$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: o3A6f1OdlhC9HC4OfBlxELBAP7YZ4Isi23nlW9FcAE8= Subject key identifier: 15:FA:8F:EA:5C:B9:DF:97:24:E5:FF:B1:5C:78:73:B3:85:90:50:01 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 08B9 Signing time: Fri 02 Oct 2026 20:50:07 +0000 Manifest this update: Fri 02 Oct 2026 20:50:06 +0000 Manifest next update: Fri 09 Oct 2026 20:50:06 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: cFTRA59ZQKiyBhiCBdSNsz2rjuGjTmeuRIk15lQDpg0=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: amf5yXNl2Dgr3AOxZkSrfGo/rK5Q2TPmeviiMZD4ZqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Oct 2 20:50:06 2026 GMT Not After : Oct 9 20:50:06 2026 GMT Subject: CN=6ac018ff-3a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:5e:9f:79:ee:ac:a5:32:80:bb:12:0e:3e: a2:55:a0:9f:a6:06:0b:30:38:0c:5b:dd:f7:77:89: b7:53:56:e7:7f:01:c5:7f:54:ae:74:35:9d:5a:1d: 0c:5d:5a:ad:3e:96:93:cd:02:63:8a:0c:c3:26:aa: eb:17:f1:c7:f2:6d:57:1c:30:28:c8:37:eb:ea:c7: 77:65:2d:06:3a:17:fc:12:3d:0d:f4:9a:11:12:fe: 32:9f:0f:c9:16:79:75:6b:33:5a:c7:4a:7c:ba:78: dc:21:e7:58:82:c2:25:73:c6:0d:d0:c1:65:99:fb: 6f:3e:cf:d6:9b:77:4b:21:7c:53:0c:78:96:41:5d: 90:ef:9a:c8:9e:8e:e6:36:89:1f:72:9c:76:4a:be: 8a:f6:e6:5a:39:19:67:ef:f0:ca:64:a6:eb:2b:13: 22:8d:19:80:1c:53:78:a9:f3:76:fe:5d:67:01:e0: ae:c4:42:d1:17:00:b8:7f:26:e8:69:7b:36:7a:29: 91:00:b2:7d:f3:a7:11:9e:b6:2e:94:01:20:b3:b8: 78:06:5b:6f:ba:a8:8d:da:0d:c3:3d:e5:59:ad:38: 4e:56:68:c6:1b:cb:a6:db:7f:11:da:35:64:8a:4f: 53:00:9d:fb:68:c3:81:50:e4:b8:ed:76:f1:38:1c: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FA:8F:EA:5C:B9:DF:97:24:E5:FF:B1:5C:78:73:B3:85:90:50:01 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:c1:d5:b2:2c:d0:2f:cb:de:6c:2f:68:92:d9:35:27:2f: 0f:45:9e:54:e3:36:03:0d:43:6c:03:de:11:fc:e0:d8:22:e9: 1d:53:41:76:ed:ed:a1:c5:a2:ef:0c:67:58:31:0f:7f:6d:e1: f5:bd:c6:e1:85:7f:d8:78:9c:5c:ad:cb:eb:83:85:8f:5d:f1: b3:9a:66:16:a5:95:dc:5b:08:1f:2d:3d:85:1a:75:00:0e:69: be:2d:88:6c:49:37:a0:8c:b1:95:a0:b8:ab:6e:40:2e:0f:10: 04:0a:37:ab:ce:cf:67:43:53:20:44:d3:32:69:51:e6:cf:f8: 9b:fb:74:e5:c3:43:a1:ec:ee:ad:8f:d6:9b:1b:69:52:4c:11: b7:78:f6:eb:0f:8c:e3:1c:8b:52:84:89:24:ac:56:5a:cf:37: 37:11:c0:96:2f:4c:bf:cc:94:70:fb:38:d4:49:6a:62:78:6e: a4:c1:ea:91:4c:f5:ba:e3:a5:a6:8d:0e:e6:d0:a2:db:bc:f3: e3:0a:ab:20:a4:60:ef:e9:f3:44:33:ff:f3:c2:96:a7:69:94: d5:14:d3:ba:8d:00:a2:ce:89:f2:9b:52:9a:41:33:bd:9a:65: 26:5d:b0:ee:d3:2b:5d:a7:7b:89:37:33:b7:5f:b8:3e:de:0d: 5b:a3:27:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjYxMDAyMjA1MDA2WhcNMjYxMDA5MjA1MDA2WjAYMRYwFAYD VQQDEw02YWMwMThmZi0zYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgRen3nurKUygLsSDj6iVaCfpgYLMDgMW933d4m3U1bnfwHFf1SudDWdWh0M XVqtPpaTzQJjigzDJqrrF/HH8m1XHDAoyDfr6sd3ZS0GOhf8Ej0N9JoREv4ynw/J Fnl1azNax0p8unjcIedYgsIlc8YN0MFlmftvPs/Wm3dLIXxTDHiWQV2Q75rIno7m Nokfcpx2Sr6K9uZaORln7/DKZKbrKxMijRmAHFN4qfN2/l1nAeCuxELRFwC4fybo aXs2eimRALJ986cRnrYulAEgs7h4BltvuqiN2g3DPeVZrThOVmjGG8um238R2jVk ik9TAJ37aMOBUOS47XbxOBxjBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBX6j+pc ud+XJOX/sVx4c7OFkFABMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOyzB1bIs0C/L3mwvaJLZNScvD0WeVOM2Aw1DbAPeEfzg2CLpHVNBdu3tocWi 7wxnWDEPf23h9b3G4YV/2HicXK3L64OFj13xs5pmFqWV3FsIHy09hRp1AA5pvi2I bEk3oIyxlaC4q25ALg8QBAo3q87PZ0NTIETTMmlR5s/4m/t05cNDoezurY/Wmxtp UkwRt3j26w+M4xyLUoSJJKxWWs83NxHAli9Mv8yUcPs41ElqYnhupMHqkUz1uuOl po0O5tCi27zz4wqrIKRg7+nzRDP/88KWp2mU1RTTuo0Aos6J8ptSmkEzvZplJl2w 7tMrXad7iTczt1+4Pt4NW6Mn3w== -----END CERTIFICATE-----Generated at Sun Oct 4 12:15:29 2026 by rpki-client