$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft File: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json) Hash identifier: UZk9KjIqEif1waCnfzB7nluQ7Sq7UuejRx3DGylUR80= Subject key identifier: 74:AF:64:5A:E9:FD:90:4C:D5:3B:20:C3:C2:09:C7:90:27:93:26:81 Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F Certificate issuer: /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft Manifest number: 5A Signing time: Tue 27 Oct 2026 08:29:26 +0000 Manifest this update: Tue 27 Oct 2026 08:29:26 +0000 Manifest next update: Tue 03 Nov 2026 08:29:26 +0000 Files and hashes: 1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: o7CZfhYO/5TNCF2+cLADLAdkiaw43RJXJMhrM1Q88m4=) 2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: lhGjTh8GIM3KbvxNCTcxjCnPO4S+tAUX/Zv2Xlq7F68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Validity Not Before: Oct 27 08:29:26 2026 GMT Not After : Nov 3 08:29:26 2026 GMT Subject: CN=6ae060e6-63a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:29:0f:3f:ed:49:81:1e:72:7c:22:61:bc: b9:1f:94:22:b4:bb:e7:9e:5e:49:95:e5:ef:74:ca: 94:8b:96:a7:e7:ce:08:d2:aa:c6:ef:91:3d:82:8c: f2:99:a1:30:d8:e5:c6:fb:36:e5:07:6d:e4:a1:31: 31:9b:ee:0e:c2:6b:6b:a0:65:97:92:0c:34:bf:3a: 9f:30:06:c3:ff:e3:ea:27:5d:9b:78:03:f1:fc:96: 4d:7d:52:b5:c7:d8:8e:9f:2b:b4:90:9e:a9:6e:08: f4:0d:80:cb:7a:2c:a0:89:0d:00:26:36:61:54:7c: e9:47:88:4f:0e:56:72:ca:d6:55:aa:e3:bd:54:1f: a1:a9:09:27:45:5b:6e:08:80:9d:ae:49:ea:d3:23: 21:8a:64:77:65:99:6c:f9:16:7b:6e:38:6c:6c:77: c6:c3:c6:71:34:4e:7e:32:ab:19:d7:e7:05:56:ad: 77:98:7c:6f:a1:18:4c:2a:e9:14:59:9f:b1:b1:b1: 99:a7:86:4d:e6:2b:3f:75:4d:3e:5d:ca:71:f7:56: fb:ac:7c:38:7b:5f:17:3b:d0:58:c3:ad:e6:66:c9: 7b:45:6d:5f:8d:41:92:b9:1f:75:64:dd:5c:7d:dc: e8:a9:80:a3:49:15:43:6a:fe:73:57:28:70:a2:9a: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AF:64:5A:E9:FD:90:4C:D5:3B:20:C3:C2:09:C7:90:27:93:26:81 X509v3 Authority Key Identifier: keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ff:b6:c3:38:11:6e:92:78:7c:f7:f1:53:30:62:c2:6c:13: 95:4a:94:fa:c8:10:00:cf:51:50:56:ee:59:4d:57:4e:83:f3: 36:20:28:5a:ac:56:a9:d1:30:43:05:46:eb:6e:51:8c:0e:96: c1:3b:f8:44:3d:c0:61:15:d5:5d:7b:77:69:ef:c9:87:33:14: a4:c4:7b:99:6b:c9:03:9a:15:13:09:21:ab:a5:ed:b3:9a:57: c2:6f:1e:ef:52:1e:41:12:b0:a1:97:df:cc:5c:ab:b6:ae:a0: 77:35:8b:31:60:2e:3d:d5:c5:90:f1:44:35:13:28:be:89:cc: 8c:60:e0:45:a0:e6:22:7f:fc:4c:5a:12:f1:5a:6f:ed:af:ed: ab:0f:b3:32:8d:50:68:73:c2:a0:12:9b:ac:ec:e4:a7:45:21: 32:0b:63:fb:af:a6:8a:50:27:f5:e5:ab:ba:63:8e:ed:de:b4: 3b:2a:42:b7:e2:66:9c:04:0e:4f:ff:f3:78:f7:55:1d:b2:35: 93:6e:eb:19:f1:6b:60:05:40:fb:21:8d:2e:77:47:0f:27:04: 73:ea:c7:a9:b0:fe:c8:7b:12:12:14:f5:d9:1c:de:43:d5:bc: c2:f8:84:5d:ae:11:fe:f7:39:ab:f5:a9:83:11:0d:55:77:10: 74:6d:5e:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx Qzk4RTY4RjAeFw0yNjEwMjcwODI5MjZaFw0yNjExMDMwODI5MjZaMBgxFjAUBgNV BAMTDTZhZTA2MGU2LTYzYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeGykPP+1JgR5yfCJhvLkflCK0u+eeXkmV5e90ypSLlqfnzgjSqsbvkT2CjPKZ oTDY5cb7NuUHbeShMTGb7g7Ca2ugZZeSDDS/Op8wBsP/4+onXZt4A/H8lk19UrXH 2I6fK7SQnqluCPQNgMt6LKCJDQAmNmFUfOlHiE8OVnLK1lWq471UH6GpCSdFW24I gJ2uSerTIyGKZHdlmWz5FntuOGxsd8bDxnE0Tn4yqxnX5wVWrXeYfG+hGEwq6RRZ n7GxsZmnhk3mKz91TT5dynH3VvusfDh7Xxc70FjDreZmyXtFbV+NQZK5H3Vk3Vx9 3OipgKNJFUNq/nNXKHCimpYjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdK9kWun9 kEzVOyDDwgnHkCeTJoEwHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDH/7bDOBFuknh89/FTMGLCbBOVSpT6yBAAz1FQVu5ZTVdOg/M2ICharFap0TBD BUbrblGMDpbBO/hEPcBhFdVde3dp78mHMxSkxHuZa8kDmhUTCSGrpe2zmlfCbx7v Uh5BErChl9/MXKu2rqB3NYsxYC491cWQ8UQ1Eyi+icyMYOBFoOYif/xMWhLxWm/t r+2rD7MyjVBoc8KgEpus7OSnRSEyC2P7r6aKUCf15au6Y47t3rQ7KkK34macBA5P //N491UdsjWTbusZ8WtgBUD7IY0ud0cPJwRz6sepsP7IexISFPXZHN5D1bzC+IRd rhH+9zmr9amDEQ1VdxB0bV7I -----END CERTIFICATE-----Generated at Tue Oct 27 18:35:17 2026 by rpki-client