$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft File: OT7Ose29xrFv9nglTZ02WP5it_0.mft (raw, json) Hash identifier: bO1kzj12wSjIgY/EyUQjBidyiMUuKPvEYtcocmX0xmA= Subject key identifier: E3:5C:E5:E0:F9:01:70:21:3B:EB:FB:1E:8C:3C:F7:0C:31:C6:DA:37 Authority key identifier: 39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD Certificate issuer: /CN=A91DE342/serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft Manifest number: 08 Signing time: Wed 07 Oct 2026 09:52:17 +0000 Manifest this update: Wed 07 Oct 2026 09:52:16 +0000 Manifest next update: Wed 14 Oct 2026 09:52:16 +0000 Files and hashes: 1: OT7Ose29xrFv9nglTZ02WP5it_0.crl (hash: HlqSwjlyqQwH21YExwjR+evlMIsPrU51Q86SCXibcOA=) 2: 8958E54AB83311F19FBB25854111F970.roa (hash: vJq2xq6zU+p2TfduXb6SjK2hMQkrC4+48H+OODGeDos=) 3: 8A3AFC32B83311F19FBB25854111F970.roa (hash: ktAQN41mgFKNQWHnlocC2/vzmT/Q5Z1IyFik11yu49A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.crl rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE342, serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD Validity Not Before: Oct 7 09:52:16 2026 GMT Not After : Oct 14 09:52:16 2026 GMT Subject: CN=6ac61651-ad4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:7e:a2:30:2e:37:7c:b2:e2:5a:21:b2:c6: 9f:e6:e2:f0:c6:7a:80:a9:d6:f8:ea:81:02:3c:b4: 00:48:82:17:2a:a8:ce:3a:e5:5b:15:02:c7:2a:55: bc:84:e8:5b:8d:24:0a:7d:0f:d4:59:39:bd:2f:f9: 30:bd:72:4c:81:8c:3b:ae:47:1e:ad:94:1d:31:30: 4c:e0:4e:c7:64:9e:ab:01:ae:98:6e:9a:29:e2:2d: 7f:17:93:a8:30:3d:ae:ff:3d:2c:32:e5:90:31:6a: e2:ab:cf:62:35:0a:3e:35:6a:df:79:cf:32:d8:6a: b9:a3:c7:b1:f1:da:cb:0c:5c:03:0e:2e:78:11:31: 4e:f8:f1:b4:aa:4e:b7:76:04:28:d3:7c:67:d8:02: ef:b2:70:64:cd:90:b5:4f:22:b1:b5:06:ed:67:59: f5:73:95:f0:2c:a5:b2:b1:c3:7f:c2:17:0b:5a:76: 33:25:a8:2e:d2:28:63:a9:ed:28:b1:04:8f:f7:f3: 99:01:5d:15:8c:72:25:f4:11:da:09:93:43:69:ed: 44:1d:b7:5e:33:40:6f:e9:1c:7a:21:12:06:5f:02: 95:ed:39:7b:28:0c:c5:1d:4a:57:98:64:ba:5d:ad: a7:08:c7:77:41:b4:3b:67:21:33:66:d1:61:ee:9e: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5C:E5:E0:F9:01:70:21:3B:EB:FB:1E:8C:3C:F7:0C:31:C6:DA:37 X509v3 Authority Key Identifier: keyid:39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:6a:35:69:12:ad:31:f0:1a:36:a5:10:f6:6b:91:6d:9a:3f: