$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft File: 0F9LZe-AtS0_ehTy3BlczyY5I8M.mft (raw, json) Hash identifier: KbME5STRfUAtoLhibXnQoYq+BbVguxY3Irdkhz83x6A= Subject key identifier: CF:94:8B:FD:B9:88:F5:96:EE:DA:03:C3:3C:BF:8A:3F:03:88:B5:BF Authority key identifier: D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 Certificate issuer: /CN=A91C7836/serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft Manifest number: 1D Signing time: Thu 03 Sep 2026 09:09:44 +0000 Manifest this update: Thu 03 Sep 2026 09:09:43 +0000 Manifest next update: Thu 10 Sep 2026 09:09:43 +0000 Files and hashes: 1: 0F9LZe-AtS0_ehTy3BlczyY5I8M.crl (hash: h7hv8A4ixDUnd07ALVxNwPL+rl70rdwJaHgvW4q4PoA=) 2: 331B257C948D11F1A5BE36406611F970.roa (hash: HNA4rjO5UGOdW/eL7CIfPG7iC2OgFOjS6hhZEI3sMeg=) 3: 328CBC1A948D11F1A5BE36406611F970.roa (hash: 1F7cx/vFo7/QfoO4QwD2fE5604MofvsFO/wXSVuF0sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7836, serialNumber=D05F4B65EF80B52D3F7A14F2DC195CCF263923C3 Validity Not Before: Sep 3 09:09:43 2026 GMT Not After : Sep 10 09:09:43 2026 GMT Subject: CN=6a993958-c241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:e1:19:9c:42:e7:63:f7:70:fe:67:05:45: 72:df:2f:f2:dc:4f:fe:98:49:14:5c:55:f2:bc:90: cd:8d:97:5b:26:c8:e7:e3:06:3a:3b:9b:e2:d1:c0: 3c:33:f5:04:dd:8d:c1:8b:a9:b3:37:52:20:d2:a6: 42:e3:93:10:c5:42:9e:2f:08:f2:85:e6:7c:5c:99: a3:1d:72:d0:06:f5:7f:ed:f3:35:a5:08:63:10:a7: fc:e8:98:c6:8f:ab:e7:6a:b4:3b:da:f0:dc:66:6b: d8:64:8b:68:9e:0e:55:03:cc:3f:f2:c9:23:d5:be: 25:37:80:9b:6c:05:6a:8e:b1:21:13:99:1e:d5:51: 57:29:8d:1e:e2:cf:40:d8:3d:43:6e:b7:ff:c1:fd: 43:51:83:63:c2:4e:8c:ef:a5:ed:f8:b5:27:28:13: 12:10:ec:31:aa:37:57:6a:43:c7:de:a2:3a:68:f4: 93:20:97:70:ac:28:4b:e2:68:ca:da:76:86:ce:6f: ea:c9:bd:d0:84:f3:78:af:48:32:72:af:d2:f4:e6: 05:1f:c8:f1:4a:5f:81:87:f8:fc:ab:99:a7:63:9a: 70:5e:66:94:93:c9:c2:bd:4a:27:cd:52:af:9a:ad: 50:e9:71:5e:87:ae:ff:04:24:33:8b:0e:34:75:51: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:8B:FD:B9:88:F5:96:EE:DA:03:C3:3C:BF:8A:3F:03:88:B5:BF X509v3 Authority Key Identifier: keyid:D0:5F:4B:65:EF:80:B5:2D:3F:7A:14:F2:DC:19:5C:CF:26:39:23:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0F9LZe-AtS0_ehTy3BlczyY5I8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/FD2F705C801511F18A76BD785BA30FBC/0F9LZe-AtS0_ehTy3BlczyY5I8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:95:2e:f5:ed:4b:86:15:7e:80:da:d1:f4:2a:35:91:8a:a2: