$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft File: aOkXw1nR1G-x79ULcydnbeApSt8.mft (raw, json) Hash identifier: 5CV5Dz8isKRNp/RNqIlPLnW5MK8Wf+Kt21QkZfxctmM= Subject key identifier: D2:6E:45:4A:29:7C:F3:F9:02:94:9B:2A:90:86:A3:03:FA:19:8C:C6 Authority key identifier: 68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF Certificate issuer: /CN=A91A2F6C/serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft Manifest number: 0AA1 Signing time: Fri 02 Oct 2026 19:48:18 +0000 Manifest this update: Fri 02 Oct 2026 19:48:18 +0000 Manifest next update: Fri 09 Oct 2026 19:48:18 +0000 Files and hashes: 1: aOkXw1nR1G-x79ULcydnbeApSt8.crl (hash: 4K9TmrEWHO3q3xF1C5ZVkPRDApJYn6rke6joLBawrUc=) 2: oqJx-jvqVcsqpHYrmBQJRm0qYx0.asa (hash: RUMqslC7bug77qj14G+7Ah5OwG26LsWHGYxirdhoh20=) 3: 8746F506B54C11F1AB2B07BF9DEE528E.roa (hash: xqQ8RcJ+KeY8he+b6ly8ijnBrNknvFeLnsjxPvuvK6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.crl rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F6C, serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF Validity Not Before: Oct 2 19:48:18 2026 GMT Not After : Oct 9 19:48:18 2026 GMT Subject: CN=6ac00a82-a098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:33:22:8a:71:28:1f:6a:58:6a:7e:a4:22: e7:19:78:4c:b8:8e:5a:aa:c5:8d:8c:6e:cc:b4:0c: d5:a5:6c:6f:f7:0b:3b:ac:de:02:1f:1d:c2:67:f8: a5:69:c6:05:47:fa:65:4e:9c:c7:02:b4:16:a0:ff: 92:2f:ab:d9:12:6d:a7:9c:d6:7b:67:51:7d:41:fd: 9a:70:5e:36:4b:9f:3a:ec:ea:16:37:d6:34:98:9e: 68:1f:f0:c0:12:fe:01:93:32:bb:30:f9:73:b2:f2: 88:49:a4:de:de:08:bf:c5:9f:25:10:79:07:a8:fa: bb:dd:28:14:bb:23:91:de:2a:ad:0e:d6:08:1b:8c: 43:81:0a:7b:81:a7:b0:4d:20:61:b2:1a:fa:66:97: 74:3e:09:d1:c8:49:24:75:f2:49:db:9b:7f:af:c1: 7e:22:fa:8a:19:97:e0:71:ba:d0:11:b5:8d:be:30: 8d:f8:f4:ef:02:eb:b4:2d:57:88:d7:ef:e7:30:02: ea:dc:98:9a:3b:3e:57:cf:88:fd:3f:24:7c:2a:eb: 6a:47:29:9c:25:8e:74:51:91:2b:ee:c7:2e:38:fd: 1e:c6:6d:a0:86:76:0b:5e:28:ca:eb:18:62:29:b7: 0b:77:ac:33:89:dd:bb:1c:77:92:6a:c7:f8:8e:30: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:45:4A:29:7C:F3:F9:02:94:9B:2A:90:86:A3:03:FA:19:8C:C6 X509v3 Authority Key Identifier: keyid:68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:09:38:96:f4:2a:02:87:ec:7d:34:82:d4:a6:9e:25:5e:10: