$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: 1Df44I3taLmnuqielX5ZD6x4RB2mPDhu2YTaehYNg8c= Subject key identifier: E4:CD:2A:1A:B9:F3:8A:04:64:27:52:24:EB:7F:CC:8E:DC:9A:AD:C9 Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B6D Signing time: Thu 22 Oct 2026 19:21:31 +0000 Manifest this update: Thu 22 Oct 2026 19:21:30 +0000 Manifest next update: Thu 29 Oct 2026 19:21:30 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: UGzmSM2ycCdfqQG7zZjZfZE9BdzNQ8ZqPHXLxGMff5E=) 2: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) 3: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) 4: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 19:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Oct 22 19:21:30 2026 GMT Not After : Oct 29 19:21:30 2026 GMT Subject: CN=6ada623b-c8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:11:9a:b1:84:0a:49:db:62:89:a5:0d:f4:54: ea:71:f1:fa:7a:19:d3:84:b6:17:3c:76:3e:0e:37: 40:38:1a:17:99:37:55:11:b4:2f:34:f1:a6:d6:39: 28:7c:be:f6:8a:82:89:34:65:80:41:b8:7e:ee:83: 64:33:e3:aa:a2:59:ca:67:2e:ae:9b:3d:74:7b:d0: 2b:0b:6d:3c:ce:15:2c:09:71:48:1d:23:cc:8e:6a: 98:0c:35:ad:24:57:5a:33:78:93:ba:fb:7c:38:4e: b9:88:fb:d0:99:c4:b2:9d:ae:02:d6:a4:4e:7e:4c: da:32:f9:8c:f4:c3:cc:69:70:08:cb:75:c0:3e:a7: f3:a8:b3:0a:b3:45:59:2a:48:33:4a:9d:e3:d9:30: 53:b4:bb:c8:7c:f4:87:c6:1d:2d:18:c6:9f:f6:a1: 3f:b1:67:d4:47:9b:85:2f:c0:ca:42:3e:29:79:ca: 51:cf:11:bf:53:ad:11:c2:7d:b4:b0:9d:5c:6d:0b: 72:98:32:33:55:99:6f:6f:fc:8c:f8:2b:4a:ed:cd: aa:1d:83:f0:fc:ae:fa:df:67:12:8c:6f:99:d5:48: 2f:ec:cc:ca:eb:81:35:9b:2f:de:96:91:48:c6:01: bd:2e:77:81:b5:02:bd:4b:91:f4:24:ee:83:ba:75: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CD:2A:1A:B9:F3:8A:04:64:27:52:24:EB:7F:CC:8E:DC:9A:AD:C9 X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:76:bc:dc:e7:29:a8:83:c1:b6:f0:52:ac:e9:db:3d:32:90: 01:22:46:1f:54:3e:cf:b0:3f:dd:0a:cc:96:64:45:f6:12:3d: 53:90:ac:ff:e4:01:37:b0:df:92:34:43:a1:32:1e:d0:6f:02: 73:1a:88:3f:99:e1:2e:dd:f9:34:77:1e:bd:4c:1d:23:42:d2: 8e:7a:40:2d:2d:6f:11:32:04:fc:58:4f:a3:59:70:bd:30:ad: e5:55:ef:13:28:dc:1f:8a:20:08:6b:3e:79:d8:24:d0:99:3b: 3f:a7:f2:82:69:0e:f6:16:93:6f:2c:69:dd:4e:4b:42:c4:4d: cc:45:a9:08:20:8e:01:77:02:f6:3a:42:08:da:c8:be:68:07: c9:49:3c:57:0b:31:a9:39:7d:7a:d8:ce:98:70:07:d6:67:0d: d4:0e:ce:76:b0:06:e0:a2:e5:70:f5:86:de:00:1e:f5:e4:52: 90:18:1e:4f:17:ce:92:3b:34:c0:67:ba:47:fd:58:6f:3d:9d: 7d:f5:7c:c0:81:c5:b7:5f:e1:3e:7a:c8:f1:d1:1a:a7:56:af: 26:80:d9:4a:b7:a3:f5:84:22:06:f3:d9:7b:84:bd:77:37:c2: ea:6d:d0:f0:b6:ab:ed:9c:97:8f:8c:36:0b:89:dc:0c:7b:7f: d8:d9:48:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYxMDIyMTkyMTMwWhcNMjYxMDI5MTkyMTMwWjAYMRYwFAYD VQQDEw02YWRhNjIzYi1jOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RGasYQKSdtiiaUN9FTqcfH6ehnThLYXPHY+DjdAOBoXmTdVEbQvNPGm1jko fL72ioKJNGWAQbh+7oNkM+OqolnKZy6umz10e9ArC208zhUsCXFIHSPMjmqYDDWt JFdaM3iTuvt8OE65iPvQmcSyna4C1qROfkzaMvmM9MPMaXAIy3XAPqfzqLMKs0VZ KkgzSp3j2TBTtLvIfPSHxh0tGMaf9qE/sWfUR5uFL8DKQj4pecpRzxG/U60Rwn20 sJ1cbQtymDIzVZlvb/yM+CtK7c2qHYPw/K7632cSjG+Z1Ugv7MzK64E1my/elpFI xgG9LneBtQK9S5H0JO6DunVSewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTNKhq5 84oEZCdSJOt/zI7cmq3JMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHa83OcpqIPBtvBSrOnbPTKQASJGH1Q+z7A/3QrMlmRF9hI9U5Cs/+QBN7Df kjRDoTIe0G8CcxqIP5nhLt35NHcevUwdI0LSjnpALS1vETIE/FhPo1lwvTCt5VXv EyjcH4ogCGs+edgk0Jk7P6fygmkO9haTbyxp3U5LQsRNzEWpCCCOAXcC9jpCCNrI vmgHyUk8VwsxqTl9etjOmHAH1mcN1A7OdrAG4KLlcPWG3gAe9eRSkBgeTxfOkjs0 wGe6R/1Ybz2dffV8wIHFt1/hPnrI8dEap1avJoDZSrej9YQiBvPZe4S9dzfC6m3Q 8Lar7ZyXj4w2C4ncDHt/2NlIlw== -----END CERTIFICATE-----Generated at Sat Oct 24 09:53:14 2026 by rpki-client