$ rpki-client -vvvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft File: khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json) Hash identifier: 031ACzsudoWL6c77pJ59wyLxhFYRXWs/VaCCJ5wRhio= Subject key identifier: 53:6F:57:59:C2:71:F9:43:31:B1:CA:B2:13:0E:6D:31:E7:F5:A7:C2 Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 Certificate issuer: /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft Manifest number: 023F Signing time: Mon 05 Oct 2026 02:48:16 +0000 Manifest this update: Mon 05 Oct 2026 02:48:15 +0000 Manifest next update: Mon 12 Oct 2026 02:48:15 +0000 Files and hashes: 1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: pu5d5eBSKEaPxvqSIo4LnHYC2k4O+K3LaGJ/VD/ZN8g=) 2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: 1TmegfXL7CHMVE3+A+CZbSuJIC3tkud4zJDxKyv9h1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Validity Not Before: Oct 5 02:48:15 2026 GMT Not After : Oct 12 02:48:15 2026 GMT Subject: CN=6ac30ff0-fe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:af:b6:0e:da:e9:d1:5e:f6:8b:92:0f:e2: b0:95:b6:03:56:09:2a:2c:2f:7c:d3:c4:3e:fc:a6: 04:c9:88:e7:cd:af:7b:43:c6:ab:c1:d0:49:e5:6d: 10:98:32:03:6a:f9:14:b1:cb:2a:e7:47:c4:a8:da: e0:29:df:c1:83:cf:e0:ab:fb:35:70:25:bc:8e:26: 15:7e:03:5a:08:45:5d:dc:ab:85:0d:ba:cd:12:e1: a8:88:04:7b:71:ef:78:cc:b9:87:55:8f:0d:a5:81: db:d2:f9:f5:44:a3:83:64:53:49:9b:bd:1c:e5:ca: e0:34:93:b0:2f:bc:90:18:e7:9f:4f:c6:87:8a:16: 7a:61:06:a7:c0:7d:89:d8:63:5d:8d:32:21:34:5c: 3f:57:ac:3d:e3:c7:31:20:bd:a3:34:6c:5f:f7:0b: ae:35:89:b5:3e:37:ba:53:4d:b0:a0:f6:50:00:93: e8:ed:fe:23:1a:c5:11:4e:eb:62:60:3f:17:94:f3: f0:7a:bc:71:4c:41:0e:99:0e:cd:fa:6c:41:e6:3d: b7:87:77:d0:2e:9b:58:1d:65:cd:a8:db:89:ba:f1: 61:c2:54:9b:47:28:a0:fe:0d:f4:84:41:bd:3d:a8: 65:e8:ff:4c:c6:e5:96:b4:44:79:89:9b:28:09:dc: 80:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6F:57:59:C2:71:F9:43:31:B1:CA:B2:13:0E:6D:31:E7:F5:A7:C2 X509v3 Authority Key Identifier: keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:65:29:1d:ed:68:15:ef:08:43:70:df:40:b0:15:bc:bf: de:f8:70:c1:32:9d:bd:95:5a:bd:9a:e4:ed:9d:2c:33:1f:65: a8:67:87:ac:2b:e1:b0:d3:70:c4:7c:0c:88:43:2b:d4:e9:e2: 61:c0:29:68:cf:05:e6:c2:14:f1:61:84:ec:47:4b:3c:0e:e4: a4:c2:20:e7:05:0f:e1:39:2e:99:b5:d4:23:70:b9:5b:5b:5e: 35:8d:1c:b9:b6:fd:16:3c:f9:89:4e:1c:c8:29:69:54:ab:a5: 2b:40:cb:dc:85:53:16:de:5e:b9:2e:98:dc:73:43:62:3e:3b: 24:77:4b:1a:fc:5e:7e:e0:bc:aa:77:1f:8a:c4:de:1b:f0:08: e9:34:0d:b3:dd:d8:6a:34:bd:eb:59:08:83:7d:f4:bf:0d:b8: 99:30:09:a7:db:69:d5:0e:4e:c5:ba:eb:39:f6:ae:a2:06:9c: 27:bb:f7:b2:65:be:d4:95:0c:88:d3:b7:a9:76:77:bc:5e:9e: 14:c4:68:5f:bf:25:7a:09:29:bd:0f:4e:7a:c4:b9:c6:f9:04: 3e:d2:b0:ab:a3:56:a4:bd:82:d3:c3:84:13:de:e0:50:27:71: bc:1a:c8:3d:27:7b:03:28:c4:58:df:a1:7c:c7:cb:3c:bd:6d: bc:0b:b6:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM1RjMxMTAvBgNVBAUTKDkyMTNCNTA0N0E0MEYyM0M3QzYwMDQ4MEU2REFBN0Ex Q0Y3RkEyRTgwHhcNMjYxMDA1MDI0ODE1WhcNMjYxMDEyMDI0ODE1WjAYMRYwFAYD VQQDEw02YWMzMGZmMC1mZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPSvtg7a6dFe9ouSD+KwlbYDVgkqLC9808Q+/KYEyYjnza97Q8arwdBJ5W0Q mDIDavkUscsq50fEqNrgKd/Bg8/gq/s1cCW8jiYVfgNaCEVd3KuFDbrNEuGoiAR7 ce94zLmHVY8NpYHb0vn1RKODZFNJm70c5crgNJOwL7yQGOefT8aHihZ6YQanwH2J 2GNdjTIhNFw/V6w948cxIL2jNGxf9wuuNYm1Pje6U02woPZQAJPo7f4jGsURTuti YD8XlPPwerxxTEEOmQ7N+mxB5j23h3fQLptYHWXNqNuJuvFhwlSbRyig/g30hEG9 Pahl6P9MxuWWtER5iZsoCdyAbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNvV1nC cflDMbHKshMObTHn9afCMB8GA1UdIwQYMBaAFJITtQR6QPI8fGAEgObap6HPf6Lo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzVGMy85QjVEQjVFQTUw QTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThqeDhZQVNBNXRxbm9jOV9v dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTzFCSHBBOGp4OFlBU0E1dHFub2M5X291Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzVGMy85QjVEQjVFQTUwQTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThq eDhZQVNBNXRxbm9jOV9vdWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3JlKR3taBXvCENw30CwFby/3vhwwTKdvZVavZrk7Z0sMx9lqGeHrCvhsNNw xHwMiEMr1OniYcApaM8F5sIU8WGE7EdLPA7kpMIg5wUP4TkumbXUI3C5W1teNY0c ubb9Fjz5iU4cyClpVKulK0DL3IVTFt5euS6Y3HNDYj47JHdLGvxefuC8qncfisTe G/AI6TQNs93YajS961kIg330vw24mTAJp9tp1Q5OxbrrOfauogacJ7v3smW+1JUM iNO3qXZ3vF6eFMRoX78legkpvQ9OesS5xvkEPtKwq6NWpL2C08OEE97gUCdxvBrI PSd7AyjEWN+hfMfLPL1tvAu2sw== -----END CERTIFICATE-----Generated at Tue Oct 6 11:34:11 2026 by rpki-client