$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: 3+B4ZhBOY3L/20hZ7owKZg8mb/Djkak4jjflXhgOzJ0= Subject key identifier: 44:5E:33:00:8D:DB:C3:17:08:5A:0B:EE:DC:55:E9:CE:FE:BE:7F:42 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: 0171 Signing time: Sun 11 Oct 2026 05:30:59 +0000 Manifest this update: Sun 11 Oct 2026 05:30:59 +0000 Manifest next update: Sun 18 Oct 2026 05:30:59 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: 14jOfLRW9rMnuXPIhZ37x46tS6D/804ZifLa8sAVPK4=) 2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: XI4mL6mEa2M+1NS8PfnGuvRQBxr1+O78oNJurqURZgQ=) 3: 03FFD61EEF8A11F09F678C04616F56BC.roa (hash: A7HwJDVNxwJYLBDJd9TfXMdwuNFGxBemZdYTybMyqFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Oct 11 05:30:59 2026 GMT Not After : Oct 18 05:30:59 2026 GMT Subject: CN=6acb1f13-73c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:0f:84:6a:50:5b:c9:84:08:cf:fa:e7:98: 0f:84:60:93:de:4c:1e:30:2a:84:66:35:f9:3c:47: 1b:aa:59:f2:c9:bd:7c:ee:6a:68:07:51:69:b0:a6: 98:0e:3f:a4:dd:29:24:38:18:6b:71:e8:7b:77:a9: 49:2d:dc:3a:d7:43:54:53:8f:62:46:c8:79:45:f1: 68:9e:1b:a7:b7:2f:27:b4:21:f8:77:94:d1:53:f0: 52:ee:bd:e7:ff:ce:ea:d5:04:e9:d1:21:23:51:94: 84:50:26:18:09:06:b5:d0:30:96:24:69:47:57:d6: 4a:8f:95:47:5d:41:ea:3e:15:ee:f2:f6:e2:81:d1: a8:8d:ef:d3:91:b3:61:e0:f9:e6:12:75:8d:57:b1: 8c:da:e4:dd:c2:35:29:32:fe:6f:84:6f:39:9e:89: 47:90:a6:38:83:4f:97:34:f0:49:ee:cc:3c:4c:7d: 77:66:a2:12:aa:86:f6:54:12:a3:10:15:e7:cb:01: 9f:23:d3:d2:03:a8:f4:a9:12:b2:c4:d1:59:ce:48: ef:a7:7c:05:8e:b0:da:5d:1f:08:37:23:ca:58:35: af:4a:89:cd:d3:29:d5:90:c2:9e:cd:06:95:96:e9: 59:cb:90:2a:35:e4:9d:76:88:2a:e7:57:50:d1:45: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5E:33:00:8D:DB:C3:17:08:5A:0B:EE:DC:55:E9:CE:FE:BE:7F:42 X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2c:7d:63:82:6c:06:35:cd:93:c7:94:3c:9f:f3:f9:6b:a7: 48:1a:93:b4:a3:86:74:30:66:c4:9f:8e:d0:5b:ee:bd:b4:55: 00:d6:f3:89:52:62:e6:b8:81:f0:28:81:fd:0d:8d:6e:cd:c3: ce:7f:45:13:79:6f:84:6b:c5:b2:f0:af:2e:e5:70:8b:77:3d: ce:ed:fe:71:69:07:b8:c9:55:77:59:34:75:24:f9:67:47:26: b5:b0:b8:cf:07:1b:eb:2c:73:ca:f0:cf:ae:97:da:d9:93:a4: c1:eb:06:a1:4b:8a:6d:6c:18:5d:a0:39:3f:0f:02:a1:63:07: 74:df:ab:a1:61:4e:96:a0:cb:30:63:0d:b6:5d:f9:68:7e:22: 37:61:df:91:df:f8:85:01:6b:6d:a4:63:a2:06:53:26:9b:ab: 24:e0:1d:95:9b:90:a3:3d:ea:43:20:c2:45:f5:8e:97:f7:d5: 6e:f8:06:12:52:92:ae:51:f5:d2:e7:5a:7a:f9:de:85:a3:af: ac:d7:c8:12:cb:35:c3:06:05:48:29:88:d0:ad:7f:5f:ff:b9: d5:cf:4a:5d:c5:64:82:11:de:69:24:ee:57:11:ca:38:47:96: b8:aa:07:ae:e9:87:87:c7:88:db:ae:ce:b3:41:e1:dc:d9:2e: 76:d0:2f:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYxMDExMDUzMDU5WhcNMjYxMDE4MDUzMDU5WjAYMRYwFAYD VQQDEw02YWNiMWYxMy03M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz24PhGpQW8mECM/655gPhGCT3kweMCqEZjX5PEcbqlnyyb187mpoB1FpsKaY Dj+k3SkkOBhrceh7d6lJLdw610NUU49iRsh5RfFonhunty8ntCH4d5TRU/BS7r3n /87q1QTp0SEjUZSEUCYYCQa10DCWJGlHV9ZKj5VHXUHqPhXu8vbigdGoje/TkbNh 4PnmEnWNV7GM2uTdwjUpMv5vhG85nolHkKY4g0+XNPBJ7sw8TH13ZqISqob2VBKj EBXnywGfI9PSA6j0qRKyxNFZzkjvp3wFjrDaXR8INyPKWDWvSonN0ynVkMKezQaV lulZy5AqNeSddogq51dQ0UVXxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEReMwCN 28MXCFoL7txV6c7+vn9CMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyx9Y4JsBjXNk8eUPJ/z+WunSBqTtKOGdDBmxJ+O0FvuvbRVANbziVJi5riB 8CiB/Q2Nbs3Dzn9FE3lvhGvFsvCvLuVwi3c9zu3+cWkHuMlVd1k0dST5Z0cmtbC4 zwcb6yxzyvDPrpfa2ZOkwesGoUuKbWwYXaA5Pw8CoWMHdN+roWFOlqDLMGMNtl35 aH4iN2Hfkd/4hQFrbaRjogZTJpurJOAdlZuQoz3qQyDCRfWOl/fVbvgGElKSrlH1 0udaevnehaOvrNfIEss1wwYFSCmI0K1/X/+51c9KXcVkghHeaSTuVxHKOEeWuKoH rumHh8eI267Os0Hh3NkudtAvCw== -----END CERTIFICATE-----Generated at Mon Oct 12 18:48:25 2026 by rpki-client