$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft File: ojnN7_dPIz48Qo4CDpx5vds1KSg.mft (raw, json) Hash identifier: XukRdCID4DaQjrtmMubzuZQ3IWCeOVyIN0B1P+THDnY= Subject key identifier: 22:5E:D6:EE:E0:07:9A:7C:51:D8:EE:F9:A2:30:9C:05:B1:73:9C:32 Authority key identifier: A2:39:CD:EF:F7:4F:23:3E:3C:42:8E:02:0E:9C:79:BD:DB:35:29:28 Certificate issuer: /CN=A91E4704/serialNumber=A239CDEFF74F233E3C428E020E9C79BDDB352928 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft Manifest number: 17 Signing time: Mon 21 Sep 2026 08:59:07 +0000 Manifest this update: Mon 21 Sep 2026 08:59:06 +0000 Manifest next update: Mon 28 Sep 2026 08:59:06 +0000 Files and hashes: 1: ojnN7_dPIz48Qo4CDpx5vds1KSg.crl (hash: wT6ugLAgffxU8LCYvPeu4+2mLQ/WBvLrJrsIKCrZ39g=) 2: 422FEB0E960B11F1882391855A11F970.roa (hash: B/i3KVph+rvj3AkSdH9oCSSR9OyCeTsar/y4bMbulQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.crl rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4704, serialNumber=A239CDEFF74F233E3C428E020E9C79BDDB352928 Validity Not Before: Sep 21 08:59:06 2026 GMT Not After : Sep 28 08:59:06 2026 GMT Subject: CN=6ab0f1db-2a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:d4:8e:4b:c0:44:8b:71:ac:d8:fc:0b:42: 5a:6e:c1:91:00:d5:7e:cb:a1:5f:50:97:dc:45:20: bb:a3:b4:da:ad:f0:5c:cc:e7:9a:bb:b3:bc:c1:0a: 64:4a:f6:bf:2d:96:68:d6:9e:fe:31:29:7c:f5:1f: 71:90:c8:ce:be:62:99:02:cf:23:bc:39:84:60:65: 6f:a6:e1:8b:9c:ef:d7:4d:44:3b:b8:6b:f8:e2:38: c6:5a:62:c8:7c:fe:c3:8c:8e:62:72:35:79:e1:13: 30:97:42:a6:23:8e:b8:09:fe:71:73:90:c2:fa:91: 63:d2:da:a0:2d:40:63:d5:29:cf:6c:f2:e3:08:de: 60:8f:03:fc:b6:83:dd:66:a0:73:fe:7c:f0:c1:7a: 26:9a:e4:cd:03:f7:d8:97:f4:49:37:ed:cb:ea:09: f7:7f:83:ba:fc:cc:6a:62:3f:ec:50:1e:5f:29:5d: 23:91:99:15:57:e3:a6:08:34:1a:54:d3:4d:84:22: a8:2f:af:88:13:59:1f:a9:49:12:dc:16:69:19:e9: df:dc:fc:b8:73:03:98:21:19:ed:71:74:33:be:6e: cf:6a:bf:8a:18:72:45:9c:ec:7c:d2:a3:88:42:02: 61:06:d4:f0:fc:97:19:ed:5b:71:57:6c:62:36:03: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:D6:EE:E0:07:9A:7C:51:D8:EE:F9:A2:30:9C:05:B1:73:9C:32 X509v3 Authority Key Identifier: keyid:A2:39:CD:EF:F7:4F:23:3E:3C:42:8E:02:0E:9C:79:BD:DB:35:29:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ojnN7_dPIz48Qo4CDpx5vds1KSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4704/B8DA4F7A960A11F1AA0A4E315A11F970/ojnN7_dPIz48Qo4CDpx5vds1KSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8b:d7:26:41:28:1f:e5:7c:a6:52:0a:a0:c1:7b:cf:33:a4: