$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft File: oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json) Hash identifier: GZqQu8DlRt1OiL2WOGpd/7BaIX+HLp382V1BFO28mnI= Subject key identifier: DA:3F:75:73:A3:E9:3E:12:97:AD:72:89:A6:E7:42:04:F2:AB:57:F4 Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2 Certificate issuer: /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft Manifest number: 33 Signing time: Thu 03 Sep 2026 08:56:31 +0000 Manifest this update: Thu 03 Sep 2026 08:56:31 +0000 Manifest next update: Thu 10 Sep 2026 08:56:31 +0000 Files and hashes: 1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: u2JqXZjNrHuCoS3dUA831tM+mWKeyAgzrS0v4mVjVAo=) 2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2 Validity Not Before: Sep 3 08:56:31 2026 GMT Not After : Sep 10 08:56:31 2026 GMT Subject: CN=6a99363f-b00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:cf:53:70:fb:8e:a7:90:74:dc:9a:cd:96: aa:23:fa:3a:19:87:37:61:87:33:2f:3b:52:88:4b: 59:0f:bd:86:ef:9c:72:c1:7b:a7:d8:2a:dd:27:f1: 58:7b:f5:69:6b:2c:0f:1d:98:6d:e7:bd:7a:f2:7d: 3a:cc:76:c5:11:a7:3b:d5:be:0f:1f:22:e1:77:e1: f7:70:49:64:b1:b3:bc:30:5f:66:50:48:24:8b:f8: 00:49:6a:57:c0:5a:fe:dd:5b:b3:90:c9:8f:94:a8: 0f:fd:96:6e:2e:f3:51:30:d5:fe:85:55:b4:b4:f7: e3:5b:09:32:5b:dd:17:ca:f8:83:d4:1b:79:18:44: ba:c4:12:21:28:c9:74:70:f4:c0:be:7e:82:68:ff: 2d:0b:40:84:df:5b:20:77:7c:a9:6d:81:ca:88:e3: bf:e2:a2:39:de:6b:e0:cc:72:48:22:f9:42:1a:93: 46:07:92:50:62:43:b9:da:f9:54:66:e7:5c:29:92: be:4b:e6:d7:08:b3:fe:9d:d5:49:b2:2a:f3:bf:fb: 2f:34:2c:6c:c6:9c:f7:46:05:3f:8e:2c:10:19:34: 08:6e:0e:30:95:f5:b2:1d:cf:2a:f2:a7:ac:8a:64: e9:5a:16:95:c7:dc:69:03:2e:45:ea:39:3d:32:b2: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:75:73:A3:E9:3E:12:97:AD:72:89:A6:E7:42:04:F2:AB:57:F4 X509v3 Authority Key Identifier: keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2c:54:fd:a8:25:3f:ec:40:06:9f:fa:d9:0a:7d:6d:9c:78: 07:ad:08:5b:46:3b:27:42:93:d9:da:45:aa:a5:09:2a:88:7d: c8:2d:4c:06:b9:74:3c:71:d1:55:28:13:dd:5a:2c:33:a9:5d: e1:ae:93:58:f6:78:fe:24:13:3b:4e:f4:30:72:12:53:ae:5e: eb:d8:f7:a9:00:4d:1c:bc:aa:f3:ad:e8:67:64:e5:21:c0:ae: d7:63:ab:53:30:52:94:b3:f2:8d:6f:15:e1:5a:09:39:00:d2: 87:70:1e:3b:40:4c:00:5b:a3:4a:36:21:46:c9:4d:d3:2c:13: 60:d6:dd:1b:44:bc:01:f0:52:9a:c3:65:cf:65:22:dd:f2:7b: 2f:c6:4a:0e:dc:6b:b4:8b:69:08:40:08:36:43:8b:6d:37:8d: 33:8d:a2:4b:17:ff:72:07:2e:c6:1b:0c:c2:77:bc:3a:52:93: 4d:99:0b:e9:3f:77:63:b4:2b:3e:ab:c0:8f:f2:dd:b8:cb:3a: 7f:d6:9e:40:19:a7:15:bf:43:bc:6e:bb:f1:ec:c8:14:34:5a: e3:33:24:98:6b:6d:bc:ca:4a:7f:46:0c:a6:7b:c7:56:1a:1d: 24:e1:29:31:05:19:c3:aa:00:a8:fb:33:d4:5a:08:37:95:77: c1:b7:b9:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzZGMjExMC8GA1UEBRMoQTA5OUQwMkNEMEI3Rjk2ODg5NjQ2NTYzOUYxQUYwNkIz M0U0NkFBMjAeFw0yNjA5MDMwODU2MzFaFw0yNjA5MTAwODU2MzFaMBgxFjAUBgNV BAMTDTZhOTkzNjNmLWIwMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX2M9TcPuOp5B03JrNlqoj+joZhzdhhzMvO1KIS1kPvYbvnHLBe6fYKt0n8Vh7 9WlrLA8dmG3nvXryfTrMdsURpzvVvg8fIuF34fdwSWSxs7wwX2ZQSCSL+ABJalfA Wv7dW7OQyY+UqA/9lm4u81Ew1f6FVbS09+NbCTJb3RfK+IPUG3kYRLrEEiEoyXRw 9MC+foJo/y0LQITfWyB3fKltgcqI47/iojnea+DMckgi+UIak0YHklBiQ7na+VRm 51wpkr5L5tcIs/6d1UmyKvO/+y80LGzGnPdGBT+OLBAZNAhuDjCV9bIdzyryp6yK ZOlaFpXH3GkDLkXqOT0yst1nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2j91c6Pp PhKXrXKJpudCBPKrV/QwHwYDVR0jBBgwFoAUoJnQLNC3+WiJZGVjnxrwazPkaqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNkYyLzVFMEY3QjNDNjNC NjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdpSlpHVmpueHJ3YXpQa2Fx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0puUUxOQzMtV2lKWkdWam54cndhelBrYXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NkYyLzVFMEY3QjNDNjNCNjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdp SlpHVmpueHJ3YXpQa2FxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYLFT9qCU/7EAGn/rZCn1tnHgHrQhbRjsnQpPZ2kWqpQkqiH3ILUwGuXQ8cdFV KBPdWiwzqV3hrpNY9nj+JBM7TvQwchJTrl7r2PepAE0cvKrzrehnZOUhwK7XY6tT MFKUs/KNbxXhWgk5ANKHcB47QEwAW6NKNiFGyU3TLBNg1t0bRLwB8FKaw2XPZSLd 8nsvxkoO3Gu0i2kIQAg2Q4ttN40zjaJLF/9yBy7GGwzCd7w6UpNNmQvpP3djtCs+ q8CP8t24yzp/1p5AGacVv0O8brvx7MgUNFrjMySYa228ykp/Rgyme8dWGh0k4Skx BRnDqgCo+zPUWgg3lXfBt7ke -----END CERTIFICATE-----Generated at Sat Sep 5 09:47:44 2026 by rpki-client