$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: MSieNh9j2p8ILj/oQCKyJMMczkUuXva9+QNON2Fkrwg= Subject key identifier: CF:0A:42:E5:C0:FE:FC:B6:B6:2D:AC:08:C6:24:6E:3A:2A:A9:6A:9F Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0BBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B64 Signing time: Sun 04 Oct 2026 19:20:58 +0000 Manifest this update: Sun 04 Oct 2026 19:20:57 +0000 Manifest next update: Sun 11 Oct 2026 19:20:57 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: 8h33+OtfclxwIuCRgBmvC0DA6U5Nsq3fc00DH8ZAdA0=) 2: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) 3: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) 4: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3005 (0xbbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Oct 4 19:20:57 2026 GMT Not After : Oct 11 19:20:57 2026 GMT Subject: CN=6ac2a71a-137f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:11:91:d2:fd:96:2f:32:78:2f:84:be:eb: e4:47:47:bf:ef:11:10:0a:0a:e2:46:b7:dd:56:95: 6f:e4:a4:c2:b8:68:43:38:b4:62:df:af:63:6e:68: e5:5f:d1:f6:6f:35:99:75:97:88:fa:5c:ae:ea:bc: b3:2c:09:dc:56:a9:ad:9b:19:00:aa:32:e9:d5:aa: a4:86:88:b0:4e:4a:c9:01:6c:5d:b2:c9:6a:64:c1: ed:1f:f0:bd:28:34:8f:25:f5:e2:a8:87:29:69:66: dc:1f:83:41:73:90:87:eb:67:7f:cd:23:7d:f7:68: cb:05:e8:af:f5:7c:84:66:4f:ff:38:4a:94:45:79: 49:bb:a5:f3:e5:f5:5f:d7:fb:af:20:c7:db:d1:95: 12:80:ae:cd:fb:7f:3a:47:75:0c:25:78:78:cb:8b: c5:90:75:d5:13:8b:de:1c:5b:a8:c2:ec:a9:8e:fa: 84:2b:31:d2:1e:82:9b:4d:67:b4:b9:7f:47:2d:4a: bd:26:c6:7e:be:4f:6f:77:3d:77:b2:a0:ec:6e:98: 84:a7:e4:90:89:1f:cf:06:3c:28:33:c7:fd:c8:39: 60:1a:2f:94:02:b3:91:34:33:91:3a:21:45:da:e5: 6d:a0:d0:90:b7:76:2c:bb:ce:70:de:d1:c1:ce:75: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:42:E5:C0:FE:FC:B6:B6:2D:AC:08:C6:24:6E:3A:2A:A9:6A:9F X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7c:49:0b:01:27:6c:2a:d5:ee:d0:47:a4:86:8b:d8:16:94: 85:1f:7e:e0:d9:62:09:44:af:2d:d9:2a:61:3f:d2:f0:24:6c: 2f:f1:a3:ce:87:21:c7:98:d2:45:1b:95:86:93:1e:2e:31:bc: 07:d8:83:b8:35:f2:d2:26:37:6d:50:e5:09:c6:4b:8f:1c:45: 1f:cd:78:4b:b7:98:53:88:c0:c4:22:e1:f4:38:97:9f:4e:77: b9:b6:db:22:49:17:67:b3:1c:04:27:49:c2:f5:33:c0:2a:e9: 12:fb:9f:13:bc:33:99:59:0b:b3:1d:e5:5d:21:f7:54:fb:59: 07:89:9e:3a:14:28:23:a5:33:a7:85:6f:37:b0:e4:e9:3b:83: 94:be:85:98:64:3a:c3:1b:3c:e4:d3:6c:96:0e:3e:b8:6f:b0: 26:a1:ed:84:de:bf:43:88:c2:ca:ef:e9:63:46:e3:e1:57:f8: 42:62:f8:fd:a9:90:f7:79:d8:a5:b7:5a:70:66:aa:45:16:0d: 3c:32:88:b6:fd:10:90:cf:e2:71:5e:4a:fd:c4:16:b8:de:42: d2:e8:cf:35:2e:28:e0:a1:70:d3:c6:51:32:c8:2d:37:89:ec: 0e:06:a7:d1:a0:c0:d7:e7:e2:64:49:d1:55:a0:c3:a7:f1:3d: b5:7d:4a:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYxMDA0MTkyMDU3WhcNMjYxMDExMTkyMDU3WjAYMRYwFAYD VQQDEw02YWMyYTcxYS0xMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSERkdL9li8yeC+EvuvkR0e/7xEQCgriRrfdVpVv5KTCuGhDOLRi369jbmjl X9H2bzWZdZeI+lyu6ryzLAncVqmtmxkAqjLp1aqkhoiwTkrJAWxdsslqZMHtH/C9 KDSPJfXiqIcpaWbcH4NBc5CH62d/zSN992jLBeiv9XyEZk//OEqURXlJu6Xz5fVf 1/uvIMfb0ZUSgK7N+386R3UMJXh4y4vFkHXVE4veHFuowuypjvqEKzHSHoKbTWe0 uX9HLUq9JsZ+vk9vdz13sqDsbpiEp+SQiR/PBjwoM8f9yDlgGi+UArORNDOROiFF 2uVtoNCQt3Ysu85w3tHBznWRWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8KQuXA /vy2ti2sCMYkbjoqqWqfMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXxJCwEnbCrV7tBHpIaL2BaUhR9+4NliCUSvLdkqYT/S8CRsL/Gjzochx5jS RRuVhpMeLjG8B9iDuDXy0iY3bVDlCcZLjxxFH814S7eYU4jAxCLh9DiXn053ubbb IkkXZ7McBCdJwvUzwCrpEvufE7wzmVkLsx3lXSH3VPtZB4meOhQoI6Uzp4VvN7Dk 6TuDlL6FmGQ6wxs85NNslg4+uG+wJqHthN6/Q4jCyu/pY0bj4Vf4QmL4/amQ93nY pbdacGaqRRYNPDKItv0QkM/icV5K/cQWuN5C0ujPNS4o4KFw08ZRMsgtN4nsDgan 0aDA1+fiZEnRVaDDp/E9tX1K2w== -----END CERTIFICATE-----Generated at Mon Oct 5 02:19:43 2026 by rpki-client