$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: lfbtsFgSGpN76NX6kpadSH+jkcUZd5gJ2t0f51mrrTM= Subject key identifier: 94:61:0A:5E:50:E3:53:4B:23:47:DC:F4:34:FD:50:D9:34:BE:4E:62 Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: 0148 Signing time: Tue 22 Sep 2026 14:16:19 +0000 Manifest this update: Tue 22 Sep 2026 14:16:18 +0000 Manifest next update: Tue 29 Sep 2026 14:16:18 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: v0CqBumGud3HQbxTqqwxpl1vCKbBpFJvXNQdoWu+tJg=) 2: 8AE793B2E9E311F0A43C19FF656F56BC.roa (hash: iLjsYldebmEc4jQ39cKvj356cAs2Ip03tkyos/Cg+/w=) 3: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Sep 22 14:16:18 2026 GMT Not After : Sep 29 14:16:18 2026 GMT Subject: CN=6ab28db3-7525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:b5:33:d3:27:ce:e6:0a:dd:af:54:e0:33: c3:14:ab:32:e7:4f:f3:bd:e9:5b:0d:8e:89:8a:9a: 64:bc:ca:da:f3:5c:02:b3:e0:f7:8e:b8:c0:d5:0c: 2c:80:99:b2:48:fa:20:ef:39:d4:d0:eb:15:74:ca: 54:6b:a3:62:4c:ee:72:f0:0d:35:d2:6e:43:a7:15: 6c:de:f2:d8:66:d3:80:fb:c3:3e:76:86:d4:c2:ab: 20:d3:4c:4d:bd:ba:80:90:73:97:2d:22:8d:4d:03: 1a:90:e7:9a:19:b2:1d:6e:68:84:96:80:f5:e7:54: e1:b5:20:ea:99:94:bd:83:28:89:f4:16:50:a8:f9: 51:4b:61:75:55:b4:d5:a0:2f:4b:a0:93:01:a6:6d: 21:34:39:03:df:9f:e8:05:a0:6b:a3:35:7a:c6:d8: be:ba:c4:78:d0:a9:ef:89:a2:50:f0:71:c6:e5:56: 4e:f7:05:15:5b:b3:52:3b:58:1b:a3:7d:78:a1:b0: 3a:ce:20:e3:50:72:61:d4:7d:77:e9:99:16:90:66: b1:2b:33:e9:4a:ab:8f:3e:63:99:35:99:fd:b3:cb: ec:b8:76:49:e1:ec:97:89:fb:1c:ef:9b:d6:b8:b2: 29:2f:f7:3e:e5:88:4a:70:54:2a:08:1d:ff:2e:42: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:0A:5E:50:E3:53:4B:23:47:DC:F4:34:FD:50:D9:34:BE:4E:62 X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6e:46:df:6d:b1:0c:ad:3d:1b:c9:26:ea:ba:26:79:a1:38: 8e:5f:00:59:bd:74:74:ea:a2:b2:39:fa:e0:72:ee:69:02:48: 9a:f3:63:98:eb:a4:bc:c9:51:d0:c2:19:cb:eb:6b:83:d8:dc: 49:39:dd:d6:67:87:81:af:b5:1e:c1:66:d5:9e:c5:27:7b:a0: e1:38:ea:10:53:4c:2d:e8:37:f9:66:b5:c0:b7:52:71:dd:c1: f1:ae:8e:6c:0e:83:31:c9:1a:80:d0:af:b5:05:5c:36:6c:02: 2b:b9:25:ca:99:cf:f4:c3:7b:06:31:6b:fc:75:10:4c:5a:39: 6d:17:c9:87:d3:9d:4e:4d:b6:8d:e0:4b:08:04:09:b9:41:e9: be:c1:1e:56:60:1e:4e:aa:14:7d:f1:32:f1:6f:f2:55:01:aa: f3:6e:b5:cd:b3:a1:0b:9a:4c:ea:07:03:a3:2b:5a:bc:80:63: 8b:80:ea:8c:1f:89:1d:4d:e4:0f:3c:8e:d6:14:1d:8a:fe:69: 82:cf:cf:41:72:96:bd:df:af:03:b0:eb:85:2a:9d:c0:16:60: b8:25:99:f4:0b:d6:49:33:b7:92:be:2e:39:38:c2:9d:0d:b9: 76:c2:48:18:ec:b6:d7:d3:a8:9a:f8:62:1d:e4:32:5f:52:9b: 25:44:43:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD MkExMEM5MjMwHhcNMjYwOTIyMTQxNjE4WhcNMjYwOTI5MTQxNjE4WjAYMRYwFAYD VQQDEw02YWIyOGRiMy03NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSS1M9MnzuYK3a9U4DPDFKsy50/zvelbDY6JippkvMra81wCs+D3jrjA1Qws gJmySPog7znU0OsVdMpUa6NiTO5y8A010m5DpxVs3vLYZtOA+8M+dobUwqsg00xN vbqAkHOXLSKNTQMakOeaGbIdbmiEloD151ThtSDqmZS9gyiJ9BZQqPlRS2F1VbTV oC9LoJMBpm0hNDkD35/oBaBrozV6xti+usR40KnviaJQ8HHG5VZO9wUVW7NSO1gb o314obA6ziDjUHJh1H136ZkWkGaxKzPpSquPPmOZNZn9s8vsuHZJ4eyXifsc75vW uLIpL/c+5YhKcFQqCB3/LkJvcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRhCl5Q 41NLI0fc9DT9UNk0vk5iMB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS8zNUVEQTkyRUNGMEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5 Y21TazFYN3BxZFRDb1F5U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACG5G322xDK09G8km6romeaE4jl8AWb10dOqisjn64HLuaQJImvNjmOukvMlR 0MIZy+trg9jcSTnd1meHga+1HsFm1Z7FJ3ug4TjqEFNMLeg3+Wa1wLdScd3B8a6O bA6DMckagNCvtQVcNmwCK7klypnP9MN7BjFr/HUQTFo5bRfJh9OdTk22jeBLCAQJ uUHpvsEeVmAeTqoUffEy8W/yVQGq8261zbOhC5pM6gcDoytavIBji4DqjB+JHU3k DzyO1hQdiv5pgs/PQXKWvd+vA7DrhSqdwBZguCWZ9AvWSTO3kr4uOTjCnQ25dsJI GOy219OomvhiHeQyX1KbJURDLw== -----END CERTIFICATE-----Generated at Wed Sep 23 09:22:13 2026 by rpki-client