$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: 0b3YkOw1LwwDMfa2F9paqYPJdLcRDU/UMPw6MCiP+lg= Subject key identifier: 54:A6:43:58:67:49:92:47:01:AE:01:E9:A9:BD:C8:4F:08:62:44:28 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 0221 Signing time: Mon 21 Sep 2026 02:50:27 +0000 Manifest this update: Mon 21 Sep 2026 02:50:27 +0000 Manifest next update: Mon 28 Sep 2026 02:50:27 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: 1F+CHkqS1IWRqXbGKmFR+zqYP/pVAaG+6VtJ1CJvRUA=) 2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=) 3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Sep 21 02:50:27 2026 GMT Not After : Sep 28 02:50:27 2026 GMT Subject: CN=6ab09b73-52c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:af:fe:8f:ca:75:b4:b0:2f:37:7b:71:c4: c3:f4:b7:4b:58:44:ea:0f:34:96:f3:f2:31:6e:a1: bd:11:ed:08:06:e2:43:d1:c5:12:48:ac:55:8a:97: 17:5e:ed:15:52:8e:89:db:5b:04:32:ad:af:0e:97: e8:e9:72:0e:67:7e:ff:81:b5:de:db:9b:79:f7:61: ae:4e:3a:58:33:29:bf:15:a3:c3:79:0d:f7:9b:8b: b5:2c:f9:d9:9e:c5:90:f3:61:b2:5a:ad:55:ed:f9: 02:da:5a:fb:8c:30:0a:20:c8:c3:c3:1f:d5:70:55: f4:9a:67:55:b9:66:cf:64:73:3a:d7:60:7d:4a:92: 7b:54:3a:77:ce:3d:66:d3:8e:0c:7f:20:5d:83:16: a0:9f:9d:3d:8b:c5:b4:6f:d2:90:b7:1e:23:78:08: 00:9c:96:f2:4d:47:43:d6:b6:b6:97:f5:fc:c4:4b: 15:24:7e:ce:88:04:e4:d1:75:1a:7d:19:80:47:31: 7a:5d:d3:2f:f0:78:1d:37:86:9a:a9:aa:84:15:c0: 60:bc:76:f3:88:4b:cd:2e:10:0b:c8:f1:46:af:17: cb:d4:0d:8b:18:4a:f7:19:8b:9a:1b:94:b6:20:3d: cf:1c:89:5a:e5:e2:32:f6:b0:eb:0b:71:01:e5:dc: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A6:43:58:67:49:92:47:01:AE:01:E9:A9:BD:C8:4F:08:62:44:28 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:c0:80:e4:5f:c8:13:6a:24:cb:ad:48:1c:9d:cf:7f:90: 3f:08:64:f1:26:5c:fb:6e:75:87:bb:14:69:59:4f:2a:ff:c6: 0b:62:7f:60:77:56:cd:77:37:26:64:07:35:67:65:09:22:37: 3b:e8:b9:16:9c:a9:19:ae:1f:39:a4:7e:26:ed:54:5d:87:8f: 43:7d:81:23:85:eb:10:f4:7c:ae:63:73:a8:05:b7:20:fa:cb: d3:28:de:84:33:e9:f9:8c:53:58:8a:8e:b7:34:17:e4:1f:37: df:fd:d3:bb:ff:77:23:54:02:96:32:1e:cd:50:b4:a5:a9:51: f6:8f:ee:87:6c:66:00:1e:00:89:a4:46:23:4e:8a:c9:31:be: 1e:85:7e:bd:cd:fd:5b:8f:79:be:8c:5e:07:d8:9d:d5:42:64: aa:35:c0:d0:21:87:f2:db:9e:ae:0f:73:23:3b:47:ff:a1:73: c9:6d:84:28:42:e5:73:8e:0a:05:eb:07:ac:07:ca:d0:2f:d9: c3:5c:31:dc:a2:c5:05:19:07:99:f2:9a:a0:32:3f:7f:35:df: ac:c7:e9:1a:31:1d:d9:b1:8d:70:01:25:8f:d0:41:bb:3a:be: 15:86:97:3d:3e:57:de:3a:fa:b4:6b:c1:35:af:08:f5:8c:3b: 22:e5:a5:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjYwOTIxMDI1MDI3WhcNMjYwOTI4MDI1MDI3WjAYMRYwFAYD VQQDEw02YWIwOWI3My01MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgiv/o/KdbSwLzd7ccTD9LdLWETqDzSW8/IxbqG9Ee0IBuJD0cUSSKxVipcX Xu0VUo6J21sEMq2vDpfo6XIOZ37/gbXe25t592GuTjpYMym/FaPDeQ33m4u1LPnZ nsWQ82GyWq1V7fkC2lr7jDAKIMjDwx/VcFX0mmdVuWbPZHM612B9SpJ7VDp3zj1m 044MfyBdgxagn509i8W0b9KQtx4jeAgAnJbyTUdD1ra2l/X8xEsVJH7OiATk0XUa fRmARzF6XdMv8HgdN4aaqaqEFcBgvHbziEvNLhALyPFGrxfL1A2LGEr3GYuaG5S2 ID3PHIla5eIy9rDrC3EB5dx33wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSmQ1hn SZJHAa4B6am9yE8IYkQoMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWArAgORfyBNqJMutSBydz3+QPwhk8SZc+251h7sUaVlPKv/GC2J/YHdWzXc3 JmQHNWdlCSI3O+i5FpypGa4fOaR+Ju1UXYePQ32BI4XrEPR8rmNzqAW3IPrL0yje hDPp+YxTWIqOtzQX5B833/3Tu/93I1QCljIezVC0palR9o/uh2xmAB4AiaRGI06K yTG+HoV+vc39W495voxeB9id1UJkqjXA0CGH8tuerg9zIztH/6FzyW2EKELlc44K BesHrAfK0C/Zw1wx3KLFBRkHmfKaoDI/fzXfrMfpGjEd2bGNcAElj9BBuzq+FYaX PT5X3jr6tGvBNa8I9Yw7IuWl3A== -----END CERTIFICATE-----Generated at Tue Sep 22 14:05:19 2026 by rpki-client