$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: WF5r2Yl9XzMjJ/Alz4zlg585SdTSqTJtEMMTYhe9MWM= Subject key identifier: 81:F2:A2:4E:CC:E3:2F:04:81:35:93:E4:65:4A:F5:D0:55:A0:18:E0 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 094F Signing time: Sun 20 Sep 2026 20:06:10 +0000 Manifest this update: Sun 20 Sep 2026 20:06:09 +0000 Manifest next update: Sun 27 Sep 2026 20:06:09 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: KCrpNDhOpMltWM7B68DpOv69SU65+bkExth/I9WSaV4=) 2: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: kK9g04kyEiFnynqhVR38EeQ3FQu8/W3rZrXFesWAU4w=) 3: 43BCAA10601011F1B53A223F8947A888.roa (hash: UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=) 4: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: TwfuImduumf2E6CwFlSoq4jZU9n/ol3F3dOv5htetzY=) 5: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=) 6: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=) 7: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: hAU4qUdvHl3msSyOtoY08felpEvTOnOlkZDcpV81OCM=) 8: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Sep 20 20:06:09 2026 GMT Not After : Sep 27 20:06:09 2026 GMT Subject: CN=6ab03cb2-5308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:b6:10:09:b5:ce:98:e9:17:36:cc:ef:f1: cb:54:d1:fe:86:29:a2:f1:6e:c1:57:2c:00:03:19: 6f:63:7f:d6:0d:74:d1:f7:34:14:cc:cf:36:f6:e8: 1d:38:13:6e:54:10:6d:a4:42:d1:8f:4e:d3:6d:be: 26:a9:7f:a0:be:2b:7f:80:26:a7:46:5f:f5:8b:48: 94:b0:c4:90:22:a4:d9:a3:06:76:9c:3e:75:3e:53: fc:5d:ac:55:81:0f:e8:d5:29:12:26:38:ce:f0:6b: df:63:fe:5c:5c:70:65:7b:32:d7:f1:a1:18:13:e4: df:34:a5:a4:c3:0c:a6:39:59:6e:a6:82:44:30:a0: fa:72:67:bc:2a:c0:7b:b3:dc:5c:c3:78:66:17:e8: 5f:9d:f1:12:ff:0d:5f:64:80:fe:40:84:be:4e:3c: aa:91:33:e0:01:55:7d:01:fd:19:bf:6a:d3:9b:36: c5:3d:23:9c:e2:9a:45:93:7f:0a:87:ef:e7:1d:ff: 8a:15:bd:23:e3:03:d1:79:a2:04:63:c7:e6:bc:32: 2c:c8:01:71:49:4c:77:01:a6:61:3c:a6:15:fc:a5: ea:4a:7b:95:fa:59:9a:18:28:89:8e:90:13:0b:32: 8f:7a:13:4e:c8:94:9e:e2:58:b5:e4:3f:84:5c:4a: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:A2:4E:CC:E3:2F:04:81:35:93:E4:65:4A:F5:D0:55:A0:18:E0 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:76:c6:c5:74:0a:77:78:56:7c:30:5d:a6:d4:81:24:24:09: 30:d8:94:38:bb:94:65:5e:de:bb:c5:8c:c8:e9:92:54:23:d6: 38:56:60:23:85:74:a0:c1:ee:d8:6a:6f:bb:4d:0c:c6:35:64: 22:52:cc:5b:64:ff:42:71:45:64:11:e3:b3:94:1b:a0:0f:ac: a3:46:05:57:27:d0:5d:21:1e:c8:1f:29:91:27:0a:09:ec:9d: 25:7f:86:1a:06:d0:5f:06:88:6a:17:f1:07:d8:63:d2:63:cc: 9b:0e:86:3a:4f:7d:2e:fe:ec:ab:a6:9b:b4:5f:4b:bf:59:d3: 69:dd:47:4b:4a:c2:c3:a9:ca:cb:49:f7:09:1d:9a:ee:e6:cb: 26:e7:46:94:38:8c:3b:8f:e3:dc:5d:c4:c1:d5:9c:39:5b:1b: 4f:1d:42:d8:23:3e:a7:bb:d1:10:b4:6b:20:6b:ab:f8:ad:ac: f1:d4:b9:6d:c3:1c:f0:4e:39:ec:d5:c6:02:5a:93:1b:6d:95: 41:27:52:0e:7f:bb:67:36:08:e0:64:75:3b:28:ab:26:71:64: aa:26:d2:60:a1:b6:1a:33:4e:09:1f:a6:b8:82:c3:f5:41:b7: 0d:31:63:f9:92:52:00:25:49:f5:c9:69:65:a3:24:f4:03:ff: 46:2f:b7:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYwOTIwMjAwNjA5WhcNMjYwOTI3MjAwNjA5WjAYMRYwFAYD VQQDEw02YWIwM2NiMi01MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru+2EAm1zpjpFzbM7/HLVNH+himi8W7BVywAAxlvY3/WDXTR9zQUzM829ugd OBNuVBBtpELRj07Tbb4mqX+gvit/gCanRl/1i0iUsMSQIqTZowZ2nD51PlP8XaxV gQ/o1SkSJjjO8GvfY/5cXHBlezLX8aEYE+TfNKWkwwymOVlupoJEMKD6cme8KsB7 s9xcw3hmF+hfnfES/w1fZID+QIS+TjyqkTPgAVV9Af0Zv2rTmzbFPSOc4ppFk38K h+/nHf+KFb0j4wPReaIEY8fmvDIsyAFxSUx3AaZhPKYV/KXqSnuV+lmaGCiJjpAT CzKPehNOyJSe4li15D+EXEqNRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHyok7M 4y8EgTWT5GVK9dBVoBjgMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHbGxXQKd3hWfDBdptSBJCQJMNiUOLuUZV7eu8WMyOmSVCPWOFZgI4V0oMHu 2Gpvu00MxjVkIlLMW2T/QnFFZBHjs5QboA+so0YFVyfQXSEeyB8pkScKCeydJX+G GgbQXwaIahfxB9hj0mPMmw6GOk99Lv7sq6abtF9Lv1nTad1HS0rCw6nKy0n3CR2a 7ubLJudGlDiMO4/j3F3EwdWcOVsbTx1C2CM+p7vRELRrIGur+K2s8dS5bcMc8E45 7NXGAlqTG22VQSdSDn+7ZzYI4GR1OyirJnFkqibSYKG2GjNOCR+muILD9UG3DTFj +ZJSACVJ9clpZaMk9AP/Ri+3vA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:13:44 2026 by rpki-client