$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: uIxv7jKTqCa8lmWKql6uzzKikr8Dd/B3xlSb8YPnF9Q= Subject key identifier: 52:64:87:E0:29:13:38:AF:29:80:B5:01:EB:77:CF:D6:BF:4C:F4:7D Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 022A Signing time: Mon 21 Sep 2026 02:47:01 +0000 Manifest this update: Mon 21 Sep 2026 02:47:00 +0000 Manifest next update: Mon 28 Sep 2026 02:47:00 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: IEaWVRKFtINpLLCc/Pn3mUp5z19WqWMRg1BzdSa4wBk=) 2: NqbP4HOf_Jyjeg4GFVPMlc9Aumk.asa (hash: QSUd3sZtQESOmMmY99Q78BF0wQT6wi4H0X2SGisgJkA=) 3: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: LW+WmGu6YlC9wjX0P0Tmes41deKyVjQFb3wGnRpYkOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Sep 21 02:47:00 2026 GMT Not After : Sep 28 02:47:00 2026 GMT Subject: CN=6ab09aa4-558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:01:3a:e7:30:c6:cc:c6:90:4f:c0:57:80: e7:b6:2e:8e:ef:c5:42:44:b1:cd:ae:da:a6:28:32: ba:22:e5:19:f7:3c:69:ae:dc:39:2e:8e:b5:e5:cb: 47:ab:d0:e7:b8:74:3a:69:9a:c8:d9:68:fb:35:28: 3b:20:2c:ea:cf:61:94:65:c0:85:be:ed:43:e4:a2: c4:c0:e3:25:48:64:94:b8:0e:8f:3e:9f:bd:50:66: 23:60:d7:30:ec:53:83:91:cc:16:8d:d1:5e:35:5a: f1:77:c5:d8:f2:cc:a9:f7:c1:7c:01:c4:b3:67:4b: 45:1a:04:c7:c1:c2:f3:10:14:46:1f:03:84:f2:03: 84:00:89:11:75:f3:cd:4f:35:8a:fd:a2:ca:b9:87: 73:e7:14:7c:3c:fb:36:9f:9c:7b:66:42:a9:a5:71: 50:76:02:7e:f7:67:35:ed:9b:1b:cd:dd:03:64:be: 12:f5:60:de:f7:cb:a6:83:0c:86:0d:56:75:fb:f2: a3:c1:27:ec:c7:12:78:f2:6c:ca:38:50:84:e4:4d: ac:72:a8:6e:29:e6:52:85:a0:28:15:2e:c2:ac:86: ba:91:9a:eb:6c:8a:f7:69:98:ab:a8:33:24:d2:9c: c9:c6:02:bb:68:6e:c2:90:4f:db:7b:72:eb:35:3a: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:87:E0:29:13:38:AF:29:80:B5:01:EB:77:CF:D6:BF:4C:F4:7D X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3c:6b:09:eb:5d:44:e8:34:48:99:2d:03:b5:46:f4:45:3c: a6:c8:45:64:a5:c0:a5:91:f6:26:ac:58:fb:26:85:9b:7c:ef: 0d:ac:d4:c4:f1:23:16:fc:fe:a4:11:a8:ed:15:e2:d2:5c:a7: 19:74:e2:13:f0:5c:d9:3c:50:da:93:78:5e:3c:50:f6:f5:15: d8:6e:90:01:70:9d:3c:59:e2:aa:23:c9:8e:c5:c2:47:cc:d8: 6d:1b:21:a1:1c:06:02:d2:d9:57:eb:5c:56:cd:07:5a:95:1b: eb:42:a4:2d:fa:0d:e4:1b:fe:3b:ef:72:44:5b:d1:da:ea:aa: 0d:88:ad:74:b6:00:50:ff:37:d3:ab:4a:e4:63:ba:16:18:03: 99:65:89:84:f7:fa:77:be:a2:9c:18:46:f1:c9:14:db:df:15: d8:01:c0:5d:99:cb:4b:f9:4b:0b:a0:50:4c:4e:c5:03:a2:fa: 11:f5:69:3f:99:58:1d:ff:dd:23:eb:3a:1c:17:6b:e6:82:00: 2b:e2:13:43:98:a7:4a:5a:ec:fb:88:f3:24:3d:3b:4e:e1:0d: 2a:57:4a:63:69:93:3d:2e:35:fa:bf:e8:37:2e:b4:79:1e:0d: 8f:72:e9:17:83:6d:db:a4:9e:74:d3:64:b7:83:c2:29:39:72: a3:04:a4:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjYwOTIxMDI0NzAwWhcNMjYwOTI4MDI0NzAwWjAYMRYwFAYD VQQDEw02YWIwOWFhNC01NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZUBOucwxszGkE/AV4Dnti6O78VCRLHNrtqmKDK6IuUZ9zxprtw5Lo615ctH q9DnuHQ6aZrI2Wj7NSg7ICzqz2GUZcCFvu1D5KLEwOMlSGSUuA6PPp+9UGYjYNcw 7FODkcwWjdFeNVrxd8XY8syp98F8AcSzZ0tFGgTHwcLzEBRGHwOE8gOEAIkRdfPN TzWK/aLKuYdz5xR8PPs2n5x7ZkKppXFQdgJ+92c17Zsbzd0DZL4S9WDe98umgwyG DVZ1+/KjwSfsxxJ48mzKOFCE5E2scqhuKeZShaAoFS7CrIa6kZrrbIr3aZirqDMk 0pzJxgK7aG7CkE/be3LrNTr+rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJkh+Ap EzivKYC1Aet3z9a/TPR9MB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgjxrCetdROg0SJktA7VG9EU8pshFZKXApZH2JqxY+yaFm3zvDazUxPEjFvz+ pBGo7RXi0lynGXTiE/Bc2TxQ2pN4XjxQ9vUV2G6QAXCdPFniqiPJjsXCR8zYbRsh oRwGAtLZV+tcVs0HWpUb60KkLfoN5Bv+O+9yRFvR2uqqDYitdLYAUP8306tK5GO6 FhgDmWWJhPf6d76inBhG8ckU298V2AHAXZnLS/lLC6BQTE7FA6L6EfVpP5lYHf/d I+s6HBdr5oIAK+ITQ5inSlrs+4jzJD07TuENKldKY2mTPS41+r/oNy60eR4Nj3Lp F4Nt26SedNNkt4PCKTlyowSkrw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:12:43 2026 by rpki-client