$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: Ap+05b7sQZasysiVbGtrLKLM/S+GCVndN89ZiRV6+ic= Subject key identifier: 60:BC:F7:8A:DF:C1:29:73:DF:2C:D6:D6:92:69:06:DE:77:6B:DF:7B Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0D19 Signing time: Thu 08 Oct 2026 18:25:46 +0000 Manifest this update: Thu 08 Oct 2026 18:25:45 +0000 Manifest next update: Thu 15 Oct 2026 18:25:45 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: TXPJCij9iAycACKP+K7mlFMxYeXPlQkHDl85agvkIag=) 2: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=) 3: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=) 4: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Oct 8 18:25:45 2026 GMT Not After : Oct 15 18:25:45 2026 GMT Subject: CN=6ac7e02a-6451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:fd:e5:95:01:d0:ad:9e:6b:60:be:b5:1c: 66:cd:f3:0b:b8:9f:0e:74:26:5c:13:8a:b6:dc:82: 8a:08:4a:89:30:fa:41:82:25:33:61:30:b6:df:a8: 12:0b:74:67:83:4d:4e:39:57:ea:24:4f:2c:88:43: bd:f0:3e:45:9a:74:87:9a:7b:4a:8b:83:b5:e3:d1: 7f:d7:cf:96:8c:58:0b:dc:1c:e9:dd:16:42:88:4a: 6b:9f:7b:a2:af:0c:28:65:74:4e:5c:c8:bf:ca:38: 6d:b9:41:4d:56:9c:01:0c:25:c2:6e:99:a6:86:23: 43:3b:73:11:c6:11:65:16:5d:91:f2:d7:b2:4c:e0: 44:e8:a4:ba:72:61:dc:f6:77:2a:c1:5a:e2:11:da: 99:16:7f:4a:75:e4:33:0f:f1:cf:2d:95:58:84:47: 12:8d:b5:ed:26:40:1b:5b:db:40:ab:4b:d3:4e:c9: 7a:d2:6e:6a:1f:3d:d8:fe:6f:d0:b2:89:d5:0f:45: 15:ae:5a:9d:86:71:3a:3f:ce:07:37:c3:d4:6e:10: 6f:ee:27:51:63:e9:32:f5:b8:50:04:52:29:3b:01: d3:55:07:0a:76:d4:09:e2:28:ef:96:8a:66:11:9a: 7e:e0:59:10:c7:87:4c:5f:62:78:8e:bb:35:dc:86: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:F7:8A:DF:C1:29:73:DF:2C:D6:D6:92:69:06:DE:77:6B:DF:7B X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:23:56:f9:7f:f3:4b:a1:72:31:ac:fe:78:23:60:9b:56:b4: 3b:fb:cd:94:80:2a:cb:33:fb:e1:83:f7:59:ff:df:ec:aa:86: 27:84:d9:92:ad:e8:d2:cb:7c:5f:31:46:84:78:a3:d4:f1:00: 95:50:54:7f:ed:cc:5d:8d:77:5d:9b:d4:eb:5f:74:0d:05:18: ba:e4:d2:95:05:e0:ee:8f:75:2e:bd:3e:23:bb:a7:d9:86:fc: f7:77:a3:19:0a:85:e8:3a:0f:53:23:82:5f:4d:25:50:ac:9e: f7:5c:00:68:2a:1e:ea:55:29:16:08:87:ef:dc:23:81:2c:29: 05:c3:a3:20:9a:5f:87:a0:a6:5c:02:87:db:de:7e:e1:93:72: 16:2a:45:f2:82:94:5d:13:fe:ab:cd:f6:26:f1:46:4d:01:65: b6:f3:5d:31:74:fc:d9:35:b9:7c:82:23:37:43:ad:ff:39:8b: 7c:5d:37:26:82:e5:f3:3e:25:26:c0:a7:e6:7d:ff:24:52:59: 69:cc:49:35:7d:07:4e:e6:9c:8c:ca:be:e0:22:8a:08:a5:bf: 76:6e:c1:e2:66:d9:68:59:06:aa:23:fb:40:e4:83:9e:ca:63: da:00:53:84:32:96:83:af:57:56:fc:53:18:eb:99:60:57:48: 5e:9c:39:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYxMDA4MTgyNTQ1WhcNMjYxMDE1MTgyNTQ1WjAYMRYwFAYD VQQDEw02YWM3ZTAyYS02NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjb95ZUB0K2ea2C+tRxmzfMLuJ8OdCZcE4q23IKKCEqJMPpBgiUzYTC236gS C3Rng01OOVfqJE8siEO98D5FmnSHmntKi4O149F/18+WjFgL3Bzp3RZCiEprn3ui rwwoZXROXMi/yjhtuUFNVpwBDCXCbpmmhiNDO3MRxhFlFl2R8teyTOBE6KS6cmHc 9ncqwVriEdqZFn9KdeQzD/HPLZVYhEcSjbXtJkAbW9tAq0vTTsl60m5qHz3Y/m/Q sonVD0UVrlqdhnE6P84HN8PUbhBv7idRY+ky9bhQBFIpOwHTVQcKdtQJ4ijvlopm EZp+4FkQx4dMX2J4jrs13IZ0PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC894rf wSlz3yzW1pJpBt53a997MB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUyNW+X/zS6FyMaz+eCNgm1a0O/vNlIAqyzP74YP3Wf/f7KqGJ4TZkq3o0st8 XzFGhHij1PEAlVBUf+3MXY13XZvU6190DQUYuuTSlQXg7o91Lr0+I7un2Yb893ej GQqF6DoPUyOCX00lUKye91wAaCoe6lUpFgiH79wjgSwpBcOjIJpfh6CmXAKH295+ 4ZNyFipF8oKUXRP+q832JvFGTQFltvNdMXT82TW5fIIjN0Ot/zmLfF03JoLl8z4l JsCn5n3/JFJZacxJNX0HTuacjMq+4CKKCKW/dm7B4mbZaFkGqiP7QOSDnspj2gBT hDKWg69XVvxTGOuZYFdIXpw51A== -----END CERTIFICATE-----Generated at Sat Oct 10 16:54:19 2026 by rpki-client