$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json) Hash identifier: iYV/KyKq5qjbiCjmxz6eqRlPl/P5qnapZo1S3uiZ3wI= Subject key identifier: 61:4E:B8:7B:AD:11:F0:BF:F1:BE:A6:7E:09:62:1C:78:5F:AD:99:90 Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft Manifest number: BA Signing time: Fri 09 Oct 2026 07:36:33 +0000 Manifest this update: Fri 09 Oct 2026 07:36:32 +0000 Manifest next update: Fri 16 Oct 2026 07:36:32 +0000 Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: Q6vBPLJN8rqhDxTqv2YJCk3jpqoZgUPk6/VGj8Mkt+w=) 2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: QDXJKmWWvKi740RHNl7bfZXziv3dDMq/AExHCvXOvVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Validity Not Before: Oct 9 07:36:32 2026 GMT Not After : Oct 16 07:36:32 2026 GMT Subject: CN=6ac89981-a5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:97:cc:b2:14:f3:87:29:6c:4d:eb:07:78:f0: bc:8f:ad:38:f8:b2:30:d3:b6:22:70:ea:03:e1:bb: 82:aa:6f:1f:fc:95:38:39:eb:45:29:17:2e:5d:a1: 72:f4:2e:59:dc:ae:f1:3f:23:1b:9b:e2:17:c2:cd: c3:54:9b:78:f4:d6:e8:e3:1b:75:d3:27:4f:41:42: e1:48:1b:c2:4c:d9:47:4c:84:b9:ca:c5:f2:f2:3e: e1:8d:8f:24:99:26:ff:bb:c4:a9:c6:51:44:50:73: 43:27:66:b9:8a:4d:2a:08:f0:84:d3:b0:f4:90:e8: ae:47:02:aa:72:b0:50:86:0f:4c:af:0e:65:dd:81: c9:b5:b2:b9:65:bf:b4:ac:15:ab:c1:15:42:55:b5: ba:19:5d:d0:50:90:82:aa:f6:62:6c:86:02:86:18: 06:a1:62:17:e7:d6:00:c7:95:0f:c6:7c:72:57:0f: d8:40:79:57:6e:b2:69:75:7a:85:08:6f:c1:9d:85: cd:36:e7:41:46:93:a9:81:c8:ca:80:4b:dd:77:a5: fa:12:34:ee:4c:b6:25:95:38:8d:a1:88:19:af:cb: 7f:92:18:88:43:d7:a3:2e:33:2c:3b:5b:10:7a:49: a8:c0:69:f9:b0:bf:4a:5f:fd:5a:40:91:3b:e6:08: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4E:B8:7B:AD:11:F0:BF:F1:BE:A6:7E:09:62:1C:78:5F:AD:99:90 X509v3 Authority Key Identifier: keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:42:98:56:02:d4:09:c9:32:2e:2b:96:2d:63:b1:02:29:1e: a4:f9:bc:b2:d8:ae:b1:be:52:d3:d2:b1:9c:40:e1:85:2d:c7: b4:71:f0:58:2f:21:8b:aa:51:d5:ca:87:ce:e2:3d:8e:3d:6a: 6a:9a:f8:df:e0:18:0d:dc:57:f2:48:29:1b:e0:02:99:28:f9: 80:2a:82:49:9c:29:97:6c:e5:96:87:b8:49:1e:65:22:31:ad: e1:b0:0e:3f:8a:77:b5:4d:96:fb:c4:c2:fb:ea:1b:96:10:14: 1b:46:4c:c7:34:b0:04:e4:71:00:e8:e4:e7:ff:71:af:90:80: 8c:ce:6a:bb:f0:49:34:3f:65:9c:c0:a2:59:6d:50:d8:ca:8e: 38:0e:77:75:16:65:ca:02:59:59:5f:62:f5:94:b7:d2:7e:6f: 5f:e6:c8:5b:e3:95:c1:e2:43:5c:2a:58:a3:a0:95:89:11:82: 11:7a:19:9b:3b:c8:f9:c8:2f:1f:dc:3b:f2:92:73:6c:b9:85: d4:46:0d:50:57:d8:9f:b0:71:71:60:38:03:1e:8e:24:88:3d: 9d:53:86:6e:55:91:0b:02:44:9e:12:ad:ae:a1:e0:b1:72:3d: 33:8c:e1:76:af:fb:a5:c8:7a:a6:74:14:03:72:7b:7a:87:5d: 09:45:80:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ0MDExMTAvBgNVBAUTKEEzOTlBMTJDNDhDMDBFNDI2MUQyOEUwQzU3RkQ0RTNF NDcwRDJFQjcwHhcNMjYxMDA5MDczNjMyWhcNMjYxMDE2MDczNjMyWjAYMRYwFAYD VQQDEw02YWM4OTk4MS1hNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85fMshTzhylsTesHePC8j604+LIw07YicOoD4buCqm8f/JU4OetFKRcuXaFy 9C5Z3K7xPyMbm+IXws3DVJt49Nbo4xt10ydPQULhSBvCTNlHTIS5ysXy8j7hjY8k mSb/u8SpxlFEUHNDJ2a5ik0qCPCE07D0kOiuRwKqcrBQhg9Mrw5l3YHJtbK5Zb+0 rBWrwRVCVbW6GV3QUJCCqvZibIYChhgGoWIX59YAx5UPxnxyVw/YQHlXbrJpdXqF CG/BnYXNNudBRpOpgcjKgEvdd6X6EjTuTLYllTiNoYgZr8t/khiIQ9ejLjMsO1sQ ekmowGn5sL9KX/1aQJE75gg6wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFOuHut EfC/8b6mfgliHHhfrZmQMB8GA1UdIwQYMBaAFKOZoSxIwA5CYdKODFf9Tj5HDS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDQwMS8xQjg4MjE2MEFB NzAxMUYwQjQyOEU2NjNDNEY5QUUwMi9vNW1oTEVqQURrSmgwbzRNVl8xT1BrY05M cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281bWhMRWpBRGtKaDBvNE1WXzFPUGtjTkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDQwMS8xQjg4MjE2MEFBNzAxMUYwQjQyOEU2NjNDNEY5QUUwMi9vNW1oTEVqQURr SmgwbzRNVl8xT1BrY05McmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbUKYVgLUCckyLiuWLWOxAikepPm8stiusb5S09KxnEDhhS3HtHHwWC8hi6pR 1cqHzuI9jj1qapr43+AYDdxX8kgpG+ACmSj5gCqCSZwpl2zlloe4SR5lIjGt4bAO P4p3tU2W+8TC++oblhAUG0ZMxzSwBORxAOjk5/9xr5CAjM5qu/BJND9lnMCiWW1Q 2MqOOA53dRZlygJZWV9i9ZS30n5vX+bIW+OVweJDXCpYo6CViRGCEXoZmzvI+cgv H9w78pJzbLmF1EYNUFfYn7BxcWA4Ax6OJIg9nVOGblWRCwJEnhKtrqHgsXI9M4zh dq/7pch6pnQUA3J7eoddCUWABg== -----END CERTIFICATE-----Generated at Sat Oct 10 15:38:18 2026 by rpki-client