$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft File: 0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json) Hash identifier: Q/LSyJpBbulJv2wlDVi1rjYhuziHbq1YmPcbPUfV7UQ= Subject key identifier: 50:09:30:8D:01:8A:7F:DB:B5:27:6E:E0:5E:24:C0:92:A2:19:5E:82 Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 Certificate issuer: /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft Manifest number: 25 Signing time: Sat 19 Sep 2026 08:50:45 +0000 Manifest this update: Sat 19 Sep 2026 08:50:45 +0000 Manifest next update: Sat 26 Sep 2026 08:50:45 +0000 Files and hashes: 1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: mob1UJXN+DW1TFUQpIIda0vTxQHTmfSqKilnmg3GnmA=) 2: 331B257C948D11F1A5BE36406611F970.roa (hash: HNA4rjO5UGOdW/eL7CIfPG7iC2OgFOjS6hhZEI3sMeg=) 3: 328CBC1A948D11F1A5BE36406611F970.roa (hash: 1F7cx/vFo7/QfoO4QwD2fE5604MofvsFO/wXSVuF0sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Validity Not Before: Sep 19 08:50:45 2026 GMT Not After : Sep 26 08:50:45 2026 GMT Subject: CN=6aae4ce5-2392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:49:54:c9:bc:a5:f6:f1:d2:d9:a5:e1:66: 8a:cc:0c:63:0e:16:db:e5:59:72:60:81:59:60:9e: fd:09:6d:a2:a0:7f:c1:8f:11:af:96:95:7f:ed:50: 25:f4:d3:3c:8a:48:1c:3e:0d:ec:10:d2:e7:86:2a: 5e:80:ca:7b:14:a2:cd:28:07:a9:2b:75:48:70:c5: e1:37:81:cc:ca:4f:e8:b4:18:ed:b3:a6:96:45:30: 8f:d0:d6:6e:09:89:1e:82:e7:11:9c:73:4e:a3:a3: 85:76:fc:db:ce:55:f7:21:e7:21:64:d1:39:32:3c: f2:93:fa:1a:91:c7:f4:cc:9e:28:b3:84:3b:95:05: 6a:7c:f6:dc:44:4c:73:b8:31:95:63:b6:18:d1:aa: 2f:e5:5d:52:5b:64:63:42:4a:3a:0d:87:1d:c0:f6: ce:1b:2b:4e:41:de:ad:da:af:52:f0:e4:6f:30:8d: 4e:3f:a0:30:de:5f:01:7f:a0:a4:1b:c9:42:ca:71: 31:63:c8:29:a2:1b:bc:b1:84:ef:ed:06:e3:67:22: 42:6f:d3:8e:16:31:1c:f9:72:ef:bb:c0:b5:92:f4: 31:54:d8:9b:ba:b3:93:c6:7c:7c:ac:1d:d7:7a:4d: c7:f2:aa:a0:01:13:f8:71:6a:39:6b:35:c4:ba:b0: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:09:30:8D:01:8A:7F:DB:B5:27:6E:E0:5E:24:C0:92:A2:19:5E:82 X509v3 Authority Key Identifier: keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:df:23:ea:f4:ba:91:55:7d:58:3d:15:b9:62:c3:05:95:3a: 72:de:05:c2:9a:84:33:b2:27:74:7f:31:78:e9:af:32:81:39: 4b:bd:13:2c:68:17:37:04:86:0b:bd:3e:4c:4f:d3:19:65:4a: 31:5a:7c:90:e8:75:df:75:35:36:00:56:54:7b:e8:55:17:41: 91:fe:e4:d4:26:1b:48:f3:7a:c1:76:28:cf:90:7f:1c:96:44: 13:c3:e8:c2:a7:ac:fd:76:9c:aa:f1:7b:d5:b6:2f:bc:ed:40: 49:d4:ec:79:eb:e4:16:2f:57:92:d8:c3:b4:e8:ec:c8:7e:20: 47:61:f5:17:9f:c1:a1:c3:df:22:57:a1:bf:68:87:eb:77:3f: f2:2f:22:f3:08:28:59:4a:76:b4:5c:a9:27:91:c7:d3:b2:a8: 69:06:0d:ee:49:46:2b:c8:5d:bf:e5:5e:b0:cd:e7:5b:73:bb: 47:21:1a:b6:c0:8c:f4:07:a9:09:26:f8:c1:86:5b:2e:f1:6a: c0:09:cf:b1:3e:8d:6e:71:0c:04:ae:64:91:bf:ee:a8:15:7b: 7f:6b:4b:81:25:81:f9:9b:51:85:6e:32:f0:ea:f3:31:e0:f7: 39:23:57:f6:ea:fd:c6:76:62:4f:41:cb:9e:99:cf:2e:0d:d1: 85:a8:50:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzgzNjExMC8GA1UEBRMoRDA1RjRCNjVFRjgwQjUyRDNGN0ExNEYyREMxOTVDQ0Yy NjM5MjNDMzAeFw0yNjA5MTkwODUwNDVaFw0yNjA5MjYwODUwNDVaMBgxFjAUBgNV BAMTDTZhYWU0Y2U1LTIzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZhUlUybyl9vHS2aXhZorMDGMOFtvlWXJggVlgnv0JbaKgf8GPEa+WlX/tUCX0 0zyKSBw+DewQ0ueGKl6AynsUos0oB6krdUhwxeE3gczKT+i0GO2zppZFMI/Q1m4J iR6C5xGcc06jo4V2/NvOVfch5yFk0TkyPPKT+hqRx/TMniizhDuVBWp89txETHO4 MZVjthjRqi/lXVJbZGNCSjoNhx3A9s4bK05B3q3ar1Lw5G8wjU4/oDDeXwF/oKQb yULKcTFjyCmiG7yxhO/tBuNnIkJv044WMRz5cu+7wLWS9DFU2Ju6s5PGfHysHdd6 TcfyqqABE/hxajlrNcS6sJm3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUAkwjQGK f9u1J27gXiTAkqIZXoIwHwYDVR0jBBgwFoAU0F9LZe+AtS0/ehTy3BlczyY5I8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3ODM2L0ZEMkY3MDVDODAx NTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMwX2VoVHkzQmxjenlZNUk4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMEY5TFplLUF0UzBfZWhUeTNCbGN6eVk1SThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 ODM2L0ZEMkY3MDVDODAxNTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMw X2VoVHkzQmxjenlZNUk4TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAC3yPq9LqRVX1YPRW5YsMFlTpy3gXCmoQzsid0fzF46a8ygTlLvRMsaBc3BIYL vT5MT9MZZUoxWnyQ6HXfdTU2AFZUe+hVF0GR/uTUJhtI83rBdijPkH8clkQTw+jC p6z9dpyq8XvVti+87UBJ1Ox56+QWL1eS2MO06OzIfiBHYfUXn8Ghw98iV6G/aIfr dz/yLyLzCChZSna0XKknkcfTsqhpBg3uSUYryF2/5V6wzedbc7tHIRq2wIz0B6kJ JvjBhlsu8WrACc+xPo1ucQwErmSRv+6oFXt/a0uBJYH5m1GFbjLw6vMx4Pc5I1f2 6v3GdmJPQcuemc8uDdGFqFAl -----END CERTIFICATE-----Generated at Sun Sep 20 16:50:20 2026 by rpki-client