$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json) Hash identifier: gbf2GGkAB1xwP5Bho2RT14H+svkbQZ28wyqtQ27WG7c= Subject key identifier: DD:02:00:5E:B0:D7:4E:8A:EF:17:FA:4F:83:AB:C5:8D:83:3F:A5:7C Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft Manifest number: 0212 Signing time: Mon 21 Sep 2026 03:06:02 +0000 Manifest this update: Mon 21 Sep 2026 03:06:01 +0000 Manifest next update: Mon 28 Sep 2026 03:06:01 +0000 Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: TrHhsxw76R5bHNW03ArUu209ZABrChzU+P8dmPImSOg=) 2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Sep 21 03:06:01 2026 GMT Not After : Sep 28 03:06:01 2026 GMT Subject: CN=6ab09f1a-20c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:e6:d7:f3:10:09:f6:43:8e:34:6d:77:72: 3c:1e:db:d6:4e:67:dc:b2:6a:d7:25:f5:f5:4b:51: e0:66:f7:1d:2b:66:0a:ea:26:17:2f:39:2f:57:20: 3e:c5:be:22:d1:3a:5b:89:cb:4b:6e:1e:2b:a7:bd: 37:6a:25:86:0d:86:ac:e3:75:98:f1:6a:41:6f:55: 50:85:30:aa:04:a2:3f:bb:57:31:e7:a8:1c:23:58: b3:04:6f:eb:c2:fc:eb:71:32:a0:de:01:3d:2d:a9: 07:49:c4:42:09:f4:96:c9:b9:49:11:fd:50:08:5d: 86:22:b1:54:5f:dc:ec:e4:47:1e:b0:55:0b:39:0a: 65:74:f0:48:c7:61:c4:31:a0:03:51:d7:21:30:0d: f3:f2:ca:89:12:2b:8d:31:74:7f:a3:c1:43:64:2a: c3:ae:25:42:76:6f:ec:c4:2f:df:5b:8c:c0:3f:80: 1f:cd:6c:cf:97:7c:d0:a2:f3:a1:2c:25:b3:73:b5: 49:55:ba:46:a8:9b:51:d7:36:9d:91:e9:8e:19:c9: 1d:70:c7:69:f0:d2:d7:2e:c2:f1:27:b3:8b:11:56: 17:00:95:f3:58:44:58:cc:bb:dc:63:12:e1:b1:6e: 2c:1a:ab:03:97:4a:70:db:92:78:23:86:92:b8:ca: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:02:00:5E:B0:D7:4E:8A:EF:17:FA:4F:83:AB:C5:8D:83:3F:A5:7C X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:c2:e5:8e:a9:c3:9d:91:79:a8:f4:fb:3b:38:23:d9:cf:ba: 02:22:d6:dc:b5:80:76:73:dd:75:f5:6f:d4:bb:8a:b3:41:9f: c5:c0:4e:5f:f6:6b:17:63:b2:2d:5f:6b:97:a6:44:f0:38:a3: c0:de:36:34:f5:67:98:6a:56:33:5e:7c:9a:49:de:48:35:17: 61:c7:90:7e:ad:4d:a9:12:00:44:77:1c:ca:a0:f4:8d:bc:e2: e0:22:46:b5:30:db:59:a9:20:91:ed:0b:8b:a9:8b:4f:1b:eb: d8:34:c4:70:1f:ad:a8:93:81:36:4d:d4:a6:dc:e4:73:62:fa: 8d:ce:f8:86:28:56:00:98:43:35:53:7f:c1:ad:0a:d2:7d:26: 30:2d:88:46:78:e2:8b:e1:a6:31:06:91:00:a7:36:36:31:d4: 27:9e:71:77:03:3c:e8:d3:d2:05:ed:6d:07:f4:86:6a:8e:92: c6:26:81:e0:f3:71:e6:36:3f:ea:3a:a9:9f:89:15:4e:b8:2e: 4b:d0:aa:9d:b7:03:5b:a1:a5:ef:7b:10:20:c1:73:a0:47:04: 24:ee:49:85:de:b6:d7:71:6e:34:9f:3e:81:8b:c9:13:50:1d: c4:90:75:3b:86:1a:d7:0f:47:0d:13:40:23:8e:a3:d5:43:53: 9e:aa:64:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjYwOTIxMDMwNjAxWhcNMjYwOTI4MDMwNjAxWjAYMRYwFAYD VQQDEw02YWIwOWYxYS0yMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30jm1/MQCfZDjjRtd3I8HtvWTmfcsmrXJfX1S1HgZvcdK2YK6iYXLzkvVyA+ xb4i0TpbictLbh4rp703aiWGDYas43WY8WpBb1VQhTCqBKI/u1cx56gcI1izBG/r wvzrcTKg3gE9LakHScRCCfSWyblJEf1QCF2GIrFUX9zs5EcesFULOQpldPBIx2HE MaADUdchMA3z8sqJEiuNMXR/o8FDZCrDriVCdm/sxC/fW4zAP4AfzWzPl3zQovOh LCWzc7VJVbpGqJtR1zadkemOGckdcMdp8NLXLsLxJ7OLEVYXAJXzWERYzLvcYxLh sW4sGqsDl0pw25J4I4aSuMpSwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0CAF6w 106K7xf6T4OrxY2DP6V8MB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IyMy83NTQ1RjAzQTk3RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4 eWhVbDhoOTk3UFdtb3FaTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzsLljqnDnZF5qPT7Ozgj2c+6AiLW3LWAdnPddfVv1LuKs0GfxcBOX/ZrF2Oy LV9rl6ZE8DijwN42NPVnmGpWM158mkneSDUXYceQfq1NqRIARHccyqD0jbzi4CJG tTDbWakgke0Li6mLTxvr2DTEcB+tqJOBNk3Uptzkc2L6jc74hihWAJhDNVN/wa0K 0n0mMC2IRnjii+GmMQaRAKc2NjHUJ55xdwM86NPSBe1tB/SGao6SxiaB4PNx5jY/ 6jqpn4kVTrguS9CqnbcDW6Gl73sQIMFzoEcEJO5Jhd6213FuNJ8+gYvJE1AdxJB1 O4Ya1w9HDRNAI46j1UNTnqpk1A== -----END CERTIFICATE-----Generated at Tue Sep 22 21:08:15 2026 by rpki-client