$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft File: OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft (raw, json) Hash identifier: XDtJBhoDaxRv9S9+4+EqaCx+AFqL+MW4mQe9+CoSyao= Subject key identifier: 91:02:6C:E9:D9:A3:43:48:7E:30:64:DC:15:C3:CA:D8:99:D2:2A:A1 Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66 Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft Manifest number: EF Signing time: Tue 13 Oct 2026 07:04:25 +0000 Manifest this update: Tue 13 Oct 2026 07:04:25 +0000 Manifest next update: Tue 20 Oct 2026 07:04:25 +0000 Files and hashes: 1: OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl (hash: zWYpDdH76lBoyLOotNcqNU7H6gklDgnow5b3VlHqteI=) 2: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (hash: cTuEyMmmBY0Q1fvZoagoeb0YBBXseicP8yRI7E0DOBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 07:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66 Validity Not Before: Oct 13 07:04:25 2026 GMT Not After : Oct 20 07:04:25 2026 GMT Subject: CN=6acdd7f9-299a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:dc:96:f2:9c:e4:02:d2:75:30:d8:ec:07: 70:ad:04:c5:24:fe:f2:44:61:6b:60:0b:83:78:38: 40:43:e1:e2:b6:62:f5:50:d9:ed:dd:a0:65:88:aa: 7b:9e:07:29:32:b4:0c:4d:c8:c3:3c:ae:9f:56:1c: 23:63:48:ba:bb:3e:3c:64:93:15:2c:b9:38:8d:30: f0:1c:a3:44:dd:a0:4e:23:de:2e:ee:2d:81:fe:d7: 61:43:7b:67:f7:ba:81:58:42:dd:ba:d7:78:68:64: e3:46:47:2c:87:4e:94:5e:eb:76:0a:25:0c:93:f1: 9a:c3:03:c2:76:e5:ac:13:bf:e6:50:34:ed:75:49: df:89:32:a7:c6:c0:d5:da:cf:8a:55:14:3c:d9:d9: bf:c2:24:8d:b8:a4:56:9d:c9:9a:5d:e0:3f:a2:f3: 58:9d:82:0f:ac:e3:b6:11:e1:75:87:50:6d:c8:5f: 4b:a1:0d:93:38:0c:59:7a:c5:0d:90:79:3b:42:fb: 78:69:d8:73:b4:e6:fe:c4:d8:55:11:8b:5b:7e:55: 91:f8:3c:c9:3e:3e:c0:a3:1d:7b:4c:81:05:f5:e5: 00:fb:f4:df:d2:bb:55:c6:b6:16:65:3e:1a:5a:c2: 11:a9:77:a5:72:ac:fb:a5:76:01:4a:b3:bd:9f:ac: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:02:6C:E9:D9:A3:43:48:7E:30:64:DC:15:C3:CA:D8:99:D2:2A:A1 X509v3 Authority Key Identifier: keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:10:59:4c:2c:62:de:cd:2e:e4:2e:ee:07:c6:12:3e:ca:07: 7d:ea:52:f1:64:a4:48:e4:56:0d:16:b1:8a:b9:32:45:82:c7: f5:96:d1:59:11:ee:43:01:c0:3e:bf:97:66:00:c9:7a:be:7c: d6:49:bf:69:c5:5c:1a:fc:9d:82:5b:43:09:c3:56:c7:1f:37: e1:6a:05:ef:ce:ce:a8:20:ce:2b:2b:30:3e:d7:c4:57:c9:8a: 23:cf:fb:d8:23:86:d7:ad:8c:e3:32:1a:f9:17:53:b9:f3:02: 32:47:6f:c2:99:68:46:ed:df:83:4d:a5:c9:16:99:51:bd:1f: e4:78:fa:d5:11:63:a4:94:a9:3a:ae:fb:43:16:97:78:6c:e2: 80:42:f0:39:6a:d0:15:77:13:62:19:ef:21:d9:a4:95:dc:8c: 5f:1d:1c:e2:1c:7e:2c:95:17:99:97:6e:42:78:f1:76:cb:4c: e4:ce:a0:d5:ff:05:16:c5:6d:35:f3:d4:34:4e:9b:42:4a:6c: a8:f8:c1:5d:ab:d6:e6:96:4f:71:2b:d2:44:67:f7:e8:fc:1c: 04:f5:a9:a4:4c:36:c6:85:2c:44:2b:7a:5b:9c:84:cf:52:e2: fc:36:29:cf:4a:15:9d:44:f8:96:d3:4d:55:ad:23:cb:85:b6: bf:bd:aa:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGMEYxMTAvBgNVBAUTKDM4RUIwRDhFN0FGMUVCMTg3RDVBQTNGQzVGNzk0MTkx MzM4QkRCNjYwHhcNMjYxMDEzMDcwNDI1WhcNMjYxMDIwMDcwNDI1WjAYMRYwFAYD VQQDEw02YWNkZDdmOS0yOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTjclvKc5ALSdTDY7AdwrQTFJP7yRGFrYAuDeDhAQ+HitmL1UNnt3aBliKp7 ngcpMrQMTcjDPK6fVhwjY0i6uz48ZJMVLLk4jTDwHKNE3aBOI94u7i2B/tdhQ3tn 97qBWELdutd4aGTjRkcsh06UXut2CiUMk/GawwPCduWsE7/mUDTtdUnfiTKnxsDV 2s+KVRQ82dm/wiSNuKRWncmaXeA/ovNYnYIPrOO2EeF1h1BtyF9LoQ2TOAxZesUN kHk7Qvt4adhztOb+xNhVEYtbflWR+DzJPj7Aox17TIEF9eUA+/Tf0rtVxrYWZT4a WsIRqXelcqz7pXYBSrO9n6zINwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJECbOnZ o0NIfjBk3BXDytiZ0iqhMB8GA1UdIwQYMBaAFDjrDY568esYfVqj/F95QZEzi9tm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEYwRi81QzE4QTYxMjVE RTcxMUYwQTg2NzkxNEVDNEY5QUUwMi9PT3NOam5yeDZ4aDlXcVA4WDNsQmtUT0wy MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pc05qbnJ4NnhoOVdxUDhYM2xCa1RPTDIyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEYwRi81QzE4QTYxMjVERTcxMUYwQTg2NzkxNEVDNEY5QUUwMi9PT3NOam5yeDZ4 aDlXcVA4WDNsQmtUT0wyMlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjhBZTCxi3s0u5C7uB8YSPsoHfepS8WSkSORWDRaxirkyRYLH9ZbRWRHuQwHA Pr+XZgDJer581km/acVcGvydgltDCcNWxx834WoF787OqCDOKyswPtfEV8mKI8/7 2COG162M4zIa+RdTufMCMkdvwploRu3fg02lyRaZUb0f5Hj61RFjpJSpOq77QxaX eGzigELwOWrQFXcTYhnvIdmkldyMXx0c4hx+LJUXmZduQnjxdstM5M6g1f8FFsVt NfPUNE6bQkpsqPjBXavW5pZPcSvSRGf36PwcBPWppEw2xoUsRCt6W5yEz1Li/DYp z0oVnUT4ltNNVa0jy4W2v72qYQ== -----END CERTIFICATE-----Generated at Wed Oct 14 05:00:25 2026 by rpki-client