$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: d8HcJc0jCWXL0wmdoaO2276lpohSWpzlewddBrX5cW0= Subject key identifier: 12:38:E6:35:68:D9:27:E4:BC:DC:4B:1A:E1:A7:47:C2:B6:EE:D0:AD Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B55 Signing time: Fri 04 Sep 2026 19:13:26 +0000 Manifest this update: Fri 04 Sep 2026 19:13:26 +0000 Manifest next update: Fri 11 Sep 2026 19:13:26 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: DuakOZOEzlSvDQ3L8MedO36jKkRROnh5hDFspQMVr6U=) 2: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) 3: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) 4: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Sep 4 19:13:26 2026 GMT Not After : Sep 11 19:13:26 2026 GMT Subject: CN=6a9b1856-9bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:58:a7:bf:01:43:59:0f:a3:34:95:8a:9a: 7a:f9:9c:8d:b5:31:18:20:8c:c1:21:22:ea:37:9a: 6b:48:be:ca:01:82:56:5d:22:b6:01:b9:9d:82:26: ff:4e:0e:76:f8:b2:18:d2:ef:36:0e:8e:73:6f:09: e8:7c:b1:77:ca:e6:64:fd:ec:ca:ba:81:59:22:da: 27:40:f4:97:75:98:33:82:f2:be:62:95:57:5b:b7: 06:2e:42:dd:75:91:80:60:1d:b9:6c:71:dd:d9:1a: 2c:ed:0a:a8:9d:7e:19:a2:48:99:cb:6b:0b:0f:b6: 5a:e6:94:28:5b:6a:5b:79:e4:08:cb:72:f2:c0:8b: e8:8a:eb:ee:d1:98:02:62:90:fd:75:bb:13:90:9b: cc:72:c0:9f:eb:04:f3:34:46:9a:3e:b6:5b:84:57: 90:41:38:47:ce:71:6b:bb:8c:f2:44:6c:17:31:34: 88:c6:2c:54:18:09:ad:bc:5d:9e:e7:1a:21:80:dc: 5d:ba:90:1c:a5:6c:b0:85:38:01:2c:2f:e5:41:5e: a3:eb:c4:25:a0:f0:52:8f:51:fc:6a:c8:8a:4d:cd: f4:3d:4f:aa:d4:e2:a6:f2:12:1a:ce:7e:15:7d:f5: 2f:a7:58:1a:a7:d6:e0:9c:8e:8c:ba:5f:0f:e3:cd: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:38:E6:35:68:D9:27:E4:BC:DC:4B:1A:E1:A7:47:C2:B6:EE:D0:AD X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:fe:30:fc:b7:2c:7e:b1:a1:3a:7c:cf:ab:1f:86:8c:f6: b5:07:3b:1c:e5:4e:f7:31:c5:3f:6a:c3:20:ec:e0:6a:e1:8b: a0:51:1b:a2:b5:20:9e:8e:49:ff:72:38:23:79:d1:1c:51:cf: 07:3e:d6:73:9a:13:2f:62:6a:a0:1a:c4:ad:f3:5b:af:5b:63: 03:84:32:35:c8:e9:38:ac:3f:31:e0:dd:97:b5:dc:1b:a1:fc: 8e:16:6e:9b:f5:0a:53:1a:30:f5:70:49:7c:b4:ee:d2:bf:bd: 5f:44:86:b6:7a:e5:de:88:00:e1:55:0e:20:25:42:c0:07:59: 7c:ca:eb:5a:c6:67:a0:83:75:26:3d:fa:6a:26:c6:6e:06:fb: 89:ff:d8:23:88:d7:13:51:2b:e6:26:f5:d0:5c:b5:16:58:d2: 80:15:fa:9d:27:73:b8:16:13:dc:54:c3:a0:44:0c:e1:f4:0b: b5:5b:a4:96:c9:7c:42:67:5f:34:58:a6:aa:db:f1:f8:40:24: c8:d0:cd:55:33:89:52:22:dd:68:4e:20:80:32:c3:f7:08:9e: f9:68:9f:1a:5e:93:fb:e0:54:16:20:fe:9a:2b:d4:31:b3:4a: 1f:e6:50:3f:80:45:9a:1a:ad:9b:c6:23:8f:6a:b6:70:90:84: 70:04:d7:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYwOTA0MTkxMzI2WhcNMjYwOTExMTkxMzI2WjAYMRYwFAYD VQQDEw02YTliMTg1Ni05YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva1Yp78BQ1kPozSVipp6+ZyNtTEYIIzBISLqN5prSL7KAYJWXSK2Abmdgib/ Tg52+LIY0u82Do5zbwnofLF3yuZk/ezKuoFZItonQPSXdZgzgvK+YpVXW7cGLkLd dZGAYB25bHHd2Ros7QqonX4ZokiZy2sLD7Za5pQoW2pbeeQIy3LywIvoiuvu0ZgC YpD9dbsTkJvMcsCf6wTzNEaaPrZbhFeQQThHznFru4zyRGwXMTSIxixUGAmtvF2e 5xohgNxdupAcpWywhTgBLC/lQV6j68QloPBSj1H8asiKTc30PU+q1OKm8hIazn4V ffUvp1gap9bgnI6Mul8P483/wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBI45jVo 2SfkvNxLGuGnR8K27tCtMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdTL+MPy3LH6xoTp8z6sfhoz2tQc7HOVO9zHFP2rDIOzgauGLoFEborUgno5J /3I4I3nRHFHPBz7Wc5oTL2JqoBrErfNbr1tjA4QyNcjpOKw/MeDdl7XcG6H8jhZu m/UKUxow9XBJfLTu0r+9X0SGtnrl3ogA4VUOICVCwAdZfMrrWsZnoIN1Jj36aibG bgb7if/YI4jXE1Er5ib10Fy1FljSgBX6nSdzuBYT3FTDoEQM4fQLtVuklsl8Qmdf NFimqtvx+EAkyNDNVTOJUiLdaE4ggDLD9wie+WifGl6T++BUFiD+mivUMbNKH+ZQ P4BFmhqtm8Yjj2q2cJCEcATXmg== -----END CERTIFICATE-----Generated at Sat Sep 5 08:19:51 2026 by rpki-client