$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: tQnq6PKcBnnFrTK1+YOt7rlcB0ZfotTfroAFDsA/orI= Subject key identifier: 42:58:E7:56:EA:27:52:A0:3D:E8:50:47:C2:56:04:FF:DB:B2:92:70 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 0170 Signing time: Sat 05 Sep 2026 04:44:17 +0000 Manifest this update: Sat 05 Sep 2026 04:44:17 +0000 Manifest next update: Sat 12 Sep 2026 04:44:17 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: vlnSq5acup24SabcPtZZCh83hJeVAQuamNAUnXbGm+k=) 2: A8E25556751F11F18B86DC2174A30FBC.roa (hash: T5VvDjawF4KbmQBm6oXv7txmPHz68zeGZ3ul549ljEg=) 3: 9FFE9026751F11F1BBCD6C1F74A30FBC.roa (hash: XrIZ022hr5ecAsAKZgLQvfOGr3m4kyUdyD7IG0BaLXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Sep 5 04:44:17 2026 GMT Not After : Sep 12 04:44:17 2026 GMT Subject: CN=6a9b9e21-3fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:80:40:83:48:d9:e1:f6:1b:69:9e:e3:df: 09:ff:16:4e:7a:0a:00:f9:5c:5c:ca:52:c1:1d:72: 9a:06:6c:59:69:d4:3c:2f:55:6c:41:fe:a1:6d:c6: f3:bc:44:83:fa:3a:f5:bd:bc:d8:44:3b:6f:d6:c2: 06:66:c6:1a:ed:d1:c3:12:08:62:c4:d0:30:6b:92: 0b:13:48:10:b1:45:5f:18:ae:07:9c:bb:86:26:ae: 00:f5:2c:1f:b6:dc:8b:46:28:75:86:1f:ce:57:c1: 82:d3:9b:83:d5:9a:46:da:ce:37:15:1c:8e:47:f7: 0c:74:01:56:ad:87:c1:16:bc:8d:d7:de:b6:30:75: a8:4d:b6:3e:bb:cc:7c:7e:b9:b0:44:32:3e:49:3e: 6a:8a:a2:66:a3:71:b0:a0:12:01:1e:fc:8d:61:24: ed:ee:c1:e7:fa:74:07:93:2b:58:99:07:22:22:d8: c5:c4:e0:39:37:c4:42:bd:34:39:1f:99:ce:48:ee: 72:5e:76:42:ac:05:91:2a:8a:5c:39:cd:4b:81:a8: 8c:41:ee:12:20:87:f8:38:e5:2c:16:88:98:fe:39: b1:1d:bb:48:3f:29:cb:33:35:ca:e4:d7:01:40:d2: 34:bf:70:df:a6:d5:79:6a:fc:4a:a2:6b:05:9d:f7: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:58:E7:56:EA:27:52:A0:3D:E8:50:47:C2:56:04:FF:DB:B2:92:70 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:33:d2:5e:a0:3a:1b:58:31:55:24:2d:17:f3:46:0b:9d:fa: 65:cd:44:27:9b:24:d3:06:65:f8:d0:37:f0:e7:0f:09:dc:b2: 00:88:4f:e0:34:b4:a6:d7:64:82:e2:60:a1:4c:b3:40:1b:b8: 93:e6:37:b8:78:fb:6b:46:2f:08:f7:ac:2e:2f:97:08:67:c6: a1:0d:01:67:49:ee:d4:4d:b9:5c:26:db:ea:54:76:10:66:40: 4a:1a:0e:9e:16:0f:15:74:0c:88:07:1c:e9:ba:8b:10:a2:da: 9e:42:f8:bf:f2:4e:dd:f8:e3:16:9a:d7:d5:ba:24:55:63:29: d6:e2:11:75:a4:49:b2:e0:60:f4:f9:45:53:1c:e6:a3:c0:50: 70:f0:7e:98:e0:6f:3c:e9:c9:b9:e1:55:c4:83:d2:01:53:36: fd:f1:a9:c9:e0:a6:04:48:d0:7c:53:79:28:12:4a:25:bf:b4: 1b:71:7a:dd:f1:71:f4:93:c8:c6:c4:c5:6e:d1:a6:70:7b:c6: 91:74:6f:09:93:bf:40:00:b6:0e:e3:f3:92:b1:56:11:f5:e5: 3e:5e:9a:fa:1a:43:54:f2:c7:03:df:c1:23:a1:f4:2d:b4:8c: 72:a8:2e:06:5d:fb:a4:22:f6:d4:95:72:4a:9c:50:a3:21:fe: e8:5d:9a:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjYwOTA1MDQ0NDE3WhcNMjYwOTEyMDQ0NDE3WjAYMRYwFAYD VQQDEw02YTliOWUyMS0zZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP2AQINI2eH2G2me498J/xZOegoA+VxcylLBHXKaBmxZadQ8L1VsQf6hbcbz vESD+jr1vbzYRDtv1sIGZsYa7dHDEghixNAwa5ILE0gQsUVfGK4HnLuGJq4A9Swf ttyLRih1hh/OV8GC05uD1ZpG2s43FRyOR/cMdAFWrYfBFryN1962MHWoTbY+u8x8 frmwRDI+ST5qiqJmo3GwoBIBHvyNYSTt7sHn+nQHkytYmQciItjFxOA5N8RCvTQ5 H5nOSO5yXnZCrAWRKopcOc1LgaiMQe4SIIf4OOUsFoiY/jmxHbtIPynLMzXK5NcB QNI0v3DfptV5avxKomsFnfdo+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJY51bq J1KgPehQR8JWBP/bspJwMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeDPSXqA6G1gxVSQtF/NGC536Zc1EJ5sk0wZl+NA38OcPCdyyAIhP4DS0ptdk guJgoUyzQBu4k+Y3uHj7a0YvCPesLi+XCGfGoQ0BZ0nu1E25XCbb6lR2EGZAShoO nhYPFXQMiAcc6bqLEKLankL4v/JO3fjjFprX1bokVWMp1uIRdaRJsuBg9PlFUxzm o8BQcPB+mOBvPOnJueFVxIPSAVM2/fGpyeCmBEjQfFN5KBJKJb+0G3F63fFx9JPI xsTFbtGmcHvGkXRvCZO/QAC2DuPzkrFWEfXlPl6a+hpDVPLHA9/BI6H0LbSMcqgu Bl37pCL21JVySpxQoyH+6F2ayQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:14:22 2026 by rpki-client