$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json) Hash identifier: 4DyzXcXX5dugfEPa3ytECldI8+WIl4Q6na6dV4GLrIQ= Subject key identifier: 27:1F:5C:D2:66:3B:DF:B1:4F:4C:41:62:99:E2:55:6C:C3:2F:4F:4A Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft Manifest number: 0142 Signing time: Mon 21 Sep 2026 05:31:04 +0000 Manifest this update: Mon 21 Sep 2026 05:31:03 +0000 Manifest next update: Mon 28 Sep 2026 05:31:03 +0000 Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: w37JzysI9nDsD7djHNI8cb6vD7Sq+P/vYEhxmhgYtOI=) 2: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=) 3: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Validity Not Before: Sep 21 05:31:03 2026 GMT Not After : Sep 28 05:31:03 2026 GMT Subject: CN=6ab0c118-1c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:93:a2:c7:84:57:cf:c5:0c:87:fe:ed:a6: 2c:6e:3f:cb:7d:6e:da:27:8e:21:69:4e:b5:68:69: 91:6b:db:31:71:c0:4c:e6:f1:05:8c:70:13:27:27: 3b:29:af:43:1a:63:55:6e:4e:19:1d:45:a5:33:06: 0a:bc:21:82:35:e7:11:e6:73:08:37:a6:4b:46:a7: 5a:02:01:24:78:8c:90:5f:b1:e4:57:07:08:8f:77: d1:47:c1:80:12:38:eb:32:f9:45:49:1b:0a:eb:89: 36:2b:6c:7b:93:83:ab:6c:74:62:5f:75:32:da:5f: d9:05:4c:7a:0a:5b:f0:b8:04:8f:c2:a4:08:38:94: e7:02:b1:30:6c:c0:6c:1d:81:e7:ef:c7:3f:9c:25: 6e:06:73:3e:9b:ac:98:bf:cf:71:97:db:73:ef:aa: e0:21:db:fc:c2:d4:7c:4f:ad:ce:77:63:df:78:6c: d0:d0:0f:12:2e:78:80:da:b8:1e:85:97:b4:52:1a: 2c:9c:27:79:4b:d5:72:6e:67:c0:e9:4e:c2:27:ea: cb:e3:f4:5b:af:6b:af:94:37:0d:40:1a:db:52:48: d0:a6:b6:16:a0:5a:32:0e:c1:dd:b8:b8:e8:02:59: 12:2a:e9:9e:f8:df:39:f9:16:3b:c9:d9:39:aa:a9: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:5C:D2:66:3B:DF:B1:4F:4C:41:62:99:E2:55:6C:C3:2F:4F:4A X509v3 Authority Key Identifier: keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:81:64:58:f3:b3:69:96:4e:94:dc:fa:19:2d:7f:c3:24:d8: 25:dd:35:7f:d9:59:2c:1f:70:03:94:57:23:f1:88:df:37:36: f3:90:ee:52:4b:f6:2a:4b:47:5d:f6:fa:3e:3e:14:c6:22:f9: d8:2e:02:40:f8:3d:c2:34:ed:b6:b2:e7:93:32:22:e9:6f:19: 8c:ee:5d:d5:3a:a5:a9:8a:45:2f:cd:5c:ee:0c:0d:55:73:67: 32:c8:ad:ab:ad:11:72:df:ca:e4:ad:cd:35:e8:f5:dc:df:df: e2:15:98:c6:37:bd:12:59:76:c7:af:8d:c5:50:e2:60:d1:4c: d0:c9:00:b8:02:e1:d1:79:8b:17:8b:27:72:5b:7f:5b:23:66: d7:d6:31:0b:7a:7b:14:48:06:bd:58:1b:ec:af:a9:2b:c4:c1: 6b:e6:64:33:93:29:c6:6e:88:7b:ac:a4:6f:b8:62:97:c5:76: c8:81:74:e0:4d:a5:99:eb:e2:e6:e6:e6:91:82:34:d7:51:32: c4:85:c3:a3:9f:89:95:08:c5:b6:a5:0f:fb:23:be:ac:03:89: fb:54:55:1a:18:ca:d4:3a:27:ba:f2:83:56:fc:ba:ac:31:9f: fc:9b:20:d8:71:1a:43:9d:f2:2f:66:3d:e3:01:05:84:d8:05: 3f:6f:b9:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyMkMxMTAvBgNVBAUTKDNCQTI1NThDQTVGMUEwMzdEOTY5NkY1NjdBRTgxMzY3 QzZFRTM1RTYwHhcNMjYwOTIxMDUzMTAzWhcNMjYwOTI4MDUzMTAzWjAYMRYwFAYD VQQDEw02YWIwYzExOC0xYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ+ToseEV8/FDIf+7aYsbj/LfW7aJ44haU61aGmRa9sxccBM5vEFjHATJyc7 Ka9DGmNVbk4ZHUWlMwYKvCGCNecR5nMIN6ZLRqdaAgEkeIyQX7HkVwcIj3fRR8GA EjjrMvlFSRsK64k2K2x7k4OrbHRiX3Uy2l/ZBUx6ClvwuASPwqQIOJTnArEwbMBs HYHn78c/nCVuBnM+m6yYv89xl9tz76rgIdv8wtR8T63Od2PfeGzQ0A8SLniA2rge hZe0UhosnCd5S9VybmfA6U7CJ+rL4/Rbr2uvlDcNQBrbUkjQprYWoFoyDsHduLjo AlkSKume+N85+RY7ydk5qqlb9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcfXNJm O9+xT0xBYpniVWzDL09KMB8GA1UdIwQYMBaAFDuiVYyl8aA32WlvVnroE2fG7jXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDIyQy9CMUMxODIzMEQ0 QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi9PNkpWaktYeG9EZlphVzlXZXVnVFo4YnVO ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL082SlZqS1h4b0RmWmFXOVdldWdUWjhidU5lWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDIyQy9CMUMxODIzMEQ0QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi9PNkpWaktYeG9E ZlphVzlXZXVnVFo4YnVOZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcYFkWPOzaZZOlNz6GS1/wyTYJd01f9lZLB9wA5RXI/GI3zc285DuUkv2KktH Xfb6Pj4UxiL52C4CQPg9wjTttrLnkzIi6W8ZjO5d1TqlqYpFL81c7gwNVXNnMsit q60Rct/K5K3NNej13N/f4hWYxje9Ell2x6+NxVDiYNFM0MkAuALh0XmLF4snclt/ WyNm19YxC3p7FEgGvVgb7K+pK8TBa+ZkM5Mpxm6Ie6ykb7hil8V2yIF04E2lmevi 5ubmkYI011EyxIXDo5+JlQjFtqUP+yO+rAOJ+1RVGhjK1DonuvKDVvy6rDGf/Jsg 2HEaQ53yL2Y94wEFhNgFP2+5FQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:09:24 2026 by rpki-client