$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json) Hash identifier: 5IEwNgrFY/CcJjpMHEGRL1mHhdF3UKTENWO9Ti1B8oo= Subject key identifier: 8B:C5:F0:47:39:AC:F6:EE:71:77:FB:42:2F:49:63:1C:DD:31:CA:43 Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft Manifest number: 94 Signing time: Mon 21 Sep 2026 03:17:27 +0000 Manifest this update: Mon 21 Sep 2026 03:17:27 +0000 Manifest next update: Mon 28 Sep 2026 03:17:27 +0000 Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: 4Sk0AVlWlA8H1UurClRuKDDk8zGb6QUlMFR3T+dXyt4=) 2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Validity Not Before: Sep 21 03:17:27 2026 GMT Not After : Sep 28 03:17:27 2026 GMT Subject: CN=6ab0a1c7-b0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:65:31:a2:d9:72:36:f3:74:fc:c7:9a:20: 3d:10:4b:89:5f:47:78:de:0d:10:59:bc:33:88:5f: 5e:7e:c4:8f:57:bb:89:c0:bf:a5:48:18:3f:78:db: 7b:33:ea:23:71:00:7b:b5:19:5b:5f:8a:1a:9a:8b: 98:13:42:4b:e5:b3:d8:fb:ec:66:10:bc:ba:88:ca: 75:62:a7:33:3f:3a:0e:7c:0d:2d:be:64:78:e5:35: 42:4c:f3:31:92:bd:72:2c:25:05:d9:e5:ce:7e:ec: 3d:df:34:2f:d4:a5:b2:ce:64:68:df:3c:26:8e:03: fc:0a:dc:0c:d2:14:a7:c2:68:8e:45:6f:c5:8d:25: 63:85:ae:37:c5:a9:2e:d2:5b:50:db:bb:bb:c1:a1: 9c:f4:38:b3:2e:4f:5c:67:59:0e:b6:5d:8a:31:54: 90:6c:ea:9b:50:10:bd:15:d2:53:1d:a5:63:16:fd: bb:60:46:4e:58:0d:18:7d:bf:41:36:76:52:58:1d: b1:d5:af:c5:87:b7:1c:f9:90:67:81:3e:eb:a3:20: 3e:e3:4e:cb:f3:0f:27:f2:12:f4:d1:a1:db:ce:e9: 04:f8:1a:51:c1:45:ac:0e:d7:ef:59:dd:4c:03:c8: be:df:31:df:57:d9:72:89:78:28:f0:00:51:1d:bf: b2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:F0:47:39:AC:F6:EE:71:77:FB:42:2F:49:63:1C:DD:31:CA:43 X509v3 Authority Key Identifier: keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5b:46:5e:a3:de:ff:3f:fd:9f:aa:a6:89:74:16:8e:23:ea: 50:79:7c:c0:19:2d:7d:23:ec:bd:c2:87:db:91:8e:65:41:90: 98:1e:67:18:76:84:db:ef:0a:54:e0:3f:53:da:21:d6:66:cc: ed:15:03:3e:08:5c:69:72:1d:8c:c6:2d:9a:87:d1:da:df:97: e9:c5:79:c0:4f:2a:af:6b:2c:ba:b5:72:af:b0:b5:61:9f:49: 23:48:2c:75:f3:6b:34:45:4b:81:3b:34:c6:8e:a1:65:bb:28: e0:fa:c3:fb:12:af:c6:5e:47:da:05:53:99:a8:d1:97:f8:98: b4:96:05:b8:e3:3d:4d:13:74:b7:63:51:ff:01:95:b6:44:4d: ed:14:b6:fd:3e:0c:7d:f7:57:46:e6:7e:d8:72:c7:0a:6f:1d: a3:d8:c7:91:6d:76:b8:24:3b:94:b6:25:b8:5a:52:63:40:dc: 65:03:9c:35:dc:d3:b8:a6:29:63:8a:00:39:6c:a7:8f:33:d7: 17:78:9f:94:3f:02:61:83:9c:d6:09:50:d3:bc:a9:61:33:75: 3d:89:39:ee:f3:10:5f:bc:34:f9:d8:a7:26:56:c0:0e:09:3c: f5:da:08:bc:06:b0:fb:6a:04:a6:3d:0c:a0:cf:e1:87:e2:35: 3e:23:80:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEEwRkNCRTlCQ0I0MzI4QTlFOEJDQ0ExRjVFMTQ5NkFD QzJDRTJFRDkwHhcNMjYwOTIxMDMxNzI3WhcNMjYwOTI4MDMxNzI3WjAYMRYwFAYD VQQDEw02YWIwYTFjNy1iMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnJlMaLZcjbzdPzHmiA9EEuJX0d43g0QWbwziF9efsSPV7uJwL+lSBg/eNt7 M+ojcQB7tRlbX4oamouYE0JL5bPY++xmELy6iMp1YqczPzoOfA0tvmR45TVCTPMx kr1yLCUF2eXOfuw93zQv1KWyzmRo3zwmjgP8CtwM0hSnwmiORW/FjSVjha43xaku 0ltQ27u7waGc9DizLk9cZ1kOtl2KMVSQbOqbUBC9FdJTHaVjFv27YEZOWA0Yfb9B NnZSWB2x1a/Fh7cc+ZBngT7royA+407L8w8n8hL00aHbzukE+BpRwUWsDtfvWd1M A8i+3zHfV9lyiXgo8ABRHb+yLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvF8Ec5 rPbucXf7Qi9JYxzdMcpDMB8GA1UdIwQYMBaAFKD8vpvLQyip6LzKH14UlqzCzi7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny9CQkYyOEREQUQ5 OTUxMUYwOUExODYyM0I2NEQzNjQxRC9vUHktbTh0REtLbm92TW9mWGhTV3JNTE9M dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny9CQkYyOEREQUQ5OTUxMUYwOUExODYyM0I2NEQzNjQxRC9vUHktbTh0REtL bm92TW9mWGhTV3JNTE9MdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn1tGXqPe/z/9n6qmiXQWjiPqUHl8wBktfSPsvcKH25GOZUGQmB5nGHaE2+8K VOA/U9oh1mbM7RUDPghcaXIdjMYtmofR2t+X6cV5wE8qr2ssurVyr7C1YZ9JI0gs dfNrNEVLgTs0xo6hZbso4PrD+xKvxl5H2gVTmajRl/iYtJYFuOM9TRN0t2NR/wGV tkRN7RS2/T4MffdXRuZ+2HLHCm8do9jHkW12uCQ7lLYluFpSY0DcZQOcNdzTuKYp Y4oAOWynjzPXF3iflD8CYYOc1glQ07ypYTN1PYk57vMQX7w0+dinJlbADgk89doI vAaw+2oEpj0MoM/hh+I1PiOAwQ== -----END CERTIFICATE-----Generated at Mon Sep 21 15:47:13 2026 by rpki-client