$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: SROpnQKc7uagu7OL8dzO0rUXoVvgx646qQW8zjKJXdk= Subject key identifier: 8B:FD:E1:0B:0E:1C:06:8A:F8:60:75:E9:50:C4:7D:18:51:D8:FA:7D Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 84 Signing time: Mon 21 Sep 2026 07:41:11 +0000 Manifest this update: Mon 21 Sep 2026 07:41:11 +0000 Manifest next update: Mon 28 Sep 2026 07:41:11 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: dZa42JNFLfvUXcLqlHnbE6SxNJmoj7kMgVVvfjiAvsk=) 2: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) 3: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Sep 21 07:41:11 2026 GMT Not After : Sep 28 07:41:11 2026 GMT Subject: CN=6ab0df97-2a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:da:fb:9d:25:42:c3:04:6c:82:34:c9:2b: bf:55:42:be:f3:9c:51:60:c7:61:bc:c6:4d:17:2c: 8b:a7:57:15:5d:1c:eb:c3:9d:28:dd:aa:82:34:9f: 7f:99:8e:cc:6b:67:39:c6:c7:ac:47:b3:40:5b:d1: fd:27:34:d6:72:6c:56:38:b0:3f:d0:c5:07:49:da: 30:04:f0:68:f3:61:0d:05:fc:04:55:d1:ff:59:4a: ce:12:4f:37:e5:3a:12:2f:2f:86:c1:21:93:5a:50: 7a:9a:34:33:71:a1:7b:7b:05:e3:4a:4d:65:19:7f: 5d:29:b2:b0:8d:af:55:66:ae:ef:54:2f:b5:fb:63: 63:49:5e:30:90:55:5f:4b:f6:a7:de:0e:24:4d:51: 41:a3:92:71:f5:b3:1f:6f:9a:80:6f:d7:3d:12:b4: 57:9f:8c:68:80:9b:3b:a0:ae:15:cc:d9:e4:b1:c0: 7e:25:ea:e5:ae:ae:68:54:98:3c:40:44:42:ca:23: 7e:95:3d:5c:fe:a3:18:fe:44:87:66:31:b2:a9:44: bd:85:d3:ab:0d:50:2b:f3:81:84:a3:13:d7:0c:0f: db:3e:e0:b6:cb:8e:99:ea:4c:e2:21:4a:c6:ed:fa: c5:85:9c:8a:53:b2:06:32:41:21:97:92:c1:4d:72: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FD:E1:0B:0E:1C:06:8A:F8:60:75:E9:50:C4:7D:18:51:D8:FA:7D X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3d:e1:93:12:27:5c:ba:63:1b:25:ca:92:0c:cd:4d:4f:dd: 37:95:f0:3f:17:0a:9e:ee:0e:b3:43:8a:93:17:7b:b5:5e:b9: bf:8a:a8:57:fe:2a:85:6d:10:35:d0:aa:cf:d2:b5:1a:97:ea: 79:7b:9b:12:1c:c3:bd:8b:b1:93:f7:17:93:71:a0:41:94:04: 5a:2a:4b:f0:6e:9c:40:0a:37:4e:a5:cf:56:12:8d:9b:6b:85: 2a:08:73:8d:f4:d4:d1:9a:82:3e:6f:35:29:30:6a:8f:54:f7: 55:29:a2:9f:ff:5d:a7:ff:ca:81:4a:b7:7f:99:f1:18:2a:3a: b4:37:55:50:58:ef:02:86:82:73:7d:e3:76:ce:ed:c1:5e:99: 3f:14:e7:c1:14:6f:2c:ad:e5:33:2c:9a:2a:c1:8c:14:1c:84: 60:dc:1e:dc:96:c3:39:00:44:1e:ed:bb:a7:23:37:c0:dc:03: 6a:c8:ac:28:26:df:d5:a6:34:21:89:c5:5d:99:60:95:4b:a7: 47:6d:fe:f6:f7:a9:e1:1c:59:d2:5e:75:aa:96:25:42:4f:67: bd:19:c9:6f:29:81:3e:dd:42:08:bc:73:b2:7f:fb:43:2e:00: 82:fc:5b:cd:fb:61:d4:06:bd:f9:71:4f:d4:9e:d5:81:44:cf: 2b:3f:c0:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RjcxMTAvBgNVBAUTKDk4RTk5NUJDM0E0RkYyQ0QwOEM2RTM1NTRCNjYzNzRC NjY5NzkyNzAwHhcNMjYwOTIxMDc0MTExWhcNMjYwOTI4MDc0MTExWjAYMRYwFAYD VQQDEw02YWIwZGY5Ny0yYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh+Da+50lQsMEbII0ySu/VUK+85xRYMdhvMZNFyyLp1cVXRzrw50o3aqCNJ9/ mY7Ma2c5xsesR7NAW9H9JzTWcmxWOLA/0MUHSdowBPBo82ENBfwEVdH/WUrOEk83 5ToSLy+GwSGTWlB6mjQzcaF7ewXjSk1lGX9dKbKwja9VZq7vVC+1+2NjSV4wkFVf S/an3g4kTVFBo5Jx9bMfb5qAb9c9ErRXn4xogJs7oK4VzNnkscB+Jerlrq5oVJg8 QERCyiN+lT1c/qMY/kSHZjGyqUS9hdOrDVAr84GEoxPXDA/bPuC2y46Z6kziIUrG 7frFhZyKU7IGMkEhl5LBTXL3UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIv94QsO HAaK+GB16VDEfRhR2Pp9MB8GA1UdIwQYMBaAFJjplbw6T/LNCMbjVUtmN0tml5Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGNy9GMERDQ0RENEYx RjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhzMEl4dU5WUzJZM1MyYVhr bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGNy9GMERDQ0RENEYxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy9tT21WdkRwUDhz MEl4dU5WUzJZM1MyYVhrbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZD3hkxInXLpjGyXKkgzNTU/dN5XwPxcKnu4Os0OKkxd7tV65v4qoV/4qhW0Q NdCqz9K1GpfqeXubEhzDvYuxk/cXk3GgQZQEWipL8G6cQAo3TqXPVhKNm2uFKghz jfTU0ZqCPm81KTBqj1T3VSmin/9dp//KgUq3f5nxGCo6tDdVUFjvAoaCc33jds7t wV6ZPxTnwRRvLK3lMyyaKsGMFByEYNwe3JbDOQBEHu27pyM3wNwDasisKCbf1aY0 IYnFXZlglUunR23+9vep4RxZ0l51qpYlQk9nvRnJbymBPt1CCLxzsn/7Qy4Agvxb zfth1Aa9+XFP1J7VgUTPKz/Afw== -----END CERTIFICATE-----Generated at Wed Sep 23 01:24:35 2026 by rpki-client