$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json) Hash identifier: oNNZDmID4rrwQjuzymuwT8T7A7pJk6mfHuFPSrZwByM= Subject key identifier: 20:0B:9F:62:A8:83:82:A5:51:7E:DC:B2:64:68:37:F9:99:10:A5:2D Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Certificate serial: 146C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft Manifest number: 145D Signing time: Thu 08 Oct 2026 16:56:08 +0000 Manifest this update: Thu 08 Oct 2026 16:56:08 +0000 Manifest next update: Thu 15 Oct 2026 16:56:08 +0000 Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: tzeA67mvWihdlF8JxHbPqhPxCVhWNTsCZND5k61yHaw=) 2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5228 (0x146c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Validity Not Before: Oct 8 16:56:08 2026 GMT Not After : Oct 15 16:56:08 2026 GMT Subject: CN=6ac7cb28-7db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:cc:df:d2:dd:d5:5d:59:cf:6c:bf:8e:34: f4:aa:b4:b4:67:ef:12:bb:61:08:d2:d5:2c:93:23: c9:e9:3e:99:1a:b4:a7:e7:c4:43:a2:60:8c:2a:9c: 79:0b:13:69:31:02:91:3a:6d:44:88:81:f4:21:ef: 43:3b:9c:60:db:05:c0:ec:36:8a:ff:1a:c2:11:65: 56:9e:19:ff:2a:c7:b3:cc:1a:db:ce:20:bd:e4:71: eb:e1:5f:11:df:b5:ce:4d:e1:6c:57:9a:a9:89:4c: 87:50:7b:69:45:52:40:a3:5a:e8:42:24:b8:fd:3a: c0:e3:48:58:f5:04:00:15:7d:30:0c:ce:08:b7:c6: f8:22:c3:79:3f:ca:fb:d8:cb:ef:d0:3d:c7:cf:7d: 51:af:18:2c:9c:79:f0:54:31:2e:af:35:2a:ee:a3: 01:6e:7d:ba:3f:75:14:6e:11:01:40:19:64:80:3d: 9c:b4:b4:73:6b:af:bd:a3:31:88:3f:37:98:d0:b1: 17:66:19:e6:9b:74:06:7f:bb:68:90:46:8e:02:35: ba:cf:a5:a1:6a:15:af:fb:23:25:03:2f:e2:22:b0: 38:a8:8b:1f:fb:07:17:3d:8b:49:ef:64:f4:a5:c9: d8:e6:f1:67:7f:5d:ef:ac:fa:4c:d2:76:30:b3:d5: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:9F:62:A8:83:82:A5:51:7E:DC:B2:64:68:37:F9:99:10:A5:2D X509v3 Authority Key Identifier: keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:80:fb:0d:f0:43:5c:11:89:f4:64:84:1a:2e:6b:db:85: 1c:b9:f3:db:2e:89:5a:ec:4d:58:df:13:01:c7:26:01:1e:fa: c7:e2:4f:48:10:82:e8:31:70:bc:e8:6d:af:fe:d8:b7:e6:12: a3:ad:2c:ab:b7:22:f8:73:cc:6d:80:60:4e:2d:20:b8:4d:75: be:0e:1d:ef:29:f6:fb:28:bd:e6:5c:8a:fc:3b:bc:38:94:64: 25:f4:7c:17:79:27:08:91:d2:d1:48:3b:ff:6f:d0:2b:94:06: 67:91:f7:c7:7e:84:8c:57:64:66:01:ea:29:79:d4:85:32:26: 5e:61:b5:c5:34:da:b7:99:c0:46:92:6b:68:a2:c0:21:da:d0: 5d:19:85:aa:b0:5e:2d:0e:11:c4:23:06:5a:9e:93:1e:b6:63: 7e:41:ee:10:47:0e:5a:ae:d7:7a:fb:9a:a4:73:ba:95:f2:c7: be:41:1e:aa:43:dd:56:9b:9c:05:0e:24:74:1c:0f:0d:27:87: 46:5b:37:47:bb:ae:29:86:f0:aa:3e:81:b9:06:51:40:e7:4a: a6:2b:ae:9f:87:b1:c6:f9:87:86:f0:44:54:9a:ec:7b:0f:66: 76:f8:d4:3a:9b:8b:ca:6d:b7:ed:33:a6:f1:da:5f:5e:ff:0e: 7c:39:08:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEExMTFFODFDNEIzRTI3QkRBNkUyNzEyNDk3RjZEQkJB MENGQjA4MjYwHhcNMjYxMDA4MTY1NjA4WhcNMjYxMDE1MTY1NjA4WjAYMRYwFAYD VQQDEw02YWM3Y2IyOC03ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0PM39Ld1V1Zz2y/jjT0qrS0Z+8Su2EI0tUskyPJ6T6ZGrSn58RDomCMKpx5 CxNpMQKROm1EiIH0Ie9DO5xg2wXA7DaK/xrCEWVWnhn/KsezzBrbziC95HHr4V8R 37XOTeFsV5qpiUyHUHtpRVJAo1roQiS4/TrA40hY9QQAFX0wDM4It8b4IsN5P8r7 2Mvv0D3Hz31RrxgsnHnwVDEurzUq7qMBbn26P3UUbhEBQBlkgD2ctLRza6+9ozGI PzeY0LEXZhnmm3QGf7tokEaOAjW6z6WhahWv+yMlAy/iIrA4qIsf+wcXPYtJ72T0 pcnY5vFnf13vrPpM0nYws9XWFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCALn2Ko g4KlUX7csmRoN/mZEKUtMB8GA1UdIwQYMBaAFKER6BxLPie9puJxJJf227oM+wgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8wRDk5MzFCQUEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3Mm00bkVrbF9iYnVnejdD Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29SSG9IRXMtSjcybTRuRWtsX2JidWd6N0NDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8wRDk5MzFCQUExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3 Mm00bkVrbF9iYnVnejdDQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAa+A+w3wQ1wRifRkhBoua9uFHLnz2y6JWuxNWN8TAccmAR76x+JPSBCC6DFw vOhtr/7Yt+YSo60sq7ci+HPMbYBgTi0guE11vg4d7yn2+yi95lyK/Du8OJRkJfR8 F3knCJHS0Ug7/2/QK5QGZ5H3x36EjFdkZgHqKXnUhTImXmG1xTTat5nARpJraKLA IdrQXRmFqrBeLQ4RxCMGWp6THrZjfkHuEEcOWq7XevuapHO6lfLHvkEeqkPdVpuc BQ4kdBwPDSeHRls3R7uuKYbwqj6BuQZRQOdKpiuun4exxvmHhvBEVJrsew9mdvjU OpuLym237TOm8dpfXv8OfDkImQ== -----END CERTIFICATE-----Generated at Sat Oct 10 02:01:00 2026 by rpki-client