$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json) Hash identifier: EtgnPUBani63SnfagBwekSkR/LsLuX+blCJxXwLk1H0= Subject key identifier: AD:C6:14:89:2B:0D:F8:22:C2:F2:78:47:10:B9:EE:F5:D3:8F:E5:53 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft Manifest number: 02C2 Signing time: Wed 23 Sep 2026 01:11:40 +0000 Manifest this update: Wed 23 Sep 2026 01:11:40 +0000 Manifest next update: Wed 30 Sep 2026 01:11:40 +0000 Files and hashes: 1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: Ji/hX+1BqjUs/xtGS8zJBeNPiqpOanK3b07IJYdOf8Q=) 2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: Ouit03LRtJZqOFfBSglxXn5xGezeH2cCBVrluC7GA64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Sep 23 01:11:40 2026 GMT Not After : Sep 30 01:11:40 2026 GMT Subject: CN=6ab3274c-5532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:77:c9:92:52:36:66:b8:d7:2f:36:c5:84: a4:07:8e:33:a1:1a:a7:aa:6e:08:06:59:20:a5:4a: 29:40:51:a0:a4:24:89:3a:79:e7:6f:aa:c8:0c:7d: 53:5e:ea:8b:c2:50:6f:6e:40:68:99:10:19:ac:1a: f3:10:5c:77:73:c0:b7:29:83:f2:bb:8c:7f:6e:d7: b6:7c:a6:02:83:78:a5:0b:6c:9a:de:a0:64:b7:85: 73:bb:f3:6d:98:b5:4c:a2:dc:6d:78:fb:da:87:0f: ef:c2:38:63:6e:ee:c8:00:7a:7d:ab:75:89:65:cc: 59:ae:0b:f2:de:0d:8c:63:1f:b6:3f:12:4d:5d:6a: 29:d3:d2:fe:93:f0:39:2c:18:af:ac:d2:33:fe:df: 99:93:57:09:8f:54:9c:1d:01:48:5c:9e:4f:e1:2f: bf:62:46:78:8e:f6:b2:ad:36:f7:e2:1e:f9:c7:e8: a0:ba:45:3f:4f:40:15:1f:24:14:1b:c0:db:8b:ac: 63:82:be:4d:94:f9:a9:dc:57:3c:47:cc:73:98:c9: cd:f6:78:e8:c4:4c:2f:ff:00:e1:0f:05:83:cc:3e: 55:cc:a4:ad:d0:c6:68:69:2c:e6:a3:ef:f1:8b:6b: b2:24:7c:2e:4d:7b:61:95:b0:48:6f:35:b0:8d:d8: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C6:14:89:2B:0D:F8:22:C2:F2:78:47:10:B9:EE:F5:D3:8F:E5:53 X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:0a:78:e1:4e:c1:fb:17:4f:6f:05:16:d5:f6:18:c3:51: c8:e9:59:5b:bc:ee:b7:16:9a:d0:3f:9e:88:1f:72:a0:85:5c: d6:dc:65:c6:93:11:5b:9c:10:76:1f:af:fe:9f:4b:2e:bb:7e: 2d:76:db:76:d1:63:f0:5e:96:04:a1:74:64:82:bd:8f:d4:43: 76:11:fa:c6:87:bf:1a:0d:83:81:38:ff:86:89:23:22:5a:db: 68:45:00:9b:92:3f:b6:4e:5e:4e:cf:28:eb:89:e8:86:4d:0e: 5c:64:86:e8:e3:9f:f8:7b:2e:d1:2a:39:3a:5e:82:2b:5a:d6: 92:2c:30:aa:dd:c3:a2:c8:b5:46:c6:b0:06:54:40:2f:37:83: fa:d7:00:25:fb:60:89:93:64:04:ab:b3:67:1b:c8:ff:df:88: 56:b1:44:8c:d9:63:ec:48:fa:fc:1d:aa:31:c3:ed:8b:a6:07: e0:68:ec:f9:e2:34:df:fa:b5:92:6b:3f:0d:8e:24:49:4b:4a: f7:06:06:d0:76:83:69:f9:9c:bc:19:d9:d0:34:17:1f:c5:4d: 79:3a:f5:c8:e9:1a:f0:73:21:f9:2a:aa:cd:19:77:cb:f9:99: e7:35:3c:18:39:15:33:83:77:8b:d8:ed:cd:9b:99:ba:ce:da: 29:39:d6:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjYwOTIzMDExMTQwWhcNMjYwOTMwMDExMTQwWjAYMRYwFAYD VQQDEw02YWIzMjc0Yy01NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjOJ3yZJSNma41y82xYSkB44zoRqnqm4IBlkgpUopQFGgpCSJOnnnb6rIDH1T XuqLwlBvbkBomRAZrBrzEFx3c8C3KYPyu4x/bte2fKYCg3ilC2ya3qBkt4Vzu/Nt mLVMotxtePvahw/vwjhjbu7IAHp9q3WJZcxZrgvy3g2MYx+2PxJNXWop09L+k/A5 LBivrNIz/t+Zk1cJj1ScHQFIXJ5P4S+/YkZ4jvayrTb34h75x+igukU/T0AVHyQU G8Dbi6xjgr5NlPmp3Fc8R8xzmMnN9njoxEwv/wDhDwWDzD5VzKSt0MZoaSzmo+/x i2uyJHwuTXthlbBIbzWwjdjiywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3GFIkr DfgiwvJ4RxC57vXTj+VTMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ4Qi81RjExRTAyQTdGNzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlL bFl1VDJ2ajBzbklCV3cyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASjIKeOFOwfsXT28FFtX2GMNRyOlZW7zutxaa0D+eiB9yoIVc1txlxpMRW5wQ dh+v/p9LLrt+LXbbdtFj8F6WBKF0ZIK9j9RDdhH6xoe/Gg2DgTj/hokjIlrbaEUA m5I/tk5eTs8o64nohk0OXGSG6OOf+Hsu0So5Ol6CK1rWkiwwqt3Dosi1RsawBlRA LzeD+tcAJftgiZNkBKuzZxvI/9+IVrFEjNlj7Ej6/B2qMcPti6YH4Gjs+eI03/q1 kms/DY4kSUtK9wYG0HaDafmcvBnZ0DQXH8VNeTr1yOka8HMh+SqqzRl3y/mZ5zU8 GDkVM4N3i9jtzZuZus7aKTnWrg== -----END CERTIFICATE-----Generated at Wed Sep 23 08:39:11 2026 by rpki-client