$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: NJddwj54N+3yRcalXV/jxROre16ZKsJAEOQfAaFfqU0= Subject key identifier: 0D:0D:B3:70:49:15:B1:0E:41:1F:E4:EF:34:7E:6A:DF:F6:17:27:99 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 01CB Signing time: Tue 27 Oct 2026 04:05:10 +0000 Manifest this update: Tue 27 Oct 2026 04:05:09 +0000 Manifest next update: Tue 03 Nov 2026 04:05:09 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 9FdwFlmDJ8utyfe0n/iDAy5tepVKcuk3wbEvAfE3yDg=) 2: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: d/c8vI45LOwVlgQ3QO11BVSR0P5AhnRZDNl0HjMipe8=) 3: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: sIKmq4E2BOGaAoJLdiFuKVCSiUFtTeObB0x00SMmhtA=) 4: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: WkIVQhsGwdY4oVI236KWytZ904KGUjmtuqVVH4p/Txo=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: ud4RqAynqteyGcYlwCRj/pI7/LcC6bbzv1nvzPS3nj8=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: mkuK3/zOIjE0ZIsB5lxarb1tf0lmRsGK9KZrJ6m+pQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Oct 27 04:05:09 2026 GMT Not After : Nov 3 04:05:09 2026 GMT Subject: CN=6ae022f6-ceda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:b2:f3:24:8b:5a:2c:61:5a:6a:8a:34:fe: 46:94:56:5e:08:c2:b8:88:11:d6:5a:4a:f6:f3:53: 64:11:eb:6b:f1:5c:b2:04:5f:35:13:c4:73:58:13: 13:9d:d2:08:b9:bf:4d:f8:4f:f9:a1:e4:a2:d2:08: 01:a0:21:31:5e:15:9d:29:c1:ae:e8:1c:6b:40:1f: 23:7b:13:d1:38:8d:fd:89:40:ca:06:1e:bf:96:d6: fa:85:69:54:1d:d6:81:b5:95:b4:b7:14:e4:46:a4: 09:7e:ed:10:1c:e3:93:c0:33:1f:a9:60:1f:bc:f9: 35:cf:da:cf:0b:3b:6d:2f:8d:f6:ec:c9:75:cb:a2: 48:cc:0a:d0:c7:83:9b:5f:f8:76:06:6b:94:de:30: 10:12:8c:a6:05:70:a8:a5:0e:eb:98:fc:51:4d:77: 65:0e:3b:cb:27:0e:26:a6:ed:f1:a3:cd:2b:2d:7a: f6:31:f6:54:10:18:f3:99:dc:0a:72:bd:9f:25:f1: ad:cc:91:ac:e1:28:63:30:8c:b2:5a:d3:c8:ed:e5: 8e:14:a3:25:88:a0:86:62:b7:c4:40:64:6f:86:e1: 45:90:c0:f0:08:71:8a:67:75:e9:59:39:11:2f:5f: c0:1d:99:5b:b9:ec:30:4d:64:d5:a0:3c:b3:22:8a: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0D:B3:70:49:15:B1:0E:41:1F:E4:EF:34:7E:6A:DF:F6:17:27:99 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f8:67:20:01:f5:11:bf:b7:bb:8f:ea:d6:f9:4a:d1:14:b6: c8:e5:c5:11:89:29:c0:f2:3c:39:cc:f6:b4:20:66:92:ab:44: 82:51:4c:13:60:0e:03:e9:ba:db:23:46:7e:c1:52:93:f8:2f: 77:e3:c7:a3:c5:17:89:0d:60:35:61:a2:55:ce:92:b8:71:b3: e8:cd:09:88:46:bf:db:e7:7c:d6:41:75:ff:1d:59:b8:a6:c4: 9e:44:11:66:8f:7c:93:64:b8:a8:a6:94:1a:35:a8:25:d2:19: e3:4b:9c:d6:bb:5e:d9:9e:b6:2a:4c:ea:27:db:b5:54:e6:83: 45:ed:1c:f7:f0:a7:11:a0:46:4b:a9:65:db:eb:78:7b:0d:b2: 86:06:29:aa:45:e9:33:61:61:07:ff:b8:a6:45:cf:b9:99:91: b4:00:4d:2e:61:4a:32:2c:94:c7:27:eb:09:92:04:1c:e9:42: 4a:69:30:68:e3:70:59:87:2e:48:7e:94:e6:f9:cb:7d:18:ab: 64:5e:54:84:e5:b3:a2:06:46:35:8b:29:97:f7:f6:e1:49:df: f5:e0:6d:58:be:45:6d:26:5e:7e:02:bd:65:e8:fc:a7:e0:29: 3e:4c:4f:f9:5b:4c:9f:ca:ad:b9:d9:63:8b:34:31:b3:00:57: dc:52:ab:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjYxMDI3MDQwNTA5WhcNMjYxMTAzMDQwNTA5WjAYMRYwFAYD VQQDEw02YWUwMjJmNi1jZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmN+y8ySLWixhWmqKNP5GlFZeCMK4iBHWWkr281NkEetr8VyyBF81E8RzWBMT ndIIub9N+E/5oeSi0ggBoCExXhWdKcGu6BxrQB8jexPROI39iUDKBh6/ltb6hWlU HdaBtZW0txTkRqQJfu0QHOOTwDMfqWAfvPk1z9rPCzttL4327Ml1y6JIzArQx4Ob X/h2BmuU3jAQEoymBXCopQ7rmPxRTXdlDjvLJw4mpu3xo80rLXr2MfZUEBjzmdwK cr2fJfGtzJGs4ShjMIyyWtPI7eWOFKMliKCGYrfEQGRvhuFFkMDwCHGKZ3XpWTkR L1/AHZlbuewwTWTVoDyzIop9mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0Ns3BJ FbEOQR/k7zR+at/2FyeZMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMvhnIAH1Eb+3u4/q1vlK0RS2yOXFEYkpwPI8Ocz2tCBmkqtEglFME2AOA+m6 2yNGfsFSk/gvd+PHo8UXiQ1gNWGiVc6SuHGz6M0JiEa/2+d81kF1/x1ZuKbEnkQR Zo98k2S4qKaUGjWoJdIZ40uc1rte2Z62KkzqJ9u1VOaDRe0c9/CnEaBGS6ll2+t4 ew2yhgYpqkXpM2FhB/+4pkXPuZmRtABNLmFKMiyUxyfrCZIEHOlCSmkwaONwWYcu SH6U5vnLfRirZF5UhOWzogZGNYspl/f24Unf9eBtWL5FbSZefgK9Zej8p+ApPkxP +VtMn8qtudljizQxswBX3FKrGw== -----END CERTIFICATE-----Generated at Tue Oct 27 18:24:08 2026 by rpki-client