$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: fr2uQls1TbRpKdG5Xm6zo/kpxLKva9Dl7acesJUcli0= Subject key identifier: FC:FD:F5:01:D9:48:1E:D9:1E:9A:E5:56:A6:2A:38:BF:2C:7D:6E:27 Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 0742 Signing time: Tue 06 Oct 2026 22:06:08 +0000 Manifest this update: Tue 06 Oct 2026 22:06:08 +0000 Manifest next update: Tue 13 Oct 2026 22:06:08 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: PSQWHmJ/yv31rK9rV6/EhZ45Zhs0s9cn+XKsLA1r9+8=) 2: 3B31153A7EAF11F1AD3956B567A30FBC.roa (hash: 6I/mIpBlBaCLa5fE/991rx1+T51Uz+/8gDKlG8N6JVI=) 3: CBD093368EF411F1A6E45BB36711F970.roa (hash: VmteFKfT+3QJZaoCAmdra/22JYxLy5wHHjh1ra0mXBg=) 4: CA8CFF3C8EF411F1A6E45BB36711F970.roa (hash: 1G+rvu1wepHXQQAcuFsQ79ECyR/qZR7Nfj35LiZCCFQ=) 5: 3D0E47EC7EAF11F1AD3956B567A30FBC.roa (hash: veeIdD49LVWNLV3e0Lekfhush2b9P+JpDpswiih6ZE8=) 6: 3BD522E27EAF11F1AD3956B567A30FBC.roa (hash: 9hwuagxxWWqb0EA8r9hd27n1gvXnGt5FAahQT0UvOUw=) 7: 3C74428C7EAF11F1AD3956B567A30FBC.roa (hash: p92I449+9ZaSnzNNqPFpJDXaDdPf4ed2yuEgwv6T9k0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: Oct 6 22:06:08 2026 GMT Not After : Oct 13 22:06:08 2026 GMT Subject: CN=6ac570d0-3d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:f4:f6:0e:31:46:aa:06:92:3c:2a:32:82: 48:74:84:7a:e7:eb:ea:8d:ae:c5:87:e8:1a:92:21: 5e:a6:5c:d8:5a:00:0a:4e:af:75:f3:8c:6d:1d:c3: dd:a2:ac:eb:d9:d0:4d:43:70:5d:cb:64:13:5c:3f: 8b:bd:d3:e1:fb:88:2a:2b:cc:e0:a1:24:88:0e:72: fb:b0:74:e8:f3:7b:8f:cf:6b:b6:de:0a:d3:f4:85: 32:77:ab:a7:50:ba:0f:a9:91:11:8d:9b:4e:49:f4: 9f:d6:ff:80:b2:72:85:eb:b2:b0:da:22:4e:ef:b9: 34:bf:98:49:bb:13:5b:f2:03:06:b6:d1:91:9f:27: b9:71:bd:d3:e5:41:d8:3d:e0:9b:91:36:d2:fb:b2: 53:27:e0:6c:a8:07:96:58:8c:db:0f:c3:97:60:f7: 7f:48:65:97:8f:cc:76:b1:f4:0c:c6:9e:e5:8b:c2: c4:11:37:b1:7e:82:e5:d1:c8:0f:bb:69:c8:f2:0c: 41:02:25:b9:55:c9:e0:5b:c2:6e:b4:79:74:70:09: 89:e2:06:08:b7:77:07:ad:9e:9a:6d:c2:7c:06:29: e4:04:d1:af:76:64:f7:fa:cc:1a:a2:b3:c5:61:a1: 9f:45:0e:a8:d0:99:fd:ff:9c:56:d6:4e:1b:f4:0c: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FD:F5:01:D9:48:1E:D9:1E:9A:E5:56:A6:2A:38:BF:2C:7D:6E:27 X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1e:a0:14:e1:3b:37:b3:51:9a:bd:29:42:0c:f9:3f:72:8d: c7:7b:bb:4f:02:48:07:b4:9e:55:75:26:2c:5b:7e:76:e2:38: d0:7d:5a:f8:d0:5f:10:28:c0:f9:8c:02:c9:93:b3:d9:0a:a3: 5c:b1:b5:8b:ef:41:c0:24:47:0d:25:fc:4c:04:b7:a5:6e:5a: 47:eb:ad:5b:36:00:75:4c:77:55:1c:56:5a:7a:68:ff:99:6f: e0:43:e4:85:d6:90:17:c4:7b:84:d8:c1:13:5d:15:d4:12:96: 5a:77:0c:ca:00:93:f2:98:1b:dd:c1:0e:80:54:d1:8c:33:c7: 01:08:31:4b:7e:5b:e3:3a:d0:06:b9:d1:09:a9:45:d0:ed:c4: b9:38:f0:af:a2:f5:24:e2:42:4c:d9:7e:2e:85:80:48:97:4b: 63:11:50:6d:b4:bd:f4:c8:f4:80:56:c5:79:d7:4a:8c:2d:7e: 51:6b:c0:44:ad:0b:cf:5c:97:8e:2b:fa:06:ea:65:93:1a:3e: 72:fa:2a:d6:a8:ad:1b:f2:c4:d8:4d:db:a2:e4:65:fa:bb:4e: c9:40:ec:78:7c:6b:04:5d:93:61:8d:c9:51:06:49:5a:9c:33: 10:bb:5e:eb:10:8e:3c:b1:81:91:47:c8:9e:38:99:09:40:2d: 76:47:21:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjYxMDA2MjIwNjA4WhcNMjYxMDEzMjIwNjA4WjAYMRYwFAYD VQQDEw02YWM1NzBkMC0zZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRf09g4xRqoGkjwqMoJIdIR65+vqja7Fh+gakiFeplzYWgAKTq9184xtHcPd oqzr2dBNQ3Bdy2QTXD+LvdPh+4gqK8zgoSSIDnL7sHTo83uPz2u23grT9IUyd6un ULoPqZERjZtOSfSf1v+AsnKF67Kw2iJO77k0v5hJuxNb8gMGttGRnye5cb3T5UHY PeCbkTbS+7JTJ+BsqAeWWIzbD8OXYPd/SGWXj8x2sfQMxp7li8LEETexfoLl0cgP u2nI8gxBAiW5VcngW8JutHl0cAmJ4gYIt3cHrZ6abcJ8BinkBNGvdmT3+swaorPF YaGfRQ6o0Jn9/5xW1k4b9AzQPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPz99QHZ SB7ZHprlVqYqOL8sfW4nMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApR6gFOE7N7NRmr0pQgz5P3KNx3u7TwJIB7SeVXUmLFt+duI40H1a+NBfECjA +YwCyZOz2QqjXLG1i+9BwCRHDSX8TAS3pW5aR+utWzYAdUx3VRxWWnpo/5lv4EPk hdaQF8R7hNjBE10V1BKWWncMygCT8pgb3cEOgFTRjDPHAQgxS35b4zrQBrnRCalF 0O3EuTjwr6L1JOJCTNl+LoWASJdLYxFQbbS99Mj0gFbFeddKjC1+UWvARK0Lz1yX jiv6Buplkxo+cvoq1qitG/LE2E3bouRl+rtOyUDseHxrBF2TYY3JUQZJWpwzELte 6xCOPLGBkUfInjiZCUAtdkchBw== -----END CERTIFICATE-----Generated at Thu Oct 8 01:04:40 2026 by rpki-client