ad:43:00:5d:94:56:24:cf:83:b1:e1:a4:cb:21:12:7a:3a:ec: 42:a2:81:57:22:3e:cb:bc:9a:cf:07:9a:66:9d:a9:fc:36:71: f4:12:28:f1:a0:10:79:5b:a5:13:86:a7:6c:90:ee:c3:7a:98: 2d:03:52:33:2f:d7:fc:c4:a9:0e:d0:12:97:65:a9:0c:6f:f3: 4d:1e:1a:7d:38:07:37:4e:6f:51:e5:36:ef:df:c6:94:14:09: 75:30:4b:27:89:24:94:8e:8d:d0:25:7d:bc:52:c4:11:91:a0: 23:a9:6f:86:65:b3:43:52:50:13:ab:1c:d8:da:09:79:22:87: e3:36:4e:4d:2b:bb:ad:c5:56:d5:cf:a5:06:7d:b8:2f:d2:34: 84:22:42:ab:7c:f7:a2:09:f9:90:64:26:53:6e:18:18:ab:96: 39:e0:6c:51:3a:f5:ed:4e:10:fe:03:a8:af:18:d0:48:69:21: 37:f5:a7:c6:29:e1:67:4d:d2:e1:c2:d8:7d:46:98:21:f9:0e: 28:4a:4c:d6:4a:c8:6b:7a:fc:85:7a:8a:c3:6c:95:8f:c2:be: 0c:ad:cd:e9:86:79:97:7a:18:12:8b:c1:cb:8e:d5:b2:e3:57: fe:ec:f9:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkY2QzExMC8GA1UEBRMoNjhFOTE3QzM1OUQxRDQ2RkIxRUZENTBCNzMyNzY3NkRF MDI5NEFERjAeFw0yNjEwMDIxOTQ4MThaFw0yNjEwMDkxOTQ4MThaMBgxFjAUBgNV BAMTDTZhYzAwYTgyLWEwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcXTMiinEoH2pYan6kIucZeEy4jlqqxY2Mbsy0DNWlbG/3Czus3gIfHcJn+KVp xgVH+mVOnMcCtBag/5Ivq9kSbaec1ntnUX1B/ZpwXjZLnzrs6hY31jSYnmgf8MAS /gGTMrsw+XOy8ohJpN7eCL/FnyUQeQeo+rvdKBS7I5HeKq0O1ggbjEOBCnuBp7BN IGGyGvpml3Q+CdHISSR18knbm3+vwX4i+ooZl+BxutARtY2+MI349O8C67QtV4jX 7+cwAurcmJo7PlfPiP0/JHwq62pHKZwljnRRkSvuxy44/R7GbaCGdgteKMrrGGIp twt3rDOJ3bscd5Jqx/iOMCPVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0m5FSil8 8/kClJsqkIajA/oZjMYwHwYDVR0jBBgwFoAUaOkXw1nR1G+x79ULcydnbeApSt8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRjZDLzlFMzFGM0IyOEFC MzExRUE5M0E2QkEzRUM0RjlBRTAyL2FPa1h3MW5SMUcteDc5VUxjeWRuYmVBcFN0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU9rWHcxblIxRy14NzlVTGN5ZG5iZUFwU3Q4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy RjZDLzlFMzFGM0IyOEFCMzExRUE5M0E2QkEzRUM0RjlBRTAyL2FPa1h3MW5SMUct eDc5VUxjeWRuYmVBcFN0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5CTiW9CoCh+x9NILUpp4lXhCtQwBdlFYkz4Ox4aTLIRJ6OuxCooFXIj7LvJrP B5pmnan8NnH0EijxoBB5W6UThqdskO7DepgtA1IzL9f8xKkO0BKXZakMb/NNHhp9 OAc3Tm9R5Tbv38aUFAl1MEsniSSUjo3QJX28UsQRkaAjqW+GZbNDUlATqxzY2gl5 IofjNk5NK7utxVbVz6UGfbgv0jSEIkKrfPeiCfmQZCZTbhgYq5Y54GxROvXtThD+ A6ivGNBIaSE39afGKeFnTdLhwth9Rpgh+Q4oSkzWSshrevyFeorDbJWPwr4Mrc3p hnmXehgSi8HLjtWy41f+7Pld -----END CERTIFICATE-----Generated at Sat Oct 3 16:42:49 2026 by rpki-client