$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json) Hash identifier: yQmNO8r3wIo5W1lHmZsg8oVO8XqZLYT/W3MDDcP8xuQ= Subject key identifier: 9A:CA:FA:80:7E:FB:CA:19:05:2C:5D:21:31:14:67:C2:5F:7F:21:74 Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Certificate serial: 0E36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft Manifest number: 0E2B Signing time: Fri 04 Sep 2026 17:45:12 +0000 Manifest this update: Fri 04 Sep 2026 17:45:12 +0000 Manifest next update: Fri 11 Sep 2026 17:45:12 +0000 Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: qJmwQmt4trN/TPO4XRI58zd2yLvyjSISh8bTx5xAXEA=) 2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3638 (0xe36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Validity Not Before: Sep 4 17:45:12 2026 GMT Not After : Sep 11 17:45:12 2026 GMT Subject: CN=6a9b03a8-0e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:0f:f9:99:0d:0b:38:38:65:bb:a3:24:c6: f8:72:9c:19:b6:70:1b:74:a4:65:9e:2b:43:f2:5e: 44:7f:99:72:d2:28:70:33:0e:3b:30:ad:4c:4a:75: 3b:18:b0:81:69:c2:5f:12:24:ac:c7:6a:ac:2e:1f: 30:ff:e3:4a:f7:08:f6:da:e3:4c:b1:1e:f5:52:3e: 82:38:08:d0:aa:2d:b9:e9:62:bd:7f:ba:4c:56:c4: b0:4c:f5:d5:50:74:7d:ac:a0:84:4e:ac:d4:ae:e3: a1:bf:4e:74:2e:25:9d:1a:8f:24:02:a5:1a:68:c6: 48:d8:3c:6b:16:f6:43:64:7e:19:3f:01:90:ed:e3: 64:46:79:b5:98:60:30:00:8c:dd:03:85:12:52:51: 5b:12:81:4e:83:6c:8f:e8:2f:dd:10:40:8d:4c:52: ba:00:90:40:87:c2:fd:64:0a:bc:76:d0:cc:f7:98: df:4e:f0:4e:fd:59:3c:7d:20:1b:c1:56:e7:6d:6a: ee:2f:c9:3e:c1:1c:21:f0:f0:d2:f8:46:70:7d:c7: 8a:98:70:0f:44:33:b9:e1:c1:af:bd:f5:39:33:eb: e3:b5:3d:2a:a4:fb:b2:58:01:74:32:b6:da:55:2d: c1:22:10:20:9f:68:d0:7a:93:64:87:33:b6:0d:86: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:FA:80:7E:FB:CA:19:05:2C:5D:21:31:14:67:C2:5F:7F:21:74 X509v3 Authority Key Identifier: keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:86:4c:ea:2a:8e:3b:8e:48:bd:53:a8:64:8e:9f:ea:2e:be: 61:66:91:ea:f4:e1:e7:58:25:35:52:e8:fe:ed:a8:1a:eb:bb: f7:2a:f9:f9:7d:f0:61:07:f1:47:bd:75:20:2b:08:46:3e:07: 87:94:86:7b:73:cc:33:62:7c:d8:bf:84:10:88:5a:ea:b0:fe: 7e:c4:30:d1:2d:60:93:a9:21:6f:a8:a7:c7:5c:02:e2:f1:fc: de:84:e3:f5:b7:43:03:f3:de:51:2b:75:8d:7d:84:f4:5f:78: 23:ae:51:77:73:2d:89:90:97:49:5d:8f:bb:64:0c:79:e0:4a: da:9a:4f:13:71:4b:86:b7:04:07:06:9e:10:bd:32:72:ef:0f: 60:07:62:12:4a:66:73:3b:be:2a:1d:57:9c:c0:4d:54:3a:61: 05:e9:26:5b:d5:bf:a4:66:78:57:16:fb:ef:89:89:5e:4c:1e: 45:90:2e:2b:38:1f:e7:7d:5f:df:75:b1:17:6a:22:26:d0:7d: a0:1b:0a:2f:63:b7:38:43:e5:58:47:75:ff:76:11:75:55:2e: 54:48:44:6b:4c:b2:99:ea:8b:9b:10:9a:2a:71:1f:c5:a4:8e: 64:ac:4b:d9:d3:39:51:d1:29:6e:86:86:cb:80:1b:87:1d:13: d3:d7:fe:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0 NjIyRkQ2MjcwHhcNMjYwOTA0MTc0NTEyWhcNMjYwOTExMTc0NTEyWjAYMRYwFAYD VQQDEw02YTliMDNhOC0wZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCEP+ZkNCzg4ZbujJMb4cpwZtnAbdKRlnitD8l5Ef5ly0ihwMw47MK1MSnU7 GLCBacJfEiSsx2qsLh8w/+NK9wj22uNMsR71Uj6COAjQqi256WK9f7pMVsSwTPXV UHR9rKCETqzUruOhv050LiWdGo8kAqUaaMZI2DxrFvZDZH4ZPwGQ7eNkRnm1mGAw AIzdA4USUlFbEoFOg2yP6C/dEECNTFK6AJBAh8L9ZAq8dtDM95jfTvBO/Vk8fSAb wVbnbWruL8k+wRwh8PDS+EZwfceKmHAPRDO54cGvvfU5M+vjtT0qpPuyWAF0Mrba VS3BIhAgn2jQepNkhzO2DYa5iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrK+oB+ +8oZBSxdITEUZ8JffyF0MB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yNjFEMjgzMEQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xi OEZvTFVqQ3hOeDFHSXYxaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUIZM6iqOO45IvVOoZI6f6i6+YWaR6vTh51glNVLo/u2oGuu79yr5+X3wYQfx R711ICsIRj4Hh5SGe3PMM2J82L+EEIha6rD+fsQw0S1gk6khb6inx1wC4vH83oTj 9bdDA/PeUSt1jX2E9F94I65Rd3MtiZCXSV2Pu2QMeeBK2ppPE3FLhrcEBwaeEL0y cu8PYAdiEkpmczu+Kh1XnMBNVDphBekmW9W/pGZ4Vxb774mJXkweRZAuKzgf531f 33WxF2oiJtB9oBsKL2O3OEPlWEd1/3YRdVUuVEhEa0yymeqLmxCaKnEfxaSOZKxL 2dM5UdEpboaGy4Abhx0T09f+1Q== -----END CERTIFICATE-----Generated at Sat Sep 5 09:01:44 2026 by rpki-client