$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json) Hash identifier: LR19yQBP4pDTanZ6AzN7agaSL3KF8JP1RiVsHVL4IO8= Subject key identifier: 71:2A:F8:B6:28:8E:EC:E8:3C:6E:81:BE:41:30:B8:CE:B5:2F:A3:06 Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft Manifest number: 035B Signing time: Sat 03 Oct 2026 01:14:00 +0000 Manifest this update: Sat 03 Oct 2026 01:13:59 +0000 Manifest next update: Sat 10 Oct 2026 01:13:59 +0000 Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: /J+gSexomiyktHiCfjAEtCmqX8t8bUlz/q6iJzhvzGE=) 2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bTkT2MqFX/19qcSjcX3ccXtP/wVqXRGcmC6IZgoF9mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Oct 3 01:13:59 2026 GMT Not After : Oct 10 01:13:59 2026 GMT Subject: CN=6ac056d8-b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:47:f8:7a:c2:28:9c:fd:85:b0:5b:3d:0a: 6c:1b:1a:b7:5e:19:84:59:eb:b0:1e:44:c1:7b:7d: 8f:13:a9:91:5a:8f:b3:bb:00:b2:53:33:74:ae:93: 66:fd:d4:5a:c4:a4:8a:01:ee:f1:15:e4:bc:92:54: c0:1e:aa:6b:c8:3a:b4:86:b9:23:61:a7:3f:40:66: 45:52:8e:ee:a0:da:33:6f:8f:da:c9:e2:9e:52:de: 68:60:11:73:24:a9:1a:02:8d:6d:26:1d:76:85:e5: 36:4c:39:40:c7:d1:f8:0b:c7:cb:7a:24:27:a9:6c: ed:19:24:2f:70:54:3e:56:08:aa:28:d1:3d:cc:1f: 54:b7:54:5b:f5:49:03:11:96:34:c0:8a:c2:44:2e: 4e:74:94:7f:dc:e5:ae:c9:9c:f2:19:3b:97:2d:75: 16:98:b4:12:e9:58:53:36:71:bf:5e:da:6f:de:7b: 6a:c7:b3:83:a2:6a:5c:e1:3c:19:8d:e8:3e:e1:c3: d8:7a:83:7d:b7:f9:8d:d1:61:30:b1:97:24:04:2a: 4b:74:5c:e1:5d:25:80:9f:49:42:79:8c:c5:f4:b6: c6:07:08:18:79:bc:10:3e:bb:5d:fd:d0:e0:73:1f: 75:67:8e:dc:2e:e4:05:fb:10:10:42:e2:7f:27:b3: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2A:F8:B6:28:8E:EC:E8:3C:6E:81:BE:41:30:B8:CE:B5:2F:A3:06 X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:32:49:fb:3d:aa:26:45:14:d6:00:ed:ac:c6:88:c0:86:c9: 15:d6:d2:d6:8e:41:60:d9:03:b7:08:9a:0d:10:99:dd:a2:74: a2:9a:52:01:e1:fd:b5:87:c4:72:f4:24:61:55:0c:74:b3:63: 65:33:6b:84:a6:81:07:51:14:bc:e3:2a:a9:c5:b7:09:e9:cd: 87:24:a9:02:a3:41:07:36:cf:da:47:27:7b:09:17:f3:94:3e: 25:ab:ff:f7:ac:a2:84:1d:f6:1a:dd:d5:cd:59:cc:36:74:25: 23:3d:df:f4:b2:8f:c3:45:75:82:16:a1:fb:2e:87:01:ce:fa: 2a:ef:86:cb:ed:7c:91:64:e8:0f:35:9e:64:7a:85:28:87:4b: 4a:9d:79:c5:ea:f0:82:db:3a:e9:d4:39:92:dc:49:66:c0:54: ac:7e:7f:7f:98:25:41:97:39:ff:22:40:23:b8:ef:ed:b5:65: 21:03:90:09:03:01:88:d5:2e:49:79:73:1b:a7:2f:9d:74:2e: 65:79:57:cd:63:7a:b8:45:1d:aa:c4:5e:fe:8f:82:38:d6:95: 03:ab:1b:f0:de:14:43:9f:a8:dd:7c:21:da:e3:34:7a:29:7a: bf:6a:05:90:2a:4a:55:fb:ac:e9:84:b5:0c:d8:0d:79:79:84: 8c:8e:30:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjYxMDAzMDExMzU5WhcNMjYxMDEwMDExMzU5WjAYMRYwFAYD VQQDEw02YWMwNTZkOC1iNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma1H+HrCKJz9hbBbPQpsGxq3XhmEWeuwHkTBe32PE6mRWo+zuwCyUzN0rpNm /dRaxKSKAe7xFeS8klTAHqpryDq0hrkjYac/QGZFUo7uoNozb4/ayeKeUt5oYBFz JKkaAo1tJh12heU2TDlAx9H4C8fLeiQnqWztGSQvcFQ+VgiqKNE9zB9Ut1Rb9UkD EZY0wIrCRC5OdJR/3OWuyZzyGTuXLXUWmLQS6VhTNnG/Xtpv3ntqx7ODompc4TwZ jeg+4cPYeoN9t/mN0WEwsZckBCpLdFzhXSWAn0lCeYzF9LbGBwgYebwQPrtd/dDg cx91Z47cLuQF+xAQQuJ/J7NoqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEq+LYo juzoPG6BvkEwuM61L6MGMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQwNi85ODY4QTlGMDE3MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0Fx T3FqNWg4T3ZvR2tObHUxSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZjJJ+z2qJkUU1gDtrMaIwIbJFdbS1o5BYNkDtwiaDRCZ3aJ0oppSAeH9tYfE cvQkYVUMdLNjZTNrhKaBB1EUvOMqqcW3CenNhySpAqNBBzbP2kcnewkX85Q+Jav/ 96yihB32Gt3VzVnMNnQlIz3f9LKPw0V1ghah+y6HAc76Ku+Gy+18kWToDzWeZHqF KIdLSp15xerwgts66dQ5ktxJZsBUrH5/f5glQZc5/yJAI7jv7bVlIQOQCQMBiNUu SXlzG6cvnXQuZXlXzWN6uEUdqsRe/o+CONaVA6sb8N4UQ5+o3Xwh2uM0eil6v2oF kCpKVfus6YS1DNgNeXmEjI4wBA== -----END CERTIFICATE-----Generated at Sun Oct 4 12:01:06 2026 by rpki-client