$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: 7T7djqE90e8y+x2/G8rqXCwPe5fyIXntLqBp2mymDt4= Subject key identifier: 3F:02:0E:40:03:6E:4A:29:A2:2B:C3:8D:AE:C4:FD:43:CC:BF:5D:81 Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0D0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0D04 Signing time: Fri 28 Aug 2026 18:21:51 +0000 Manifest this update: Fri 28 Aug 2026 18:21:51 +0000 Manifest next update: Fri 04 Sep 2026 18:21:51 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: yCn+YbrNQZ1WVhrxH5Ti1ULCm41T5eEN+vjWHyEdn/c=) 2: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=) 3: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=) 4: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 18:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Aug 28 18:21:51 2026 GMT Not After : Sep 4 18:21:51 2026 GMT Subject: CN=6a91d1bf-a011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:fb:3c:47:0e:6e:7b:56:7b:a8:74:9a:ca: e1:10:05:08:34:04:e7:1e:64:c3:87:07:35:3a:5f: 7e:0a:c1:6b:3e:fd:ff:b9:d9:b3:fc:9b:b4:9f:d4: 1f:42:13:57:77:aa:64:10:4d:ad:01:64:e2:e9:88: 58:1b:d1:ae:fe:c4:64:e3:04:48:12:46:49:08:c4: cd:a2:28:d7:87:2f:88:80:4a:06:83:0a:f1:74:fc: 8f:82:03:7c:f0:8d:c7:c2:25:2a:d3:7a:be:af:42: 03:26:ab:a9:45:f5:af:4f:b8:dd:bc:4f:7f:d2:a9: 97:cd:9d:db:0c:cc:3e:13:4d:c2:c0:54:22:88:70: 08:1b:b1:49:aa:ce:ba:85:4a:37:50:c3:c5:32:69: 55:93:c1:8f:61:0d:6a:e6:02:b1:c7:a1:19:76:bc: 9d:ee:22:d5:18:4d:95:80:56:f6:83:1f:cd:7c:df: 73:de:2b:41:d2:57:9d:47:db:7e:4d:dd:37:31:44: 43:a5:27:c0:b7:49:a5:74:dc:5f:4b:8f:4c:90:69: 66:cc:ac:3e:19:1a:f5:3f:66:0c:6a:1f:5b:2b:ed: ce:b9:35:ae:42:82:ed:c9:91:1b:f5:ae:67:17:00: b1:d7:a5:7f:c9:61:84:e9:e3:d6:2b:9f:26:50:05: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:02:0E:40:03:6E:4A:29:A2:2B:C3:8D:AE:C4:FD:43:CC:BF:5D:81 X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a2:c2:ff:1f:ae:39:ed:71:23:31:9a:cc:ba:71:3a:2f:32: b3:a3:7f:e4:bd:62:53:e3:fb:3e:e3:e9:a8:fd:e2:ad:a1:d2: 03:4a:e6:30:eb:02:f5:9c:d1:04:d6:7e:b2:2b:87:93:ce:85: 42:26:f0:61:c9:12:39:be:4f:8c:25:c6:25:ef:ce:b6:01:1c: d8:f1:f5:5c:6b:3c:79:02:11:96:ca:ff:48:6a:49:18:9b:ff: a4:ea:b6:07:a1:63:49:7a:34:5f:2d:24:ba:83:3d:af:5c:a1: ff:f0:95:43:5f:5e:fa:bc:26:fa:09:aa:b7:a9:f7:3c:f0:b7: ca:14:c3:33:fa:76:6e:6b:a6:24:7b:ce:1c:14:39:79:c0:1c: e6:3d:0d:9f:b5:fe:73:3b:96:ca:18:a0:29:eb:36:a0:59:72: 44:da:cc:63:0c:5e:08:c4:85:b3:96:f4:65:7a:30:38:2f:ba: 72:2c:cc:94:11:98:ac:ea:5d:99:45:c5:fa:f8:40:d3:48:5e: f0:a2:c4:17:aa:64:f8:c7:58:2d:35:2a:69:d6:1b:ae:d4:ed: a5:22:14:6d:6b:e0:b4:10:e5:1f:76:f0:f0:81:bd:b4:e1:47: 78:2e:d0:93:8f:1c:c1:f5:2c:4b:7d:fe:1e:bf:6a:e8:05:22: 24:3a:41:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYwODI4MTgyMTUxWhcNMjYwOTA0MTgyMTUxWjAYMRYwFAYD VQQDEw02YTkxZDFiZi1hMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYj7PEcObntWe6h0msrhEAUINATnHmTDhwc1Ol9+CsFrPv3/udmz/Ju0n9Qf QhNXd6pkEE2tAWTi6YhYG9Gu/sRk4wRIEkZJCMTNoijXhy+IgEoGgwrxdPyPggN8 8I3HwiUq03q+r0IDJqupRfWvT7jdvE9/0qmXzZ3bDMw+E03CwFQiiHAIG7FJqs66 hUo3UMPFMmlVk8GPYQ1q5gKxx6EZdryd7iLVGE2VgFb2gx/NfN9z3itB0ledR9t+ Td03MURDpSfAt0mldNxfS49MkGlmzKw+GRr1P2YMah9bK+3OuTWuQoLtyZEb9a5n FwCx16V/yWGE6ePWK58mUAVtXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8CDkAD bkopoivDja7E/UPMv12BMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKLC/x+uOe1xIzGazLpxOi8ys6N/5L1iU+P7PuPpqP3iraHSA0rmMOsC9ZzR BNZ+siuHk86FQibwYckSOb5PjCXGJe/OtgEc2PH1XGs8eQIRlsr/SGpJGJv/pOq2 B6FjSXo0Xy0kuoM9r1yh//CVQ19e+rwm+gmqt6n3PPC3yhTDM/p2bmumJHvOHBQ5 ecAc5j0Nn7X+czuWyhigKes2oFlyRNrMYwxeCMSFs5b0ZXowOC+6cizMlBGYrOpd mUXF+vhA00he8KLEF6pk+MdYLTUqadYbrtTtpSIUbWvgtBDlH3bw8IG9tOFHeC7Q k48cwfUsS33+Hr9q6AUiJDpBUg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:42:31 2026 by rpki-client