$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: XKaLZjCCeT5N58vjsS4auM+Chb8zD1johTyC8ULRkpE= Subject key identifier: 4D:E7:7C:48:54:BC:85:18:54:52:B7:97:B2:8C:88:75:9B:B3:4B:B4 Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 368D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 360D Signing time: Mon 28 Sep 2026 14:49:16 +0000 Manifest this update: Mon 28 Sep 2026 14:49:15 +0000 Manifest next update: Mon 05 Oct 2026 14:49:15 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: axQsqrSas5jOc5+V+E9K40v0GL9ZmHylSrl6MtdmRBo=) 2: sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa (hash: I6p3UURilsrl6l6rhn0wT3MhCoiuv3Y8LPk+lcr5FbE=) 3: 87C417D4AD1811F1A4C6F2B14011F970.roa (hash: F9QyhjA4QNdilU+ShIfAj3a6gliCU8PF/F7dlar+ZO8=) 4: y3XF_d_Fz4sNYXjELzqHJsYq6XU.asa (hash: phuSwfjdb7QT4a5GmgCtJ2giqSwUMfci6tv/INJIFq8=) 5: 3556F236591D11F1B1E1CE2EC9833773.roa (hash: xZnAAlTCl+JT5OotaR0JxL8HG25CqlkoxYP53N4yaTg=) 6: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: bGRZ0FpspSCf0cAveUKjR/NLCR8lXup6exlYiK4KDOA=) 7: ZK6dqsz8SNKa9BIRG-wwKoRLm1s.asa (hash: Dz7ClXtb4X0yBRjApTXpt2z96UXZ22eyuTkwMR3LjYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13965 (0x368d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Sep 28 14:49:15 2026 GMT Not After : Oct 5 14:49:15 2026 GMT Subject: CN=6aba7e6c-7dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:2a:a9:c6:99:5d:b0:45:c1:b8:1e:bb:44: c9:d3:6b:e4:4e:59:dc:15:35:85:44:5e:74:f7:b4: c0:f9:72:fd:76:a1:de:b9:f0:25:04:8b:80:29:c9: a9:26:bb:85:24:ed:20:00:cc:d7:ac:e5:42:5f:28: 6a:f1:af:b2:40:10:b4:7a:10:4c:ad:31:81:f1:86: 14:55:57:2e:e3:9e:98:cc:a7:90:5e:cc:98:33:c4: af:57:94:08:d5:0c:ff:97:43:c2:70:fb:a2:15:30: d0:c8:fe:0e:ab:c7:07:95:62:b5:c5:f7:28:d1:a5: e5:25:7d:b0:e3:ed:c1:42:2a:50:03:27:df:85:35: 11:12:82:91:17:65:51:80:43:e0:4e:b6:1d:bf:40: e3:17:2b:fb:a7:77:2e:3c:a2:01:6d:6e:00:10:d8: 9a:ef:b0:9a:ee:aa:11:57:f4:7b:f8:a6:4e:4d:2a: 22:d6:58:f3:05:7d:4c:08:d3:23:6c:28:9b:f8:53: 0e:df:03:76:5c:ea:c3:df:11:79:ee:dd:cf:4e:36: 7c:01:4e:45:e0:f0:96:8f:06:0a:3e:fb:d8:3a:ac: e6:84:d7:37:a0:c9:37:b7:9f:db:3b:f4:6e:8d:ab: bc:06:d5:aa:18:5a:20:1a:a8:67:ef:d8:a8:9c:82: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E7:7C:48:54:BC:85:18:54:52:B7:97:B2:8C:88:75:9B:B3:4B:B4 X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:47:dd:2d:18:5b:ee:a2:47:1e:b8:5b:4d:6e:15:c4:d7:53: 4c:20:14:35:6c:aa:d3:07:d2:48:7a:22:85:5f:a9:9b:86:61: 5c:c4:53:dc:4b:30:3f:6a:24:71:bf:93:5c:a4:e1:12:33:e0: 6e:bd:13:13:d9:65:8b:cb:16:0d:53:f8:61:9b:82:c9:c6:4a: 2c:19:ec:2f:b6:e4:b5:ba:ac:19:cf:95:59:9c:3d:57:44:10: 29:e3:e3:b8:bb:26:77:82:dd:55:19:b2:5b:25:24:82:c1:88: 2c:89:70:6c:20:bf:69:13:78:b9:bd:d6:07:37:92:42:c2:5b: c1:8a:14:2c:5a:fa:c0:3c:59:86:01:66:73:8f:d0:00:c7:8f: ad:bb:13:81:ff:91:de:03:37:d2:61:22:5d:8f:b6:b4:bf:66: dd:5b:64:53:df:4d:5e:82:f1:73:8e:fd:1b:fb:20:41:cd:b3: d9:cd:37:c7:39:9f:0c:a6:6f:bb:48:b3:06:d4:f2:4f:20:dc: bb:77:3c:19:33:16:51:0f:bd:4e:37:a5:1c:ab:a5:72:e6:ee: 3b:0b:7f:ba:d3:9b:fd:aa:86:da:58:92:af:9e:9f:93:86:16: 4b:3a:03:99:2e:11:ec:cd:5f:5e:34:b3:e5:b1:84:9a:e3:fd: c8:c7:78:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYwOTI4MTQ0OTE1WhcNMjYxMDA1MTQ0OTE1WjAYMRYwFAYD VQQDEw02YWJhN2U2Yy03ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn4qqcaZXbBFwbgeu0TJ02vkTlncFTWFRF5097TA+XL9dqHeufAlBIuAKcmp JruFJO0gAMzXrOVCXyhq8a+yQBC0ehBMrTGB8YYUVVcu456YzKeQXsyYM8SvV5QI 1Qz/l0PCcPuiFTDQyP4Oq8cHlWK1xfco0aXlJX2w4+3BQipQAyffhTUREoKRF2VR gEPgTrYdv0DjFyv7p3cuPKIBbW4AENia77Ca7qoRV/R7+KZOTSoi1ljzBX1MCNMj bCib+FMO3wN2XOrD3xF57t3PTjZ8AU5F4PCWjwYKPvvYOqzmhNc3oMk3t5/bO/Ru jau8BtWqGFogGqhn79ionIKBYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3nfEhU vIUYVFK3l7KMiHWbs0u0MB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwUfdLRhb7qJHHrhbTW4VxNdTTCAUNWyq0wfSSHoihV+pm4ZhXMRT3EswP2ok cb+TXKThEjPgbr0TE9lli8sWDVP4YZuCycZKLBnsL7bktbqsGc+VWZw9V0QQKePj uLsmd4LdVRmyWyUkgsGILIlwbCC/aRN4ub3WBzeSQsJbwYoULFr6wDxZhgFmc4/Q AMePrbsTgf+R3gM30mEiXY+2tL9m3VtkU99NXoLxc479G/sgQc2z2c03xzmfDKZv u0izBtTyTyDcu3c8GTMWUQ+9TjelHKulcubuOwt/utOb/aqG2liSr56fk4YWSzoD mS4R7M1fXjSz5bGEmuP9yMd4TA== -----END CERTIFICATE-----Generated at Mon Sep 28 21:29:28 2026 by rpki-client