$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: XzPN2wCuR4BK/bzO8f7fUbkI1h4yc4yc32Xg/ACUTXU= Subject key identifier: B1:DD:70:0B:FC:39:64:61:61:19:5C:BB:6D:B7:60:56:42:30:B0:52 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0DA1 Signing time: Sat 10 Oct 2026 17:57:37 +0000 Manifest this update: Sat 10 Oct 2026 17:57:36 +0000 Manifest next update: Sat 17 Oct 2026 17:57:36 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: 683lV2hHssNj/G3wlQMucFJltciD4ZFglEFkTpkoeZg=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Oct 10 17:57:36 2026 GMT Not After : Oct 17 17:57:36 2026 GMT Subject: CN=6aca7c91-8dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:86:13:ac:66:66:76:5c:57:52:74:b3:61: 2a:69:b8:9e:a7:68:5f:74:0e:cb:36:ad:ce:36:17: 92:b8:cf:19:b7:cf:42:6e:5c:d7:46:1b:43:1f:e6: 27:5f:69:58:e0:8f:b5:cd:37:a7:d7:ef:8f:b5:88: 7e:94:08:82:16:e3:d0:a8:2f:ef:91:fa:8e:10:6c: 11:4c:46:57:86:ff:70:54:93:11:b0:67:79:14:4f: 3f:86:e1:ed:8b:c0:2e:54:87:8a:75:41:bb:86:ac: 73:9c:02:9a:a4:1d:f1:ce:12:f2:21:00:f0:b5:7e: 75:5d:7d:14:8d:f0:99:b4:0c:cf:11:33:91:07:89: 45:66:2e:42:60:83:96:57:86:25:3b:40:78:b1:3b: 4f:a0:7f:37:e1:2d:59:62:10:ff:b0:24:fd:ef:20: c1:72:26:b1:b8:7d:35:ce:cd:53:01:9e:e9:4d:40: 22:97:11:a1:17:ee:7a:51:53:ca:fd:a9:be:db:0f: c5:7c:a0:0e:a4:40:b1:df:a6:67:47:4d:dd:ca:e6: 3f:9a:5b:27:53:44:0b:12:d2:b6:8a:68:40:bc:37: 98:9f:b4:7c:ac:a0:b9:ae:83:46:b0:0c:68:08:4b: 7f:77:79:36:17:ad:47:63:ba:d7:c5:70:a4:df:ee: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DD:70:0B:FC:39:64:61:61:19:5C:BB:6D:B7:60:56:42:30:B0:52 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:20:d7:55:bb:23:fb:83:04:48:48:65:f3:ab:de:f6:35:da: c8:92:0b:60:fb:c2:db:2b:65:00:d8:af:f8:92:41:b9:14:b8: 21:d8:59:4d:b9:b3:23:d0:f5:bb:c0:03:97:8a:3b:14:66:6c: eb:ce:6b:dd:8e:b3:79:cb:a8:0f:91:39:7c:6a:f9:31:a4:ff: d5:2b:a4:cd:ef:6d:40:bc:ad:1b:c0:8a:36:03:b5:db:ae:ec: 3a:96:4f:dc:91:db:e8:42:56:59:c0:dd:8f:78:be:c3:40:e2: af:09:47:ef:56:d4:ab:66:31:ac:b9:f8:65:3f:ca:e9:fa:3b: 9c:46:34:0f:00:16:5b:88:b6:bd:c5:a1:1e:eb:3c:f0:87:38: e5:fc:40:2c:0e:de:d0:f0:b6:a2:a2:c2:75:1a:28:93:38:b5: ce:3b:8b:15:c7:5e:a0:44:24:9e:f6:65:87:0b:ff:05:e0:63: 34:ce:e1:4c:01:57:a5:8a:0d:4b:0a:5f:84:c6:7c:55:35:8e: 59:0a:d7:0f:c8:ec:5b:3b:50:8e:17:17:0f:86:23:72:9a:eb: b9:6a:a8:74:b1:09:fb:64:fa:1e:0e:9e:30:b5:b9:bf:4c:3d: 91:c4:85:75:ea:11:80:10:bb:92:8c:ee:fb:52:48:d9:81:ed: 57:53:6d:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjYxMDEwMTc1NzM2WhcNMjYxMDE3MTc1NzM2WjAYMRYwFAYD VQQDEw02YWNhN2M5MS04ZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0G+GE6xmZnZcV1J0s2Eqabiep2hfdA7LNq3ONheSuM8Zt89CblzXRhtDH+Yn X2lY4I+1zTen1++PtYh+lAiCFuPQqC/vkfqOEGwRTEZXhv9wVJMRsGd5FE8/huHt i8AuVIeKdUG7hqxznAKapB3xzhLyIQDwtX51XX0UjfCZtAzPETORB4lFZi5CYIOW V4YlO0B4sTtPoH834S1ZYhD/sCT97yDBciaxuH01zs1TAZ7pTUAilxGhF+56UVPK /am+2w/FfKAOpECx36ZnR03dyuY/mlsnU0QLEtK2imhAvDeYn7R8rKC5roNGsAxo CEt/d3k2F61HY7rXxXCk3+4N5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHdcAv8 OWRhYRlcu223YFZCMLBSMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGiDXVbsj+4MESEhl86ve9jXayJILYPvC2ytlANiv+JJBuRS4IdhZTbmzI9D1 u8ADl4o7FGZs685r3Y6zecuoD5E5fGr5MaT/1Sukze9tQLytG8CKNgO1267sOpZP 3JHb6EJWWcDdj3i+w0DirwlH71bUq2YxrLn4ZT/K6fo7nEY0DwAWW4i2vcWhHus8 8Ic45fxALA7e0PC2oqLCdRookzi1zjuLFcdeoEQknvZlhwv/BeBjNM7hTAFXpYoN SwpfhMZ8VTWOWQrXD8jsWztQjhcXD4YjcprruWqodLEJ+2T6Hg6eMLW5v0w9kcSF deoRgBC7kozu+1JI2YHtV1NtQA== -----END CERTIFICATE-----Generated at Mon Oct 12 03:36:19 2026 by rpki-client