$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json) Hash identifier: h35W6nSFxl/JUIw2nWEW+nI82zZYb71MQZTFzOHOka4= Subject key identifier: 39:5C:EC:3C:C5:E6:60:DD:12:AC:17:13:78:C2:FB:B2:4D:07:9C:D9 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft Manifest number: 02C9 Signing time: Wed 07 Oct 2026 01:40:43 +0000 Manifest this update: Wed 07 Oct 2026 01:40:42 +0000 Manifest next update: Wed 14 Oct 2026 01:40:42 +0000 Files and hashes: 1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: HGJwbqSgA2avpbdwKC11udApCCluEs9q6cywwH6Z/9w=) 2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: Ouit03LRtJZqOFfBSglxXn5xGezeH2cCBVrluC7GA64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Oct 7 01:40:42 2026 GMT Not After : Oct 14 01:40:42 2026 GMT Subject: CN=6ac5a31b-a652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:cc:53:28:e1:1f:1d:a8:a0:25:3e:74:bb: c5:1d:ec:25:fa:da:2a:48:46:06:fd:e0:9c:c7:c6: c0:2f:ff:de:a1:ee:26:15:54:70:ad:0e:a3:1f:e8: 3b:78:9c:78:fc:02:73:87:ff:9a:19:ec:d7:14:dd: a8:2d:31:51:28:4b:66:74:52:fd:19:ed:88:4b:a3: 99:5d:a3:6a:de:62:a5:ef:00:73:5e:df:f9:27:43: 4d:04:43:00:59:12:1b:a8:57:4c:43:60:0f:3f:56: 43:59:1b:c9:f4:3a:f2:f0:6a:06:75:25:53:26:c6: d8:72:1e:34:52:84:12:8a:b0:8a:8a:19:3d:61:6d: 27:4b:62:b3:5c:94:eb:3d:64:38:7d:9c:55:ec:80: 9a:d8:a9:aa:74:bd:2e:a7:7b:8c:f4:b4:9d:96:d2: 6f:c0:f3:76:d0:66:a4:83:de:83:80:f0:6e:cb:5d: 06:8b:f1:79:d9:2d:6f:3a:77:f1:c2:2f:0b:50:c0: 07:b3:47:6c:0d:ad:85:ad:a1:bd:8e:68:cc:17:e1: 15:f8:63:48:6a:4c:47:64:dc:6a:c7:71:1d:34:36: 98:b9:30:d0:a1:b3:ba:90:81:a9:00:e2:8c:44:c4: fa:8a:e0:d2:31:fc:c5:53:52:2b:d7:57:0e:b1:90: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:EC:3C:C5:E6:60:DD:12:AC:17:13:78:C2:FB:B2:4D:07:9C:D9 X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0e:39:c1:10:37:41:fc:48:2a:91:00:a6:6c:a4:5f:54:6c: 00:87:bb:ec:84:a9:3c:a0:bd:34:19:78:9a:44:d9:dc:96:8a: ce:7c:3b:04:90:c1:27:5c:c1:18:e1:d4:11:cb:c0:97:65:31: 2a:63:50:94:86:f3:8c:92:5d:bc:4c:01:2c:ef:c7:0c:99:03: de:8d:c7:83:e6:a1:90:4c:fd:cb:a9:1f:eb:9c:d6:a0:6e:fe: a3:98:5b:c6:b8:83:87:4f:a7:4d:63:48:06:90:ca:8a:28:98: e1:91:8b:a0:66:69:46:bc:46:06:cd:d8:7b:20:61:4a:69:f0: 98:f5:e6:05:94:e0:33:c8:6a:58:b4:55:fb:b2:9d:44:f6:12: ea:25:e0:b2:6c:f1:a7:be:b4:50:b6:27:25:26:e5:ac:a6:60: 95:13:6a:2d:08:fb:f1:85:8e:cb:89:c5:6c:f2:27:58:b7:e4: 7f:c2:a5:21:ac:e1:48:3d:5b:94:ea:eb:71:df:05:d7:42:83: 7d:a7:9e:7d:1c:54:af:68:a5:dc:24:11:1c:d4:ae:b6:6e:0a: 44:ec:2b:90:ee:5a:0c:48:9b:42:40:e5:6d:24:25:fc:19:b0: 48:9e:c9:a1:4e:c8:67:df:63:e0:58:ee:f7:24:f8:f8:2a:c1: 1e:20:a1:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjYxMDA3MDE0MDQyWhcNMjYxMDE0MDE0MDQyWjAYMRYwFAYD VQQDEw02YWM1YTMxYi1hNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso3MUyjhHx2ooCU+dLvFHewl+toqSEYG/eCcx8bAL//eoe4mFVRwrQ6jH+g7 eJx4/AJzh/+aGezXFN2oLTFRKEtmdFL9Ge2IS6OZXaNq3mKl7wBzXt/5J0NNBEMA WRIbqFdMQ2APP1ZDWRvJ9Dry8GoGdSVTJsbYch40UoQSirCKihk9YW0nS2KzXJTr PWQ4fZxV7ICa2KmqdL0up3uM9LSdltJvwPN20Gakg96DgPBuy10Gi/F52S1vOnfx wi8LUMAHs0dsDa2FraG9jmjMF+EV+GNIakxHZNxqx3EdNDaYuTDQobO6kIGpAOKM RMT6iuDSMfzFU1Ir11cOsZAvIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlc7DzF 5mDdEqwXE3jC+7JNB5zZMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ4Qi81RjExRTAyQTdGNzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlL bFl1VDJ2ajBzbklCV3cyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWg45wRA3QfxIKpEApmykX1RsAIe77ISpPKC9NBl4mkTZ3JaKznw7BJDBJ1zB GOHUEcvAl2UxKmNQlIbzjJJdvEwBLO/HDJkD3o3Hg+ahkEz9y6kf65zWoG7+o5hb xriDh0+nTWNIBpDKiiiY4ZGLoGZpRrxGBs3YeyBhSmnwmPXmBZTgM8hqWLRV+7Kd RPYS6iXgsmzxp760ULYnJSblrKZglRNqLQj78YWOy4nFbPInWLfkf8KlIazhSD1b lOrrcd8F10KDfaeefRxUr2il3CQRHNSutm4KROwrkO5aDEibQkDlbSQl/BmwSJ7J oU7IZ99j4Fju9yT4+CrBHiChzQ== -----END CERTIFICATE-----Generated at Thu Oct 8 10:42:40 2026 by rpki-client