$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json) Hash identifier: WJ2UkRuxSx7OBK3rSwbeXJnkSuk005CxGTpLFLFEf44= Subject key identifier: C0:1F:C4:23:8B:8A:61:1C:15:BC:74:14:51:62:44:B3:DA:26:85:D1 Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft Manifest number: 0154 Signing time: Mon 21 Sep 2026 05:13:55 +0000 Manifest this update: Mon 21 Sep 2026 05:13:55 +0000 Manifest next update: Mon 28 Sep 2026 05:13:55 +0000 Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: Kt8hltJ0cYQ8q+mSqc4HDJa2138je7PnVfwFXyIQwQA=) 2: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=) 3: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Validity Not Before: Sep 21 05:13:55 2026 GMT Not After : Sep 28 05:13:55 2026 GMT Subject: CN=6ab0bd13-7cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:9f:10:64:fa:8b:2c:35:c5:47:bd:b1:e5: 4d:90:71:60:80:9f:9b:dc:a3:08:65:f6:7a:49:e7: 5d:eb:3c:7a:0a:1c:80:64:76:af:41:52:74:b0:2d: de:31:a8:1f:97:70:d0:e5:6a:33:89:2e:36:e0:99: f5:58:07:12:0b:af:7e:93:4a:2c:58:e0:cc:db:80: 1d:1c:5e:ef:2f:07:59:cd:5c:c0:4d:9c:37:07:98: 89:a1:aa:1e:59:21:ec:00:25:7e:b6:ee:aa:90:0c: 7c:df:43:85:77:8b:bc:60:97:b4:83:39:b4:aa:c7: 8e:90:13:ac:e8:6a:81:90:fc:8c:be:8d:90:a5:b2: 40:d4:d4:f5:93:3e:f1:ec:c9:5d:b3:09:a1:6b:bb: f2:86:19:c1:b1:89:0d:7b:20:7e:2b:f4:bb:e9:35: 52:d2:d1:2e:50:d3:ce:84:41:4e:90:75:bd:30:e2: 74:80:ac:08:eb:de:6f:cc:a5:6c:1e:4d:df:63:a5: 6d:6f:94:5f:9b:45:dd:69:e4:c6:bc:5e:d1:29:30: 54:98:d6:52:ac:83:f4:a7:b0:15:00:48:9c:e0:51: eb:c0:82:b5:97:1f:4a:82:a1:be:ca:59:51:7d:c8: e0:63:b3:7d:0d:51:63:d5:0a:46:f3:11:a4:18:70: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1F:C4:23:8B:8A:61:1C:15:BC:74:14:51:62:44:B3:DA:26:85:D1 X509v3 Authority Key Identifier: keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d7:6a:2b:ed:77:2a:27:f9:5d:5a:81:46:8f:8a:2b:60:07: b9:08:06:44:f0:84:4d:93:f6:8a:20:13:f9:af:1b:4d:fb:05: 2e:9a:16:87:9a:1b:59:30:22:c0:47:5e:7b:db:d1:e7:5a:19: 62:74:a2:aa:7d:de:2c:5c:f7:ae:fe:76:5a:1f:e8:9c:af:e1: 86:ec:58:87:17:61:78:38:a9:e8:61:ac:73:80:cf:2a:05:cd: 6f:4a:6d:1f:57:36:4d:cc:35:c5:59:f5:f5:6a:f0:1b:bb:1c: 87:11:32:a0:dd:e2:75:fb:36:a0:bf:a8:73:5f:cb:2c:0e:4a: 03:84:75:86:ee:9f:b3:2c:f4:b1:63:8b:09:ee:f7:85:e1:4e: b2:d8:f2:b1:b9:62:e8:92:1d:78:ee:54:ed:58:b6:42:0d:b0: 28:66:6a:79:88:56:91:35:2b:b1:1a:ae:b3:18:e4:37:6a:d2: c9:23:ac:6f:b6:2c:bd:a3:09:df:61:70:9a:68:74:cc:50:06: 8d:18:bc:ec:38:de:d3:38:83:6e:e8:a2:47:4a:74:cb:61:16: 7d:5a:d3:fb:1d:95:5e:5c:63:d3:39:0c:35:f5:81:2f:14:0b: 5e:f7:a5:72:29:e9:78:ca:62:7d:79:6d:01:76:9f:43:4d:5f: 88:fd:34:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF QzQ3RDM0MzgwHhcNMjYwOTIxMDUxMzU1WhcNMjYwOTI4MDUxMzU1WjAYMRYwFAYD VQQDEw02YWIwYmQxMy03Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMOfEGT6iyw1xUe9seVNkHFggJ+b3KMIZfZ6Sedd6zx6ChyAZHavQVJ0sC3e Magfl3DQ5WoziS424Jn1WAcSC69+k0osWODM24AdHF7vLwdZzVzATZw3B5iJoaoe WSHsACV+tu6qkAx830OFd4u8YJe0gzm0qseOkBOs6GqBkPyMvo2QpbJA1NT1kz7x 7Mldswmha7vyhhnBsYkNeyB+K/S76TVS0tEuUNPOhEFOkHW9MOJ0gKwI695vzKVs Hk3fY6Vtb5Rfm0XdaeTGvF7RKTBUmNZSrIP0p7AVAEic4FHrwIK1lx9KgqG+yllR fcjgY7N9DVFj1QpG8xGkGHDhcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAfxCOL imEcFbx0FFFiRLPaJoXRMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ UUNIZmxQZFlZbVRzUjlORGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYddqK+13Kif5XVqBRo+KK2AHuQgGRPCETZP2iiAT+a8bTfsFLpoWh5obWTAi wEdee9vR51oZYnSiqn3eLFz3rv52Wh/onK/hhuxYhxdheDip6GGsc4DPKgXNb0pt H1c2Tcw1xVn19WrwG7schxEyoN3idfs2oL+oc1/LLA5KA4R1hu6fsyz0sWOLCe73 heFOstjysbli6JIdeO5U7Vi2Qg2wKGZqeYhWkTUrsRqusxjkN2rSySOsb7YsvaMJ 32Fwmmh0zFAGjRi87Dje0ziDbuiiR0p0y2EWfVrT+x2VXlxj0zkMNfWBLxQLXvel cinpeMpifXltAXafQ01fiP00HQ== -----END CERTIFICATE-----Generated at Tue Sep 22 23:46:14 2026 by rpki-client