$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: 15Fx1Z/8QdUS5AFp7SyfMGcpL1ybW07q0+SewqBhSmY= Subject key identifier: 3C:FF:93:89:94:F7:9D:FE:79:4D:F1:CB:F1:AD:E6:52:6B:4D:11:98 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 220C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 21FC Signing time: Fri 02 Oct 2026 15:59:38 +0000 Manifest this update: Fri 02 Oct 2026 15:59:37 +0000 Manifest next update: Fri 09 Oct 2026 15:59:37 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: 4as8DS1fFeKkEKAPnwoEla5Ci6UECBX8qQr5j/N5lq8=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=) 3: kTUWxCZUTqfdmKZJOr848XkO4R0.asa (hash: HVnESxCuLk1+9MJ5dl30y1AKIa30snRqP2BPRnaEJvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8716 (0x220c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Oct 2 15:59:37 2026 GMT Not After : Oct 9 15:59:37 2026 GMT Subject: CN=6abfd4e9-9b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:22:f1:8f:ca:4b:b8:a6:15:35:55:b6:df: 0d:c8:02:a6:76:6a:19:40:0c:55:ae:35:de:f3:6d: 72:f4:36:e8:d5:09:7a:a5:50:32:38:68:52:71:34: a1:ba:56:b1:f0:e5:61:5e:73:89:bc:09:23:38:93: af:46:71:b6:9d:3c:d3:57:47:2d:7e:9a:b7:a4:66: 1e:92:9a:58:23:9b:0c:c3:da:60:45:7c:61:12:25: 30:d0:b0:29:15:8f:c7:21:96:fd:39:7a:ef:c4:4b: 46:19:7c:f0:13:5d:91:ef:b2:86:7c:70:8a:21:db: e9:e2:18:5a:41:2e:e5:7d:3e:3e:18:8d:82:8d:05: c9:cc:d8:82:48:96:eb:b5:5f:d2:c9:eb:ef:c2:1f: 97:85:62:5f:eb:c2:db:d0:f0:a0:fc:80:a9:bb:75: e1:8e:bd:fa:2b:fc:76:bb:3b:2a:5c:84:b9:0f:5a: 22:68:93:86:0c:5d:89:45:ec:ac:40:ea:2b:cd:1e: 7f:2d:a5:02:54:c2:46:95:70:f6:45:97:ba:47:fb: e4:35:d9:f9:cb:bf:f8:69:0b:df:60:a2:48:e2:66: 42:dc:7c:6f:1c:2b:31:64:56:9d:ae:99:ba:8e:bc: a1:46:54:ee:db:5e:3d:55:28:42:70:6f:3b:b3:f0: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FF:93:89:94:F7:9D:FE:79:4D:F1:CB:F1:AD:E6:52:6B:4D:11:98 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b8:3e:86:f3:80:61:bc:9b:aa:26:ad:63:fb:8b:7a:ed:4a: 8b:cd:8f:bd:67:87:95:53:0e:54:61:ba:6e:9e:23:f2:ee:0b: ef:2e:ca:37:3f:fe:c1:d5:ce:94:b8:a6:eb:46:e6:72:c9:fd: 82:46:9c:87:6d:a4:71:35:1e:3d:e9:01:98:49:d5:96:d1:56: 3e:d8:18:44:ea:ae:2d:8c:58:d0:2e:fa:ee:7e:3e:1a:6c:a8: 8b:80:f2:be:56:c7:ea:c7:5f:26:fa:62:0d:fb:42:ae:54:ef: ac:26:43:f7:5f:f2:c6:9c:b4:ec:64:ad:69:b8:f6:8c:c7:4b: 6f:72:b0:3a:7b:27:fa:fd:10:8a:dd:8c:6a:18:3a:03:5b:19: db:64:c3:b0:4a:4e:4c:19:b4:b7:6b:8d:b3:93:d0:d6:1f:05: 69:6f:1d:70:1d:85:5e:f8:13:23:71:ce:08:0c:a0:b7:e5:bf: 26:55:1f:0b:19:bf:3a:e3:83:f1:35:05:d5:01:11:27:72:c3: ca:ef:14:71:20:52:41:f8:f2:8c:29:20:c5:d1:06:1b:41:bc: 7c:1e:6b:d3:2d:19:f4:3a:70:b5:d5:ef:97:e5:47:f0:d5:f3: 63:f1:d3:7c:7a:61:33:21:e3:0f:69:42:3e:c1:31:19:90:36: ce:0e:52:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjYxMDAyMTU1OTM3WhcNMjYxMDA5MTU1OTM3WjAYMRYwFAYD VQQDEw02YWJmZDRlOS05YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5Ui8Y/KS7imFTVVtt8NyAKmdmoZQAxVrjXe821y9Dbo1Ql6pVAyOGhScTSh ulax8OVhXnOJvAkjOJOvRnG2nTzTV0ctfpq3pGYekppYI5sMw9pgRXxhEiUw0LAp FY/HIZb9OXrvxEtGGXzwE12R77KGfHCKIdvp4hhaQS7lfT4+GI2CjQXJzNiCSJbr tV/Syevvwh+XhWJf68Lb0PCg/ICpu3Xhjr36K/x2uzsqXIS5D1oiaJOGDF2JReys QOorzR5/LaUCVMJGlXD2RZe6R/vkNdn5y7/4aQvfYKJI4mZC3HxvHCsxZFadrpm6 jryhRlTu2149VShCcG87s/Dt4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDz/k4mU 953+eU3xy/Gt5lJrTRGYMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApLg+hvOAYbybqiatY/uLeu1Ki82PvWeHlVMOVGG6bp4j8u4L7y7KNz/+wdXO lLim60bmcsn9gkach22kcTUePekBmEnVltFWPtgYROquLYxY0C767n4+Gmyoi4Dy vlbH6sdfJvpiDftCrlTvrCZD91/yxpy07GStabj2jMdLb3KwOnsn+v0Qit2Mahg6 A1sZ22TDsEpOTBm0t2uNs5PQ1h8FaW8dcB2FXvgTI3HOCAygt+W/JlUfCxm/OuOD 8TUF1QERJ3LDyu8UcSBSQfjyjCkgxdEGG0G8fB5r0y0Z9DpwtdXvl+VH8NXzY/HT fHphMyHjD2lCPsExGZA2zg5SUw== -----END CERTIFICATE-----Generated at Sun Oct 4 18:42:16 2026 by rpki-client