$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: JF7aBwnbSQ4weo71FVjFYqa8Ci/NS76y1nWPSsP692o= Subject key identifier: 70:7C:78:23:92:F7:77:23:2C:05:DE:C5:17:E0:25:D9:07:41:37:6E Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 03A1 Signing time: Tue 27 Oct 2026 00:33:22 +0000 Manifest this update: Tue 27 Oct 2026 00:33:21 +0000 Manifest next update: Tue 03 Nov 2026 00:33:21 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: d+hqaoVgyo6WwAAvBSqqjzYBEfJzUEmEpWQmMUx/I8E=) 2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=) 3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 00:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: Oct 27 00:33:21 2026 GMT Not After : Nov 3 00:33:21 2026 GMT Subject: CN=6adff151-48ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:4d:6a:73:08:86:a2:9d:bb:9e:6a:3d:5d: 26:03:1a:83:ab:63:c2:1a:48:5e:8a:51:4f:13:b6: 19:83:a1:7f:e1:c8:48:02:c9:a9:31:4d:07:66:2b: 5e:5e:39:91:b1:fa:e2:3d:2c:19:dd:8a:33:98:21: c9:20:6c:b6:81:53:66:53:05:10:be:4a:92:40:e6: 86:ea:16:e6:9c:86:dd:84:27:42:ce:c5:d5:4c:71: f8:f7:d7:00:65:36:fc:9c:df:45:56:5e:8a:7f:7d: 41:62:7f:11:fe:b7:46:a4:56:c5:3b:a8:de:4c:82: 94:2e:56:6f:52:3a:6a:a9:2e:a7:0c:cb:d0:f0:46: 74:fa:26:c1:19:3b:d3:13:e3:a1:5b:21:51:42:bb: 18:15:32:d0:09:d7:d1:e1:28:ca:d7:46:b3:83:0c: 9b:5e:81:00:84:54:40:ec:56:23:23:7f:14:b4:ac: 79:cc:bd:82:60:93:56:e0:6a:58:59:77:41:9c:73: 16:d6:2f:23:05:ae:a8:1d:76:4a:eb:72:7c:14:3c: a8:b6:46:ef:5a:3d:54:53:78:16:3c:ae:91:f0:1a: b1:c3:b1:69:42:74:43:8e:c5:a9:8a:62:1c:64:cb: 77:6e:fb:df:2a:4d:ed:2c:22:c2:65:03:41:50:2f: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:78:23:92:F7:77:23:2C:05:DE:C5:17:E0:25:D9:07:41:37:6E X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0f:4d:d3:44:ae:4d:eb:7a:cf:51:da:19:0f:87:61:43:a3: 50:0a:56:e9:9b:64:32:ec:5d:ef:08:61:9d:7a:36:99:a5:57: d0:89:3c:83:ec:64:cf:dd:72:62:fd:f0:be:74:ac:45:25:cc: ab:90:91:84:bc:99:0a:1b:66:a0:d6:ad:bd:39:b5:e2:75:f8: 58:81:0b:3e:7c:2e:71:60:e0:ac:cd:97:ee:fa:46:fc:79:3d: 34:01:38:0e:f4:0e:42:3c:6e:4d:da:bb:ee:cf:76:9a:19:bb: fa:82:db:91:6b:82:0a:d5:f0:fa:f4:07:43:fb:ea:b0:8f:01: 06:9c:a9:5e:a5:bd:01:42:90:97:49:cf:78:df:a7:0d:d8:fc: e7:5c:0b:d5:a5:7d:fb:03:f0:88:13:bc:e1:9c:ba:b7:c3:5e: 35:53:32:6e:84:a4:fb:98:ab:0f:01:92:d5:d3:ea:7d:25:8b: 1b:1c:d2:e3:40:ac:30:e1:d6:64:09:6c:f2:1e:88:12:80:bb: a6:11:5f:93:1a:b7:06:77:ed:bc:70:8d:d5:d7:18:ce:60:40: da:a9:19:5b:7e:be:07:58:87:da:65:c3:f1:5b:87:b6:7b:1c: 14:5c:69:3c:37:73:fb:60:bf:07:d2:9c:a5:73:3c:7c:e8:90: 2f:6d:b6:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjYxMDI3MDAzMzIxWhcNMjYxMTAzMDAzMzIxWjAYMRYwFAYD VQQDEw02YWRmZjE1MS00OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnVNanMIhqKdu55qPV0mAxqDq2PCGkheilFPE7YZg6F/4chIAsmpMU0HZite XjmRsfriPSwZ3YozmCHJIGy2gVNmUwUQvkqSQOaG6hbmnIbdhCdCzsXVTHH499cA ZTb8nN9FVl6Kf31BYn8R/rdGpFbFO6jeTIKULlZvUjpqqS6nDMvQ8EZ0+ibBGTvT E+OhWyFRQrsYFTLQCdfR4SjK10azgwybXoEAhFRA7FYjI38UtKx5zL2CYJNW4GpY WXdBnHMW1i8jBa6oHXZK63J8FDyotkbvWj1UU3gWPK6R8Bqxw7FpQnRDjsWpimIc ZMt3bvvfKk3tLCLCZQNBUC9s6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHB8eCOS 93cjLAXexRfgJdkHQTduMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbA9N00SuTet6z1HaGQ+HYUOjUApW6ZtkMuxd7whhnXo2maVX0Ik8g+xkz91y Yv3wvnSsRSXMq5CRhLyZChtmoNatvTm14nX4WIELPnwucWDgrM2X7vpG/Hk9NAE4 DvQOQjxuTdq77s92mhm7+oLbkWuCCtXw+vQHQ/vqsI8BBpypXqW9AUKQl0nPeN+n Ddj851wL1aV9+wPwiBO84Zy6t8NeNVMyboSk+5irDwGS1dPqfSWLGxzS40CsMOHW ZAls8h6IEoC7phFfkxq3BnftvHCN1dcYzmBA2qkZW36+B1iH2mXD8VuHtnscFFxp PDdz+2C/B9KcpXM8fOiQL2226Q== -----END CERTIFICATE-----Generated at Tue Oct 27 22:39:51 2026 by rpki-client