoeJorzJAM=) 3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Sep 20 19:47:30 2026 GMT Not After : Sep 27 19:47:30 2026 GMT Subject: CN=6ab03852-aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:38:d2:7f:21:8b:44:5d:71:9a:50:6e:55: eb:11:aa:68:58:27:3f:21:8b:2a:f7:a3:5e:84:57: 12:f8:96:a6:a2:d4:ea:07:35:90:6f:82:9d:a6:89: 49:2d:e6:6a:c0:66:ff:72:32:05:03:68:79:fe:5f: ff:5a:ce:01:b5:d0:ab:c1:e1:89:b9:90:1a:a9:62: a8:5b:24:8b:ed:cd:d4:de:3d:6e:b7:cf:7b:92:60: 00:aa:3e:b5:6d:c9:ab:35:ac:b0:46:71:f2:e5:4a: 06:c6:89:e3:5f:41:2f:69:c4:4d:9d:0a:28:40:37: 0c:0d:fc:b3:4a:48:24:ac:3b:6b:4c:31:72:74:e8: aa:03:bb:a6:2f:d2:dc:70:68:c4:e3:b4:df:d2:57: ec:d6:1a:a5:42:a0:18:b8:72:00:ad:08:19:f6:48: be:8f:f1:e0:18:95:38:2b:f0:0c:35:a1:fe:05:f4: 3a:85:38:3f:1e:23:b4:ca:d7:10:6e:bc:cb:70:dc: 93:a4:44:34:04:7e:7a:4e:6a:2a:d4:ce:a5:3e:2c: d7:94:5d:61:4f:b0:50:8e:39:23:85:f0:d5:08:58: ec:16:c7:50:42:b1:5a:05:fa:43:f6:21:23:9c:56: e2:18:5f:e7:26:a7:4b:b1:4f:c8:9b:7b:c5:64:5f: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:D4:4D:46:4C:DE:01:FD:00:5A:DE:5A:7F:06:86:72:A3:CE:50 X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:83:f6:fc:17:c1:f4:e0:fb:9f:42:cd:ba:85:f7:de:85:68: 70:1b:90:b3:e7:ee:55:91:55:6b:c7:01:2e:db:b8:54:aa:81: 44:f8:5d:71:3e:8b:dc:5f:a0:f3:f9:9b:06:d5:ae:57:c4:03: a7:3a:b8:c4:78:67:56:78:f7:f0:71:78:b0:71:10:74:7b:99: fe:e4:6b:fc:25:99:0e:ac:d1:4c:96:a4:ba:02:f7:2a:a5:b4: dc:ca:2e:1a:ec:50:c0:ae:48:56:ce:87:de:3b:c8:02:d1:36: 80:ca:7e:c5:9b:7d:73:2a:a7:38:da:34:92:b2:b2:73:ca:4b: 40:d3:5b:60:1b:71:d7:85:3d:60:8c:26:29:4e:95:c6:e6:f0: 48:0c:e8:65:c7:8d:c8:a2:fc:c8:47:cd:21:6c:f2:bb:2d:1b: 38:c5:4f:78:70:e9:3c:0a:f0:27:3d:a3:86:9a:cd:0c:78:98: 0c:46:c6:a7:cf:14:4e:3b:4b:b9:3c:83:89:f2:ef:42:f1:d7: b2:a0:d1:e9:9b:24:54:05:d7:42:1a:04:86:36:00:d8:58:50: 25:6a:45:7e:e0:7e:ad:52:be:e7:72:a1:18:b6:a5:4a:44:68: c6:df:ba:77:9e:9a:4d:76:6f:c5:91:af:d4:7f:e7:4e:29:dd: 5a:9b:8a:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjYwOTIwMTk0NzMwWhcNMjYwOTI3MTk0NzMwWjAYMRYwFAYD VQQDEw02YWIwMzg1Mi1hYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFw40n8hi0RdcZpQblXrEapoWCc/IYsq96NehFcS+JamotTqBzWQb4KdpolJ LeZqwGb/cjIFA2h5/l//Ws4BtdCrweGJuZAaqWKoWySL7c3U3j1ut897kmAAqj61 bcmrNaywRnHy5UoGxonjX0EvacRNnQooQDcMDfyzSkgkrDtrTDFydOiqA7umL9Lc cGjE47Tf0lfs1hqlQqAYuHIArQgZ9ki+j/HgGJU4K/AMNaH+BfQ6hTg/HiO0ytcQ brzLcNyTpEQ0BH56Tmoq1M6lPizXlF1hT7BQjjkjhfDVCFjsFsdQQrFaBfpD9iEj nFbiGF/nJqdLsU/Im3vFZF/U2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFs41E1G TN4B/QBa3lp/BoZyo85QMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFIP2/BfB9OD7n0LNuoX33oVocBuQs+fuVZFVa8cBLtu4VKqBRPhdcT6L3F+g 8/mbBtWuV8QDpzq4xHhnVnj38HF4sHEQdHuZ/uRr/CWZDqzRTJakugL3KqW03Mou GuxQwK5IVs6H3jvIAtE2gMp+xZt9cyqnONo0krKyc8pLQNNbYBtx14U9YIwmKU6V xubwSAzoZceNyKL8yEfNIWzyuy0bOMVPeHDpPArwJz2jhprNDHiYDEbGp88UTjtL uTyDifLvQvHXsqDR6ZskVAXXQhoEhjYA2FhQJWpFfuB+rVK+53KhGLalSkRoxt+6 d56aTXZvxZGv1H/nTindWpuKgg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:16:59 2026 by rpki-client