$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: blLvP/VRiJSMCx+ySjVdymt8so0mQhYzHfeH8VSAxig= Subject key identifier: BA:DB:FD:C8:F9:9B:C8:80:9C:41:C6:E0:FC:24:B5:F9:D2:06:57:DA Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 023C Signing time: Fri 04 Sep 2026 17:31:14 +0000 Manifest this update: Fri 04 Sep 2026 17:31:13 +0000 Manifest next update: Fri 11 Sep 2026 17:31:13 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: YQJmFPyRkdbxZhn0ZPYIpQ5gD1uBHzPQINTjRCzWtZM=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: 8UoEC8xsE/JTgByqgA9fCAgCWLlJeeUor6dWgZpCQrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Sep 4 17:31:13 2026 GMT Not After : Sep 11 17:31:13 2026 GMT Subject: CN=6a9b0062-12e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:6b:c3:53:fb:4b:69:50:27:97:16:51:36: e8:6c:94:e1:f8:f5:6a:71:5d:f7:06:26:fa:34:49: 5f:06:0c:26:5e:2b:20:25:0f:d8:4e:e1:4c:32:db: 58:10:02:b3:33:b6:fa:b5:d1:43:07:21:55:a4:00: 13:46:83:92:ff:e0:80:4c:49:df:16:3a:f2:4f:b0: 96:c0:0d:a7:79:82:35:a5:52:c8:22:57:ac:82:6b: da:02:1a:76:5b:5d:cd:78:a5:a7:41:0e:2a:84:f0: 5a:92:f7:db:e0:cc:2e:dc:aa:18:66:48:03:df:41: 30:22:4e:03:a2:f1:66:7a:27:e9:24:f9:62:ab:55: a8:c2:9e:66:5a:aa:89:40:b3:0d:08:fb:d8:c5:63: f0:7d:f9:dd:7f:ec:de:aa:3d:c2:1c:24:49:e9:53: 04:34:60:42:e2:81:56:15:4d:60:4d:35:19:3b:04: 3e:ec:1d:0d:62:6f:a4:6e:7d:25:66:ff:43:3f:c6: 0f:e5:9d:0a:0f:4e:9e:64:26:5f:1b:2c:0d:18:75: cc:31:f0:cc:28:e2:09:bb:c6:47:9f:2d:63:16:79: 5f:ec:74:3f:7b:43:03:3d:cd:6f:8b:f5:4a:a3:99: c1:9d:33:05:42:d3:2d:3f:ca:20:83:37:f0:2d:bf: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DB:FD:C8:F9:9B:C8:80:9C:41:C6:E0:FC:24:B5:F9:D2:06:57:DA X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a8:91:9a:6e:f6:18:dd:70:ef:67:36:dc:03:e8:80:ba:cc: 04:4f:77:eb:a3:04:30:af:dd:5e:3e:1b:52:0f:cf:27:53:9a: e7:5c:a0:2f:5f:ed:23:80:d2:3f:a6:7e:2c:09:5f:7d:71:1e: 84:f0:a6:38:ec:0d:4a:2e:62:fe:f3:4b:c5:84:d4:ea:16:72: 95:aa:23:9d:27:96:d7:af:20:9b:65:f7:d6:e9:a4:e9:4f:a3: 12:b3:18:75:f6:b1:cf:7f:0a:72:4d:4c:30:c5:42:f1:05:fd: 59:c8:ba:0c:ab:46:b5:24:9c:6d:fa:8c:7c:d0:0d:92:e4:9f: ac:9f:43:09:67:d9:e5:2d:eb:53:4e:ff:cf:64:c4:27:f3:a5: e4:dd:94:1c:bc:94:45:a3:04:03:75:47:b6:08:d4:90:77:f9: 1d:3f:fa:7a:92:87:14:48:4e:bc:94:0e:1d:a9:46:b1:95:69: ea:e7:90:d0:5d:48:0a:67:04:db:47:ab:6a:2c:e0:e4:a8:88: f5:6c:97:d9:11:a4:07:87:b4:b0:8b:c3:6e:06:92:ab:7e:96: 5b:11:b4:97:fc:a8:0c:cc:87:25:c7:41:f9:b9:19:1b:ca:40: f4:f3:82:da:4d:4e:27:50:9f:72:49:3e:87:6d:69:70:81:aa: 19:1f:88:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwOTA0MTczMTEzWhcNMjYwOTExMTczMTEzWjAYMRYwFAYD VQQDEw02YTliMDA2Mi0xMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMVrw1P7S2lQJ5cWUTbobJTh+PVqcV33Bib6NElfBgwmXisgJQ/YTuFMMttY EAKzM7b6tdFDByFVpAATRoOS/+CATEnfFjryT7CWwA2neYI1pVLIIlesgmvaAhp2 W13NeKWnQQ4qhPBakvfb4Mwu3KoYZkgD30EwIk4DovFmeifpJPliq1Wowp5mWqqJ QLMNCPvYxWPwffndf+zeqj3CHCRJ6VMENGBC4oFWFU1gTTUZOwQ+7B0NYm+kbn0l Zv9DP8YP5Z0KD06eZCZfGywNGHXMMfDMKOIJu8ZHny1jFnlf7HQ/e0MDPc1vi/VK o5nBnTMFQtMtP8oggzfwLb/ACwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrb/cj5 m8iAnEHG4PwktfnSBlfaMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaqiRmm72GN1w72c23APogLrMBE9366MEMK/dXj4bUg/PJ1Oa51ygL1/tI4DS P6Z+LAlffXEehPCmOOwNSi5i/vNLxYTU6hZylaojnSeW168gm2X31umk6U+jErMY dfaxz38Kck1MMMVC8QX9Wci6DKtGtSScbfqMfNANkuSfrJ9DCWfZ5S3rU07/z2TE J/Ol5N2UHLyURaMEA3VHtgjUkHf5HT/6epKHFEhOvJQOHalGsZVp6ueQ0F1ICmcE 20eraizg5KiI9WyX2RGkB4e0sIvDbgaSq36WWxG0l/yoDMyHJcdB+bkZG8pA9POC 2k1OJ1Cfckk+h21pcIGqGR+IcA== -----END CERTIFICATE-----Generated at Sat Sep 5 10:32:11 2026 by rpki-client