$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: GCROyVdtPK6iPLq2hmX5+iV5fpni0AwIfVk2sWXWhME= Subject key identifier: 41:07:17:34:4F:41:82:93:61:DD:7D:80:EE:96:76:3F:41:8C:43:5D Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 2678 Signing time: Thu 24 Sep 2026 15:40:29 +0000 Manifest this update: Thu 24 Sep 2026 15:40:28 +0000 Manifest next update: Thu 01 Oct 2026 15:40:28 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: Ft4/8Ez9xr1lOaHeFHvqBHHYuQYvMekpLZbIoljMpHw=) 2: 86D7036A0E1011F1BB4320E6093D8C67.roa (hash: 1LNNXkd+Q9F2+XYaHqlpvMElvIg5HAkgkTyIWH3Jb34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9864 (0x2688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Sep 24 15:40:28 2026 GMT Not After : Oct 1 15:40:28 2026 GMT Subject: CN=6ab5446c-4686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:8c:47:a5:06:10:be:5a:47:89:4e:4b:c2: cb:18:63:c8:0a:96:68:6c:40:41:a8:9b:0d:b8:26: ff:0b:5a:ea:6a:5b:d8:95:42:43:7a:6f:2c:6a:16: 75:ab:7c:58:1c:a5:c6:6a:f7:18:a6:08:15:90:43: ee:dc:29:ff:15:8a:06:48:a6:cc:50:ae:f0:03:0f: e6:87:00:10:33:7f:3d:82:f6:5d:39:d7:75:3a:48: 1e:4a:fe:47:3c:a4:ec:12:f4:d9:a1:2c:8c:44:cf: 95:32:31:27:27:29:f2:3b:06:40:1d:ed:bb:70:e8: 88:22:d2:f9:63:d1:1c:5a:2e:1e:34:db:73:f1:5e: ad:76:82:7e:77:69:e7:62:1d:5e:a6:e6:d3:3e:eb: 32:e9:ec:9a:2b:e7:2c:15:59:34:83:bd:df:2b:28: 71:f9:2f:7f:85:3b:1e:48:8d:39:93:04:46:c7:37: 6d:88:e0:ca:12:0f:4d:07:92:37:92:51:61:77:e9: b4:1b:11:c4:cc:8c:16:a1:41:15:0d:95:f2:f3:ce: 13:72:1e:1e:6b:8b:1d:0e:0d:ee:48:d2:bc:78:ef: 07:2a:e2:a3:83:26:50:5b:bb:af:90:b7:41:45:b4: d1:35:c3:55:42:53:3b:73:6f:24:31:83:cb:1d:ff: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:17:34:4F:41:82:93:61:DD:7D:80:EE:96:76:3F:41:8C:43:5D X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:99:f2:04:fe:43:ac:40:5d:99:56:03:37:7e:93:33:bd:b5: 27:b7:a3:83:74:26:81:6a:f9:e7:76:e5:4f:da:12:f8:de:25: 33:63:6b:80:35:39:84:1a:51:80:2d:12:dc:ad:68:28:2c:6c: ab:df:8d:70:d7:08:fa:23:82:5e:2c:65:14:e8:bc:68:32:b7: c3:ad:1f:0b:a2:59:95:b8:f9:46:45:09:3a:f3:7f:43:af:0c: cf:4a:6c:f8:85:22:c0:c5:e8:dd:cf:0f:d5:18:7c:43:49:43: 30:a7:13:c8:ae:33:eb:99:4e:31:b3:ae:3c:03:e8:53:19:f5: 4d:71:98:ec:7b:7b:9e:45:2a:e0:af:c5:48:20:db:3c:cf:e3: e8:7c:d2:c5:32:c2:e0:06:68:19:1c:d9:cd:55:5a:28:5d:86: 33:04:39:22:c1:f0:db:c8:b4:ff:a9:79:f5:a8:4a:d9:4d:b3: 5f:3b:c2:8d:e6:62:e2:27:b6:43:d5:2a:0a:ce:2c:80:49:5b: 8f:5b:95:91:ae:6b:18:51:a6:ad:0a:0e:ac:88:2c:3e:16:a3: 0d:15:4b:0a:6c:25:cf:7b:a7:70:a2:5d:e5:68:de:78:01:18: 5d:23:e5:9d:57:19:36:b5:2a:fc:e2:d4:15:89:71:a6:71:8a: 92:89:b6:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwOTI0MTU0MDI4WhcNMjYxMDAxMTU0MDI4WjAYMRYwFAYD VQQDEw02YWI1NDQ2Yy00Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx6MR6UGEL5aR4lOS8LLGGPICpZobEBBqJsNuCb/C1rqalvYlUJDem8sahZ1 q3xYHKXGavcYpggVkEPu3Cn/FYoGSKbMUK7wAw/mhwAQM389gvZdOdd1OkgeSv5H PKTsEvTZoSyMRM+VMjEnJynyOwZAHe27cOiIItL5Y9EcWi4eNNtz8V6tdoJ+d2nn Yh1epubTPusy6eyaK+csFVk0g73fKyhx+S9/hTseSI05kwRGxzdtiODKEg9NB5I3 klFhd+m0GxHEzIwWoUEVDZXy884Tch4ea4sdDg3uSNK8eO8HKuKjgyZQW7uvkLdB RbTRNcNVQlM7c28kMYPLHf8o7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEHFzRP QYKTYd19gO6Wdj9BjENdMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT5nyBP5DrEBdmVYDN36TM721J7ejg3QmgWr553blT9oS+N4lM2NrgDU5hBpR gC0S3K1oKCxsq9+NcNcI+iOCXixlFOi8aDK3w60fC6JZlbj5RkUJOvN/Q68Mz0ps +IUiwMXo3c8P1Rh8Q0lDMKcTyK4z65lOMbOuPAPoUxn1TXGY7Ht7nkUq4K/FSCDb PM/j6HzSxTLC4AZoGRzZzVVaKF2GMwQ5IsHw28i0/6l59ahK2U2zXzvCjeZi4ie2 Q9UqCs4sgElbj1uVka5rGFGmrQoOrIgsPhajDRVLCmwlz3uncKJd5WjeeAEYXSPl nVcZNrUq/OLUFYlxpnGKkom2kQ== -----END CERTIFICATE-----Generated at Sat Sep 26 15:50:18 2026 by rpki-client