$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft File: O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft (raw, json) Hash identifier: 9ppgbrFl6tUBiwlIn1CVuChYuSDuqFlvSSazDklkc6w= Subject key identifier: 16:85:26:B2:CD:27:36:49:98:59:C5:28:97:13:38:4D:1A:4F:63:D7 Authority key identifier: 3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 Certificate issuer: /CN=A91A3ED9/serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft Manifest number: 25 Signing time: Wed 09 Sep 2026 09:14:28 +0000 Manifest this update: Wed 09 Sep 2026 09:14:28 +0000 Manifest next update: Wed 16 Sep 2026 09:14:28 +0000 Files and hashes: 1: O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl (hash: PEmYql+3nfAk/8sdU7rDr4zT8AKupzw2ZwNTNR+OETw=) 2: BFA8061876AB11F1AAE01A3C6EA30FBC.roa (hash: 9EIg/lWcSvk9v2gRzJROOuHZdpxkm+Aa8Ro0+T1ph54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 09:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3ED9, serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Validity Not Before: Sep 9 09:14:28 2026 GMT Not After : Sep 16 09:14:28 2026 GMT Subject: CN=6aa12374-f08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:72:af:79:73:be:a1:e1:34:0d:2b:55:b2: 38:55:fc:8a:57:7b:86:51:0c:b4:ac:ae:82:d6:60: d4:63:93:fc:4d:04:84:59:31:4d:77:aa:4e:3c:86: b1:a8:52:57:1e:bb:65:8e:ce:c6:62:7d:79:44:51: 68:6b:73:2b:a0:94:8b:8b:18:26:4f:94:f5:4a:d4: 1d:c1:95:b8:21:ba:0d:f9:59:72:af:7e:74:23:d2: c8:66:4a:28:37:c3:d1:01:47:b6:93:33:fe:44:71: 3d:00:fa:47:ca:2c:a1:f0:7b:5d:db:6f:b0:0f:aa: 87:21:64:0e:26:9a:55:ef:94:12:74:53:fd:ce:69: 75:9e:a7:38:1f:60:2f:54:f8:30:b9:ee:23:dc:3b: d9:ef:09:1e:36:96:90:09:40:d4:f6:fb:f1:d3:03: 55:8a:58:aa:99:16:a1:f6:f5:1c:64:d0:99:ee:1d: 84:f6:b3:8a:9c:5b:da:12:58:f2:cc:73:1c:1b:1e: f7:ab:04:03:6e:7a:87:ec:18:88:0d:54:65:20:27: ba:33:50:b6:6f:03:14:13:2b:8b:fb:19:04:67:61: 41:87:c7:bc:b0:7b:b0:e3:c2:db:1f:1b:1d:cd:8c: 59:1d:bb:9d:c5:67:52:d3:5e:f6:db:c5:ed:c8:42: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:85:26:B2:CD:27:36:49:98:59:C5:28:97:13:38:4D:1A:4F:63:D7 X509v3 Authority Key Identifier: keyid:3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0f:65:a3:d3:84:c1:aa:f8:8d:21:39:9b:7e:66:55:0e:fe: a4:ba:0d:86:f5:fa:c4:3b:5c:cf:71:4c:2d:37:7c:a0:6e:6c: 5c:2e:0c:6e:d2:f6:5d:09:64:6e:0c:eb:61:26:ec:09:b1:c0: 2a:ac:83:b6:af:6b:54:62:4a:91:36:a6:8b:2a:1e:a4:19:f6: 43:6e:b3:b1:82:54:da:0e:13:3c:36:d4:45:f3:ed:16:15:c2: 72:6f:4b:91:80:e7:c6:cb:61:65:db:60:5e:d2:5a:2e:86:da: e9:c7:47:f3:dd:b2:98:b9:45:95:10:9b:44:af:08:8d:68:0c: 9e:05:f0:89:0b:80:5f:9c:67:07:2e:74:dd:3e:5e:cb:1d:f8: e6:e4:25:6e:04:d0:56:23:0f:b8:bd:66:d3:cf:f0:a3:b8:c7: d3:0d:ef:df:df:51:f8:92:21:ea:9b:5c:12:65:21:e9:03:05: 81:2a:e1:4d:62:4f:a8:f5:88:78:73:00:b8:5b:91:d4:d4:44: c4:fa:26:8a:ed:4c:b9:2e:cd:4b:b1:6d:5a:7e:d1:0f:06:5a: f3:2f:13:0f:c3:2d:bd:84:b5:a0:dc:0a:3b:b6:0a:50:2a:fb: 8b:22:a4:f0:d8:a7:51:fd:50:e1:ac:7b:18:91:02:5f:11:0c: 2e:1a:d7:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0VEOTExMC8GA1UEBRMoM0I2M0UxRTRGMTFGMEY5Nzk1ODM2MTAxRUE2NkU2MkE1 OUZDNkVGODAeFw0yNjA5MDkwOTE0MjhaFw0yNjA5MTYwOTE0MjhaMBgxFjAUBgNV BAMTDTZhYTEyMzc0LWYwOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4C3KveXO+oeE0DStVsjhV/IpXe4ZRDLSsroLWYNRjk/xNBIRZMU13qk48hrGo Ulceu2WOzsZifXlEUWhrcyuglIuLGCZPlPVK1B3Blbghug35WXKvfnQj0shmSig3 w9EBR7aTM/5EcT0A+kfKLKHwe13bb7APqochZA4mmlXvlBJ0U/3OaXWepzgfYC9U +DC57iPcO9nvCR42lpAJQNT2+/HTA1WKWKqZFqH29Rxk0JnuHYT2s4qcW9oSWPLM cxwbHverBANueofsGIgNVGUgJ7ozULZvAxQTK4v7GQRnYUGHx7ywe7DjwtsfGx3N jFkdu53FZ1LTXvbbxe3IQh8pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFoUmss0n NkmYWcUolxM4TRpPY9cwHwYDVR0jBBgwFoAUO2Ph5PEfD5eVg2EB6mbmKln8bvgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzRUQ5LzE5MjZDQTdDNzZB NjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVlVmcyRUI2bWJtS2xuOGJ2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzJQaDVQRWZENWVWZzJFQjZtYm1LbG44YnZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz RUQ5LzE5MjZDQTdDNzZBNjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVl VmcyRUI2bWJtS2xuOGJ2Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3D2Wj04TBqviNITmbfmZVDv6kug2G9frEO1zPcUwtN3ygbmxcLgxu0vZdCWRu DOthJuwJscAqrIO2r2tUYkqRNqaLKh6kGfZDbrOxglTaDhM8NtRF8+0WFcJyb0uR gOfGy2Fl22Be0louhtrpx0fz3bKYuUWVEJtErwiNaAyeBfCJC4BfnGcHLnTdPl7L Hfjm5CVuBNBWIw+4vWbTz/CjuMfTDe/f31H4kiHqm1wSZSHpAwWBKuFNYk+o9Yh4 cwC4W5HU1ETE+iaK7Uy5Ls1LsW1aftEPBlrzLxMPwy29hLWg3Ao7tgpQKvuLIqTw 2KdR/VDhrHsYkQJfEQwuGtfE -----END CERTIFICATE-----Generated at Thu Sep 10 19:05:58 2026 by rpki-client