$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: 8ku5uLt3NHdAWoFvPSq+L4xmjwLeGlID3DgQxLs3S7c= Subject key identifier: 01:BC:BF:FB:6C:CE:6E:B4:5C:B7:AE:74:45:D5:E0:8F:B5:FC:8C:AA Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 0387 Signing time: Sat 05 Sep 2026 00:28:37 +0000 Manifest this update: Sat 05 Sep 2026 00:28:37 +0000 Manifest next update: Sat 12 Sep 2026 00:28:37 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: KgHCr5VXVVRUF+P7lZZgHqBCfN/++5dLP/BPbDYl1D8=) 2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=) 3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: Sep 5 00:28:37 2026 GMT Not After : Sep 12 00:28:37 2026 GMT Subject: CN=6a9b6235-9ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:21:6d:b3:9d:8d:09:f4:58:ee:87:17:2a: 92:cb:00:0a:d0:eb:9d:13:19:44:db:fd:ac:d6:8f: e5:ae:e3:72:95:c1:7e:fd:34:31:d6:51:31:29:d9: fa:8b:38:19:04:c1:32:77:3b:bb:4c:0c:6e:ec:bc: c7:60:cf:ba:e7:00:22:24:59:e3:bb:23:a2:86:56: c0:34:64:c8:78:ab:cf:01:de:f4:21:79:9c:47:45: f1:0d:33:ab:4f:42:98:d3:97:25:c9:0e:86:b7:47: a4:d1:be:92:d1:07:56:42:62:ab:bf:75:f8:d6:5e: 4b:9d:9f:2d:1f:e8:85:74:a6:94:72:07:c3:e4:7c: ef:7e:b7:07:19:13:8b:a1:81:ff:4f:41:83:e1:64: 4a:b0:13:bf:df:9b:a5:be:06:f5:f2:50:79:d5:df: ea:15:19:ff:ac:5f:4b:88:8b:1b:06:7f:55:01:cd: 1d:a3:e8:7e:bb:2d:e4:39:fd:35:61:92:af:b7:e0: aa:73:46:1b:df:be:43:5c:4c:31:a0:58:55:b3:d9: 21:00:a6:e1:8a:49:ca:4f:f2:f9:8c:21:c6:b6:6a: a3:0d:23:1a:3c:f7:0c:1c:5b:c8:56:4f:d7:5f:f5: b9:40:61:ad:2c:ac:91:3a:16:29:51:a8:77:7a:b9: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:BF:FB:6C:CE:6E:B4:5C:B7:AE:74:45:D5:E0:8F:B5:FC:8C:AA X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:df:c1:48:5f:ed:eb:02:1a:07:40:df:a6:63:c4:2d:97:aa: d6:27:a4:0f:bf:70:ad:e7:ef:29:be:bc:57:16:8e:3e:1b:ac: a9:3b:5f:c1:b7:60:b4:eb:db:be:f5:d5:8c:16:87:8c:f9:aa: 9e:4a:70:c0:cc:1a:30:dd:f3:f7:d8:0e:4a:75:b3:b8:5a:65: 15:31:c9:81:f4:1f:8d:4a:02:d0:5e:c9:0b:cd:96:94:b3:f0: c8:8b:a5:6f:75:40:64:3f:02:b8:ac:93:23:c0:83:71:ec:6e: ab:91:88:17:44:35:5b:5a:c5:f5:87:b4:34:05:b5:69:46:93: d8:2a:d3:30:98:da:02:b8:6d:a4:59:6b:f4:00:94:e2:d4:3a: ee:e9:fa:47:5a:8b:67:97:68:cb:d0:09:b5:10:ac:c9:2b:a6: 03:96:8c:e8:3b:21:16:3f:ac:2a:fb:45:bc:9a:df:94:b7:35: ab:aa:67:0a:c7:4a:74:d7:dd:1a:c2:02:55:d2:8a:a8:b2:b2: 05:85:1d:3f:5c:7e:ef:e2:94:a2:59:ab:aa:be:8b:4d:1c:09: 4c:2f:44:f0:30:a7:c7:ff:9e:ff:99:b7:b0:3c:a5:f6:21:45: 69:a3:7f:51:4e:45:65:ad:aa:77:a4:f4:33:ee:a0:bd:d9:7a: ef:ca:90:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjYwOTA1MDAyODM3WhcNMjYwOTEyMDAyODM3WjAYMRYwFAYD VQQDEw02YTliNjIzNS05YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yAhbbOdjQn0WO6HFyqSywAK0OudExlE2/2s1o/lruNylcF+/TQx1lExKdn6 izgZBMEydzu7TAxu7LzHYM+65wAiJFnjuyOihlbANGTIeKvPAd70IXmcR0XxDTOr T0KY05clyQ6Gt0ek0b6S0QdWQmKrv3X41l5LnZ8tH+iFdKaUcgfD5HzvfrcHGROL oYH/T0GD4WRKsBO/35ulvgb18lB51d/qFRn/rF9LiIsbBn9VAc0do+h+uy3kOf01 YZKvt+Cqc0Yb375DXEwxoFhVs9khAKbhiknKT/L5jCHGtmqjDSMaPPcMHFvIVk/X X/W5QGGtLKyROhYpUah3ern5ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAG8v/ts zm60XLeudEXV4I+1/IyqMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMd/BSF/t6wIaB0DfpmPELZeq1iekD79wrefvKb68VxaOPhusqTtfwbdgtOvb vvXVjBaHjPmqnkpwwMwaMN3z99gOSnWzuFplFTHJgfQfjUoC0F7JC82WlLPwyIul b3VAZD8CuKyTI8CDcexuq5GIF0Q1W1rF9Ye0NAW1aUaT2CrTMJjaArhtpFlr9ACU 4tQ67un6R1qLZ5doy9AJtRCsySumA5aM6DshFj+sKvtFvJrflLc1q6pnCsdKdNfd GsICVdKKqLKyBYUdP1x+7+KUolmrqr6LTRwJTC9E8DCnx/+e/5m3sDyl9iFFaaN/ UU5FZa2qd6T0M+6gvdl678qQow== -----END CERTIFICATE-----Generated at Sat Sep 5 03:18:47 2026 by rpki-client