$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json) Hash identifier: I2JCQb4cXQbmJQkIK9kzRmd8jZUgB76661i61O+e+Rs= Subject key identifier: CB:31:C4:69:DF:7A:77:A3:8F:FF:01:D9:1B:4C:BF:EE:E0:B5:05:0F Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Certificate serial: 08DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft Manifest number: 08D1 Signing time: Tue 22 Sep 2026 20:14:39 +0000 Manifest this update: Tue 22 Sep 2026 20:14:39 +0000 Manifest next update: Tue 29 Sep 2026 20:14:39 +0000 Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: l56+/4gfY9ZteUxZRvSpUNGMhbAMp4IWFn0/itewzPU=) 2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Validity Not Before: Sep 22 20:14:39 2026 GMT Not After : Sep 29 20:14:39 2026 GMT Subject: CN=6ab2e1af-4c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:8c:17:c0:4e:e0:22:a4:75:e8:07:00:37: c1:b4:fe:d7:da:8c:36:a6:38:ec:47:1d:de:5c:1d: 33:cb:a8:5c:ed:ff:60:d4:05:42:01:10:c8:79:97: 2a:c5:94:3b:4a:ad:11:da:9a:53:5b:dd:dc:4c:26: 9b:ef:0c:17:50:cc:1e:11:61:09:71:dd:40:1b:ce: 0b:c0:cd:cb:2e:6d:94:ff:42:14:a7:97:ba:38:69: 84:63:d3:c3:27:4b:30:1f:d9:c3:16:8c:18:2d:38: 12:f4:4c:47:e8:93:ff:9a:a9:10:24:0a:ad:f2:81: e8:98:56:ce:15:0c:3c:49:db:6f:8b:df:35:3b:a8: ea:39:87:70:07:f7:45:91:aa:2f:bf:89:23:56:e7: 75:27:a0:32:c8:59:55:b5:9e:e0:f7:22:58:7a:1e: d2:f1:c3:06:a4:10:4e:99:94:53:3b:8b:7e:a9:82: 79:83:59:d4:ea:55:e4:cc:b5:6c:31:a1:87:e2:c1: b3:db:81:5d:5b:88:e3:c5:13:2e:b1:57:48:63:7c: db:49:a6:30:c7:f8:d3:36:b6:8f:85:94:b0:e5:80: 08:c7:e8:01:a8:53:ef:1d:19:29:ed:e2:53:d4:7d: 9f:d2:f5:60:9e:61:c2:0a:73:e2:df:50:22:64:13: b9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:31:C4:69:DF:7A:77:A3:8F:FF:01:D9:1B:4C:BF:EE:E0:B5:05:0F X509v3 Authority Key Identifier: keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6b:ee:92:86:5a:49:87:ee:ae:94:8b:70:68:57:bd:26:c0: c1:7d:e4:7c:cd:f9:99:9c:30:ba:d7:5d:e1:f2:5f:6c:57:e3: 04:ee:95:d2:77:59:d9:7d:6f:07:32:13:02:ed:79:81:5f:78: a1:6a:b3:ad:d9:fc:48:d7:7a:4d:94:69:2a:ac:ed:1d:40:2c: 40:e2:37:ca:5f:e5:af:36:0e:e4:6d:92:00:bd:92:1c:03:01: f8:ea:29:d4:ac:98:76:06:46:73:19:d8:05:10:09:6e:dd:db: 40:27:9e:10:a9:9f:da:f6:f6:cf:54:4a:fd:6f:94:54:34:47: 0f:a1:fb:a9:1b:0e:bb:e3:6f:8a:5a:3f:e4:b2:21:4c:61:e9: da:49:4b:02:1a:7b:57:10:2e:09:55:e9:f3:1a:14:24:50:d2: 63:a5:c2:11:1c:ea:8c:84:59:59:c4:41:f3:86:0c:0d:af:8f: a8:a8:97:e7:c1:4d:cb:e8:44:7f:b4:63:4a:79:e0:30:99:6d: 75:8a:dd:67:57:93:21:0f:4a:94:f6:b2:82:7e:17:96:f4:f7: e6:72:27:97:f6:38:da:36:a8:b2:fa:4a:9f:d4:ae:14:5a:11: 90:fd:1a:25:de:b0:8c:28:44:2f:97:f2:46:b7:2f:e1:e7:1b: 9f:78:9a:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4 NTcwMkRBQjEwHhcNMjYwOTIyMjAxNDM5WhcNMjYwOTI5MjAxNDM5WjAYMRYwFAYD VQQDEw02YWIyZTFhZi00YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY6MF8BO4CKkdegHADfBtP7X2ow2pjjsRx3eXB0zy6hc7f9g1AVCARDIeZcq xZQ7Sq0R2ppTW93cTCab7wwXUMweEWEJcd1AG84LwM3LLm2U/0IUp5e6OGmEY9PD J0swH9nDFowYLTgS9ExH6JP/mqkQJAqt8oHomFbOFQw8Sdtvi981O6jqOYdwB/dF kaovv4kjVud1J6AyyFlVtZ7g9yJYeh7S8cMGpBBOmZRTO4t+qYJ5g1nU6lXkzLVs MaGH4sGz24FdW4jjxRMusVdIY3zbSaYwx/jTNraPhZSw5YAIx+gBqFPvHRkp7eJT 1H2f0vVgnmHCCnPi31AiZBO5FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMsxxGnf enejj/8B2RtMv+7gtQUPMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w MENaX3AyU04wXy1GY0MyckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2vukoZaSYfurpSLcGhXvSbAwX3kfM35mZwwutdd4fJfbFfjBO6V0ndZ2X1v BzITAu15gV94oWqzrdn8SNd6TZRpKqztHUAsQOI3yl/lrzYO5G2SAL2SHAMB+Oop 1KyYdgZGcxnYBRAJbt3bQCeeEKmf2vb2z1RK/W+UVDRHD6H7qRsOu+Nvilo/5LIh TGHp2klLAhp7VxAuCVXp8xoUJFDSY6XCERzqjIRZWcRB84YMDa+PqKiX58FNy+hE f7RjSnngMJltdYrdZ1eTIQ9KlPaygn4XlvT35nInl/Y42jaosvpKn9SuFFoRkP0a Jd6wjChEL5fyRrcv4ecbn3ia1Q== -----END CERTIFICATE-----Generated at Wed Sep 23 05:19:53 2026 by rpki-client