$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json) Hash identifier: sGVbbgJqtq/39ygWBRNbvXkyH7rKSFLIz+//5TvqTx4= Subject key identifier: 8B:2C:4A:F0:72:52:1D:E4:1C:8B:32:D2:4B:A2:42:11:42:87:53:77 Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft Manifest number: 035D Signing time: Sat 03 Oct 2026 01:13:07 +0000 Manifest this update: Sat 03 Oct 2026 01:13:06 +0000 Manifest next update: Sat 10 Oct 2026 01:13:06 +0000 Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: roxtCRXI1dZOsTJjJHveFM5PsZB/Xzi6q0rPLFDAaSs=) 2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 40hAMMqtmR9OFYV238H783mmTwcTvAqPIgysA2ivdOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Validity Not Before: Oct 3 01:13:06 2026 GMT Not After : Oct 10 01:13:06 2026 GMT Subject: CN=6ac056a3-ba87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:0a:3f:e8:df:fa:14:1b:a2:88:36:42:f8: f6:cb:1d:85:80:ba:3e:e6:fd:b5:26:20:17:92:4d: ac:d5:0d:d7:b5:43:70:0b:e8:61:a0:ab:bc:d3:da: 61:8d:25:6d:42:2c:35:72:38:22:c8:38:39:24:d7: ac:7f:06:a4:25:a9:fc:bd:2b:02:78:67:3b:15:97: 14:46:27:84:f2:09:f9:81:45:c1:3c:a6:b4:bc:e9: 81:2a:37:f9:13:11:bf:b8:cc:48:7d:ad:a2:cc:bb: 18:1b:23:c4:43:13:d2:0d:41:a0:99:15:75:72:76: 89:32:61:6c:f0:4b:ca:cc:7b:4e:bb:0b:1a:29:27: 2f:29:cf:c8:77:db:08:90:81:e5:32:e8:c0:82:46: d1:46:0f:06:87:72:df:02:ae:7b:5e:5d:81:4f:0d: 6a:3d:13:0d:37:17:88:f0:1e:12:ce:27:fb:b9:5b: 2c:2c:5b:9a:f2:d8:d8:0b:14:74:37:96:88:43:d1: 9b:8e:e0:48:c4:65:fa:9d:e1:f0:21:02:24:ef:d4: e0:5b:70:5f:7a:98:6a:c2:a5:08:20:32:6c:cf:c3: b2:1a:1f:2d:e5:df:9b:2c:02:38:05:80:f3:02:fc: 8e:88:52:34:36:a1:b7:d9:01:df:9b:04:15:ab:af: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2C:4A:F0:72:52:1D:E4:1C:8B:32:D2:4B:A2:42:11:42:87:53:77 X509v3 Authority Key Identifier: keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:8e:3f:a3:0c:6a:37:8e:ea:70:19:02:63:5a:62:3a:ac:af: 04:7a:02:60:e8:f8:51:6d:ee:dd:0f:36:94:5f:53:01:6c:60: a8:44:9a:e9:68:fc:83:61:f5:cc:fd:51:19:63:dd:2f:6d:8a: 1a:cc:7a:7c:c2:fc:47:25:90:ac:2a:d7:05:0d:34:eb:17:99: c4:08:13:af:11:e2:55:98:5d:3a:a9:e8:b8:fb:21:6a:20:71: d5:12:79:8d:b2:96:17:a2:2a:17:3c:ea:25:0b:a4:80:61:03: f7:40:c8:28:eb:fd:f6:1f:7d:53:c3:11:06:2c:86:77:c1:2d: 84:d0:35:ec:12:e8:9c:56:00:96:e4:f6:5b:c0:0e:f0:fe:56: 90:0c:db:a4:2e:6b:2a:1e:f9:c5:39:d1:f9:04:be:1a:ad:fc: 31:89:dd:6d:96:91:95:50:7c:d1:d7:06:ac:96:b4:da:ed:ec: fd:b5:4c:2c:98:48:f5:ec:87:79:0e:3b:40:7d:d6:e7:45:88: a6:c2:09:2c:4a:20:c5:93:b8:c9:16:ac:b6:c5:05:91:38:e1: f7:d4:a3:68:b5:ff:b0:c4:26:39:58:3d:51:bd:67:05:4c:e1: a1:d2:4f:a3:9d:fb:35:46:c1:76:04:5e:a2:94:6f:98:96:8b: 34:9d:60:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx QzM1NDkzNEIwHhcNMjYxMDAzMDExMzA2WhcNMjYxMDEwMDExMzA2WjAYMRYwFAYD VQQDEw02YWMwNTZhMy1iYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMsKP+jf+hQboog2Qvj2yx2FgLo+5v21JiAXkk2s1Q3XtUNwC+hhoKu809ph jSVtQiw1cjgiyDg5JNesfwakJan8vSsCeGc7FZcURieE8gn5gUXBPKa0vOmBKjf5 ExG/uMxIfa2izLsYGyPEQxPSDUGgmRV1cnaJMmFs8EvKzHtOuwsaKScvKc/Id9sI kIHlMujAgkbRRg8Gh3LfAq57Xl2BTw1qPRMNNxeI8B4Szif7uVssLFua8tjYCxR0 N5aIQ9GbjuBIxGX6neHwIQIk79TgW3BfephqwqUIIDJsz8OyGh8t5d+bLAI4BYDz AvyOiFI0NqG32QHfmwQVq69bQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIssSvBy Uh3kHIsy0kuiQhFCh1N3MB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2 QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ1NS8yQkE3Mzk1RTE2QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZ QThId3NUTGEyRDBjTlVrMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEI4/owxqN47qcBkCY1piOqyvBHoCYOj4UW3u3Q82lF9TAWxgqESa6Wj8g2H1 zP1RGWPdL22KGsx6fML8RyWQrCrXBQ006xeZxAgTrxHiVZhdOqnouPshaiBx1RJ5 jbKWF6IqFzzqJQukgGED90DIKOv99h99U8MRBiyGd8EthNA17BLonFYAluT2W8AO 8P5WkAzbpC5rKh75xTnR+QS+Gq38MYndbZaRlVB80dcGrJa02u3s/bVMLJhI9eyH eQ47QH3W50WIpsIJLEogxZO4yRastsUFkTjh99SjaLX/sMQmOVg9Ub1nBUzhodJP o537NUbBdgReopRvmJaLNJ1ggg== -----END CERTIFICATE-----Generated at Sun Oct 4 17:54:53 2026 by rpki-client