$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft File: 0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json) Hash identifier: oiyhUApK6wfwVZLPCfdCcGtlO2gyRUdnfT5Fd7YxPS4= Subject key identifier: BE:24:78:68:90:DF:5B:D2:D3:8F:2E:2E:5A:01:CC:BE:FE:12:F7:03 Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 Certificate issuer: /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft Manifest number: 35 Signing time: Wed 21 Oct 2026 09:12:46 +0000 Manifest this update: Wed 21 Oct 2026 09:12:46 +0000 Manifest next update: Wed 28 Oct 2026 09:12:46 +0000 Files and hashes: 1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: OZPbATRclaHHVmE7ou3Bw2GNZKjjfMsoeESl51CGiE4=) 2: 331B257C948D11F1A5BE36406611F970.roa (hash: HNA4rjO5UGOdW/eL7CIfPG7iC2OgFOjS6hhZEI3sMeg=) 3: 328CBC1A948D11F1A5BE36406611F970.roa (hash: 1F7cx/vFo7/QfoO4QwD2fE5604MofvsFO/wXSVuF0sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Validity Not Before: Oct 21 09:12:46 2026 GMT Not After : Oct 28 09:12:46 2026 GMT Subject: CN=6ad8820e-0c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:04:d5:18:08:31:f5:c0:b9:8c:6f:62:93: cc:64:6d:8a:d1:f4:10:4d:34:7a:74:11:2f:b1:53: 29:6d:63:67:27:12:42:e2:e9:3c:52:45:a3:65:db: 6c:21:fc:d8:d8:36:b2:86:a6:68:8f:8f:6d:22:ac: fc:68:d5:49:fe:49:20:b0:d8:29:93:c4:e5:2f:49: ee:fa:21:1a:0e:e8:56:e0:fa:06:a3:00:ef:bb:fd: 17:16:8a:32:45:ba:b0:74:a5:ff:d2:bb:ce:da:77: 53:9b:0b:15:c8:e0:8d:1a:73:e4:de:5a:76:0f:0e: e4:f3:39:a9:84:26:fc:6d:14:b0:e4:26:f1:e8:54: f5:16:30:cd:59:2d:a5:58:c7:35:8f:71:1b:29:56: 86:7f:82:07:21:c9:c0:f8:fb:5d:09:3c:79:a5:08: e9:c2:b4:b6:8c:1a:19:e6:79:6b:3b:04:cd:68:f6: 59:ca:47:27:b2:4a:c7:4c:81:39:f9:ec:11:70:00: 1b:a8:3d:4e:ba:b3:16:75:6d:40:fa:35:15:13:93: 75:8b:27:c4:de:47:b2:8c:ea:c7:2b:37:25:eb:80: 6c:50:1b:9a:d8:15:38:9b:00:d8:f8:b7:fa:ae:e1: a2:27:a9:c3:d0:11:e6:53:0c:87:b9:cc:49:ef:a0: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:24:78:68:90:DF:5B:D2:D3:8F:2E:2E:5A:01:CC:BE:FE:12:F7:03 X509v3 Authority Key Identifier: keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:86:52:02:af:15:e0:17:b7:57:09:96:45:b7:d8:35:55:a5: 2b:8f:09:93:67:eb:28:49:42:16:ea:78:45:5f:fa:da:f3:f2: 4b:04:b1:34:98:53:b9:5b:fa:00:33:0e:5d:83:6a:9b:f9:64: b4:20:54:11:6a:c5:3d:6f:4a:16:cb:e0:59:3b:1e:78:b9:e6: 0c:2e:3f:b1:9b:4b:57:69:b6:9a:b5:f6:26:21:a0:07:08:6b: c5:7f:f4:70:d7:f2:f4:8b:ea:a4:23:05:00:ad:d0:b0:6c:34: 8d:0d:94:45:eb:e2:de:0b:fd:9d:da:2c:8d:f7:ae:a4:15:fb: aa:db:81:ed:64:50:49:8f:ca:57:44:ca:da:45:d2:a5:65:11: bb:a8:fd:c3:c9:c5:28:44:65:f4:7f:21:9e:aa:fe:5f:db:8a: 78:76:78:5b:9b:c3:33:d1:1d:7d:5f:66:90:d9:dd:68:86:88: 9e:e5:50:30:00:12:b7:05:6c:3d:2a:9f:16:fc:4b:74:71:7d: ca:69:af:18:56:dd:6e:b5:97:05:32:b3:d3:ff:e5:fa:c2:37: c6:8c:86:24:91:5e:e6:b8:b7:56:bc:63:0a:f9:90:c0:94:7b: 7d:81:4b:e4:a0:b0:7e:50:8e:d1:56:58:1d:34:79:14:02:85: 78:cf:3a:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzgzNjExMC8GA1UEBRMoRDA1RjRCNjVFRjgwQjUyRDNGN0ExNEYyREMxOTVDQ0Yy NjM5MjNDMzAeFw0yNjEwMjEwOTEyNDZaFw0yNjEwMjgwOTEyNDZaMBgxFjAUBgNV BAMTDTZhZDg4MjBlLTBjMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIagTVGAgx9cC5jG9ik8xkbYrR9BBNNHp0ES+xUyltY2cnEkLi6TxSRaNl22wh /NjYNrKGpmiPj20irPxo1Un+SSCw2CmTxOUvSe76IRoO6Fbg+gajAO+7/RcWijJF urB0pf/Su87ad1ObCxXI4I0ac+TeWnYPDuTzOamEJvxtFLDkJvHoVPUWMM1ZLaVY xzWPcRspVoZ/ggchycD4+10JPHmlCOnCtLaMGhnmeWs7BM1o9lnKRyeySsdMgTn5 7BFwABuoPU66sxZ1bUD6NRUTk3WLJ8TeR7KM6scrNyXrgGxQG5rYFTibANj4t/qu 4aInqcPQEeZTDIe5zEnvoKK5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUviR4aJDf W9LTjy4uWgHMvv4S9wMwHwYDVR0jBBgwFoAU0F9LZe+AtS0/ehTy3BlczyY5I8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3ODM2L0ZEMkY3MDVDODAx NTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMwX2VoVHkzQmxjenlZNUk4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMEY5TFplLUF0UzBfZWhUeTNCbGN6eVk1SThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 ODM2L0ZEMkY3MDVDODAxNTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMw X2VoVHkzQmxjenlZNUk4TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxhlICrxXgF7dXCZZFt9g1VaUrjwmTZ+soSUIW6nhFX/ra8/JLBLE0mFO5W/oA Mw5dg2qb+WS0IFQRasU9b0oWy+BZOx54ueYMLj+xm0tXabaatfYmIaAHCGvFf/Rw 1/L0i+qkIwUArdCwbDSNDZRF6+LeC/2d2iyN966kFfuq24HtZFBJj8pXRMraRdKl ZRG7qP3DycUoRGX0fyGeqv5f24p4dnhbm8Mz0R19X2aQ2d1ohoie5VAwABK3BWw9 Kp8W/Et0cX3Kaa8YVt1utZcFMrPT/+X6wjfGjIYkkV7muLdWvGMK+ZDAlHt9gUvk oLB+UI7RVlgdNHkUAoV4zzrT -----END CERTIFICATE-----Generated at Wed Oct 21 18:20:06 2026 by rpki-client