$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: lmbWSQ3VY1W0AA5IeEF+mlBiNKtyVv+iyHwyFjUdT7s= Subject key identifier: C0:4F:37:8C:86:72:5C:13:1C:DF:36:C8:5D:39:FC:8D:1D:83:EC:ED Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: 012E Signing time: Mon 21 Sep 2026 05:39:36 +0000 Manifest this update: Mon 21 Sep 2026 05:39:35 +0000 Manifest next update: Mon 28 Sep 2026 05:39:35 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: OeWLMW6k7WZIg7mgJCM3UJxYfXh9P92OtVGwHUPHsbU=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: FNVk1Hkb1JajhsNAiR0O9BCUIhbtgvJuSIfetEBCoj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: Sep 21 05:39:35 2026 GMT Not After : Sep 28 05:39:35 2026 GMT Subject: CN=6ab0c318-0c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:ca:7a:fa:7b:c7:da:88:4c:11:d7:7f:55: ff:5d:db:4a:2f:88:2d:ac:f7:93:dd:bc:c7:86:78: 0c:5b:81:a7:3e:40:51:81:49:3d:46:b1:89:75:24: df:39:56:e3:37:f7:62:6d:36:0d:6b:09:fb:2a:1c: cb:aa:a4:34:9f:82:37:6e:69:cb:8f:1e:c6:dc:93: 69:48:89:55:35:db:87:3a:fc:f4:e7:fb:a5:af:4d: db:f9:11:c4:6c:4b:d4:8f:5b:ba:42:2a:cc:1a:a5: 54:9f:03:e4:99:58:e7:51:e1:89:01:1c:9e:7a:cb: d9:f1:a5:0c:c8:69:fb:23:76:e0:92:54:0a:08:26: 1b:82:a3:9c:5c:ff:f6:37:41:ec:32:b7:89:bd:be: 05:bb:c9:37:3f:28:69:87:ee:87:8e:a2:63:d6:8a: 82:63:46:d8:ac:31:20:92:ed:57:88:0e:a3:c9:f4: e5:ad:64:43:82:7d:1a:7d:82:f6:e8:b2:57:e4:5a: b1:e1:01:8d:a8:75:2d:82:b2:f6:3f:94:81:8a:e0: 0e:a6:61:d9:81:b6:d0:95:99:56:3d:3e:5c:37:c4: ab:71:96:f5:5f:91:4f:85:a4:2d:18:1e:de:ab:7f: c3:ba:51:bd:a7:c8:96:53:4b:69:18:69:68:c7:d2: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:37:8C:86:72:5C:13:1C:DF:36:C8:5D:39:FC:8D:1D:83:EC:ED X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c3:c9:5a:b4:99:f2:c4:6d:a8:a0:01:8c:46:b1:78:67:bb: 73:63:74:ac:4f:36:06:b0:e1:a0:b6:75:65:f4:ba:19:33:eb: af:2f:c0:93:75:b8:ba:64:7e:e3:60:84:24:96:20:73:07:b7: 8e:4c:a8:a5:9e:de:55:c7:74:56:8f:fe:e0:bc:c1:f1:43:18: 39:94:65:33:d4:f7:ca:18:8c:ca:99:7c:e2:40:8c:b9:e3:a4: 0c:ed:63:88:32:18:bf:88:85:ca:26:83:dc:36:28:38:62:e7: e2:05:86:92:5c:01:6f:5e:5b:f5:87:67:43:92:a7:10:0f:f7: e0:ec:2f:00:43:c9:ba:c0:7f:3b:a0:53:c6:26:a7:8b:8f:b7: 08:cb:a3:46:6d:7e:62:32:7a:bd:65:a9:63:fc:24:79:e7:a0: a0:5a:38:a4:f6:15:4a:04:8e:da:32:4d:6b:ab:b2:3a:a3:37: f4:af:76:8a:0d:d4:9d:aa:b3:62:a5:25:c4:8a:8f:57:9a:5d: 2b:7f:b7:12:cf:4b:f3:8a:b6:ec:55:bf:68:35:d6:09:44:bb: 54:16:4f:ee:54:2b:bf:57:8b:72:03:b9:31:d9:14:de:9f:84: f3:e9:6e:eb:13:2d:b5:0c:a5:b9:b8:08:e1:b7:67:4a:fb:f2: 5a:a9:a9:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGM0IxMTAvBgNVBAUTKEEzOEQ0ODdCRDVEOUE4QTg5NDgwMjc0RkU2RjdDMDYx QzYyNEJDQzAwHhcNMjYwOTIxMDUzOTM1WhcNMjYwOTI4MDUzOTM1WjAYMRYwFAYD VQQDEw02YWIwYzMxOC0wYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHnKevp7x9qITBHXf1X/XdtKL4gtrPeT3bzHhngMW4GnPkBRgUk9RrGJdSTf OVbjN/dibTYNawn7KhzLqqQ0n4I3bmnLjx7G3JNpSIlVNduHOvz05/ulr03b+RHE bEvUj1u6QirMGqVUnwPkmVjnUeGJARyeesvZ8aUMyGn7I3bgklQKCCYbgqOcXP/2 N0HsMreJvb4Fu8k3Pyhph+6HjqJj1oqCY0bYrDEgku1XiA6jyfTlrWRDgn0afYL2 6LJX5Fqx4QGNqHUtgrL2P5SBiuAOpmHZgbbQlZlWPT5cN8SrcZb1X5FPhaQtGB7e q3/DulG9p8iWU0tpGGlox9I4dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBPN4yG clwTHN82yF05/I0dg+ztMB8GA1UdIwQYMBaAFKONSHvV2aiolIAnT+b3wGHGJLzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUYzQi9BQzc2MjIwMEU5 QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFLaVVnQ2RQNXZmQVljWWt2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUYzQi9BQzc2MjIwMEU5QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFL aVVnQ2RQNXZmQVljWWt2TUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlcPJWrSZ8sRtqKABjEaxeGe7c2N0rE82BrDhoLZ1ZfS6GTPrry/Ak3W4umR+ 42CEJJYgcwe3jkyopZ7eVcd0Vo/+4LzB8UMYOZRlM9T3yhiMypl84kCMueOkDO1j iDIYv4iFyiaD3DYoOGLn4gWGklwBb15b9YdnQ5KnEA/34OwvAEPJusB/O6BTxian i4+3CMujRm1+YjJ6vWWpY/wkeeegoFo4pPYVSgSO2jJNa6uyOqM39K92ig3Unaqz YqUlxIqPV5pdK3+3Es9L84q27FW/aDXWCUS7VBZP7lQrv1eLcgO5MdkU3p+E8+lu 6xMttQylubgI4bdnSvvyWqmpbQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:32:11 2026 by rpki-client