d9:9b:c2:69:d3:64:9d:46:fc:5c:a5:90:04:d5:6a:87:c6:a4: e6:40:0d:e3:38:70:ac:13:10:be:68:e2:48:e6:d5:d3:78:1a: bb:fd:f4:4c:91:62:8c:11:9b:b6:c1:0f:5f:db:ae:42:85:2b: bd:fc:58:db:d1:51:69:05:58:ea:0d:8d:b7:28:d0:d0:f1:d5: 1f:db:1a:0a:83:98:99:86:79:47:13:22:9b:5a:d1:0b:5f:a6: 05:3b:3b:6a:30:d4:c5:a6:0f:c8:96:4e:4f:91:47:d4:d3:31: bd:53:92:33:bc:05:68:1a:3f:e3:22:d8:f0:1f:6c:dd:30:d1: 1b:ba:57:07:eb:21:0f:2a:cd:7f:41:8b:46:90:3e:28:6c:3d: 3a:6f:30:4f:b3:f3:6a:3c:4c:86:fd:34:bd:22:85:35:f7:30: 62:4b:61:53:6d:a9:d8:9b:e1:25:b3:5c:e2:2b:c0:ab:a7:f4: 5e:d9:63:7f:72:e2:6e:72:1d:a0:fc:09:d0:f8:15:9b:5c:9d: b1:af:20:b8:55:db:5b:87:ee:66:00:1b:4a:7e:e9:ec:8e:59: 64:2a:99:11:b2:91:95:4c:bd:c6:35:c3:79:58:d8:cb:c5:d2: e3:b6:c6:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwNDExMC8GA1UEBRMoQTIzOUNERUZGNzRGMjMzRTNDNDI4RTAyMEU5Qzc5QkRE QjM1MjkyODAeFw0yNjA5MjEwODU5MDZaFw0yNjA5MjgwODU5MDZaMBgxFjAUBgNV BAMTDTZhYjBmMWRiLTJhMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJUdSOS8BEi3Gs2PwLQlpuwZEA1X7LoV9Ql9xFILujtNqt8FzM55q7s7zBCmRK 9r8tlmjWnv4xKXz1H3GQyM6+YpkCzyO8OYRgZW+m4Yuc79dNRDu4a/jiOMZaYsh8 /sOMjmJyNXnhEzCXQqYjjrgJ/nFzkML6kWPS2qAtQGPVKc9s8uMI3mCPA/y2g91m oHP+fPDBeiaa5M0D99iX9Ek37cvqCfd/g7r8zGpiP+xQHl8pXSORmRVX46YINBpU 002EIqgvr4gTWR+pSRLcFmkZ6d/c/LhzA5ghGe1xdDO+bs9qv4oYckWc7HzSo4hC AmEG1PD8lxntW3FXbGI2A3JlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIl7W7uAH mnxR2O75ojCcBbFznDIwHwYDVR0jBBgwFoAUojnN7/dPIz48Qo4CDpx5vds1KSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzA0L0I4REE0RjdBOTYw QTExRjFBQTBBNEUzMTVBMTFGOTcwL29qbk43X2RQSXo0OFFvNENEcHg1dmRzMUtT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2puTjdfZFBJejQ4UW80Q0RweDV2ZHMxS1NnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 NzA0L0I4REE0RjdBOTYwQTExRjFBQTBBNEUzMTVBMTFGOTcwL29qbk43X2RQSXo0 OFFvNENEcHg1dmRzMUtTZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVi9cmQSgf5XymUgqgwXvPM6TZm8Jp02SdRvxcpZAE1WqHxqTmQA3jOHCsExC+ aOJI5tXTeBq7/fRMkWKMEZu2wQ9f265ChSu9/Fjb0VFpBVjqDY23KNDQ8dUf2xoK g5iZhnlHEyKbWtELX6YFOztqMNTFpg/Ilk5PkUfU0zG9U5IzvAVoGj/jItjwH2zd MNEbulcH6yEPKs1/QYtGkD4obD06bzBPs/NqPEyG/TS9IoU19zBiS2FTbanYm+El s1ziK8Crp/Re2WN/cuJuch2g/AnQ+BWbXJ2xryC4Vdtbh+5mABtKfunsjllkKpkR spGVTL3GNcN5WNjLxdLjtsb4 -----END CERTIFICATE-----Generated at Mon Sep 21 18:02:12 2026 by rpki-client