$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft File: oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft (raw, json) Hash identifier: 33bihsVPPkMEGXURGgO3MD4GTKx0vCc9tvP78uB6bKw= Subject key identifier: 9C:CC:98:D7:C4:5E:F3:C7:ED:A8:75:65:C4:E5:68:EE:B1:40:D2:E9 Authority key identifier: A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3 Certificate issuer: /CN=A91AE954/serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft Manifest number: 1B Signing time: Tue 27 Oct 2026 01:43:10 +0000 Manifest this update: Tue 27 Oct 2026 01:43:09 +0000 Manifest next update: Tue 03 Nov 2026 01:43:09 +0000 Files and hashes: 1: oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl (hash: /3/NTopkwd3N632kH0vHTLLRJZpXnD9ufmX7SG8Wy6U=) 2: A756B364B0D211F187A0B2C76D11F970.roa (hash: FxNMhwtcR3oWuqNSjH9QDsn5zkl0d7S0gjylTihtbM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE954, serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3 Validity Not Before: Oct 27 01:43:09 2026 GMT Not After : Nov 3 01:43:09 2026 GMT Subject: CN=6ae001ae-0503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:a5:29:41:13:d2:c8:cd:d6:67:22:17:b3: 57:2e:a2:c4:19:08:3e:b1:98:80:b7:88:31:f8:5a: 62:a2:49:7b:9a:dd:a5:9b:11:58:0c:21:67:ac:21: 1f:80:8f:ef:b8:6b:c4:64:b1:5c:76:d1:f3:ef:1b: 88:11:f5:a8:c5:3f:72:d6:0f:12:e8:4f:c3:87:c1: 98:02:3e:8e:93:0f:d7:d3:c4:fd:ee:da:13:18:8e: 97:4e:f4:07:bf:18:56:3b:4d:eb:a4:5f:2a:13:66: 03:31:b5:34:d6:ca:7e:fd:6f:fe:d5:16:eb:bf:1d: b9:9b:43:1f:bb:67:18:83:fb:39:a8:38:81:bb:e4: 12:b8:b7:33:04:4c:e4:75:4c:6e:ba:3e:60:a8:db: 40:ab:6e:7a:4b:b2:a5:66:1c:b7:2e:31:55:98:45: 3e:f0:4e:da:a7:dc:13:e3:ab:d5:ef:d5:45:31:a5: 93:41:ce:de:1f:8b:03:31:74:17:9f:79:45:2d:d7: f0:b8:2b:61:8b:73:90:43:e8:4d:b7:ec:04:58:7d: c3:c8:aa:ab:8b:93:72:8a:9a:4b:ce:f0:f4:e5:42: 8c:c4:6c:90:7f:a3:6f:66:47:47:ed:14:7d:58:ac: 82:2e:8f:d7:84:d8:52:86:dc:4c:fe:0f:3b:8a:a3: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:98:D7:C4:5E:F3:C7:ED:A8:75:65:C4:E5:68:EE:B1:40:D2:E9 X509v3 Authority Key Identifier: keyid:A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:07:62:2e:fa:ce:f0:bb:84:d6:d4:8f:2f:e1:18:d9:3c:67: b2:13:5d:be:c4:82:20:a5:ff:4d:2d:c9:af:ff:64:89:6b:76: e3:42:6a:2a:e1:4a:69:fb:b6:95:ec:62:47:c4:f7:78:d9:19: 04:68:8e:2d:f5:8e:ad:b1:9b:8d:8c:3b:24:bf:b2:92:8a:e7: 1a:6c:1e:e1:bc:9c:db:ad:0f:9f:7a:e8:8f:74:be:39:4b:a5: 12:aa:7c:49:d5:77:21:2d:74:bb:11:62:18:e8:2e:68:0c:c2: a5:db:b3:0f:ab:20:a2:89:f6:0b:26:fd:67:03:fe:df:6f:ad: 44:38:31:54:34:71:ad:32:b0:f9:f7:d2:55:14:3d:e6:94:41: 5f:54:40:d3:ff:68:7e:9d:9e:19:90:b8:ee:ab:d2:7f:da:72: 69:21:5d:ef:d8:e4:43:4c:c5:95:7b:ba:a6:b5:8f:9c:94:03: 95:f7:cd:90:1f:ef:f9:70:ce:22:4a:3a:97:d1:01:68:c5:ae: f5:53:32:3f:7f:01:13:cb:1a:83:c0:d8:d1:9e:33:c6:54:f1: 3b:0a:ee:ab:00:52:39:41:f8:c7:e4:fd:0d:87:4b:4b:5b:33: 3a:e2:34:1a:91:f1:bd:67:67:a6:1c:09:f1:89:2f:83:e9:dc: 3e:5c:89:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTk1NDExMC8GA1UEBRMoQTAyODI3N0M5NzA4NDdEM0Q4QzY4RjhCNzQ2OEYzRjI2 QzcyRkVGMzAeFw0yNjEwMjcwMTQzMDlaFw0yNjExMDMwMTQzMDlaMBgxFjAUBgNV BAMTDTZhZTAwMWFlLTA1MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC93KUpQRPSyM3WZyIXs1cuosQZCD6xmIC3iDH4WmKiSXua3aWbEVgMIWesIR+A j++4a8RksVx20fPvG4gR9ajFP3LWDxLoT8OHwZgCPo6TD9fTxP3u2hMYjpdO9Ae/ GFY7TeukXyoTZgMxtTTWyn79b/7VFuu/HbmbQx+7ZxiD+zmoOIG75BK4tzMETOR1 TG66PmCo20CrbnpLsqVmHLcuMVWYRT7wTtqn3BPjq9Xv1UUxpZNBzt4fiwMxdBef eUUt1/C4K2GLc5BD6E237ARYfcPIqquLk3KKmkvO8PTlQozEbJB/o29mR0ftFH1Y rIIuj9eE2FKG3Ez+DzuKo7D7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnMyY18Re 88ftqHVlxOVo7rFA0ukwHwYDVR0jBBgwFoAUoCgnfJcIR9PYxo+LdGjz8mxy/vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOTU0LzlBRUNDMzUyQjBB QTExRjFCOTIyMjNDOUE3RUU1MjhFL29DZ25mSmNJUjlQWXhvLUxkR2p6OG14eV92 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvb0NnbmZKY0lSOVBZeG8tTGRHano4bXh5X3ZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OTU0LzlBRUNDMzUyQjBBQTExRjFCOTIyMjNDOUE3RUU1MjhFL29DZ25mSmNJUjlQ WXhvLUxkR2p6OG14eV92TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQB2Iu+s7wu4TW1I8v4RjZPGeyE12+xIIgpf9NLcmv/2SJa3bjQmoq4Upp+7aV 7GJHxPd42RkEaI4t9Y6tsZuNjDskv7KSiucabB7hvJzbrQ+feuiPdL45S6USqnxJ 1XchLXS7EWIY6C5oDMKl27MPqyCiifYLJv1nA/7fb61EODFUNHGtMrD599JVFD3m lEFfVEDT/2h+nZ4ZkLjuq9J/2nJpIV3v2ORDTMWVe7qmtY+clAOV982QH+/5cM4i SjqX0QFoxa71UzI/fwETyxqDwNjRnjPGVPE7Cu6rAFI5QfjH5P0Nh0tLWzM64jQa kfG9Z2emHAnxiS+D6dw+XIle -----END CERTIFICATE-----Generated at Wed Oct 28 03:13:05 2026 by rpki-client