$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft File: OhbEBL_tNHJEowpa__ZuSZKqKCE.mft (raw, json) Hash identifier: CPgHS49iiQPJ7Ff2Fmru3pRONLxKNIyQHFiDZbqK8cs= Subject key identifier: ED:1B:75:CF:20:BA:90:69:D9:D7:B0:2A:50:58:B0:63:5C:AB:98:A1 Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21 Certificate issuer: /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821 Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft Manifest number: 0544 Signing time: Tue 06 Oct 2026 23:36:26 +0000 Manifest this update: Tue 06 Oct 2026 23:36:26 +0000 Manifest next update: Tue 13 Oct 2026 23:36:26 +0000 Files and hashes: 1: OhbEBL_tNHJEowpa__ZuSZKqKCE.crl (hash: 1XuSXqSpOgwEfw2ymlKWFgnmBimr5AfZBBjwcRi3Yxg=) 2: 9D77DCA4599A11ECA574BF52C4F9AE02.roa (hash: +QpDQgaKDgA4jgwCETbDA10J+dE7YQ9N+DpzerwOFaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A65C4, serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821 Validity Not Before: Oct 6 23:36:26 2026 GMT Not After : Oct 13 23:36:26 2026 GMT Subject: CN=6ac585fa-e425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:d0:be:a7:95:af:02:b2:96:7f:f4:52:21: 51:2c:a6:47:24:12:46:07:3d:91:c4:af:46:79:5f: 33:db:65:e8:15:76:c0:36:37:f1:47:3f:9e:65:ae: 72:a4:24:a9:40:de:f6:95:e8:f9:58:3a:3e:c5:01: 8e:2c:98:e1:41:30:8c:10:fa:eb:ff:43:c0:be:85: 5d:48:f6:9e:8c:5b:ff:87:1b:4f:8b:b2:1c:6c:20: 69:90:83:5f:df:b2:d3:d2:f6:cb:b8:d2:f0:37:31: 1a:c6:09:50:ae:cb:4a:cc:cc:df:b4:e0:66:55:24: 3e:06:0e:9b:e1:be:d8:9c:1d:97:ec:83:68:f7:64: 53:76:7d:5d:68:01:47:ab:a0:e6:9c:c1:09:9b:54: e3:14:cc:65:26:74:1b:5c:6b:91:2d:ff:6a:b8:fb: 14:0a:cc:ff:64:92:53:32:da:8b:7f:c9:fe:1e:e1: 54:58:14:d8:fb:c1:5a:34:87:2f:76:12:08:80:d6: 28:c9:81:fc:c7:73:c4:0f:60:f8:0e:ae:f3:f5:1a: 43:85:36:46:e8:58:11:21:38:c0:3c:6f:1a:a7:7f: b7:fc:22:f1:8c:54:bc:ba:3d:18:ee:72:74:6e:0a: f0:ab:78:9b:8a:23:c8:a3:ca:4c:aa:33:62:c6:f2: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:75:CF:20:BA:90:69:D9:D7:B0:2A:50:58:B0:63:5C:AB:98:A1 X509v3 Authority Key Identifier: keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:79:61:05:80:1a:06:20:89:5a:a8:ee:39:60:68:d2:f3:a1: f6:71:5e:b0:0e:fd:9c:a5:dc:d8:ba:c6:cc:ed:44:42:0b:dd: ec:c2:72:1b:c8:5f:12:8e:3b:a3:ec:b0:ba:07:a7:5c:1b:ae: 30:bf:7d:85:33:54:bb:f5:ce:c2:a2:53:f8:15:ff:ad:f7:ed: 23:f2:90:a4:95:c5:b6:b6:f8:13:39:6d:bc:1c:6b:93:53:f8: 5d:dd:c3:45:e9:9f:98:4b:ea:61:57:73:12:26:1c:fa:34:3b: 24:24:bd:ea:96:cf:90:3a:f5:a3:37:1f:3d:83:ed:03:99:cd: 1f:84:78:b1:8f:00:83:09:e8:cd:ae:5b:2e:a2:f5:79:57:7b: b6:ce:08:3e:5a:dd:97:01:4d:08:f9:82:99:3c:bc:5f:34:5d: 7f:11:4c:d9:64:a4:5b:f5:7c:2f:05:fd:34:b6:75:e9:68:83: 4c:7b:38:2f:f9:e3:35:bf:83:03:10:11:c7:ba:58:14:e8:f9: ac:fa:44:55:c1:5d:a8:42:4b:48:e1:92:de:df:14:b0:c2:24: da:04:5e:10:7f:23:66:c9:50:4d:ec:74:76:5d:33:5c:78:7f: 73:8a:5e:97:3d:14:56:fb:1e:fe:59:0b:60:58:aa:37:15:ef: d6:7b:c7:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1QzQxMTAvBgNVBAUTKDNBMTZDNDA0QkZFRDM0NzI0NEEzMEE1QUZGRjY2RTQ5 OTJBQTI4MjEwHhcNMjYxMDA2MjMzNjI2WhcNMjYxMDEzMjMzNjI2WjAYMRYwFAYD VQQDEw02YWM1ODVmYS1lNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hXQvqeVrwKyln/0UiFRLKZHJBJGBz2RxK9GeV8z22XoFXbANjfxRz+eZa5y pCSpQN72lej5WDo+xQGOLJjhQTCMEPrr/0PAvoVdSPaejFv/hxtPi7IcbCBpkINf 37LT0vbLuNLwNzEaxglQrstKzMzftOBmVSQ+Bg6b4b7YnB2X7INo92RTdn1daAFH q6DmnMEJm1TjFMxlJnQbXGuRLf9quPsUCsz/ZJJTMtqLf8n+HuFUWBTY+8FaNIcv dhIIgNYoyYH8x3PED2D4Dq7z9RpDhTZG6FgRITjAPG8ap3+3/CLxjFS8uj0Y7nJ0 bgrwq3ibiiPIo8pMqjNixvK3ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0bdc8g upBp2dewKlBYsGNcq5ihMB8GA1UdIwQYMBaAFDoWxAS/7TRyRKMKWv/2bkmSqigh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjVDNC8zRTNBNTUwMjU5 OTgxMUVDOTM5MUQ1NTBDNEY5QUUwMi9PaGJFQkxfdE5ISkVvd3BhX19adVNaS3FL Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oYkVCTF90TkhKRW93cGFfX1p1U1pLcUtDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjVDNC8zRTNBNTUwMjU5OTgxMUVDOTM5MUQ1NTBDNEY5QUUwMi9PaGJFQkxfdE5I SkVvd3BhX19adVNaS3FLQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQXlhBYAaBiCJWqjuOWBo0vOh9nFesA79nKXc2LrGzO1EQgvd7MJyG8hfEo47 o+ywugenXBuuML99hTNUu/XOwqJT+BX/rfftI/KQpJXFtrb4EzltvBxrk1P4Xd3D RemfmEvqYVdzEiYc+jQ7JCS96pbPkDr1ozcfPYPtA5nNH4R4sY8Agwnoza5bLqL1 eVd7ts4IPlrdlwFNCPmCmTy8XzRdfxFM2WSkW/V8LwX9NLZ16WiDTHs4L/njNb+D AxARx7pYFOj5rPpEVcFdqEJLSOGS3t8UsMIk2gReEH8jZslQTex0dl0zXHh/c4pe lz0UVvse/lkLYFiqNxXv1nvHwQ== -----END CERTIFICATE-----Generated at Thu Oct 8 15:41:54 2026 by rpki-client