$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: CTidI7uPVIzmiUAdeQ50caDsYEPNgwgxTyvNikxM5Lo= Subject key identifier: 15:64:3B:0B:4E:BA:D1:6D:D8:33:B5:93:0B:C1:9D:D1:F1:2C:30:76 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0291 Signing time: Mon 21 Sep 2026 02:08:49 +0000 Manifest this update: Mon 21 Sep 2026 02:08:48 +0000 Manifest next update: Mon 28 Sep 2026 02:08:48 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: iALplHJHTNlkq7Kf89Tl9mtjxfn9ke/5WADt7N+uAQU=) 2: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=) 3: A78C8AB896E511F195E2E0D45C11F970.roa (hash: y6k5gAl70xPgm1PdqA0djO2XSJUwhklLEIGZFO4hIJc=) 4: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Sep 21 02:08:48 2026 GMT Not After : Sep 28 02:08:48 2026 GMT Subject: CN=6ab091b0-1575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:f6:a5:0d:a8:a4:6f:c3:a6:86:09:ab:0b: 29:8d:8e:14:29:a5:0f:6c:a4:7b:c9:1e:1f:a2:0a: d4:cb:d7:6e:66:3e:af:67:7d:5a:97:c0:33:55:f8: be:98:68:c8:82:d3:9d:83:6d:27:cf:ef:47:91:97: 04:28:99:1e:ff:b3:97:48:5f:c0:62:c2:26:3c:2e: 0c:38:a9:c6:44:41:d1:68:fa:78:6a:97:0a:e0:96: 31:2a:36:47:45:6a:c0:70:12:4a:86:ed:93:e7:40: 91:83:1e:59:cf:62:b1:5e:d5:d0:28:4c:c9:a2:eb: 9c:27:87:6b:b1:0b:a8:2a:4a:5c:23:87:76:cb:26: 03:da:70:46:77:f9:62:8f:77:10:28:b7:0f:87:85: 12:bf:f4:12:07:f1:0e:6a:85:ed:39:28:14:d4:3b: a3:64:e0:cf:27:90:1b:92:52:b9:38:48:00:c4:6c: d8:f2:fe:47:10:01:10:d9:e8:34:77:1e:93:b6:90: 22:cf:ae:4b:2b:13:6c:67:a1:5c:dd:8b:38:1e:42: 58:2f:74:ce:36:0a:d5:f1:d5:ec:5d:2d:3c:c8:ef: aa:92:c0:4a:97:71:e1:d7:9c:3d:7a:5e:c3:85:70: 0c:03:f8:8d:2e:ae:48:a3:a7:c5:8b:03:47:79:bb: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:3B:0B:4E:BA:D1:6D:D8:33:B5:93:0B:C1:9D:D1:F1:2C:30:76 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3b:2c:4f:9c:15:88:64:a4:76:0c:e9:6e:ff:cb:dd:52:30: d3:2f:ef:5c:e7:91:3c:7c:7c:df:ff:fa:7d:3e:d8:94:51:df: bb:c5:5f:7c:0a:e0:24:5b:5f:7b:2e:a6:3d:56:b4:ce:d5:fe: 42:d2:4f:60:f4:71:3d:9a:e3:c7:29:95:3e:eb:fb:a1:3d:f9: 6f:81:ec:65:00:c1:32:83:c8:f9:be:ac:c7:9e:8c:34:60:fb: d8:c7:93:77:98:30:f2:e7:2b:ef:db:1e:7b:7e:23:06:d8:34: be:e5:88:3e:bc:16:80:29:c9:26:40:25:aa:fd:e3:5e:2d:be: 48:29:3f:09:e9:c7:11:08:3e:9a:8d:3c:18:b3:7a:83:40:80: f0:d5:4f:64:34:bf:29:eb:f0:22:df:ae:62:73:92:0c:ff:fb: fc:96:6c:30:96:85:64:8a:79:d7:f7:f3:bd:60:ab:19:1f:3a: 8d:3a:14:a5:ee:14:9a:27:d3:f0:81:5c:2c:09:1e:4b:52:d5: 94:17:23:aa:8e:67:f1:a7:04:de:9b:78:ef:11:c7:cc:a5:05: d6:6b:cd:7a:31:a7:1f:1b:ef:33:5b:c9:3f:3f:79:ac:91:a0: 60:78:bc:74:ee:01:c2:bb:e4:03:9a:0f:a1:eb:55:13:b2:46: 9d:76:52:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwOTIxMDIwODQ4WhcNMjYwOTI4MDIwODQ4WjAYMRYwFAYD VQQDEw02YWIwOTFiMC0xNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTb2pQ2opG/DpoYJqwspjY4UKaUPbKR7yR4fogrUy9duZj6vZ31al8AzVfi+ mGjIgtOdg20nz+9HkZcEKJke/7OXSF/AYsImPC4MOKnGREHRaPp4apcK4JYxKjZH RWrAcBJKhu2T50CRgx5Zz2KxXtXQKEzJouucJ4drsQuoKkpcI4d2yyYD2nBGd/li j3cQKLcPh4USv/QSB/EOaoXtOSgU1DujZODPJ5AbklK5OEgAxGzY8v5HEAEQ2eg0 dx6TtpAiz65LKxNsZ6Fc3Ys4HkJYL3TONgrV8dXsXS08yO+qksBKl3Hh15w9el7D hXAMA/iNLq5Io6fFiwNHebuvvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVkOwtO utFt2DO1kwvBndHxLDB2MB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZjssT5wViGSkdgzpbv/L3VIw0y/vXOeRPHx83//6fT7YlFHfu8VffArgJFtf ey6mPVa0ztX+QtJPYPRxPZrjxymVPuv7oT35b4HsZQDBMoPI+b6sx56MNGD72MeT d5gw8ucr79see34jBtg0vuWIPrwWgCnJJkAlqv3jXi2+SCk/CenHEQg+mo08GLN6 g0CA8NVPZDS/KevwIt+uYnOSDP/7/JZsMJaFZIp51/fzvWCrGR86jToUpe4UmifT 8IFcLAkeS1LVlBcjqo5n8acE3pt47xHHzKUF1mvNejGnHxvvM1vJPz95rJGgYHi8 dO4BwrvkA5oPoetVE7JGnXZSpA== -----END CERTIFICATE-----Generated at Tue Sep 22 04:13:40 2026 by rpki-client