d4:3d:f8:94:bf:4f:50:47:e3:e8:8f:5b:fa:6d:ef:7f:eb:63: cb:ec:fa:f1:10:28:e6:94:13:d8:34:df:e3:24:84:02:7b:9d: 58:24:ec:11:32:03:12:45:26:d3:a9:86:bf:ab:44:b5:44:5e: 21:0f:5a:3f:54:ae:80:97:c7:29:2a:c1:0c:f6:b9:13:49:41: a7:56:e1:9c:11:59:84:af:c8:7f:8e:db:41:18:0c:8e:ad:8d: c0:06:46:e3:e4:69:7f:a2:23:10:9c:c8:34:fe:32:fe:90:08: d0:cf:36:5d:42:2b:15:42:e3:2f:42:ea:7e:45:bd:1d:ea:a0: fb:a0:7d:58:6c:b8:fd:0c:24:ee:96:8a:b0:cc:18:44:8c:00: 49:b9:c1:bb:bb:c2:63:42:0f:dc:2f:b7:2d:a3:1c:6b:b6:59: 33:a6:6f:4a:30:b2:c0:fe:38:f4:32:73:3c:50:e6:63:f4:c1: 8c:bf:ef:9e:e3:12:4c:dc:57:91:ee:74:1c:22:0a:b9:19:5f: 79:ac:76:e4:cc:1a:2c:63:2b:19:6e:8b:35:be:bc:f5:48:60: 66:9d:0c:90:45:f8:14:c9:de:9d:eb:ec:8b:1e:16:99:16:96: 06:91:fd:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzgzNjExMC8GA1UEBRMoRDA1RjRCNjVFRjgwQjUyRDNGN0ExNEYyREMxOTVDQ0Yy NjM5MjNDMzAeFw0yNjA5MDMwOTA5NDNaFw0yNjA5MTAwOTA5NDNaMBgxFjAUBgNV BAMTDTZhOTkzOTU4LWMyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC70OEZnELnY/dw/mcFRXLfL/LcT/6YSRRcVfK8kM2Nl1smyOfjBjo7m+LRwDwz 9QTdjcGLqbM3UiDSpkLjkxDFQp4vCPKF5nxcmaMdctAG9X/t8zWlCGMQp/zomMaP q+dqtDva8Nxma9hki2ieDlUDzD/yySPVviU3gJtsBWqOsSETmR7VUVcpjR7iz0DY PUNut//B/UNRg2PCTozvpe34tScoExIQ7DGqN1dqQ8feojpo9JMgl3CsKEviaMra dobOb+rJvdCE83ivSDJyr9L05gUfyPFKX4GH+PyrmadjmnBeZpSTycK9SifNUq+a rVDpcV6Hrv8EJDOLDjR1Ua7HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz5SL/bmI 9Zbu2gPDPL+KPwOItb8wHwYDVR0jBBgwFoAU0F9LZe+AtS0/ehTy3BlczyY5I8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3ODM2L0ZEMkY3MDVDODAx NTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMwX2VoVHkzQmxjenlZNUk4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMEY5TFplLUF0UzBfZWhUeTNCbGN6eVk1SThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 ODM2L0ZEMkY3MDVDODAxNTExRjE4QTc2QkQ3ODVCQTMwRkJDLzBGOUxaZS1BdFMw X2VoVHkzQmxjenlZNUk4TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLlS717UuGFX6A2tH0KjWRiqLUPfiUv09QR+Poj1v6be9/62PL7PrxECjmlBPY NN/jJIQCe51YJOwRMgMSRSbTqYa/q0S1RF4hD1o/VK6Al8cpKsEM9rkTSUGnVuGc EVmEr8h/jttBGAyOrY3ABkbj5Gl/oiMQnMg0/jL+kAjQzzZdQisVQuMvQup+Rb0d 6qD7oH1YbLj9DCTuloqwzBhEjABJucG7u8JjQg/cL7ctoxxrtlkzpm9KMLLA/jj0 MnM8UOZj9MGMv++e4xJM3FeR7nQcIgq5GV95rHbkzBosYysZbos1vrz1SGBmnQyQ RfgUyd6d6+yLHhaZFpYGkf30 -----END CERTIFICATE-----Generated at Fri Sep 4 22:26:20 2026 by rpki-client