$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: ywS6B11eKQpLHTQF4SHRIgYKfQ57C8xjpyavG7pW2hM= Subject key identifier: 45:03:69:65:2B:FD:B5:BF:A5:B3:6D:D9:82:AD:A6:80:EF:BE:06:09 Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 311E Signing time: Sat 12 Sep 2026 15:24:12 +0000 Manifest this update: Sat 12 Sep 2026 15:24:12 +0000 Manifest next update: Sat 19 Sep 2026 15:24:12 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: 7o/ZVe/rQDOUoEZGmZZXMR3+0BcHZxWspKSbiflsrzA=) 2: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: ot76bD4Fe2eGS+QL+OB7ESET88ZeiKoIEOY/MT5QHrY=) 3: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: M6QpwrrsCEg6uS0XBq+MJGbdVX3IkfmFKf0zFhM8Oec=) 4: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: jY72D9kM4ZreV4v43viz3/fEA3o/FMiAaeH7fUiUeSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 15:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12665 (0x3179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Sep 12 15:24:12 2026 GMT Not After : Sep 19 15:24:12 2026 GMT Subject: CN=6aa56e9c-ed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:cb:fe:e7:81:83:15:ec:bc:5b:d9:02:21: d4:12:07:78:0e:e4:b3:f5:94:4e:ab:d1:15:96:d1: fd:2d:02:04:aa:f4:42:b3:fb:2d:36:43:5e:d5:a4: 31:38:66:28:51:86:e5:de:49:b7:15:cd:c3:bb:1d: f6:8d:db:77:cc:8f:af:b6:92:81:cc:aa:70:8e:91: e9:62:92:e9:81:a2:07:a5:31:34:12:e6:68:a4:67: cc:65:8e:f1:9a:98:ea:01:27:61:e0:9a:72:4a:49: 16:12:19:38:5d:24:e3:05:9d:5a:07:09:43:4b:c0: 02:64:fd:99:94:0a:0a:b0:fd:f9:50:27:20:fb:8a: 45:87:87:a2:ad:fb:f2:04:f8:3f:cf:41:e5:a0:dd: 5f:4b:ca:a2:b0:aa:bc:4b:de:12:16:c6:fd:ff:02: 8d:c9:cd:2d:a7:b8:25:f1:a7:b5:0f:c6:a6:16:15: 68:ee:3d:08:af:18:57:ad:6e:85:03:90:94:52:a3: e4:96:31:98:05:d3:52:2a:69:85:8f:9b:45:a3:ee: 9f:0c:0a:53:ec:34:08:9a:df:8b:a3:43:c8:64:31: 96:a0:76:fd:7e:ef:34:b0:50:7a:ed:c7:ce:e4:3a: 94:9d:ed:17:0b:5d:41:c2:ce:04:12:0f:ed:7d:b1: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:03:69:65:2B:FD:B5:BF:A5:B3:6D:D9:82:AD:A6:80:EF:BE:06:09 X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:a5:79:23:d3:a2:42:15:4b:ce:9a:bc:5e:5f:e7:d0:4c: fe:27:5e:8e:b5:1e:51:fb:7d:d4:16:49:41:a7:1e:05:7f:e6: 5b:db:de:70:4c:70:da:d6:41:d7:46:6e:0e:35:2a:ba:4f:d6: aa:28:04:da:32:d2:67:91:2f:3c:22:de:10:93:32:35:a2:52: ba:b9:4f:4e:84:c1:07:e0:51:a9:c8:86:ba:bb:c8:f2:dc:c0: 5e:cd:a5:46:cb:06:66:ac:c2:17:d5:df:f3:19:b3:1b:ea:60: c4:d1:f1:34:b7:d8:2f:6c:84:08:6f:93:e1:e8:ff:af:2c:b3: 2d:26:96:4a:86:b5:30:ca:37:db:9b:b8:4b:7f:42:a0:a8:27: ac:52:7e:01:ec:19:8a:58:e5:59:a8:63:7b:1a:ca:ba:99:6f: 13:d1:c2:e1:46:d4:e2:9f:c9:9b:b7:23:db:a1:98:13:62:f5: a6:af:f0:8b:15:e1:95:2c:5c:da:21:61:3e:a4:dd:22:ab:c6: 94:32:1e:64:62:80:f0:4d:ee:89:59:09:63:97:74:d1:4b:74: 06:15:eb:d1:c9:00:b4:6c:61:ba:22:32:2a:93:f8:c1:d1:6d: e2:15:76:fe:59:0d:ac:de:22:f8:1d:b0:8c:0d:9d:e7:2b:fb: 4f:d1:c9:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYwOTEyMTUyNDEyWhcNMjYwOTE5MTUyNDEyWjAYMRYwFAYD VQQDEw02YWE1NmU5Yy1lZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0LL/ueBgxXsvFvZAiHUEgd4DuSz9ZROq9EVltH9LQIEqvRCs/stNkNe1aQx OGYoUYbl3km3Fc3Dux32jdt3zI+vtpKBzKpwjpHpYpLpgaIHpTE0EuZopGfMZY7x mpjqASdh4JpySkkWEhk4XSTjBZ1aBwlDS8ACZP2ZlAoKsP35UCcg+4pFh4eirfvy BPg/z0HloN1fS8qisKq8S94SFsb9/wKNyc0tp7gl8ae1D8amFhVo7j0IrxhXrW6F A5CUUqPkljGYBdNSKmmFj5tFo+6fDApT7DQImt+Lo0PIZDGWoHb9fu80sFB67cfO 5DqUne0XC11Bws4EEg/tfbEKFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUDaWUr /bW/pbNt2YKtpoDvvgYJMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALgWleSPTokIVS86avF5f59BM/idejrUeUft91BZJQaceBX/mW9vecExw2tZB 10ZuDjUquk/WqigE2jLSZ5EvPCLeEJMyNaJSurlPToTBB+BRqciGurvI8tzAXs2l RssGZqzCF9Xf8xmzG+pgxNHxNLfYL2yECG+T4ej/ryyzLSaWSoa1MMo325u4S39C oKgnrFJ+AewZiljlWahjexrKuplvE9HC4UbU4p/Jm7cj26GYE2L1pq/wixXhlSxc 2iFhPqTdIqvGlDIeZGKA8E3uiVkJY5d00Ut0BhXr0ckAtGxhuiIyKpP4wdFt4hV2 /lkNrN4i+B2wjA2d5yv7T9HJFg== -----END CERTIFICATE-----Generated at Mon Sep 14 09:41:17 2026 by rpki-client