$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: 6nXzgLZRmdiVBFadSYuXjjrG3kZ1Y3pHz6zDJQ239K0= Subject key identifier: C0:43:CE:98:10:50:E8:6B:8A:C4:2C:D7:2F:15:67:98:4E:5D:56:F6 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 01AF Signing time: Sat 05 Sep 2026 03:56:23 +0000 Manifest this update: Sat 05 Sep 2026 03:56:23 +0000 Manifest next update: Sat 12 Sep 2026 03:56:23 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: cRaoZwZ1MvmKoBQZr9OCwvySHKCVeo+eQTNY4nDgKVE=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=) 4: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=) 5: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=) 6: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Sep 5 03:56:23 2026 GMT Not After : Sep 12 03:56:23 2026 GMT Subject: CN=6a9b92e7-b29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:75:35:a7:bb:13:bf:df:73:4e:82:89:84: 6b:d9:bd:42:c2:f1:43:5e:7f:e2:a0:21:b1:1d:ce: f6:ba:80:c4:f6:18:90:97:4c:d6:8d:88:23:4a:3a: a9:cc:b4:6a:3d:ad:68:76:fd:a9:3f:e2:d2:c0:ff: 9f:b3:4c:2b:07:16:03:9b:94:ad:e4:15:15:54:af: ac:61:ff:40:d8:2b:2f:40:0f:a6:6c:81:81:b9:a4: c6:8c:7a:c3:d6:27:d1:03:df:36:f0:1e:77:8f:4f: 1d:9e:8d:06:4a:f3:c9:ff:3f:e6:c2:ba:1c:4d:33: b1:5d:f7:2f:b7:f2:d4:aa:d7:bb:4a:ba:52:d8:15: 1d:c0:7f:92:93:f5:ad:98:bf:8c:9e:29:bb:20:d7: 51:6d:86:e8:58:5f:d3:79:45:15:c9:3f:82:12:dd: 61:30:b7:fc:a1:5e:72:b8:fb:80:eb:b7:0d:b6:5c: 1e:36:f3:d5:9d:2b:10:d1:57:54:f5:56:3d:94:df: 9d:50:dc:c8:5a:e0:ca:9d:f8:26:c3:af:66:f6:c4: 15:16:8d:3f:7f:fb:10:9e:eb:8e:37:97:6d:fc:90: 27:a7:9e:af:51:0a:1d:11:50:92:d1:04:5a:15:f0: 93:46:32:3c:32:b2:cc:0a:2d:f7:64:e0:f7:11:32: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:CE:98:10:50:E8:6B:8A:C4:2C:D7:2F:15:67:98:4E:5D:56:F6 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:29:2b:dd:85:99:f0:ba:08:76:5c:39:c9:db:40:55:50:e3: 96:bb:7a:e7:ab:84:3f:e7:09:6c:18:39:3b:d3:69:c8:8e:25: 1e:84:76:19:62:54:70:33:36:c1:c2:d9:73:3c:54:f9:f5:44: dc:6b:49:d8:66:33:54:7c:41:6c:36:8a:0e:76:0d:6f:2f:a2: 99:0d:2f:86:d5:50:e1:45:1b:fc:f4:16:f8:b3:67:21:4f:7e: d9:1f:79:cb:50:ba:db:f9:db:51:53:a8:22:12:bb:a0:05:e1: 92:14:05:58:ec:41:b4:29:c6:54:dc:2b:64:17:b5:92:bb:c7: 22:17:ac:39:05:91:e1:4c:47:0a:59:61:0a:3d:82:c2:c8:fc: 9b:a1:16:05:2b:e8:db:0e:88:fc:05:91:dc:c8:06:6c:d0:0e: 5b:dd:62:57:eb:74:7b:54:9f:90:de:01:81:93:69:88:60:ec: 4c:24:eb:c7:c2:7c:cc:68:e6:f6:db:5f:2c:27:9b:4f:44:e6: d5:b1:b5:0f:7f:4e:88:8a:b0:d6:24:9d:f9:c8:69:31:dd:96: ee:a9:f1:55:32:4e:63:63:41:10:e0:6e:58:53:4a:47:98:09: 2a:dd:43:52:1f:f0:20:56:2a:bc:4e:3e:27:58:81:8b:0e:25: ff:fd:4b:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjYwOTA1MDM1NjIzWhcNMjYwOTEyMDM1NjIzWjAYMRYwFAYD VQQDEw02YTliOTJlNy1iMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pZ1Nae7E7/fc06CiYRr2b1CwvFDXn/ioCGxHc72uoDE9hiQl0zWjYgjSjqp zLRqPa1odv2pP+LSwP+fs0wrBxYDm5St5BUVVK+sYf9A2CsvQA+mbIGBuaTGjHrD 1ifRA9828B53j08dno0GSvPJ/z/mwrocTTOxXfcvt/LUqte7SrpS2BUdwH+Sk/Wt mL+Mnim7INdRbYboWF/TeUUVyT+CEt1hMLf8oV5yuPuA67cNtlweNvPVnSsQ0VdU 9VY9lN+dUNzIWuDKnfgmw69m9sQVFo0/f/sQnuuON5dt/JAnp56vUQodEVCS0QRa FfCTRjI8MrLMCi33ZOD3ETLFcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBDzpgQ UOhrisQs1y8VZ5hOXVb2MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmCkr3YWZ8LoIdlw5ydtAVVDjlrt656uEP+cJbBg5O9NpyI4lHoR2GWJUcDM2 wcLZczxU+fVE3GtJ2GYzVHxBbDaKDnYNby+imQ0vhtVQ4UUb/PQW+LNnIU9+2R95 y1C62/nbUVOoIhK7oAXhkhQFWOxBtCnGVNwrZBe1krvHIhesOQWR4UxHCllhCj2C wsj8m6EWBSvo2w6I/AWR3MgGbNAOW91iV+t0e1SfkN4BgZNpiGDsTCTrx8J8zGjm 9ttfLCebT0Tm1bG1D39OiIqw1iSd+chpMd2W7qnxVTJOY2NBEOBuWFNKR5gJKt1D Uh/wIFYqvE4+J1iBiw4l//1LTg== -----END CERTIFICATE-----Generated at Sat Sep 5 07:48:06 2026 by rpki-client