$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: jcyN+bwN69WnwqAi+20mOC3QlIMCNQoBvEJ+h97mcLQ= Subject key identifier: 33:69:A6:EB:E3:74:2A:BB:B6:38:5F:8E:2C:DC:80:64:83:E0:D4:4B Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 10DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 10BA Signing time: Mon 12 Oct 2026 17:25:51 +0000 Manifest this update: Mon 12 Oct 2026 17:25:50 +0000 Manifest next update: Mon 19 Oct 2026 17:25:50 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: E5KOeY770bmmQ1He32codEwHUQdlaQw35MXrEEb+kA8=) 2: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=) 3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=) 4: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=) 5: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=) 6: 6517EB7C5F7311F1B8BB43629547A888.roa (hash: e9s/phH1++I5qahFQ/2J1IQEPJuvHjVe4SztRtq433Y=) 7: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Oct 12 17:25:50 2026 GMT Not After : Oct 19 17:25:50 2026 GMT Subject: CN=6acd181f-ef37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:f9:dc:31:0a:19:b1:6c:b8:13:38:a6:d4: 97:bc:9e:d6:14:fa:9d:c6:9f:0a:a4:9c:61:ad:73: 21:35:9d:6f:72:85:4c:c2:21:e0:8e:21:76:c6:6d: 52:e7:a1:84:a3:b2:30:e0:54:6e:5a:86:b1:0f:f7: 80:a9:a1:c0:49:c5:55:b1:05:fe:52:8a:dd:50:f2: 69:cc:2f:c5:01:5d:8f:d4:08:5d:21:fd:a8:26:74: f0:cc:1b:9d:8a:db:28:7f:55:e2:1c:32:a8:fe:3e: 41:6f:53:a3:a8:d1:69:0d:5a:d2:45:97:b2:4b:0c: ab:fc:df:aa:e4:71:99:48:96:ca:6a:58:31:71:30: fb:48:7c:5c:49:d3:d7:a0:94:58:92:6f:ea:bc:aa: 71:ea:12:ab:3c:45:2c:69:27:da:18:32:c5:be:c4: ca:4b:60:d1:6b:c0:d2:bb:2b:42:1f:e4:55:2d:b6: 50:78:d5:42:81:29:d4:5e:40:fc:41:23:5d:ba:c8: 5e:7b:b4:bf:a9:39:3e:67:d8:2b:50:b6:f5:9d:03: 77:50:77:db:0b:68:c2:cf:c7:12:ac:a7:ae:7f:b0: 2e:4c:a1:fa:1b:36:40:d5:79:9c:94:2c:b2:4e:30: 90:0c:4d:98:72:9a:a8:bd:fa:df:c3:6e:9b:68:2c: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:69:A6:EB:E3:74:2A:BB:B6:38:5F:8E:2C:DC:80:64:83:E0:D4:4B X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e9:ce:8d:9d:80:cb:24:7b:a9:2c:9e:c5:f0:78:fd:85:c0: fb:cc:c2:38:a5:23:11:3c:73:6b:6b:6f:0c:a1:a1:25:a3:bb: f9:2c:72:23:c5:16:a8:a3:e5:4b:bb:4d:0c:6d:dc:c9:a9:eb: de:28:c2:58:f0:ef:96:ff:fe:f6:1f:92:e2:44:38:e5:45:c8: c2:d1:d2:17:19:00:f3:64:f8:0b:ca:3e:5f:0a:7d:37:f9:aa: f9:be:9a:aa:e1:6f:18:68:49:5a:98:00:e1:93:21:2f:15:9e: 32:2b:b0:3e:9a:ca:96:b7:7d:c7:69:f5:f6:66:75:94:1e:cc: c9:e5:b2:dd:61:c6:46:fc:fb:f2:4e:5c:81:0b:c2:f7:e0:81: 07:28:a6:ef:6c:9c:65:d9:5b:e5:67:62:43:0d:d8:f1:41:20: 41:72:83:ec:11:0a:06:6b:f3:fb:75:2b:70:6a:96:df:b6:e2: c1:81:c2:5f:cc:01:24:87:c2:e1:da:b9:87:c0:5a:4d:34:95: 2e:a1:18:13:db:b7:d1:ee:55:d1:36:63:41:ce:75:1e:57:76: 56:c3:a2:37:3f:0a:54:99:cf:89:d0:e7:04:f8:55:95:2e:b2: f3:81:e5:d2:d8:f6:e1:ed:14:4f:28:93:ba:47:da:ec:ff:60: 3d:71:20:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICENswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjYxMDEyMTcyNTUwWhcNMjYxMDE5MTcyNTUwWjAYMRYwFAYD VQQDEw02YWNkMTgxZi1lZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBT53DEKGbFsuBM4ptSXvJ7WFPqdxp8KpJxhrXMhNZ1vcoVMwiHgjiF2xm1S 56GEo7Iw4FRuWoaxD/eAqaHAScVVsQX+UordUPJpzC/FAV2P1AhdIf2oJnTwzBud itsof1XiHDKo/j5Bb1OjqNFpDVrSRZeySwyr/N+q5HGZSJbKalgxcTD7SHxcSdPX oJRYkm/qvKpx6hKrPEUsaSfaGDLFvsTKS2DRa8DSuytCH+RVLbZQeNVCgSnUXkD8 QSNdushee7S/qTk+Z9grULb1nQN3UHfbC2jCz8cSrKeuf7AuTKH6GzZA1XmclCyy TjCQDE2Ycpqovfrfw26baCyiAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNppuvj dCq7tjhfjizcgGSD4NRLMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm+nOjZ2AyyR7qSyexfB4/YXA+8zCOKUjETxza2tvDKGhJaO7+SxyI8UWqKPl S7tNDG3cyanr3ijCWPDvlv/+9h+S4kQ45UXIwtHSFxkA82T4C8o+Xwp9N/mq+b6a quFvGGhJWpgA4ZMhLxWeMiuwPprKlrd9x2n19mZ1lB7MyeWy3WHGRvz78k5cgQvC 9+CBByim72ycZdlb5WdiQw3Y8UEgQXKD7BEKBmvz+3UrcGqW37biwYHCX8wBJIfC 4dq5h8BaTTSVLqEYE9u30e5V0TZjQc51Hld2VsOiNz8KVJnPidDnBPhVlS6y84Hl 0tj24e0UTyiTukfa7P9gPXEgqQ== -----END CERTIFICATE-----Generated at Mon Oct 12 23:55:55 2026 by rpki-client