$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: 0vExHUPz8AKevd9o41St7PxJUPjgFORlCohdjyab8wM= Subject key identifier: A1:D0:83:25:D7:06:51:24:C0:BB:C8:E3:D4:31:D5:79:98:04:AC:F5 Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 0539 Signing time: Sun 20 Sep 2026 23:21:42 +0000 Manifest this update: Sun 20 Sep 2026 23:21:41 +0000 Manifest next update: Sun 27 Sep 2026 23:21:41 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: WTSSeZUtbxhsYGrWFfT7GtiR0iuVBt0UMsZVaIa2lPA=) 2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=) 3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Sep 20 23:21:41 2026 GMT Not After : Sep 27 23:21:41 2026 GMT Subject: CN=6ab06a86-ada8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:68:11:60:3a:f7:73:f1:dc:7c:bd:4d:7b: a1:cc:96:1b:cd:c6:16:4f:b9:78:ea:6d:50:cb:c7: 71:8b:89:4b:1f:5c:6a:5e:c1:ed:a8:11:97:05:59: 24:0c:eb:5e:7d:85:8b:e7:07:53:ab:5e:70:e1:ad: 27:e6:e2:57:0f:94:65:af:51:83:de:1c:71:ac:75: e0:d4:cd:de:13:6b:e3:77:71:7d:fd:bd:75:c3:9b: 20:cc:a1:ce:81:cd:51:25:15:22:fc:c5:f5:66:10: cc:62:bf:28:29:8c:b5:b5:66:0f:a0:f3:4a:c2:d5: 30:3a:f0:39:37:99:e2:7a:b4:b0:cf:df:78:01:74: 89:9b:bb:45:46:fe:73:ef:b1:aa:08:82:60:ba:8c: 40:30:dd:cd:46:82:4f:e7:ee:3e:e6:4c:83:63:c5: da:66:a9:e4:fa:21:a2:a2:e4:58:68:8a:f5:02:e5: 06:82:18:79:6e:41:2f:39:5d:0d:fe:4b:13:33:bf: e5:27:c4:b5:d8:fc:f6:bd:d5:5f:76:46:9a:36:1a: 0b:85:20:d6:e1:c5:e3:85:47:1f:25:92:39:93:4e: 77:b1:84:4a:3b:90:00:cb:ab:cc:aa:b6:86:f7:7f: 49:d8:ac:a7:58:87:f6:e5:43:03:64:98:0c:a2:03: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D0:83:25:D7:06:51:24:C0:BB:C8:E3:D4:31:D5:79:98:04:AC:F5 X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f1:65:6d:c1:73:de:1c:12:9d:c0:6c:66:46:00:e2:34:dd:7e: e7:ca:11:a8:35:56:47:15:13:87:a6:97:0d:f2:3f:52:be:4d: fa:81:fc:91:7d:82:23:5c:6b:7b:87:58:8f:ac:98:4d:96:b1: 06:ca:6a:bb:29:00:c6:38:85:8a:78:ec:37:e0:41:98:12:dd: 46:d1:9c:77:81:f3:9c:17:89:dd:18:e9:9d:ee:a3:77:81:9b: 4e:ee:46:35:7c:58:5a:e1:83:6f:be:16:b7:08:1c:bb:61:d7: 71:6e:4d:69:b0:8e:ea:73:cc:61:c7:8f:d9:33:d0:53:f9:2c: c8:45:58:61:8d:25:a0:e4:e7:24:1d:5e:16:5b:92:a3:4e:88: 49:97:29:a2:aa:40:5a:f2:fc:35:5a:f4:96:f8:61:97:ee:67: 82:db:b0:d2:0c:43:e8:9b:c3:b4:3a:94:15:b3:05:65:66:ad: 5f:91:ff:ed:2e:1b:ea:93:57:6c:e2:80:3a:de:91:3d:b6:a4: b5:15:22:29:96:40:34:68:67:11:65:0c:61:c8:0a:08:a1:d6: 8b:db:3c:58:81:00:8a:e5:bf:b1:97:fe:db:15:70:fb:d9:81: 89:40:5d:0b:80:c7:f9:09:59:02:cd:e5:97:5a:d4:ff:b0:ee: a7:a8:cf:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjYwOTIwMjMyMTQxWhcNMjYwOTI3MjMyMTQxWjAYMRYwFAYD VQQDEw02YWIwNmE4Ni1hZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6VoEWA693Px3Hy9TXuhzJYbzcYWT7l46m1Qy8dxi4lLH1xqXsHtqBGXBVkk DOtefYWL5wdTq15w4a0n5uJXD5Rlr1GD3hxxrHXg1M3eE2vjd3F9/b11w5sgzKHO gc1RJRUi/MX1ZhDMYr8oKYy1tWYPoPNKwtUwOvA5N5nierSwz994AXSJm7tFRv5z 77GqCIJguoxAMN3NRoJP5+4+5kyDY8XaZqnk+iGiouRYaIr1AuUGghh5bkEvOV0N /ksTM7/lJ8S12Pz2vdVfdkaaNhoLhSDW4cXjhUcfJZI5k053sYRKO5AAy6vMqraG 939J2KynWIf25UMDZJgMogMzTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHQgyXX BlEkwLvI49Qx1XmYBKz1MB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8WVtwXPeHBKdwGxmRgDiNN1+58oRqDVWRxUTh6aXDfI/Ur5N+oH8kX2CI1xr e4dYj6yYTZaxBspquykAxjiFinjsN+BBmBLdRtGcd4HznBeJ3Rjpne6jd4GbTu5G NXxYWuGDb74Wtwgcu2HXcW5NabCO6nPMYceP2TPQU/ksyEVYYY0loOTnJB1eFluS o06ISZcpoqpAWvL8NVr0lvhhl+5ngtuw0gxD6JvDtDqUFbMFZWatX5H/7S4b6pNX bOKAOt6RPbaktRUiKZZANGhnEWUMYcgKCKHWi9s8WIEAiuW/sZf+2xVw+9mBiUBd C4DH+QlZAs3ll1rU/7Dup6jPww== -----END CERTIFICATE-----Generated at Mon Sep 21 13:55:51 2026 by rpki-client