$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft File: oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json) Hash identifier: icxd1CH5Z0dJt1Wt1HNZzbMbDA/2O1GQ8cy3Z/THNqw= Subject key identifier: B9:95:22:EA:7B:66:CE:A1:91:D6:C7:7F:EA:D6:3E:C2:BD:6D:0A:4A Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft Manifest number: FD Signing time: Mon 21 Sep 2026 06:29:00 +0000 Manifest this update: Mon 21 Sep 2026 06:29:00 +0000 Manifest next update: Mon 28 Sep 2026 06:29:00 +0000 Files and hashes: 1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: BZ+D9jXV6ewSZLvuUddI8g31dKRL7+U6ucQuEUX6a/s=) 2: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=) 3: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=) 4: 5792E7089C8211F1BE3258805211F970.roa (hash: SksxWtWEgcLENurVHTkG2do91ByIFkLP750du3iMIuM=) 5: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: 61YOBpN768smaHlb7VNUU/OIP9xDMKXDWqFb5RlTs1U=) 6: A760CBA891D611F1A1097B9E5111F970.roa (hash: rVJa4ebXuFql7e5EjczJk/uiGqznYyPnvPEFXZFvTA4=) 7: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=) 8: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Sep 21 06:29:00 2026 GMT Not After : Sep 28 06:29:00 2026 GMT Subject: CN=6ab0ceac-9d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:bc:15:60:29:db:4f:a4:51:0a:cd:ac:cf: ff:1f:3f:94:a4:18:49:77:3f:24:09:c5:cf:8c:1c: 40:da:9f:93:92:0e:57:8d:ab:b5:0f:bb:12:ea:b1: 38:43:2f:01:24:c5:34:bc:4f:45:da:0e:97:47:80: 38:0f:ce:86:53:78:1f:bb:ee:ae:5c:82:1c:30:dd: 67:9e:b5:5b:33:56:ca:40:23:67:b1:5d:be:c0:0e: fa:4f:2c:35:46:10:88:9d:b8:bc:f4:66:a3:bd:ff: c1:e5:91:3b:56:e0:39:08:c3:61:e3:3c:5e:21:ce: e0:e8:0d:81:98:50:99:d9:30:14:29:c1:17:fc:ff: 0c:8b:87:9f:99:98:d5:d5:13:07:99:70:a5:eb:2e: 4a:9c:80:c8:53:e5:89:ef:3c:85:71:6b:57:2a:86: d6:9c:0a:f1:1a:28:de:a2:0a:d7:dd:ba:61:2f:81: 9d:8e:66:fb:13:45:02:4e:63:f6:fc:9e:36:63:b5: f4:eb:82:ea:62:39:83:07:76:eb:93:98:28:ff:b1: 42:0a:00:81:f2:75:e6:72:86:29:59:16:8b:53:24: a4:4c:5a:74:53:21:62:d5:a4:0a:18:45:cf:7c:d1: f3:99:de:66:be:e9:56:b2:3d:25:a9:53:fd:45:89: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:95:22:EA:7B:66:CE:A1:91:D6:C7:7F:EA:D6:3E:C2:BD:6D:0A:4A X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:97:ee:9a:7d:5f:16:07:d8:02:d3:22:c7:c7:9b:45:d1: ee:7e:29:dc:75:7d:0d:ae:95:74:09:1d:af:f9:cc:df:97:aa: 6e:ed:bf:3f:f6:05:ce:89:ff:49:91:fa:40:ee:4b:4e:7c:e7: ae:e7:d5:41:2f:1a:82:44:2a:97:a9:1f:ae:de:ab:cf:92:d4: 80:dc:89:11:6f:d1:f9:13:7e:65:4f:b2:58:79:f0:ed:cd:bb: 41:89:2f:f8:87:67:58:6b:97:51:91:40:f4:0a:ff:42:6f:bf: 39:68:86:dc:0b:d2:b2:b5:e5:1d:74:de:2d:62:8a:ba:05:65: 42:a8:18:38:ba:96:11:1d:e7:43:7e:c8:dc:d8:2a:69:25:c6: 1f:4e:20:4b:d8:a7:cd:97:40:be:a2:7e:87:25:00:bd:49:27: fb:ed:a4:38:7e:dc:82:88:f2:28:af:b1:2e:4a:61:db:f4:95: 15:a2:f6:11:52:0b:19:53:4e:2f:a8:7a:90:6f:9d:77:3b:c9: 1c:7d:72:f2:f2:52:db:03:2b:37:16:fd:40:41:19:65:bb:3a: 21:f0:9d:6c:56:47:7d:3b:c2:bc:29:52:6b:e4:4c:82:06:36: 64:21:b8:82:f2:b3:c8:b9:d7:72:f9:1c:ef:57:5a:52:0e:80: 22:d1:7a:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1QkMxMTAvBgNVBAUTKEExNDUyNDFEOTgzMEFGMjRBNzE1NjczNTEyNTVFQzhF N0VENTNFRkUwHhcNMjYwOTIxMDYyOTAwWhcNMjYwOTI4MDYyOTAwWjAYMRYwFAYD VQQDEw02YWIwY2VhYy05ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FC8FWAp20+kUQrNrM//Hz+UpBhJdz8kCcXPjBxA2p+Tkg5Xjau1D7sS6rE4 Qy8BJMU0vE9F2g6XR4A4D86GU3gfu+6uXIIcMN1nnrVbM1bKQCNnsV2+wA76Tyw1 RhCInbi89Gajvf/B5ZE7VuA5CMNh4zxeIc7g6A2BmFCZ2TAUKcEX/P8Mi4efmZjV 1RMHmXCl6y5KnIDIU+WJ7zyFcWtXKobWnArxGijeogrX3bphL4Gdjmb7E0UCTmP2 /J42Y7X064LqYjmDB3brk5go/7FCCgCB8nXmcoYpWRaLUySkTFp0UyFi1aQKGEXP fNHzmd5mvulWsj0lqVP9RYlIOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmVIup7 Zs6hkdbHf+rWPsK9bQpKMB8GA1UdIwQYMBaAFKFFJB2YMK8kpxVnNRJV7I5+1T7+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzVCQy83MUU1RDhCRTU5 RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9vVVVrSFpnd3J5U25GV2MxRWxYc2puN1ZQ djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzVCQy83MUU1RDhCRTU5RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9vVVVrSFpnd3J5 U25GV2MxRWxYc2puN1ZQdjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIM+X7pp9XxYH2ALTIsfHm0XR7n4p3HV9Da6VdAkdr/nM35eqbu2/P/YFzon/ SZH6QO5LTnznrufVQS8agkQql6kfrt6rz5LUgNyJEW/R+RN+ZU+yWHnw7c27QYkv +IdnWGuXUZFA9Ar/Qm+/OWiG3AvSsrXlHXTeLWKKugVlQqgYOLqWER3nQ37I3Ngq aSXGH04gS9inzZdAvqJ+hyUAvUkn++2kOH7cgojyKK+xLkph2/SVFaL2EVILGVNO L6h6kG+ddzvJHH1y8vJS2wMrNxb9QEEZZbs6IfCdbFZHfTvCvClSa+RMggY2ZCG4 gvKzyLnXcvkc71daUg6AItF62g== -----END CERTIFICATE-----Generated at Tue Sep 22 14:02:42 2026 by rpki-client