$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: mylKX+Cfbxx5beeo8Jtev3Ii8FFitsjOT8FlYyux324= Subject key identifier: 19:32:C0:06:78:08:F9:4E:92:37:0A:D7:84:89:0A:61:3C:81:2D:7C Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 312A Signing time: Fri 02 Oct 2026 15:30:28 +0000 Manifest this update: Fri 02 Oct 2026 15:30:27 +0000 Manifest next update: Fri 09 Oct 2026 15:30:27 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: Kx7Dg1W3O/sLsC4IakRLnZUZ+uLfT/fouw5k2RS/kD8=) 2: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: +rkvcv94NMaYampI+fYTUB0c8pEWY+GEMSJjHTOiOXE=) 3: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: 5gzyMm8E3RtBL5u+p29X/7YWyO/vj5NHozUgRoKZ84M=) 4: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: vT+TgUmgODqZCcEcsB93R+wccx/Yl+5U/tfDsp7/ZFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12680 (0x3188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Oct 2 15:30:27 2026 GMT Not After : Oct 9 15:30:27 2026 GMT Subject: CN=6abfce14-50a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:72:33:a6:84:31:ad:33:97:12:a8:85:cf: 3b:3a:06:55:1b:66:71:16:63:88:92:45:58:b8:e2: e6:9e:05:35:fe:78:2e:8e:89:5c:0c:c9:5e:7d:af: 9f:4d:58:6a:1e:7b:d8:45:b2:a3:c1:ae:0a:d8:fc: ff:32:28:6b:23:d8:12:8a:ec:c2:51:84:ac:94:29: 21:9a:9c:1b:23:af:e0:fa:83:20:84:aa:87:26:a6: 69:02:9c:58:64:1f:ea:9f:ef:bd:bf:ce:f9:e5:86: 59:da:bc:d1:02:36:ab:a4:aa:c9:32:0b:6c:d3:22: 9f:b5:bf:b0:c0:98:2c:07:ed:d1:b5:70:1c:f7:e6: 3f:8a:d8:ad:74:6f:eb:e4:92:08:a8:7e:1a:ad:3b: a0:00:20:23:23:8d:2f:37:c3:37:e8:de:cf:d4:43: af:4f:0f:89:16:b5:c1:b0:95:85:05:00:42:b7:97: ac:a0:9f:e5:cd:27:72:d3:10:ff:7e:e1:db:c3:17: 4e:7f:cd:61:68:50:6e:3d:4d:cf:17:dc:21:3e:4b: 4b:46:04:77:b9:4b:5b:e9:b2:78:65:d6:75:c8:41: 84:d1:4c:9b:ae:7a:9a:a1:28:39:80:31:5c:33:48: 32:ce:62:19:65:da:ae:e8:7d:fe:24:ae:69:8b:de: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:C0:06:78:08:F9:4E:92:37:0A:D7:84:89:0A:61:3C:81:2D:7C X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:39:43:bc:ee:f9:d9:5d:d4:e6:b1:6c:49:03:59:4c:27:1a: 37:4e:81:41:73:4b:6b:4d:a1:3a:ba:a2:2c:78:80:d5:09:2a: 07:e6:b5:0b:e1:f6:a2:5a:99:e6:bc:64:42:94:c8:3b:3c:6b: 49:fa:65:22:05:07:c8:11:0a:b4:86:3e:8b:e3:c2:e5:34:2e: b0:d0:0b:56:02:d4:b5:1f:7b:c7:07:6c:75:28:cf:a6:68:06: e8:ef:a4:e9:f4:fb:19:60:45:52:6a:f3:f0:c2:f6:a5:e7:68: 05:21:c2:c5:c6:0c:56:58:9b:49:d7:46:55:22:b8:6f:89:d7: 44:0d:6d:0b:c5:34:d7:0a:4f:38:56:97:c8:df:09:65:e0:2b: 58:47:0a:35:b4:fb:eb:8c:78:51:9d:d8:48:9d:60:c2:33:1c: dc:df:25:13:8c:d9:f7:0a:06:42:24:c9:c2:37:a9:02:67:33: 94:f0:ba:a8:e3:e3:78:1c:2b:b3:51:5b:98:68:f0:37:f8:98: 09:85:80:8e:db:3c:8e:7d:5e:9d:15:53:43:68:fd:47:d6:17: ae:db:da:28:79:54:60:1c:de:64:66:b4:9d:52:f3:2b:c9:35: 85:d0:aa:dd:20:b2:c5:d4:56:2b:e9:b6:b2:6e:78:4c:71:be: 5f:9b:5b:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYxMDAyMTUzMDI3WhcNMjYxMDA5MTUzMDI3WjAYMRYwFAYD VQQDEw02YWJmY2UxNC01MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PJyM6aEMa0zlxKohc87OgZVG2ZxFmOIkkVYuOLmngU1/ngujolcDMlefa+f TVhqHnvYRbKjwa4K2Pz/MihrI9gSiuzCUYSslCkhmpwbI6/g+oMghKqHJqZpApxY ZB/qn++9v8755YZZ2rzRAjarpKrJMgts0yKftb+wwJgsB+3RtXAc9+Y/ititdG/r 5JIIqH4arTugACAjI40vN8M36N7P1EOvTw+JFrXBsJWFBQBCt5esoJ/lzSdy0xD/ fuHbwxdOf81haFBuPU3PF9whPktLRgR3uUtb6bJ4ZdZ1yEGE0UybrnqaoSg5gDFc M0gyzmIZZdqu6H3+JK5pi96HDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkywAZ4 CPlOkjcK14SJCmE8gS18MB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTlDvO752V3U5rFsSQNZTCcaN06BQXNLa02hOrqiLHiA1QkqB+a1C+H2olqZ 5rxkQpTIOzxrSfplIgUHyBEKtIY+i+PC5TQusNALVgLUtR97xwdsdSjPpmgG6O+k 6fT7GWBFUmrz8ML2pedoBSHCxcYMVlibSddGVSK4b4nXRA1tC8U01wpPOFaXyN8J ZeArWEcKNbT764x4UZ3YSJ1gwjMc3N8lE4zZ9woGQiTJwjepAmczlPC6qOPjeBwr s1FbmGjwN/iYCYWAjts8jn1enRVTQ2j9R9YXrtvaKHlUYBzeZGa0nVLzK8k1hdCq 3SCyxdRWK+m2sm54THG+X5tbGg== -----END CERTIFICATE-----Generated at Sun Oct 4 00:59:41 2026 by rpki-client