$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: H8l9XqS1Ks94lNUH5s3hFqZzmetdTwMuOG3i5oOTfXM= Subject key identifier: 57:91:F3:A4:18:2A:CB:54:E5:45:F9:71:69:3F:C7:A3:EF:B9:1B:55 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 35C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 35A3 Signing time: Sun 20 Sep 2026 14:30:01 +0000 Manifest this update: Sun 20 Sep 2026 14:30:00 +0000 Manifest next update: Sun 27 Sep 2026 14:30:00 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: pP21wIA/z/N6/Eg30jdG3KVGY7fGILCRFlGsyzhOLKo=) 2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13763 (0x35c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Sep 20 14:30:00 2026 GMT Not After : Sep 27 14:30:00 2026 GMT Subject: CN=6aafede9-b8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:fe:f6:c9:e1:77:ef:06:04:c8:9f:5d:54: 3c:3f:bd:38:f9:93:c0:f8:d5:7a:76:12:26:49:a7: ef:46:07:df:ec:a6:9e:09:a0:e3:6e:de:a8:cf:5c: fe:52:53:b8:54:e8:a2:2d:83:44:dc:4d:80:40:95: 27:22:e2:9f:ac:dd:91:80:b5:a1:e4:f9:3f:37:70: 8b:fe:06:64:06:b3:1f:c8:05:c0:44:0f:03:6b:16: d8:ed:4b:e8:70:a2:04:2a:72:f5:a3:17:c5:3b:58: 47:12:77:64:80:4c:8a:ae:61:6a:ee:07:f7:cc:9d: fa:4c:cf:3f:00:c5:55:ed:af:ec:04:09:29:ea:cb: 32:54:9f:73:62:88:86:73:b8:88:fd:e6:e1:ce:9e: a7:79:2f:33:2f:46:1d:8e:be:06:ab:ad:28:05:72: 8b:79:11:99:62:7f:e1:aa:53:9d:08:b7:4d:0d:b5: aa:25:b9:0a:92:c2:4b:bf:25:b3:1f:37:19:c6:09: 1e:b7:af:03:6b:6f:c7:20:7e:a3:f8:a6:08:a4:78: 13:0f:9c:b7:44:9e:1c:a9:16:be:51:aa:76:0e:2f: a2:9c:74:38:eb:8b:76:01:52:6f:b3:4f:fd:62:83: ec:ec:38:a6:ff:23:87:d2:87:9c:77:01:6b:fe:88: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:91:F3:A4:18:2A:CB:54:E5:45:F9:71:69:3F:C7:A3:EF:B9:1B:55 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2e:94:77:5e:37:ac:2d:5a:38:47:57:1d:49:6e:ec:eb:25: 2d:04:f5:ba:67:77:3c:8f:c6:0a:fa:2a:57:7f:2f:b5:6f:40: 09:88:8b:80:fa:d0:8a:b8:cc:d6:ae:f5:42:89:be:82:40:89: 33:93:6d:47:8f:aa:6f:af:b0:27:2f:96:4f:50:6e:47:69:0f: df:5f:0d:74:76:8b:4f:04:29:35:3e:5c:c8:a7:ac:70:36:f6: 03:06:3a:06:fe:80:09:49:b5:1d:3d:46:2f:f1:e8:1e:ab:22: b8:e7:6f:4f:76:cc:d6:14:ed:a6:95:ff:d4:a1:df:cc:6c:ce: c4:14:f1:cf:c5:81:d8:35:06:2d:7f:cc:d6:aa:ec:25:26:a2: 5b:ac:62:27:d7:9b:4e:99:e3:81:36:14:19:dc:f2:37:7c:12: 8d:72:7c:c0:59:3d:eb:ee:ea:59:3a:9c:66:67:fd:d1:b8:4e: 3b:bb:22:c7:62:17:18:f9:de:09:de:79:53:f6:bb:07:a7:4e: 9a:01:72:f6:f3:cc:a2:59:60:c7:46:fd:82:4f:27:20:cf:30: 24:dd:7b:6d:63:b8:46:1c:26:82:22:58:fe:d6:fe:08:fe:9a: d7:12:1c:7e:06:20:3a:df:25:63:12:9e:e9:f1:59:81:24:b4: af:18:a6:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwOTIwMTQzMDAwWhcNMjYwOTI3MTQzMDAwWjAYMRYwFAYD VQQDEw02YWFmZWRlOS1iOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu3+9snhd+8GBMifXVQ8P704+ZPA+NV6dhImSafvRgff7KaeCaDjbt6oz1z+ UlO4VOiiLYNE3E2AQJUnIuKfrN2RgLWh5Pk/N3CL/gZkBrMfyAXARA8DaxbY7Uvo cKIEKnL1oxfFO1hHEndkgEyKrmFq7gf3zJ36TM8/AMVV7a/sBAkp6ssyVJ9zYoiG c7iI/ebhzp6neS8zL0Ydjr4Gq60oBXKLeRGZYn/hqlOdCLdNDbWqJbkKksJLvyWz HzcZxgket68Da2/HIH6j+KYIpHgTD5y3RJ4cqRa+Uap2Di+inHQ464t2AVJvs0/9 YoPs7Dim/yOH0oecdwFr/ojsVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFeR86QY KstU5UX5cWk/x6PvuRtVMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXy6Ud143rC1aOEdXHUlu7OslLQT1umd3PI/GCvoqV38vtW9ACYiLgPrQirjM 1q71Qom+gkCJM5NtR4+qb6+wJy+WT1BuR2kP318NdHaLTwQpNT5cyKescDb2AwY6 Bv6ACUm1HT1GL/HoHqsiuOdvT3bM1hTtppX/1KHfzGzOxBTxz8WB2DUGLX/M1qrs JSaiW6xiJ9ebTpnjgTYUGdzyN3wSjXJ8wFk96+7qWTqcZmf90bhOO7six2IXGPne Cd55U/a7B6dOmgFy9vPMollgx0b9gk8nIM8wJN17bWO4RhwmgiJY/tb+CP6a1xIc fgYgOt8lYxKe6fFZgSS0rximAA== -----END CERTIFICATE-----Generated at Tue Sep 22 08:30:54 2026 by rpki-client