$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: WI4zDlU+zI+GG8e/QgRK6cOO+F2lQmnReKPOJJfncCQ= Subject key identifier: C9:7C:23:C7:D1:5C:99:1D:46:6A:09:FB:D5:CA:11:6D:87:BA:7C:EE Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 015E Signing time: Mon 21 Sep 2026 05:38:02 +0000 Manifest this update: Mon 21 Sep 2026 05:38:02 +0000 Manifest next update: Mon 28 Sep 2026 05:38:02 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: oxj4VqtKuZQJNJ9GyU7Af/B9CzZc4lLXhu5CIfBk9WI=) 2: 8BB9BA0A739411F195A6A0F072A30FBC.roa (hash: FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=) 3: BC6277B8700211F19DFE431193A30FBC.roa (hash: GSeqy5s5t10nUG8tqKIEN6PcxnTZQTa977Nxb8Hr8hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Sep 21 05:38:02 2026 GMT Not After : Sep 28 05:38:02 2026 GMT Subject: CN=6ab0c2ba-8f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:56:22:4c:38:d4:06:04:bd:b7:0a:64:b0: f5:c7:1c:39:b2:69:f4:ff:dc:12:bf:59:89:15:b3: d3:c0:dd:4c:dd:70:9f:92:4f:46:0b:72:e2:6f:79: 45:cb:92:f7:f4:70:7b:7a:be:b3:73:bc:8b:da:92: 56:71:b6:88:96:1b:86:3e:96:87:03:b8:90:e7:e8: 1c:c2:86:11:33:80:c6:af:fa:7e:c4:3b:bf:5a:1f: 3f:dc:94:10:64:d8:0b:36:67:ac:6a:81:bd:23:a8: 8f:24:60:7a:80:32:a4:dd:68:e8:bb:6d:6e:bf:37: 0f:f7:9d:a2:6b:98:4a:2c:16:43:ac:a4:b7:e9:56: f8:d7:c1:18:30:8d:19:17:d9:5d:c8:72:f8:88:c4: 93:95:dd:50:eb:46:85:88:2c:91:1a:dc:7e:7a:b5: b3:7e:32:18:68:f6:f8:aa:62:51:a0:64:ed:ee:a7: 8a:30:98:aa:ad:cb:80:16:cf:a1:82:aa:10:2f:12: 7a:d6:b5:8c:82:db:32:69:c5:2f:3f:2d:34:85:a9: 22:e0:59:a8:f2:31:0d:14:32:76:4d:03:34:89:e4: 71:2e:76:b1:7f:7c:68:85:0a:4c:a6:c7:c7:5b:e4: fa:a3:4c:56:dc:11:06:44:c5:74:2c:4a:fe:9d:f2: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:23:C7:D1:5C:99:1D:46:6A:09:FB:D5:CA:11:6D:87:BA:7C:EE X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b5:b6:58:74:eb:6f:94:7d:0a:d5:10:fc:37:8c:b1:7d:e6: d1:2f:a0:85:88:ed:a2:38:94:38:85:d9:d7:74:e1:72:ad:bd: 26:86:d0:ae:c1:b8:5d:81:a4:a3:ce:92:8a:d9:ac:f5:62:8d: 9f:7d:34:fb:09:72:00:7d:53:8f:2d:48:62:1a:e1:38:bc:a2: 40:e4:65:f8:17:88:f9:d6:1e:c2:f3:1f:ed:a4:dd:61:0b:3d: 4e:66:84:45:cd:18:9a:21:b0:db:5f:63:7d:ff:1e:4c:c8:5c: 82:92:86:d2:e9:35:4b:57:be:bc:bf:fb:1a:52:10:7c:54:bd: 12:79:b8:cb:22:c6:c0:45:7f:e7:87:b6:e0:74:64:a9:78:52: ab:c7:fd:f4:49:e0:7a:9c:aa:a8:7c:2e:04:e9:c8:d5:a9:67: 63:8d:21:27:e0:2f:6c:19:1b:7e:68:e1:18:8f:e8:6e:29:dd: 0b:81:7e:75:51:f4:33:45:b2:fd:4d:cd:8e:76:55:be:c8:0f: 44:f4:5e:82:e3:60:95:e9:8c:44:8f:7f:77:4b:34:db:e2:b2: 73:68:3b:5c:6c:6c:7e:e7:13:ed:eb:39:6a:0e:b2:56:fb:b5: 0a:44:b5:bf:1d:20:8f:6b:98:76:ef:2c:aa:5d:7c:f0:f5:53: f4:7c:22:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwOTIxMDUzODAyWhcNMjYwOTI4MDUzODAyWjAYMRYwFAYD VQQDEw02YWIwYzJiYS04ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA095WIkw41AYEvbcKZLD1xxw5smn0/9wSv1mJFbPTwN1M3XCfkk9GC3Lib3lF y5L39HB7er6zc7yL2pJWcbaIlhuGPpaHA7iQ5+gcwoYRM4DGr/p+xDu/Wh8/3JQQ ZNgLNmesaoG9I6iPJGB6gDKk3Wjou21uvzcP952ia5hKLBZDrKS36Vb418EYMI0Z F9ldyHL4iMSTld1Q60aFiCyRGtx+erWzfjIYaPb4qmJRoGTt7qeKMJiqrcuAFs+h gqoQLxJ61rWMgtsyacUvPy00haki4Fmo8jENFDJ2TQM0ieRxLnaxf3xohQpMpsfH W+T6o0xW3BEGRMV0LEr+nfJc0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMl8I8fR XJkdRmoJ+9XKEW2HunzuMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIbW2WHTrb5R9CtUQ/DeMsX3m0S+ghYjtojiUOIXZ13Thcq29JobQrsG4XYGk o86Sitms9WKNn300+wlyAH1Tjy1IYhrhOLyiQORl+BeI+dYewvMf7aTdYQs9TmaE Rc0YmiGw219jff8eTMhcgpKG0uk1S1e+vL/7GlIQfFS9Enm4yyLGwEV/54e24HRk qXhSq8f99EngepyqqHwuBOnI1alnY40hJ+AvbBkbfmjhGI/obindC4F+dVH0M0Wy /U3NjnZVvsgPRPReguNglemMRI9/d0s02+Kyc2g7XGxsfucT7es5ag6yVvu1CkS1 vx0gj2uYdu8sql188PVT9Hwi3A== -----END CERTIFICATE-----Generated at Mon Sep 21 20:58:20 2026 by rpki-client