$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: XnhMMmrNtm7jdpRU5XSuCVDyRr1yHXJGnfjXOVBGedU= Subject key identifier: 58:9E:B9:5D:52:B5:F5:13:0C:F7:74:71:A8:61:F3:2F:81:62:BD:59 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 3689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 3609 Signing time: Sun 20 Sep 2026 14:47:30 +0000 Manifest this update: Sun 20 Sep 2026 14:47:29 +0000 Manifest next update: Sun 27 Sep 2026 14:47:29 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: mOsZ790XvLVdvjHntqEZWnOTEM3nmMe3G6bAUHid83s=) 2: 3556F236591D11F1B1E1CE2EC9833773.roa (hash: xZnAAlTCl+JT5OotaR0JxL8HG25CqlkoxYP53N4yaTg=) 3: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: bGRZ0FpspSCf0cAveUKjR/NLCR8lXup6exlYiK4KDOA=) 4: 87C417D4AD1811F1A4C6F2B14011F970.roa (hash: F9QyhjA4QNdilU+ShIfAj3a6gliCU8PF/F7dlar+ZO8=) 5: ZK6dqsz8SNKa9BIRG-wwKoRLm1s.asa (hash: Dz7ClXtb4X0yBRjApTXpt2z96UXZ22eyuTkwMR3LjYw=) 6: y3XF_d_Fz4sNYXjELzqHJsYq6XU.asa (hash: phuSwfjdb7QT4a5GmgCtJ2giqSwUMfci6tv/INJIFq8=) 7: sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa (hash: I6p3UURilsrl6l6rhn0wT3MhCoiuv3Y8LPk+lcr5FbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13961 (0x3689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Sep 20 14:47:29 2026 GMT Not After : Sep 27 14:47:29 2026 GMT Subject: CN=6aaff201-2890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:41:af:23:02:30:05:54:34:64:ab:5a:9d: 95:e4:69:35:18:a2:28:c4:5c:88:0b:23:da:21:46: 35:dc:94:a6:b2:46:c1:5f:96:a3:6b:8f:b2:9c:2d: fe:69:ea:a8:51:87:fb:03:11:08:55:75:e3:37:99: e9:78:78:29:37:ce:44:5b:fd:01:21:5b:7c:2c:2d: 07:08:93:a5:46:63:bb:ad:18:c5:06:ce:d9:6d:7a: f9:3e:12:01:9b:7b:25:43:50:0d:3c:f5:1e:41:7b: 2f:e4:e3:0d:02:33:e3:cf:6e:d2:60:5c:57:01:d0: e2:98:50:3d:8c:e4:02:e7:e8:c7:96:01:ea:0d:51: ec:eb:9e:8a:89:2f:ee:52:4d:30:69:e5:96:05:37: 5d:33:85:84:61:57:7d:fe:3f:bd:f4:b3:be:e4:53: 71:9e:45:45:21:9e:4e:97:57:db:d3:be:46:f6:74: bd:6f:2d:d8:2d:64:dd:59:2d:31:d0:64:f1:54:49: 58:ff:5f:f1:1b:06:36:b1:7b:07:37:2c:61:34:fa: 53:5b:bd:8e:7a:03:19:2b:21:dd:85:c1:4c:a6:91: 45:74:75:0b:39:21:b6:92:4f:dd:39:7d:f2:3e:57: 28:72:6c:f5:bd:9d:37:1d:82:fa:2b:42:0a:57:d0: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:B9:5D:52:B5:F5:13:0C:F7:74:71:A8:61:F3:2F:81:62:BD:59 X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:2f:8d:36:52:bc:05:a7:df:6c:14:89:ee:0d:b9:4a:28:9d: 78:33:68:bb:c4:b3:8b:db:dd:65:32:aa:af:b2:b9:38:a6:15: 04:09:04:d5:93:35:66:97:a1:90:ff:a2:24:31:fd:f4:39:d9: cc:bd:be:43:cd:57:63:d2:17:35:a2:92:2f:74:7a:da:32:f0: 30:6b:a9:4d:69:7c:e0:94:79:dd:db:e8:8c:08:c9:b9:d3:fc: 50:46:9c:54:de:52:5a:a0:c5:64:3a:4b:87:09:2c:ea:1d:82: 2a:1e:8a:a3:ba:cb:03:b8:65:9b:41:3e:48:32:34:44:79:d7: 3f:3d:5d:5f:8a:a3:c0:bf:5d:0c:31:c0:b0:aa:66:88:b5:32: 7d:17:81:26:78:8e:04:4d:a0:69:a3:ce:7d:11:a5:bf:87:2f: 6d:2d:49:06:e6:3e:25:a4:e4:f2:29:f8:06:c5:34:85:c4:f7: 6d:6e:65:48:81:4e:9c:8b:d8:ab:35:c1:3a:d6:1c:1d:0a:db: 40:27:99:77:0b:c6:be:f7:d3:ec:45:2d:5f:c2:7b:c8:61:fe: 58:5c:32:ee:97:1d:68:5b:f7:79:21:bd:93:48:63:38:71:a4: 78:37:1e:e0:c6:ba:fe:6b:28:cf:8a:a1:e3:0d:e9:9f:2c:b4: 1a:69:c4:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYwOTIwMTQ0NzI5WhcNMjYwOTI3MTQ0NzI5WjAYMRYwFAYD VQQDEw02YWFmZjIwMS0yODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3FBryMCMAVUNGSrWp2V5Gk1GKIoxFyICyPaIUY13JSmskbBX5aja4+ynC3+ aeqoUYf7AxEIVXXjN5npeHgpN85EW/0BIVt8LC0HCJOlRmO7rRjFBs7ZbXr5PhIB m3slQ1ANPPUeQXsv5OMNAjPjz27SYFxXAdDimFA9jOQC5+jHlgHqDVHs656KiS/u Uk0waeWWBTddM4WEYVd9/j+99LO+5FNxnkVFIZ5Ol1fb075G9nS9by3YLWTdWS0x 0GTxVElY/1/xGwY2sXsHNyxhNPpTW72OegMZKyHdhcFMppFFdHULOSG2kk/dOX3y Plcocmz1vZ03HYL6K0IKV9CQAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFieuV1S tfUTDPd0cahh8y+BYr1ZMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0C+NNlK8BaffbBSJ7g25SiideDNou8Szi9vdZTKqr7K5OKYVBAkE1ZM1Zpeh kP+iJDH99DnZzL2+Q81XY9IXNaKSL3R62jLwMGupTWl84JR53dvojAjJudP8UEac VN5SWqDFZDpLhwks6h2CKh6Ko7rLA7hlm0E+SDI0RHnXPz1dX4qjwL9dDDHAsKpm iLUyfReBJniOBE2gaaPOfRGlv4cvbS1JBuY+JaTk8in4BsU0hcT3bW5lSIFOnIvY qzXBOtYcHQrbQCeZdwvGvvfT7EUtX8J7yGH+WFwy7pcdaFv3eSG9k0hjOHGkeDce 4Ma6/msoz4qh4w3pnyy0GmnEdA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:54:27 2026 by rpki-client