$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: YXmPuKDAafps+RnWaVUvOQ4mmLd1kb7mf02yyivzQ48= Subject key identifier: 8E:9E:81:DF:21:92:DC:B0:F4:C5:20:C4:35:28:D5:02:1F:6A:32:B9 Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 0386 Signing time: Thu 03 Sep 2026 00:43:27 +0000 Manifest this update: Thu 03 Sep 2026 00:43:27 +0000 Manifest next update: Thu 10 Sep 2026 00:43:27 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: xiU/LGfVb9gwG8vM5/S2MeVlz+Kzv1ESuzOhb7E6B54=) 2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=) 3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 00:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: Sep 3 00:43:27 2026 GMT Not After : Sep 10 00:43:27 2026 GMT Subject: CN=6a98c2af-74bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:32:e6:a6:a0:32:17:ad:d1:39:27:c5:08:13: cd:2f:87:92:8a:65:fe:aa:b1:6a:71:70:ca:7d:71: 13:7d:75:ac:27:aa:ee:0e:5b:22:aa:04:82:0b:0e: 3f:bd:c1:36:a9:c3:6f:60:00:d4:eb:b5:30:60:ea: c3:4c:e1:8a:f7:75:98:dd:dd:20:3b:ec:f2:22:42: f5:2a:3e:d3:a0:bd:c2:d3:cd:33:46:26:ab:66:91: 77:0e:e6:79:2b:56:f6:5c:75:8e:9e:35:de:cb:b3: 3e:db:ef:60:8e:d9:b8:a0:9f:e2:c4:47:a6:9b:b7: 27:e5:fa:f8:f8:8c:4c:48:27:a2:45:3c:ad:97:b0: 97:f5:3a:a0:0a:ad:78:aa:fa:12:95:ac:d0:b6:f7: 51:5a:b0:54:9d:a3:c4:68:82:0d:a8:35:ca:95:10: 50:f5:32:3e:f3:72:07:d0:6e:42:53:a8:da:21:48: 55:57:93:6e:d8:6b:01:9a:8d:f4:6d:1b:5d:bd:39: ab:16:03:4c:a9:cc:92:f5:ba:91:19:ae:c4:4e:f2: 5e:ed:34:24:43:3c:4a:19:2f:78:73:1a:49:76:db: db:a7:bc:2f:7f:d9:35:ff:4b:33:58:7b:7f:7a:41: 4f:a9:7d:44:0d:c5:e2:98:fb:e2:00:40:88:3c:c0: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:81:DF:21:92:DC:B0:F4:C5:20:C4:35:28:D5:02:1F:6A:32:B9 X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:70:e6:41:e0:6a:64:c9:f3:30:02:f7:89:74:46:94:cd:a6: 8a:6e:3a:6b:d8:8c:e8:c1:ef:16:42:10:4b:30:4f:70:11:86: da:16:86:a9:79:45:63:b0:ea:b0:4b:a2:5a:6e:d9:e5:89:e4: 9d:21:6a:7f:02:ed:6c:db:24:d2:3c:d9:f0:52:79:44:c5:34: bd:46:05:67:3a:2f:4a:4f:06:c3:a1:68:9e:b9:29:8f:d2:ff: 98:01:56:1d:4f:4a:d6:e6:0a:cc:b3:5e:bc:8d:a8:d1:eb:55: 5f:6c:a1:86:5c:95:99:87:a4:16:72:4f:0f:a2:10:7c:92:3b: 11:f5:58:ec:4d:ad:ac:9d:b6:f1:e6:f8:8f:9b:df:aa:e7:08: c0:df:61:69:d4:89:a0:2d:1c:3d:0f:8e:a8:47:6d:0c:54:fa: 8f:d7:3b:39:3b:03:b1:48:8d:e6:bc:18:7a:b0:42:6f:30:e8: d5:a7:55:6e:60:0e:cc:35:b2:39:08:65:29:f6:ce:9e:5b:c5: 5c:3e:eb:16:4e:8b:0f:bc:fb:3c:83:f8:33:db:30:0e:3a:70: af:04:71:f5:b0:c3:39:61:d5:95:ad:ef:aa:97:1f:94:5a:ec: c8:be:7d:17:ac:c9:d4:6e:4a:f4:77:1a:70:74:67:f1:a1:13: 1d:eb:16:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjYwOTAzMDA0MzI3WhcNMjYwOTEwMDA0MzI3WjAYMRYwFAYD VQQDEw02YTk4YzJhZi03NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jLmpqAyF63ROSfFCBPNL4eSimX+qrFqcXDKfXETfXWsJ6ruDlsiqgSCCw4/ vcE2qcNvYADU67UwYOrDTOGK93WY3d0gO+zyIkL1Kj7ToL3C080zRiarZpF3DuZ5 K1b2XHWOnjXey7M+2+9gjtm4oJ/ixEemm7cn5fr4+IxMSCeiRTytl7CX9TqgCq14 qvoSlazQtvdRWrBUnaPEaIINqDXKlRBQ9TI+83IH0G5CU6jaIUhVV5Nu2GsBmo30 bRtdvTmrFgNMqcyS9bqRGa7ETvJe7TQkQzxKGS94cxpJdtvbp7wvf9k1/0szWHt/ ekFPqX1EDcXimPviAECIPMDOrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6egd8h ktyw9MUgxDUo1QIfajK5MB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaHDmQeBqZMnzMAL3iXRGlM2mim46a9iM6MHvFkIQSzBPcBGG2haGqXlFY7Dq sEuiWm7Z5YnknSFqfwLtbNsk0jzZ8FJ5RMU0vUYFZzovSk8Gw6Fonrkpj9L/mAFW HU9K1uYKzLNevI2o0etVX2yhhlyVmYekFnJPD6IQfJI7EfVY7E2trJ228eb4j5vf qucIwN9hadSJoC0cPQ+OqEdtDFT6j9c7OTsDsUiN5rwYerBCbzDo1adVbmAOzDWy OQhlKfbOnlvFXD7rFk6LD7z7PIP4M9swDjpwrwRx9bDDOWHVla3vqpcflFrsyL59 F6zJ1G5K9HcacHRn8aETHesWdQ== -----END CERTIFICATE-----Generated at Sat Sep 5 02:42:20 2026 by rpki-client