$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: 8QVh7xWK5mCz59700aQiLr+BYmW0TJELXT0yZGxjoEs= Subject key identifier: F5:D1:76:2E:AA:BE:E7:66:95:F3:43:45:0C:A8:AC:24:34:64:62:E9 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 0123 Signing time: Mon 21 Sep 2026 05:50:59 +0000 Manifest this update: Mon 21 Sep 2026 05:50:58 +0000 Manifest next update: Mon 28 Sep 2026 05:50:58 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: gDGnwh6zthiIi5zRWTi24I45D/IlhvmeNjMpXzVTf94=) 2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=) 3: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=) 4: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Sep 21 05:50:58 2026 GMT Not After : Sep 28 05:50:58 2026 GMT Subject: CN=6ab0c5c3-66c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:92:8d:5c:11:9f:17:0f:15:1e:b6:c4:b0:17: 9c:bc:37:b5:e6:c5:57:03:85:7f:d4:80:1e:b8:ff: d7:02:d1:f6:e5:9a:76:72:25:93:9a:f9:b9:96:f0: 2a:b4:78:0f:d8:68:12:2f:b8:40:4f:93:9e:e5:f7: ec:2c:af:cf:6d:9e:9a:56:5b:63:31:db:bf:93:97: 55:33:e4:35:01:cb:d8:93:1c:e6:eb:5c:c2:cd:46: a8:a9:bb:08:40:cb:f1:ee:36:79:07:f9:32:16:d2: fb:68:22:ce:19:c5:c7:9a:13:c8:94:d1:fc:0a:ef: ce:2a:80:96:a5:60:db:18:14:32:aa:eb:55:94:af: 9f:29:30:80:70:d0:d2:74:7e:8d:81:cf:86:ef:47: 4c:95:93:1a:ee:bb:fe:d3:17:88:33:10:38:b9:e6: e2:53:61:89:f0:1b:8a:32:cb:09:f8:d1:87:37:1c: 55:60:68:76:ca:d4:8a:35:c1:5e:e0:22:41:16:ff: a9:d6:6d:40:fd:a8:72:3e:39:6c:ce:d0:72:3e:24: c9:66:9a:51:bd:aa:cb:1d:91:de:c0:35:1d:8c:4a: 13:91:39:a6:43:32:90:4c:3b:60:f8:3c:ab:05:a6: 69:9a:fb:0c:0a:52:75:2b:cb:cf:db:20:a5:66:89: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:76:2E:AA:BE:E7:66:95:F3:43:45:0C:A8:AC:24:34:64:62:E9 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:99:14:e6:20:9f:39:18:03:6c:1b:be:ae:06:72:7e:43:82: c9:19:63:39:54:56:0c:a5:5b:dd:34:29:14:9c:b0:1f:e4:af: c6:ce:ba:ef:c6:80:d2:6f:d0:34:86:b2:ff:0e:84:b4:2f:d5: 5f:7e:50:51:84:06:41:c2:77:e7:64:c3:c8:56:3e:67:86:fb: f2:8c:83:09:de:f5:61:5b:92:91:0d:e6:cf:8c:90:68:c4:1b: 9c:15:0d:f1:50:f6:9c:d7:74:01:62:95:63:09:c9:d8:b6:85: ff:58:eb:8c:d6:ca:b9:77:79:16:9a:73:5d:ba:8c:45:e4:e0: c4:56:77:83:87:24:6f:63:bc:a6:d6:09:4d:9a:df:d8:b7:5e: ee:06:23:27:39:60:af:a4:91:37:57:b0:5f:2b:28:93:d2:24: 0e:ad:97:04:6c:f8:21:df:ab:59:c6:a1:83:ee:38:bd:bf:25: 62:39:28:ac:9b:40:39:1d:ac:05:9d:d7:d3:8e:22:a3:33:8f: 7d:13:0b:34:ab:8c:88:6c:e4:fc:7a:10:fd:9d:32:09:46:93: cb:c6:3d:ff:a9:6d:79:a2:2d:35:ff:39:6d:ec:fd:05:69:98: 60:70:2e:6a:ab:53:05:2b:a9:da:b4:7a:00:7d:33:8d:0e:12: 22:c7:0b:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjYwOTIxMDU1MDU4WhcNMjYwOTI4MDU1MDU4WjAYMRYwFAYD VQQDEw02YWIwYzVjMy02NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJKNXBGfFw8VHrbEsBecvDe15sVXA4V/1IAeuP/XAtH25Zp2ciWTmvm5lvAq tHgP2GgSL7hAT5Oe5ffsLK/PbZ6aVltjMdu/k5dVM+Q1AcvYkxzm61zCzUaoqbsI QMvx7jZ5B/kyFtL7aCLOGcXHmhPIlNH8Cu/OKoCWpWDbGBQyqutVlK+fKTCAcNDS dH6Ngc+G70dMlZMa7rv+0xeIMxA4uebiU2GJ8BuKMssJ+NGHNxxVYGh2ytSKNcFe 4CJBFv+p1m1A/ahyPjlsztByPiTJZppRvarLHZHewDUdjEoTkTmmQzKQTDtg+Dyr BaZpmvsMClJ1K8vP2yClZomIywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXRdi6q vudmlfNDRQyorCQ0ZGLpMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFpkU5iCfORgDbBu+rgZyfkOCyRljOVRWDKVb3TQpFJywH+Svxs6678aA0m/Q NIay/w6EtC/VX35QUYQGQcJ352TDyFY+Z4b78oyDCd71YVuSkQ3mz4yQaMQbnBUN 8VD2nNd0AWKVYwnJ2LaF/1jrjNbKuXd5FppzXbqMReTgxFZ3g4ckb2O8ptYJTZrf 2Lde7gYjJzlgr6SRN1ewXysok9IkDq2XBGz4Id+rWcahg+44vb8lYjkorJtAOR2s BZ3X044iozOPfRMLNKuMiGzk/HoQ/Z0yCUaTy8Y9/6lteaItNf85bez9BWmYYHAu aqtTBSup2rR6AH0zjQ4SIscLTg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:37:00 2026 by rpki-client