$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: s/9bFbkRDozt7b4Yt9YYckQEBRkvA1CKc/MzHyq5WhA= Subject key identifier: 41:8E:7F:0A:26:D8:84:5D:7B:E0:AA:1D:8D:EC:2B:4E:D1:75:72:BF Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0611 Signing time: Sun 20 Sep 2026 22:43:33 +0000 Manifest this update: Sun 20 Sep 2026 22:43:32 +0000 Manifest next update: Sun 27 Sep 2026 22:43:32 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: +FBlqTYV9hRpM84z5ShJDvMlpDIAkf+luZC4sd/xRyU=) 2: 8nJaKxb5MY7_LKqJ9yxP3wJZ9XY.asa (hash: AVAp0KitDrniYVHqOuHrGOVC8mgzj92DP2vaa/6QFgo=) 3: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: xInk+uPvf4aq3ONL1LwMHsDb2vf3A3vC4hgRAklJPAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Sep 20 22:43:32 2026 GMT Not After : Sep 27 22:43:32 2026 GMT Subject: CN=6ab06194-740a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:01:3f:57:70:24:ee:85:5e:fd:44:73:a0: 53:05:d7:2e:54:45:9f:9c:88:f0:3d:08:4c:89:e0: 18:b5:1a:a8:30:f6:f2:c6:57:81:ff:5c:dc:9a:c8: 87:f2:4e:e0:24:ee:a0:43:06:be:46:78:8b:36:b8: b4:5a:9c:47:91:a6:29:4b:a7:1e:85:c1:a9:6e:15: c5:86:91:54:74:c5:23:8f:21:1b:84:b9:86:d1:26: 9d:c6:6c:23:1c:ac:b9:7c:83:8f:b3:e1:06:15:82: 6e:a9:a5:e4:4d:06:e3:40:db:c2:a1:02:9f:87:4a: e9:6a:e9:3e:4e:b5:1a:8d:20:0f:9f:de:bd:9e:31: fa:b5:34:09:4d:85:cd:91:c4:d3:97:1e:2a:98:7b: cf:7e:81:51:a0:b9:f0:c7:d6:78:d1:55:67:9c:9f: 74:87:57:67:b7:49:59:78:fa:91:80:20:13:1c:ac: 8a:e5:8b:fd:3d:85:00:bd:22:c9:3d:1e:0e:21:fc: ee:49:04:1e:27:35:22:cb:e8:18:b9:df:62:02:39: 60:98:8c:21:b1:df:97:e7:d1:fc:28:eb:3a:8c:3a: 3c:84:c5:f0:b9:3e:ed:af:da:3a:71:a7:44:34:b1: bb:5d:23:b4:d3:70:21:78:c5:ff:60:61:c9:58:fb: 9d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8E:7F:0A:26:D8:84:5D:7B:E0:AA:1D:8D:EC:2B:4E:D1:75:72:BF X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b5:7b:fc:a5:d9:9a:41:7d:49:7c:08:52:ee:83:4c:6e:8a: 70:8e:a9:43:03:e9:7c:84:06:b7:99:b5:01:c9:a4:9e:ed:90: f3:8d:7a:f9:c8:f6:be:6a:ea:19:64:55:f8:ad:1e:c2:69:49: b5:cc:30:fd:9d:6c:72:ae:42:69:5d:13:11:f4:e3:65:15:50: 89:54:b9:58:17:47:d2:88:74:6f:f4:c7:f6:8d:b5:c3:4e:ef: 6c:f4:02:48:fd:20:11:49:8d:40:35:5b:40:60:56:e0:50:90: f9:27:58:5f:08:dd:25:75:4e:b1:d0:90:38:05:17:5c:e6:ab: 54:15:d4:36:db:14:a4:67:e6:db:df:93:c3:f2:5b:7c:19:a8: 37:14:a9:e6:09:4a:f8:15:c1:44:57:8e:40:30:64:ad:cf:b6: 9e:07:d8:cf:46:2e:26:13:6e:92:ce:79:a8:00:6e:f1:b7:dc: 0a:e6:3e:62:58:24:be:50:12:03:7a:2c:86:2f:d4:58:58:89: 25:3e:24:6c:27:b3:b1:cb:5e:ad:c1:ee:76:b7:bd:36:a7:73: 2e:ea:ee:b5:fa:35:44:59:bd:e0:6d:f6:16:89:25:ae:9b:72: 51:f8:bb:97:f5:0c:54:af:2c:0c:e2:9a:b9:0e:3d:04:fa:0c: 99:9c:d1:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjYwOTIwMjI0MzMyWhcNMjYwOTI3MjI0MzMyWjAYMRYwFAYD VQQDEw02YWIwNjE5NC03NDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz8BP1dwJO6FXv1Ec6BTBdcuVEWfnIjwPQhMieAYtRqoMPbyxleB/1zcmsiH 8k7gJO6gQwa+RniLNri0WpxHkaYpS6cehcGpbhXFhpFUdMUjjyEbhLmG0Sadxmwj HKy5fIOPs+EGFYJuqaXkTQbjQNvCoQKfh0rpauk+TrUajSAPn969njH6tTQJTYXN kcTTlx4qmHvPfoFRoLnwx9Z40VVnnJ90h1dnt0lZePqRgCATHKyK5Yv9PYUAvSLJ PR4OIfzuSQQeJzUiy+gYud9iAjlgmIwhsd+X59H8KOs6jDo8hMXwuT7tr9o6cadE NLG7XSO003AheMX/YGHJWPudlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGOfwom 2IRde+CqHY3sK07RdXK/MB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAerV7/KXZmkF9SXwIUu6DTG6KcI6pQwPpfIQGt5m1Acmknu2Q8416+cj2vmrq GWRV+K0ewmlJtcww/Z1scq5CaV0TEfTjZRVQiVS5WBdH0oh0b/TH9o21w07vbPQC SP0gEUmNQDVbQGBW4FCQ+SdYXwjdJXVOsdCQOAUXXOarVBXUNtsUpGfm29+Tw/Jb fBmoNxSp5glK+BXBRFeOQDBkrc+2ngfYz0YuJhNuks55qABu8bfcCuY+YlgkvlAS A3oshi/UWFiJJT4kbCezsctercHudre9NqdzLurutfo1RFm94G32FoklrptyUfi7 l/UMVK8sDOKauQ49BPoMmZzR9g== -----END CERTIFICATE-----Generated at Mon Sep 21 16:10:22 2026 by rpki-client