$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json) Hash identifier: BNWscNWyz3bULwYni36msFAIdOL9xGIlhbI32xSgjtM= Subject key identifier: 8F:58:DB:5B:9A:44:0A:7B:8B:AF:DB:A3:30:86:18:6F:4E:B2:34:8C Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft Manifest number: 0B25 Signing time: Tue 06 Oct 2026 19:25:12 +0000 Manifest this update: Tue 06 Oct 2026 19:25:12 +0000 Manifest next update: Tue 13 Oct 2026 19:25:12 +0000 Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: 6shjIB6uAo8IgdKaENw7Q/XeThWRFGVrRWbiR7EXooo=) 2: 62B22A709D2511F092B08685C4F9AE02.roa (hash: DbJt5uAKex9huMofhvsxlPhtfALGiwZmq+7JtduRU3g=) 3: 631E45669D2511F092B08685C4F9AE02.roa (hash: oE0udGN+SutLxt/AfcTk4Go1StJ+DmNSlYRBs9ZP8J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283 Validity Not Before: Oct 6 19:25:12 2026 GMT Not After : Oct 13 19:25:12 2026 GMT Subject: CN=6ac54b18-7403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:21:9b:89:18:54:4b:96:03:f6:42:7a:44: ca:79:1e:08:3d:9d:cc:d4:b9:8e:d6:a5:8b:f6:5a: 96:e7:2c:91:b6:6f:3c:4c:01:33:a7:d3:f5:11:33: 7d:a6:2a:56:c0:33:ff:4e:27:37:2b:2e:5d:05:84: ba:8f:05:c0:10:bc:a7:94:57:30:0c:f7:d7:06:81: cd:49:ab:86:5e:79:b4:95:05:50:41:b6:46:75:24: ca:44:8c:3f:74:36:6a:de:be:21:85:3b:c4:4e:5b: a4:ad:91:23:5f:0e:66:0b:b0:e7:e2:b1:9c:64:55: 35:40:c7:92:28:89:0a:ab:05:49:9a:17:be:2d:64: 30:1a:2e:f5:f0:49:30:b5:b5:4b:e0:ec:51:c8:55: 3f:2d:cc:6d:2f:9f:fc:d7:54:c7:8b:0c:75:84:c6: 8b:b3:2d:ad:c7:1e:2d:df:ae:19:ad:cf:a7:58:1f: 0e:61:3d:21:58:65:0b:88:84:a4:e0:4f:47:b5:b6: 8e:ef:0f:8e:bb:89:ce:64:b6:24:f7:f8:26:b5:ee: 2e:24:c0:9b:e8:72:63:6b:c6:4f:10:f9:4c:52:20: 98:b1:35:5d:27:19:f0:9a:12:3f:11:18:3e:33:04: ac:44:b2:6b:fb:29:9a:c9:f5:84:77:fe:c8:16:2a: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:58:DB:5B:9A:44:0A:7B:8B:AF:DB:A3:30:86:18:6F:4E:B2:34:8C X509v3 Authority Key Identifier: keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2f:ae:59:4d:6f:58:7b:f5:69:1f:f8:9c:96:93:da:2d:84: 57:8e:df:7a:4c:38:76:c5:9f:a2:b3:e5:48:30:b6:68:e8:23: 46:3a:ae:ba:3c:3c:16:1c:41:1b:77:66:5a:cc:7c:ec:6a:29: da:98:92:1e:0c:ca:c0:d5:12:48:c7:d3:8f:65:3c:78:b1:4c: a0:e6:68:9d:74:a6:4c:33:f9:4b:18:dc:42:46:73:21:96:f3: 41:37:f8:5f:8c:2e:01:fd:6d:76:4d:33:52:04:94:cf:82:50: 7d:82:7f:32:f9:34:51:13:c8:2c:18:2a:b3:b3:a0:76:b0:77: 02:8d:48:10:05:a0:72:cc:25:4b:7f:db:ad:5d:8c:f4:26:f5: 9b:b7:fe:0c:8d:8b:05:1f:4b:bd:0d:40:bf:bc:ff:40:6a:70: b3:0a:96:7f:f3:09:00:d6:8b:c9:ab:e7:d7:78:b6:a4:bf:b2: d2:92:d9:a5:cd:8c:6b:8d:fc:c2:7f:3f:d4:c8:f2:d8:c4:d1: e9:85:fe:75:24:10:96:fa:5c:2d:82:27:26:eb:f9:74:39:9f: ff:60:9b:0d:50:e6:23:62:8d:d4:cd:e2:f7:4b:1b:8a:84:2c: b6:97:12:33:a2:f5:33:ba:01:24:64:db:d1:fd:c8:4e:47:41: 23:58:30:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJBQUUxMTAvBgNVBAUTKEEzQjBCMjA1OUNCMzA3NkI3NUVEQTMyNEI3NjUwN0Qz QzI5NTUyODMwHhcNMjYxMDA2MTkyNTEyWhcNMjYxMDEzMTkyNTEyWjAYMRYwFAYD VQQDEw02YWM1NGIxOC03NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWohm4kYVEuWA/ZCekTKeR4IPZ3M1LmO1qWL9lqW5yyRtm88TAEzp9P1ETN9 pipWwDP/Tic3Ky5dBYS6jwXAELynlFcwDPfXBoHNSauGXnm0lQVQQbZGdSTKRIw/ dDZq3r4hhTvETlukrZEjXw5mC7Dn4rGcZFU1QMeSKIkKqwVJmhe+LWQwGi718Ekw tbVL4OxRyFU/LcxtL5/811THiwx1hMaLsy2txx4t364Zrc+nWB8OYT0hWGULiISk 4E9HtbaO7w+Ou4nOZLYk9/gmte4uJMCb6HJja8ZPEPlMUiCYsTVdJxnwmhI/ERg+ MwSsRLJr+ymayfWEd/7IFirYPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9Y21ua RAp7i6/bozCGGG9OsjSMMB8GA1UdIwQYMBaAFKOwsgWcswdrde2jJLdlB9PClVKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkFBRS81NzUzN0Q1RTcw NDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIydDE3YU1rdDJVSDA4S1ZV b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283Q3lCWnl6QjJ0MTdhTWt0MlVIMDhLVlVvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkFBRS81NzUzN0Q1RTcwNDUxMUVBOEE5NDFEMUFDNEY5QUUwMi9vN0N5Qlp5ekIy dDE3YU1rdDJVSDA4S1ZVb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAci+uWU1vWHv1aR/4nJaT2i2EV47fekw4dsWforPlSDC2aOgjRjquujw8FhxB G3dmWsx87Gop2piSHgzKwNUSSMfTj2U8eLFMoOZonXSmTDP5SxjcQkZzIZbzQTf4 X4wuAf1tdk0zUgSUz4JQfYJ/Mvk0URPILBgqs7OgdrB3Ao1IEAWgcswlS3/brV2M 9Cb1m7f+DI2LBR9LvQ1Av7z/QGpwswqWf/MJANaLyavn13i2pL+y0pLZpc2Ma438 wn8/1Mjy2MTR6YX+dSQQlvpcLYInJuv5dDmf/2CbDVDmI2KN1M3i90sbioQstpcS M6L1M7oBJGTb0f3ITkdBI1gwOg== -----END CERTIFICATE-----Generated at Thu Oct 8 14:15:39 2026 by rpki-client