$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: IhgRivkPP0ooA9BmmBA/dKUuFeZ86ZMECukXC5mL14A= Subject key identifier: 01:3D:1D:AF:7D:75:4F:7D:3B:AB:FA:20:C0:66:60:CD:18:40:BE:98 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 0401 Signing time: Mon 21 Sep 2026 00:30:17 +0000 Manifest this update: Mon 21 Sep 2026 00:30:16 +0000 Manifest next update: Mon 28 Sep 2026 00:30:16 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: +No13h6rb/ac6Fv0UaoiqZx86BtA3YDwuonuvPDm2W4=) 2: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: H7MTLgBvJqkX/zlXhQ1M+AoAUBypYzZNCTAi5k1DtyM=) 3: B111111288B411EF80480527C4F9AE02.roa (hash: xJMBIq+z+Hr5KMjAaKBxe80ZwBF0kEHvPHKxaRo9DIQ=) 4: F2F59366E93211F0977E0D6F386F56BC.roa (hash: SaqwUER8FXoCY8XMwl3VUuOZz0WZkKo6QxxCfB6IRAo=) 5: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: eo97g9UlZshMJA4HXsGwl2EqgsYxkz3OFQu0ZT7ioY4=) 6: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: AKoZyPuf4M9ZcEU/leMev9H1xz48aswraZiTQr7vftg=) 7: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: xU1zjA76l+0iM9bsFjOEAgjkfSx72d/teh/7jiFl8qs=) 8: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: brgVDCGXixcbJRNF8ggHKQFgFrzS4R9OgM/PcYC5nQc=) 9: 6762C6E0909211F18C4BD3AE6911F970.roa (hash: GO5zh7MCHBg56U5rWYeNTB2vPGPUOw86aIMrka1N4cg=) 10: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CDOHJRFPLioKIq0PuStTWBZGQbhh1O/85ZcAsgFBOoU=) 11: 2E7E25EA921D11F1B1C7D4CB6611F970.roa (hash: NxHB5XBL7ve4r080JLtFWlK5r7K17fGRWsvt/Wn/coQ=) 12: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: pJq2I6/phF6xwFXAl6PEEV/RgzAR5E+0Z+tE1UwO0T8=) 13: 72CB1E1C7B5011F1B2F9C2DC58A30FBC.roa (hash: dORDFnaaxQGY4vjjFr7BGYntkVIFxkqdlRTgdg+fLbo=) 14: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: 9E7fitqPq9ar/Ob4y6a6R4Pwq8T7ZTTzFgXU4K5+Oug=) 15: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: eKDAjFI7uLbjlMqzaXqO/giEMIaCgnJ47zdh3OypaOI=) 16: 01E32FB0AB8311F1A20282104511F970.roa (hash: VsomVcK/GLNpw4OvnJLc9D/RdvByd92jmlfvPnvBPfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Sep 21 00:30:16 2026 GMT Not After : Sep 28 00:30:16 2026 GMT Subject: CN=6ab07a99-81fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:75:67:53:b1:12:50:4a:c2:c8:6d:65:6d: 06:12:0a:b9:ac:68:5f:e0:87:c0:25:c1:c3:ad:66: 36:74:97:a9:3d:90:70:c2:31:d2:b0:b9:0a:30:9e: 9f:b8:77:3d:ae:26:fb:25:5a:97:af:e8:31:2d:a9: ea:19:8b:27:c6:3b:2b:1a:18:c9:c9:f3:5c:24:49: d0:fe:ae:04:f9:d4:f3:cb:83:7d:a4:8f:33:fc:79: 64:5d:f2:b8:09:75:c2:06:00:9e:08:ad:9b:37:9e: 