$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json) Hash identifier: ofxCH3QFhaKOOlPGB+oOivTwns4X8aWZDuNkVzdwPZs= Subject key identifier: B9:7B:3C:CE:0B:84:A1:51:05:DD:A2:E0:02:42:22:1A:E3:0D:A1:DF Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Certificate serial: 0E4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft Manifest number: 0E44 Signing time: Sat 24 Oct 2026 17:44:56 +0000 Manifest this update: Sat 24 Oct 2026 17:44:56 +0000 Manifest next update: Sat 31 Oct 2026 17:44:56 +0000 Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: wn0VizpKtlSMF0tIkRxjpdS7VRWQ2yTmUexC2p8g8yQ=) 2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 17:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3663 (0xe4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Validity Not Before: Oct 24 17:44:56 2026 GMT Not After : Oct 31 17:44:56 2026 GMT Subject: CN=6adcee98-b5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:b8:1e:c1:ef:16:a2:32:00:cc:97:fe:a6: 0f:6b:bc:13:41:89:bc:4b:c0:8a:69:28:b5:d5:a7: f0:72:bc:2c:dd:d8:8c:3e:b3:6f:77:af:24:59:cb: 47:d2:c5:90:df:72:0b:70:59:57:81:b6:fc:a3:2d: 40:1d:87:e3:13:85:b2:9b:6e:7d:3a:0c:ec:17:63: 57:85:f4:74:84:29:82:84:d4:d1:d4:b9:96:24:90: 86:71:46:d2:3c:d3:82:5e:28:29:fb:2c:d6:4a:d6: f2:fa:56:59:f8:67:d9:11:10:24:21:a8:4e:52:22: 7e:bb:ef:21:ae:22:98:fb:c4:59:9e:f7:99:fe:54: 5c:a6:bd:2d:42:67:25:8b:53:3f:dd:c3:07:83:27: 61:30:71:18:5d:9e:ff:05:13:1e:a2:ae:3d:2f:2b: e8:43:ca:c5:c6:0f:da:0d:d6:24:08:aa:15:8e:06: 84:05:1a:ae:f0:49:bd:f1:38:66:65:51:74:6e:e0: 3b:dd:b7:37:70:32:09:b8:de:7f:a3:1d:cf:3c:64: 59:30:26:1a:88:87:20:8f:1e:60:7f:6c:d2:93:7b: d0:bf:e5:73:94:1a:99:9a:96:74:96:5f:d2:29:17: 79:68:53:e7:67:c9:75:95:db:5e:f8:e2:c0:42:08: a5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:3C:CE:0B:84:A1:51:05:DD:A2:E0:02:42:22:1A:E3:0D:A1:DF X509v3 Authority Key Identifier: keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:df:98:20:75:93:7e:e9:b8:70:5b:1b:bd:58:65:02:5b:96: 4b:85:02:e9:63:f8:21:70:aa:ba:cf:8f:34:7b:86:0f:ee:9c: e6:8d:51:48:25:84:3b:f2:c6:29:d3:c0:34:cd:a0:72:39:60: 76:40:79:0d:d0:01:b6:ee:8d:98:5e:32:ad:bd:2f:34:69:72: 06:0e:0f:c9:29:9f:ef:9b:73:1f:9b:39:61:a3:c3:1c:1c:60: 61:67:ad:77:18:ec:57:32:fa:2c:0a:af:bc:8f:ec:26:64:a4: db:56:35:9f:d3:33:00:21:7d:51:66:4f:dc:0b:f5:7f:23:92: 7c:b6:c6:fe:1b:af:9a:d4:0a:6f:e4:9b:ae:db:17:53:51:3b: 4e:c4:6d:dc:3e:9c:28:ad:ce:aa:b0:45:12:ad:3e:90:9c:a0: dc:6a:1a:27:6b:d2:d3:5d:8d:05:67:4c:61:62:63:ed:df:42: 09:e1:ce:79:cd:b3:e2:f9:11:0c:e8:6b:34:15:b3:6c:90:b5: db:db:ee:0c:a0:1a:fb:a2:30:55:2e:ed:03:36:85:98:df:99: 7f:13:3c:b2:f9:9b:1f:f9:d2:9d:cc:11:91:fb:33:09:48:ff: 69:7e:62:55:7b:9c:99:bd:4d:e2:e2:c3:4b:97:91:aa:d0:b3: 7c:b9:62:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0 NjIyRkQ2MjcwHhcNMjYxMDI0MTc0NDU2WhcNMjYxMDMxMTc0NDU2WjAYMRYwFAYD VQQDEw02YWRjZWU5OC1iNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTW4HsHvFqIyAMyX/qYPa7wTQYm8S8CKaSi11afwcrws3diMPrNvd68kWctH 0sWQ33ILcFlXgbb8oy1AHYfjE4Wym259OgzsF2NXhfR0hCmChNTR1LmWJJCGcUbS PNOCXigp+yzWStby+lZZ+GfZERAkIahOUiJ+u+8hriKY+8RZnveZ/lRcpr0tQmcl i1M/3cMHgydhMHEYXZ7/BRMeoq49LyvoQ8rFxg/aDdYkCKoVjgaEBRqu8Em98Thm ZVF0buA73bc3cDIJuN5/ox3PPGRZMCYaiIcgjx5gf2zSk3vQv+VzlBqZmpZ0ll/S KRd5aFPnZ8l1ldte+OLAQgilSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl7PM4L hKFRBd2i4AJCIhrjDaHfMB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yNjFEMjgzMEQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xi OEZvTFVqQ3hOeDFHSXYxaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ9+YIHWTfum4cFsbvVhlAluWS4UC6WP4IXCqus+PNHuGD+6c5o1RSCWEO/LG KdPANM2gcjlgdkB5DdABtu6NmF4yrb0vNGlyBg4PySmf75tzH5s5YaPDHBxgYWet dxjsVzL6LAqvvI/sJmSk21Y1n9MzACF9UWZP3Av1fyOSfLbG/huvmtQKb+SbrtsX U1E7TsRt3D6cKK3OqrBFEq0+kJyg3GoaJ2vS012NBWdMYWJj7d9CCeHOec2z4vkR DOhrNBWzbJC129vuDKAa+6IwVS7tAzaFmN+ZfxM8svmbH/nSncwRkfszCUj/aX5i VXucmb1N4uLDS5eRqtCzfLliyQ== -----END CERTIFICATE-----Generated at Mon Oct 26 11:14:28 2026 by rpki-client