$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: Mw9NtxoXi2Ty9oIMJD/oynl01RV8Kj2QvalbpnclP/0= Subject key identifier: 68:7C:31:CC:64:0E:DF:28:27:F6:C4:D4:A8:FE:83:3F:0C:2D:B2:7E Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 2298 Signing time: Sun 20 Sep 2026 15:49:13 +0000 Manifest this update: Sun 20 Sep 2026 15:49:13 +0000 Manifest next update: Sun 27 Sep 2026 15:49:13 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: /isMOWth5aZVlwR0COxAQfa5fbu9O63ZeB9iI8n5yAI=) 2: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=) 3: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=) 4: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=) 5: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=) 6: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=) 7: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=) 8: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8946 (0x22f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 20 15:49:13 2026 GMT Not After : Sep 27 15:49:13 2026 GMT Subject: CN=6ab00079-22fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2b:ab:95:51:0f:03:d8:71:64:d3:09:12:4e: 6b:e9:38:91:f7:a9:04:71:1a:ab:a2:c4:d8:78:8a: 79:ed:43:c2:2d:48:42:47:19:d7:3c:70:55:c2:ae: 54:f1:fe:d0:c8:6d:76:d2:2f:b7:bb:d9:93:1d:63: a0:4b:00:17:d3:5f:f3:f2:c0:34:17:58:0a:f2:4a: 8b:5c:77:c9:b2:65:16:40:28:b4:51:18:17:2d:28: 83:e3:be:8d:3e:f7:d5:f9:d8:53:b2:1f:d5:6d:cd: b0:08:a3:a1:af:c4:b2:39:3a:8b:84:0f:39:86:0c: 70:f0:03:76:67:ba:00:60:38:39:4f:2e:d7:3c:e0: f2:19:6f:c3:84:ae:a0:2e:e3:2f:e3:59:4f:59:7a: ef:ce:8e:e9:6c:ff:ab:51:c2:7a:75:74:77:98:1d: ee:6a:f8:7e:ae:51:17:9b:62:8c:68:74:d8:98:e1: e4:0b:0e:c5:87:5d:03:51:9e:71:1e:3b:41:c2:1b: bc:11:2c:80:47:03:ba:12:1c:25:85:3b:d5:57:3b: e5:90:25:3e:d0:fb:b9:b6:c9:f1:fe:15:cb:42:16: 9d:67:39:ca:0a:d3:61:a4:42:0e:4e:c3:2c:99:54: 86:bd:59:74:5b:35:87:fc:60:e2:5a:76:f4:ef:73: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:31:CC:64:0E:DF:28:27:F6:C4:D4:A8:FE:83:3F:0C:2D:B2:7E X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e3:44:50:c9:f0:9b:89:04:34:9d:f4:52:7c:45:ed:fd:21: 08:27:32:91:d2:22:28:24:9f:3e:77:1b:7a:b8:35:38:77:f5: 0d:4f:f2:6e:60:ab:06:70:fd:43:bb:b0:ad:31:d4:c8:c6:0d: e2:19:a1:d2:ac:da:f8:98:f3:3a:18:c0:57:cf:28:89:1a:3f: 72:8c:c6:60:3a:e5:99:3e:58:b5:61:7f:2e:0c:60:29:a5:a3: 78:b7:4f:1c:42:99:22:66:8d:6b:82:a7:e3:9a:f6:3f:bb:e1: d9:87:11:77:1f:14:3d:2a:1f:78:d6:9a:88:f0:a8:1f:be:7e: 29:50:55:61:2e:b3:d9:06:27:c8:12:34:39:51:d2:b3:3a:54: a6:48:9b:8b:d7:16:71:a3:ee:81:85:21:b0:f4:e3:bb:87:8a: 1b:23:a3:2f:6d:40:b8:d0:13:d8:a6:11:c2:27:3b:d4:30:3d: c7:6f:4a:1b:5e:7a:7a:a1:c2:af:ad:b4:4c:e3:da:4f:21:7e: 2d:76:c2:86:be:74:94:3a:65:74:19:31:54:14:65:34:73:3d: b2:9f:99:d9:42:4d:4f:bb:0e:a0:1a:17:97:61:ed:76:3b:00: e8:d8:e1:cc:ed:a1:4c:03:24:e3:40:25:6d:57:28:af:6d:96: 97:1d:40:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTIwMTU0OTEzWhcNMjYwOTI3MTU0OTEzWjAYMRYwFAYD VQQDEw02YWIwMDA3OS0yMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+CurlVEPA9hxZNMJEk5r6TiR96kEcRqrosTYeIp57UPCLUhCRxnXPHBVwq5U 8f7QyG120i+3u9mTHWOgSwAX01/z8sA0F1gK8kqLXHfJsmUWQCi0URgXLSiD476N PvfV+dhTsh/Vbc2wCKOhr8SyOTqLhA85hgxw8AN2Z7oAYDg5Ty7XPODyGW/DhK6g LuMv41lPWXrvzo7pbP+rUcJ6dXR3mB3uavh+rlEXm2KMaHTYmOHkCw7Fh10DUZ5x HjtBwhu8ESyARwO6EhwlhTvVVzvlkCU+0Pu5tsnx/hXLQhadZznKCtNhpEIOTsMs mVSGvVl0WzWH/GDiWnb073PoSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGh8Mcxk Dt8oJ/bE1Kj+gz8MLbJ+MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa+NEUMnwm4kENJ30UnxF7f0hCCcykdIiKCSfPncberg1OHf1DU/ybmCrBnD9 Q7uwrTHUyMYN4hmh0qza+JjzOhjAV88oiRo/cozGYDrlmT5YtWF/LgxgKaWjeLdP HEKZImaNa4Kn45r2P7vh2YcRdx8UPSofeNaaiPCoH75+KVBVYS6z2QYnyBI0OVHS szpUpkibi9cWcaPugYUhsPTju4eKGyOjL21AuNAT2KYRwic71DA9x29KG156eqHC r620TOPaTyF+LXbChr50lDpldBkxVBRlNHM9sp+Z2UJNT7sOoBoXl2HtdjsA6Njh zO2hTAMk40AlbVcor22Wlx1AZg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:12:04 2026 by rpki-client