e2:af:88:78:06:b3:86:3f:48:a8:78:4e:d6:4c:27:32:be:5e: f5:ff:fe:64:56:ae:8e:29:42:c7:a7:90:88:07:6b:35:1d:d6: 9c:1b:c5:86:92:d5:81:f1:2d:18:8c:bb:94:9b:7f:07:30:11: fd:8a:30:1e:15:43:c0:39:a3:63:6c:55:97:e3:39:9f:c8:61: 59:7b:c5:0f:9a:58:c9:59:25:a6:04:0b:dd:dd:cf:4b:f4:5b: 83:26:0f:6b:45:ec:62:96:1e:a0:36:c9:64:39:2f:d1:c8:9b: 1e:cf:12:54:27:85:33:52:65:2d:a7:5d:0d:f9:b8:db:29:17: c5:9c:dc:ad:40:ce:44:e2:94:1f:f6:b0:a4:61:5f:08:50:82: 24:45:7a:a2:16:3e:23:96:1b:2a:7e:24:b4:21:22:92:94:21: de:6d:af:24:fe:f3:d3:7b:3f:61:32:7d:51:9b:0d:e5:9e:95: 52:59:76:61:67:40:e4:63:35:cf:51:f4:3a:13:7d:33:81:5f: 68:45:0d:dd:90:f0:97:3d:73:2b:5a:b1:7a:1f:f0:1b:8a:56: 04:ee:6c:30:8f:97:fd:d7:ce:8f:f0:84:63:63:b0:4a:d3:ed: 5d:5a:fa:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTM0MjExMC8GA1UEBRMoMzkzRUNFQjFFREJEQzZCMTZGRjY3ODI1NEQ5RDM2NThG RTYyQjdGRDAeFw0yNjEwMDcwOTUyMTZaFw0yNjEwMTQwOTUyMTZaMBgxFjAUBgNV BAMTDTZhYzYxNjUxLWFkNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpDX6iMC43fLLiWiGyxp/m4vDGeoCp1vjqgQI8tABIghcqqM465VsVAscqVbyE 6FuNJAp9D9RZOb0v+TC9ckyBjDuuRx6tlB0xMEzgTsdknqsBrphuminiLX8Xk6gw Pa7/PSwy5ZAxauKrz2I1Cj41at95zzLYarmjx7Hx2ssMXAMOLngRMU748bSqTrd2 BCjTfGfYAu+ycGTNkLVPIrG1Bu1nWfVzlfAspbKxw3/CFwtadjMlqC7SKGOp7Six BI/385kBXRWMciX0EdoJk0Np7UQdt14zQG/pHHohEgZfApXtOXsoDMUdSleYZLpd racIx3dBtDtnITNm0WHunoSpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU41zl4PkB cCE76/sejDz3DDHG2jcwHwYDVR0jBBgwFoAUOT7Ose29xrFv9nglTZ02WP5it/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzQyLzEwMUUyQzgwQjgz MzExRjFCODNGQjIyODQxMTFGOTcwL09UN09zZTI5eHJGdjluZ2xUWjAyV1A1aXRf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1Q3T3NlMjl4ckZ2OW5nbFRaMDJXUDVpdF8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MzQyLzEwMUUyQzgwQjgzMzExRjFCODNGQjIyODQxMTFGOTcwL09UN09zZTI5eHJG djluZ2xUWjAyV1A1aXRfMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQajVpEq0x8Bo2pRD2a5Ftmj/ir4h4BrOGP0ioeE7WTCcyvl71//5kVq6OKULH p5CIB2s1HdacG8WGktWB8S0YjLuUm38HMBH9ijAeFUPAOaNjbFWX4zmfyGFZe8UP mljJWSWmBAvd3c9L9FuDJg9rRexilh6gNslkOS/RyJsezxJUJ4UzUmUtp10N+bjb KRfFnNytQM5E4pQf9rCkYV8IUIIkRXqiFj4jlhsqfiS0ISKSlCHeba8k/vPTez9h Mn1Rmw3lnpVSWXZhZ0DkYzXPUfQ6E30zgV9oRQ3dkPCXPXMrWrF6H/AbilYE7mww j5f9186P8IRjY7BK0+1dWvpP -----END CERTIFICATE-----Generated at Thu Oct 8 10:48:10 2026 by rpki-client