$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: SBtAe5vgkmSAW5SPntoolzL3iUXwETVdTvyQRsgKfjI= Subject key identifier: 1E:4D:8C:66:01:F8:BA:91:01:65:36:25:35:AD:06:BC:38:10:38:77 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 35CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 35AB Signing time: Tue 06 Oct 2026 14:31:00 +0000 Manifest this update: Tue 06 Oct 2026 14:30:59 +0000 Manifest next update: Tue 13 Oct 2026 14:30:59 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: +ZsUwgupe6SIp4fMVMFn7iJpwq7IhcWQEIB2rXvemFI=) 2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=) 3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13771 (0x35cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Oct 6 14:30:59 2026 GMT Not After : Oct 13 14:30:59 2026 GMT Subject: CN=6ac50624-39df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:6f:53:d4:04:05:d5:d5:6a:6a:ba:1d:a8: 94:0b:0a:75:6a:b8:fc:d0:f4:03:27:ca:e4:95:79: 29:4b:f4:a6:6a:04:dc:39:f7:b5:45:c5:fc:38:5d: 64:bd:32:9a:dc:8c:18:14:11:a9:55:73:bf:ca:79: 85:c0:3b:a3:8b:db:2a:b1:01:f2:e6:d6:23:07:11: 53:4d:98:9d:ad:81:c4:e4:7c:f4:42:54:7f:e1:a4: 5d:43:4d:85:24:30:8d:8b:9c:aa:80:71:ae:be:15: 0f:74:84:73:22:8e:2a:dd:be:43:c9:71:29:3c:1b: a8:21:2f:60:42:0e:58:2e:d4:73:33:c8:8a:0b:fa: 9c:9c:95:44:82:ff:f1:81:80:fa:45:7c:6f:3b:48: 79:8b:db:3d:6c:0c:ba:8b:f7:60:01:e5:f4:93:c1: f9:82:6c:58:f0:0b:33:76:f4:b8:4c:e1:dc:01:9e: f2:96:ba:0f:29:ee:93:3a:eb:3c:93:bc:e8:56:d3: 94:94:54:71:37:2a:4e:01:2b:83:c9:c5:e4:6f:fd: 6e:c4:ea:9d:bb:b9:f6:1b:72:e9:94:86:f6:73:b3: 8d:e9:ce:34:da:d5:6c:2e:62:da:83:a5:c2:81:93: 7c:f3:a4:9f:56:2f:df:95:51:41:fb:81:c9:cb:84: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:8C:66:01:F8:BA:91:01:65:36:25:35:AD:06:BC:38:10:38:77 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ff:10:8a:46:24:09:4f:b9:86:0a:b6:35:30:6a:64:ad:55: 27:f1:6a:9e:5b:e5:34:de:b9:58:1a:0e:40:f7:87:77:8d:d8: d8:c3:6f:a0:fa:fc:5c:bf:01:c7:22:3f:78:c9:9c:c7:a2:69: 10:6a:a0:73:f9:8a:99:b4:41:c9:24:f0:99:1a:fd:c4:6a:5e: 2b:5f:83:5c:d9:8e:f7:3e:80:20:cb:c7:8f:23:aa:bf:ac:ae: c1:a9:0e:ba:55:5a:91:1b:5e:61:5f:65:d0:fb:10:f3:15:bd: f1:03:77:73:da:fe:4f:d4:20:2a:19:67:1f:a1:22:ac:33:b0: 3a:9a:87:64:b1:a3:99:d3:44:7a:48:3a:f6:ff:9d:b5:1f:fd: 87:26:92:c3:23:c0:02:fc:d0:e5:56:3f:b1:65:d8:67:18:fa: a3:62:3d:55:09:35:19:c3:35:da:8f:e3:2e:3e:68:93:26:7d: 75:eb:ce:a2:78:9d:d4:a3:5a:68:82:ec:f2:55:3d:51:f6:42: 3c:7b:b5:ca:e8:77:f9:0e:a9:b2:2f:de:3d:e4:02:41:81:16: 26:b5:37:e3:72:7f:e6:94:ce:1a:3a:f1:a3:7d:c8:89:ee:c7: c0:6a:c4:60:eb:d3:ba:76:9b:c4:7e:fd:48:53:0a:fe:50:35: c1:9d:b7:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYxMDA2MTQzMDU5WhcNMjYxMDEzMTQzMDU5WjAYMRYwFAYD VQQDEw02YWM1MDYyNC0zOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDVvU9QEBdXVamq6HaiUCwp1arj80PQDJ8rklXkpS/SmagTcOfe1RcX8OF1k vTKa3IwYFBGpVXO/ynmFwDuji9sqsQHy5tYjBxFTTZidrYHE5Hz0QlR/4aRdQ02F JDCNi5yqgHGuvhUPdIRzIo4q3b5DyXEpPBuoIS9gQg5YLtRzM8iKC/qcnJVEgv/x gYD6RXxvO0h5i9s9bAy6i/dgAeX0k8H5gmxY8AszdvS4TOHcAZ7ylroPKe6TOus8 k7zoVtOUlFRxNypOASuDycXkb/1uxOqdu7n2G3LplIb2c7ON6c402tVsLmLag6XC gZN886SfVi/flVFB+4HJy4T3mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5NjGYB +LqRAWU2JTWtBrw4EDh3MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGv8QikYkCU+5hgq2NTBqZK1VJ/FqnlvlNN65WBoOQPeHd43Y2MNvoPr8XL8B xyI/eMmcx6JpEGqgc/mKmbRBySTwmRr9xGpeK1+DXNmO9z6AIMvHjyOqv6yuwakO ulVakRteYV9l0PsQ8xW98QN3c9r+T9QgKhlnH6EirDOwOpqHZLGjmdNEekg69v+d tR/9hyaSwyPAAvzQ5VY/sWXYZxj6o2I9VQk1GcM12o/jLj5okyZ9devOonid1KNa aILs8lU9UfZCPHu1yuh3+Q6psi/ePeQCQYEWJrU343J/5pTOGjrxo33Iie7HwGrE YOvTunabxH79SFMK/lA1wZ23DQ== -----END CERTIFICATE-----Generated at Wed Oct 7 15:17:26 2026 by rpki-client