$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft File: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json) Hash identifier: 4HzO+sLUzPaxMruaxC0bjiL3ZogwLvd+c28+tcwBKAA= Subject key identifier: FB:C9:70:F3:C8:9D:91:63:9E:E5:C3:EC:36:F5:74:E9:02:DD:BB:02 Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F Certificate issuer: /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft Manifest number: 42 Signing time: Wed 09 Sep 2026 08:54:57 +0000 Manifest this update: Wed 09 Sep 2026 08:54:56 +0000 Manifest next update: Wed 16 Sep 2026 08:54:56 +0000 Files and hashes: 1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: iLYKZJAmH4S41mo7FUky+vItz573F+IeKcBpOW6TGJk=) 2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: lhGjTh8GIM3KbvxNCTcxjCnPO4S+tAUX/Zv2Xlq7F68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 08:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Validity Not Before: Sep 9 08:54:56 2026 GMT Not After : Sep 16 08:54:56 2026 GMT Subject: CN=6aa11ee0-96ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:36:9a:ae:c4:5a:07:ba:8d:6e:92:e6:86: ec:1e:a2:7d:2d:c0:43:95:d5:d5:10:3d:79:33:1d: 47:1f:55:c5:55:ad:8e:9c:ea:3d:ff:7e:a4:a2:ca: af:c7:ab:69:00:c8:e6:b5:b6:23:2a:6e:4a:75:21: f0:ef:29:5b:9c:a4:3a:98:c8:57:9b:00:0f:dc:9a: 89:8c:d4:e2:78:f8:f8:22:93:5a:18:b0:b7:ff:c6: af:13:94:0b:64:44:3e:30:73:cd:41:25:85:fe:54: c7:8b:c4:39:23:21:c1:d1:0f:23:36:81:cc:6d:eb: d8:7a:6a:b6:a5:84:d9:ad:d6:9f:43:10:b7:14:dc: 69:85:55:31:a2:9c:5b:be:9a:31:50:82:2b:bf:a8: 8a:11:54:7a:1d:68:9c:c1:a5:ee:dd:ea:7f:eb:b2: c9:6f:12:a8:30:9c:7d:8b:07:59:61:63:e9:bb:74: 2c:27:a7:e5:0f:8f:8c:48:03:f0:3b:b2:81:a3:81: 52:91:fc:ad:59:4c:70:f8:a1:e0:92:33:04:fd:4c: c8:23:04:a6:4f:9f:d2:04:b6:ca:c6:01:54:2f:d6: 86:da:5c:15:a6:08:02:fd:8b:26:de:4a:94:ce:3d: 01:44:86:fa:73:df:ea:ad:1f:ad:d2:75:9b:12:76: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C9:70:F3:C8:9D:91:63:9E:E5:C3:EC:36:F5:74:E9:02:DD:BB:02 X509v3 Authority Key Identifier: keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f3:5e:8d:98:fe:75:2a:8a:02:b4:73:fc:66:5c:06:49:3f: 7f:da:27:fa:ab:2c:a8:67:26:4a:13:09:fd:1b:07:da:fd:02: 2c:30:fe:95:88:da:e2:0a:54:d2:1d:ad:04:ac:25:68:a8:0d: cc:d0:f9:ac:6a:e3:aa:62:fa:2f:24:ef:84:ae:9f:8d:7c:77: 70:f4:a9:d0:ab:b9:2a:e9:c0:69:4a:58:2a:f0:36:35:b9:81: d2:22:cc:ec:fc:06:b0:86:a7:5c:a3:ff:6c:89:09:ef:c3:a2: e5:f9:9b:c6:ff:51:e2:45:40:12:d5:12:38:b7:9e:c5:ce:e0: f2:01:2c:c9:fa:ea:8e:aa:5f:af:4b:ad:27:13:6a:78:2f:b2: 81:d0:38:02:3f:9b:bd:c0:e7:ce:be:13:75:d3:3a:ee:91:44: f9:15:19:c2:43:9b:f8:72:55:3c:9c:d5:2a:aa:2a:30:30:50: 5c:91:99:0b:28:4b:8f:6f:14:3f:65:56:33:22:76:76:5f:6f: d0:e7:d2:93:50:57:a2:01:0e:52:6c:6e:bc:86:76:7a:a9:c4: e8:04:39:3d:81:84:c0:44:45:0f:3c:1b:31:84:5e:c5:99:bf: af:10:f0:da:a3:da:7c:ad:30:47:86:47:8b:33:58:8f:66:cc: da:bf:3f:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx Qzk4RTY4RjAeFw0yNjA5MDkwODU0NTZaFw0yNjA5MTYwODU0NTZaMBgxFjAUBgNV BAMTDTZhYTExZWUwLTk2ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+8DaarsRaB7qNbpLmhuweon0twEOV1dUQPXkzHUcfVcVVrY6c6j3/fqSiyq/H q2kAyOa1tiMqbkp1IfDvKVucpDqYyFebAA/cmomM1OJ4+Pgik1oYsLf/xq8TlAtk RD4wc81BJYX+VMeLxDkjIcHRDyM2gcxt69h6aralhNmt1p9DELcU3GmFVTGinFu+ mjFQgiu/qIoRVHodaJzBpe7d6n/rsslvEqgwnH2LB1lhY+m7dCwnp+UPj4xIA/A7 soGjgVKR/K1ZTHD4oeCSMwT9TMgjBKZPn9IEtsrGAVQv1obaXBWmCAL9iybeSpTO PQFEhvpz3+qtH63SdZsSdk89AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+8lw88id kWOe5cPsNvV06QLduwIwHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCt816NmP51KooCtHP8ZlwGST9/2if6qyyoZyZKEwn9Gwfa/QIsMP6ViNriClTS Ha0ErCVoqA3M0PmsauOqYvovJO+Erp+NfHdw9KnQq7kq6cBpSlgq8DY1uYHSIszs /Aawhqdco/9siQnvw6Ll+ZvG/1HiRUAS1RI4t57FzuDyASzJ+uqOql+vS60nE2p4 L7KB0DgCP5u9wOfOvhN10zrukUT5FRnCQ5v4clU8nNUqqiowMFBckZkLKEuPbxQ/ ZVYzInZ2X2/Q59KTUFeiAQ5SbG68hnZ6qcToBDk9gYTAREUPPBsxhF7Fmb+vEPDa o9p8rTBHhkeLM1iPZszavz94 -----END CERTIFICATE-----Generated at Fri Sep 11 01:19:47 2026 by rpki-client