$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: TFNP81LunlmCc1JiaFJlQq5v+bPw2v340CgfgpI/Qss= Subject key identifier: 24:71:ED:9F:0C:B6:A5:87:F0:29:E7:3F:E8:4D:6D:A6:D8:D3:65:8E Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: 0131 Signing time: Mon 19 Oct 2026 06:21:02 +0000 Manifest this update: Mon 19 Oct 2026 06:21:02 +0000 Manifest next update: Mon 26 Oct 2026 06:21:02 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: /r8/V8yw88xI9WnKOwGL6OGBFg+M7HF/QZeEAZxncJk=) 2: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=) 4: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Oct 19 06:21:02 2026 GMT Not After : Oct 26 06:21:02 2026 GMT Subject: CN=6ad5b6ce-94bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:6f:3e:49:88:88:0f:b8:fc:f7:0e:c1:7c: 80:93:a7:bb:d5:48:a7:3e:3d:b9:4a:df:ac:e8:e4: 2a:9c:4b:04:98:f6:2d:75:95:f3:12:aa:0d:8e:47: 43:7a:72:a9:54:88:9c:a9:1d:94:21:dd:b7:47:bf: 0f:82:95:1d:2b:4c:21:29:9e:8d:dc:60:5b:90:3f: 46:98:a6:47:db:34:d9:b9:e4:52:76:93:9e:25:be: fc:ca:02:32:a3:58:e1:e2:fc:26:dc:dc:d6:35:2e: 0d:64:3a:cc:dc:77:a7:f0:5b:a6:da:1d:6b:b4:cf: 93:aa:c1:7e:06:09:1f:e1:83:d2:58:9a:0e:e8:df: e2:f2:5b:c2:2b:e4:27:63:f8:80:d6:57:0e:43:7e: 72:fa:25:d4:76:19:fa:6a:79:1b:98:2c:a1:d4:f7: e1:b2:ff:7e:4e:7a:93:c9:b0:7b:3d:1c:97:c1:50: 77:fe:94:39:73:50:ae:a8:1d:94:4c:b1:cf:2c:6d: 56:e1:b6:2a:fb:67:fd:eb:26:8a:96:56:8b:6e:b9: 80:cd:13:c0:01:0a:ba:46:e9:1d:a2:25:a8:f5:6e: 95:14:3c:e5:11:59:22:a6:23:d1:0e:2e:33:5f:8e: 5a:1f:97:7a:2e:6d:46:36:da:66:59:1c:b0:d8:3b: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:71:ED:9F:0C:B6:A5:87:F0:29:E7:3F:E8:4D:6D:A6:D8:D3:65:8E X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d7:fe:27:89:34:46:ac:bf:f0:4f:20:ad:14:2e:08:2a:13: ca:e0:1b:bc:99:ac:69:e3:1b:6d:b8:e3:cd:ee:0f:91:93:4d: f6:55:c1:78:57:4e:03:7a:88:b4:7d:59:c9:e9:04:57:8a:5f: e8:91:31:64:16:a9:83:19:86:9f:ef:3f:a6:59:68:92:38:26: 5f:19:7c:20:5b:41:28:b3:e4:b4:ca:77:7a:82:7f:73:40:bb: 86:ff:01:c1:75:36:ac:03:7f:77:77:15:a1:f9:93:e1:3f:30: d2:3f:15:49:17:a1:64:b9:55:5c:4c:11:55:74:46:6a:50:03: 0e:fe:43:b2:3d:8b:a4:16:f4:30:95:20:0e:6b:90:ef:c3:93: 5b:ae:7c:e2:d5:d1:09:b1:e9:8f:1f:f6:c3:b0:ed:b6:26:84: 04:3e:9a:87:d2:27:ea:8c:ec:46:8b:de:c9:69:0a:ca:b7:ed: 04:14:f9:e1:e2:85:fe:c7:ee:d7:4d:f3:0e:19:85:e3:cc:70: 9f:da:23:fe:3d:ed:d7:ff:58:40:58:ba:81:2f:46:e8:b7:1f: f4:b5:3b:fe:fb:09:3b:4e:70:2e:61:39:f0:0c:5c:fc:c7:2a: 46:b6:7c:96:41:20:f9:9e:cd:bd:ed:3c:4a:e0:ee:ef:9a:36: d0:ab:79:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjYxMDE5MDYyMTAyWhcNMjYxMDI2MDYyMTAyWjAYMRYwFAYD VQQDEw02YWQ1YjZjZS05NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjNtvPkmIiA+4/PcOwXyAk6e71UinPj25St+s6OQqnEsEmPYtdZXzEqoNjkdD enKpVIicqR2UId23R78PgpUdK0whKZ6N3GBbkD9GmKZH2zTZueRSdpOeJb78ygIy o1jh4vwm3NzWNS4NZDrM3Hen8Fum2h1rtM+TqsF+Bgkf4YPSWJoO6N/i8lvCK+Qn Y/iA1lcOQ35y+iXUdhn6ankbmCyh1Pfhsv9+TnqTybB7PRyXwVB3/pQ5c1CuqB2U TLHPLG1W4bYq+2f96yaKllaLbrmAzRPAAQq6RukdoiWo9W6VFDzlEVkipiPRDi4z X45aH5d6Lm1GNtpmWRyw2DsNFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRx7Z8M tqWH8CnnP+hNbabY02WOMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9f+J4k0Rqy/8E8grRQuCCoTyuAbvJmsaeMbbbjjze4PkZNN9lXBeFdOA3qI tH1ZyekEV4pf6JExZBapgxmGn+8/pllokjgmXxl8IFtBKLPktMp3eoJ/c0C7hv8B wXU2rAN/d3cVofmT4T8w0j8VSRehZLlVXEwRVXRGalADDv5Dsj2LpBb0MJUgDmuQ 78OTW6584tXRCbHpjx/2w7DttiaEBD6ah9In6ozsRoveyWkKyrftBBT54eKF/sfu 103zDhmF48xwn9oj/j3t1/9YQFi6gS9G6Lcf9LU7/vsJO05wLmE58Axc/McqRrZ8 lkEg+Z7Nve08SuDu75o20Kt51Q== -----END CERTIFICATE-----Generated at Mon Oct 19 21:43:13 2026 by rpki-client