$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft File: OhbEBL_tNHJEowpa__ZuSZKqKCE.mft (raw, json) Hash identifier: o/RsjSFnv650QV0iKAfzqum4pH0As5Fv84sdxatdlqE= Subject key identifier: 17:E3:76:55:E2:80:E1:52:7D:14:80:32:E6:51:A4:D5:3C:81:2F:DB Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21 Certificate issuer: /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft Manifest number: 0546 Signing time: Sat 10 Oct 2026 23:32:02 +0000 Manifest this update: Sat 10 Oct 2026 23:32:02 +0000 Manifest next update: Sat 17 Oct 2026 23:32:02 +0000 Files and hashes: 1: OhbEBL_tNHJEowpa__ZuSZKqKCE.crl (hash: fLcHBKanQFZgcliDfrW10Rr7apVT6ZaD7Ptnu609s7w=) 2: 9D77DCA4599A11ECA574BF52C4F9AE02.roa (hash: +QpDQgaKDgA4jgwCETbDA10J+dE7YQ9N+DpzerwOFaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 23:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A65C4, serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821 Validity Not Before: Oct 10 23:32:02 2026 GMT Not After : Oct 17 23:32:02 2026 GMT Subject: CN=6acacaf2-3b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:97:4e:d5:38:b5:e8:4b:0e:00:dd:27:25: b2:bb:9e:7f:7b:e6:45:c4:52:5a:a2:26:a8:8d:3d: 42:e9:21:be:50:25:1d:93:ad:3b:39:11:b6:c1:d6: b7:68:72:99:b1:1e:6a:b4:98:e1:f3:1e:db:1d:a8: 27:8d:a1:c6:70:6a:43:c0:7b:6a:12:30:ae:7c:28: 3c:2a:07:1c:00:20:66:04:b5:29:28:7c:23:5c:36: 19:d1:5e:81:c5:ef:3e:60:a8:56:dc:39:40:21:2f: cf:a8:94:f8:ef:eb:fc:bd:39:3c:86:b6:4b:ce:8b: be:9b:62:8c:3e:da:a7:f3:f8:0b:31:f4:09:1e:68: 66:68:08:3e:cb:be:a4:4f:88:69:6b:64:d8:db:39: d4:6d:8f:fa:b5:82:5a:12:ea:a8:00:9e:bb:67:77: 94:e9:57:9f:e6:4d:5d:ee:68:35:b7:51:b0:4e:50: 22:5c:25:cd:d6:2f:a1:07:61:7b:bf:7b:e8:ea:61: 25:56:f1:a8:b2:a5:32:60:a2:0d:fd:61:8d:93:5d: 45:72:eb:41:a0:da:01:28:5e:48:cd:5d:4c:bf:b6: be:4a:0f:b8:54:1c:e9:14:91:b6:b6:ee:3a:ed:aa: 85:ee:b0:39:1a:e9:08:3c:0d:5e:ce:94:f6:7f:06: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:76:55:E2:80:E1:52:7D:14:80:32:E6:51:A4:D5:3C:81:2F:DB X509v3 Authority Key Identifier: keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c6:78:7c:20:47:ad:68:dd:07:0e:c2:ea:b9:a5:25:b3:63: fd:f6:1a:f8:ce:86:f9:37:03:0d:82:2a:72:9a:74:94:af:15: bc:37:92:95:ca:e2:83:df:c0:d6:68:2b:17:ee:89:b5:f6:d0: bf:c9:5e:aa:6d:0d:5a:18:40:3b:ac:37:b2:4a:08:97:20:91: b4:bf:1a:37:5f:2d:6b:5d:ed:d1:26:a6:0e:dc:55:2f:97:5f: b2:59:c6:1a:df:31:66:47:14:0d:85:9e:87:59:e5:82:87:d2: 74:ad:9a:b2:68:23:c2:7c:c9:2b:75:a2:95:80:d3:d0:1b:ca: 1f:74:d7:46:2b:0b:e0:d3:94:1f:d5:c5:3c:c3:ba:32:96:39: ea:33:f8:c7:a8:e9:af:bc:d3:f4:4e:0c:6d:83:2e:20:d2:e0: 98:f8:60:96:90:76:84:71:11:04:18:01:b0:44:e7:ac:85:bd: a9:94:03:7a:36:71:01:33:7b:2c:fc:8c:7d:c1:76:15:80:aa: 16:4f:ef:12:bd:f1:28:aa:45:8e:79:a2:ab:80:43:b1:4b:54: d7:be:b7:31:3a:ec:a8:bd:e4:cf:37:ed:9b:c5:c9:59:97:97: d6:34:b1:b6:73:42:73:18:50:a0:9f:8b:b1:df:2d:6f:dd:2b: 9e:9f:0e:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1QzQxMTAvBgNVBAUTKDNBMTZDNDA0QkZFRDM0NzI0NEEzMEE1QUZGRjY2RTQ5 OTJBQTI4MjEwHhcNMjYxMDEwMjMzMjAyWhcNMjYxMDE3MjMzMjAyWjAYMRYwFAYD VQQDEw02YWNhY2FmMi0zYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjEyXTtU4tehLDgDdJyWyu55/e+ZFxFJaoiaojT1C6SG+UCUdk607ORG2wda3 aHKZsR5qtJjh8x7bHagnjaHGcGpDwHtqEjCufCg8KgccACBmBLUpKHwjXDYZ0V6B xe8+YKhW3DlAIS/PqJT47+v8vTk8hrZLzou+m2KMPtqn8/gLMfQJHmhmaAg+y76k T4hpa2TY2znUbY/6tYJaEuqoAJ67Z3eU6Vef5k1d7mg1t1GwTlAiXCXN1i+hB2F7 v3vo6mElVvGosqUyYKIN/WGNk11FcutBoNoBKF5IzV1Mv7a+Sg+4VBzpFJG2tu46 7aqF7rA5GukIPA1ezpT2fwZH7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfjdlXi gOFSfRSAMuZRpNU8gS/bMB8GA1UdIwQYMBaAFDoWxAS/7TRyRKMKWv/2bkmSqigh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjVDNC8zRTNBNTUwMjU5 OTgxMUVDOTM5MUQ1NTBDNEY5QUUwMi9PaGJFQkxfdE5ISkVvd3BhX19adVNaS3FL Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oYkVCTF90TkhKRW93cGFfX1p1U1pLcUtDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjVDNC8zRTNBNTUwMjU5OTgxMUVDOTM5MUQ1NTBDNEY5QUUwMi9PaGJFQkxfdE5I SkVvd3BhX19adVNaS3FLQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL8Z4fCBHrWjdBw7C6rmlJbNj/fYa+M6G+TcDDYIqcpp0lK8VvDeSlcrig9/A 1mgrF+6JtfbQv8leqm0NWhhAO6w3skoIlyCRtL8aN18ta13t0SamDtxVL5dfslnG Gt8xZkcUDYWeh1nlgofSdK2asmgjwnzJK3WilYDT0BvKH3TXRisL4NOUH9XFPMO6 MpY56jP4x6jpr7zT9E4MbYMuINLgmPhglpB2hHERBBgBsETnrIW9qZQDejZxATN7 LPyMfcF2FYCqFk/vEr3xKKpFjnmiq4BDsUtU1763MTrsqL3kzzftm8XJWZeX1jSx tnNCcxhQoJ+Lsd8tb90rnp8O4A== -----END CERTIFICATE-----Generated at Sun Oct 11 23:56:31 2026 by rpki-client