54:7c:2a:38:43:8f:3b:d3:d4:7e:14:bd:81:f1:1d: e5:53:4b:99:f8:1c:0f:a0:2a:f6:bb:cb:5b:09:4a: a2:cf:a1:fa:27:af:76:ee:1a:a7:e2:9f:7a:24:70: 84:3b:10:9b:e9:2d:2a:3b:52:f5:03:ad:7b:dd:b5: 8b:53:3c:ad:0b:47:ab:5d:79:6b:ff:77:25:e3:1c: 7e:fa:d4:43:45:08:00:b8:1b:06:ca:e3:df:c1:0e: a1:b4:25:ae:41:03:d2:17:6e:12:b0:b9:47:e6:a7: ef:77:06:de:88:ca:b9:f3:de:46:37:31:02:83:5b: 1a:f1:6c:e9:53:8c:7c:47:30:28:4f:16:72:da:be: 1a:97:dc:66:78:3c:8a:0b:6d:97:49:f5:a4:e4:54: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3D:1D:AF:7D:75:4F:7D:3B:AB:FA:20:C0:66:60:CD:18:40:BE:98 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:83:fc:29:b8:7f:48:05:60:3b:ec:7e:59:44:b3:ae:dc: 77:f0:96:8b:4e:2d:60:70:9b:e3:d9:3d:f6:53:2d:fc:9d:27: 9a:58:f0:16:a6:b8:ab:cf:8d:3e:15:18:b7:c7:46:c2:50:73: 62:c4:2e:03:96:46:13:95:83:e8:d2:a3:62:ea:f6:fc:57:3f: 5f:b4:39:ee:28:1c:0b:f8:04:34:04:82:46:88:5c:d6:c3:c9: a4:5b:2f:e1:38:5d:45:f9:2f:8d:71:5a:a7:17:3a:dc:9e:73: 81:b2:3e:ca:4e:8f:b4:aa:cb:7b:64:ee:3d:5d:94:23:86:70: 18:09:96:87:56:70:2f:35:8f:1e:82:9f:f7:f4:12:f4:e1:5c: c3:de:f2:fc:ed:d3:75:3a:bb:65:09:18:ff:01:0b:57:5b:87: 17:04:a5:f9:03:dc:f5:3e:dd:e8:90:e7:8e:51:7e:44:72:c9: f2:d8:a1:cf:d7:f0:46:ea:4e:28:55:28:31:26:8a:4e:bf:e4: 5f:0f:d4:3e:8b:45:d0:28:7f:77:b8:5d:f6:f5:15:7c:bc:78: 7f:3d:0a:fb:4d:eb:e6:81:00:fc:c2:9a:aa:de:74:f2:ec:d7: b6:5c:60:72:ac:83:be:ee:e7:b7:14:a0:b2:03:65:30:fe:e9: 0d:6c:6e:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjYwOTIxMDAzMDE2WhcNMjYwOTI4MDAzMDE2WjAYMRYwFAYD VQQDEw02YWIwN2E5OS04MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+J1Z1OxElBKwshtZW0GEgq5rGhf4IfAJcHDrWY2dJepPZBwwjHSsLkKMJ6f uHc9rib7JVqXr+gxLanqGYsnxjsrGhjJyfNcJEnQ/q4E+dTzy4N9pI8z/HlkXfK4 CXXCBgCeCK2bN55UfCo4Q48709R+FL2B8R3lU0uZ+BwPoCr2u8tbCUqiz6H6J692 7hqn4p96JHCEOxCb6S0qO1L1A6173bWLUzytC0erXXlr/3cl4xx++tRDRQgAuBsG yuPfwQ6htCWuQQPSF24SsLlH5qfvdwbeiMq5895GNzECg1sa8WzpU4x8RzAoTxZy 2r4al9xmeDyKC22XSfWk5FQ39QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAE9Ha99 dU99O6v6IMBmYM0YQL6YMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfmD/Cm4f0gFYDvsfllEs67cd/CWi04tYHCb49k99lMt/J0nmljwFqa4q8+N PhUYt8dGwlBzYsQuA5ZGE5WD6NKjYur2/Fc/X7Q57igcC/gENASCRohc1sPJpFsv 4ThdRfkvjXFapxc63J5zgbI+yk6PtKrLe2TuPV2UI4ZwGAmWh1ZwLzWPHoKf9/QS 9OFcw97y/O3TdTq7ZQkY/wELV1uHFwSl+QPc9T7d6JDnjlF+RHLJ8tihz9fwRupO KFUoMSaKTr/kXw/UPotF0Ch/d7hd9vUVfLx4fz0K+03r5oEA/MKaqt508uzXtlxg cqyDvu7ntxSgsgNlMP7pDWxuhQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:25 2026 by rpki-client