$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: Inlj0YQSP/Of7nnTCYRBAX7HbPeRGEbgQAWwjG9YI8M= Subject key identifier: 28:74:F1:C0:7F:36:38:77:8D:57:DE:48:D6:D2:B7:E9:21:75:6B:5B Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 024E Signing time: Sat 10 Oct 2026 17:35:22 +0000 Manifest this update: Sat 10 Oct 2026 17:35:22 +0000 Manifest next update: Sat 17 Oct 2026 17:35:22 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: YAI+SQzHO1A+k5jlZZQTQdOyWlrZMt7LywDD6j6X+xw=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: 8UoEC8xsE/JTgByqgA9fCAgCWLlJeeUor6dWgZpCQrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Oct 10 17:35:22 2026 GMT Not After : Oct 17 17:35:22 2026 GMT Subject: CN=6aca775a-ee87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:ae:af:40:b3:65:03:4d:6a:cf:79:29:15: 9d:1f:0e:3e:01:db:ac:ba:e1:0e:78:e0:7e:07:6b: 25:7e:09:fa:f4:f4:18:50:39:14:4a:f4:bd:47:e0: 03:95:c1:39:21:94:7c:67:9a:45:54:1f:b5:ed:d3: 5d:dc:e1:4c:6f:f3:c6:a1:bb:29:b0:67:04:a0:db: 95:d3:84:44:85:c7:b1:ef:4b:fc:3d:32:6a:ee:c6: 41:ea:60:d5:43:8c:00:c5:ff:f8:10:d5:83:2c:35: 4e:69:96:f6:a4:16:f8:84:b5:36:53:02:84:00:1a: f2:df:13:ec:d5:d7:89:85:63:84:d6:90:f1:48:de: 14:69:66:1a:4b:cb:36:28:ca:ce:95:58:57:ca:13: 7b:2e:80:d9:3d:3d:b8:23:c4:e3:18:cf:37:10:50: d7:53:05:cc:a3:40:c4:c9:d6:a1:95:64:41:9a:d8: 55:31:69:32:81:e3:bf:d1:5a:d7:95:47:c3:c9:76: a5:3e:dd:7b:fb:27:b7:b3:cd:6d:e4:78:46:26:2f: 87:83:69:80:cb:0b:ec:c7:4c:04:79:88:66:80:a9: ec:8c:c3:10:f2:9c:76:6b:18:1e:a8:51:2c:a4:2b: 72:f8:f4:63:cd:34:69:26:73:b5:26:4c:12:23:0d: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:F1:C0:7F:36:38:77:8D:57:DE:48:D6:D2:B7:E9:21:75:6B:5B X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:0e:a8:7d:a3:bc:4e:e8:b0:71:4b:de:5e:17:c8:74:61:c8: 21:a8:bb:b7:a7:2c:45:04:52:9d:1e:7f:c9:d0:4e:76:b5:c3: 0c:ea:c1:03:6e:e2:3c:32:01:f5:c4:bc:e3:39:77:57:bf:49: 5f:65:0f:95:c7:6e:4b:56:f6:46:a6:78:e9:94:b5:41:85:9e: a6:22:08:a1:be:11:db:5e:d4:0e:16:28:89:00:8a:2f:f8:10: 4d:29:60:36:83:58:bb:b3:4d:0c:36:6e:a4:b8:74:68:91:e7: d0:9f:38:ae:1b:97:2a:24:83:bf:ab:16:78:ce:dc:8f:60:05: 57:de:29:c8:a8:ff:7b:30:46:62:f1:c4:42:a0:35:0a:9e:9f: 6e:ab:a9:6d:9e:f4:bc:85:a5:ae:29:de:9a:d6:23:40:4c:78: 2c:09:d3:4f:b3:ed:54:b4:61:88:f2:d5:62:66:f6:16:d8:86: c7:25:63:b6:a3:f2:4e:81:95:b5:73:5a:0f:36:a3:17:ba:30: cf:d8:8b:e1:63:99:ac:00:54:45:00:2b:9d:68:94:77:00:87: f7:0f:1e:66:ca:25:4c:00:86:98:f2:71:1a:e1:41:05:52:7f: f2:a3:a2:e9:de:0c:32:d9:bc:be:7e:6d:fa:fc:9c:9c:76:11: 27:d8:3c:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYxMDEwMTczNTIyWhcNMjYxMDE3MTczNTIyWjAYMRYwFAYD VQQDEw02YWNhNzc1YS1lZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ruur0CzZQNNas95KRWdHw4+AdusuuEOeOB+B2slfgn69PQYUDkUSvS9R+AD lcE5IZR8Z5pFVB+17dNd3OFMb/PGobspsGcEoNuV04REhcex70v8PTJq7sZB6mDV Q4wAxf/4ENWDLDVOaZb2pBb4hLU2UwKEABry3xPs1deJhWOE1pDxSN4UaWYaS8s2 KMrOlVhXyhN7LoDZPT24I8TjGM83EFDXUwXMo0DEydahlWRBmthVMWkygeO/0VrX lUfDyXalPt17+ye3s81t5HhGJi+Hg2mAywvsx0wEeYhmgKnsjMMQ8px2axgeqFEs pCty+PRjzTRpJnO1JkwSIw3gQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCh08cB/ Njh3jVfeSNbSt+khdWtbMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5A6ofaO8TuiwcUveXhfIdGHIIai7t6csRQRSnR5/ydBOdrXDDOrBA27iPDIB 9cS84zl3V79JX2UPlcduS1b2RqZ46ZS1QYWepiIIob4R217UDhYoiQCKL/gQTSlg NoNYu7NNDDZupLh0aJHn0J84rhuXKiSDv6sWeM7cj2AFV94pyKj/ezBGYvHEQqA1 Cp6fbqupbZ70vIWlrinemtYjQEx4LAnTT7PtVLRhiPLVYmb2FtiGxyVjtqPyToGV tXNaDzajF7owz9iL4WOZrABURQArnWiUdwCH9w8eZsolTACGmPJxGuFBBVJ/8qOi 6d4MMtm8vn5t+vycnHYRJ9g8CA== -----END CERTIFICATE-----Generated at Sun Oct 11 08:50:44 2026 by rpki-client