$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: 1c3mFyMkbM47ZO8stvTkRpCydRkS3XN6oRJ87ybXMU4= Subject key identifier: 5C:77:1F:8B:87:5C:96:41:7B:3D:EA:88:24:30:15:3D:60:5E:8B:83 Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 0227 Signing time: Tue 15 Sep 2026 03:12:42 +0000 Manifest this update: Tue 15 Sep 2026 03:12:41 +0000 Manifest next update: Tue 22 Sep 2026 03:12:41 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: NDpy+MPtUDPxI06tT1AA3KYne4K2s6HBlxN6qZhWDo4=) 2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: LW+WmGu6YlC9wjX0P0Tmes41deKyVjQFb3wGnRpYkOQ=) 3: NqbP4HOf_Jyjeg4GFVPMlc9Aumk.asa (hash: QSUd3sZtQESOmMmY99Q78BF0wQT6wi4H0X2SGisgJkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Sep 15 03:12:41 2026 GMT Not After : Sep 22 03:12:41 2026 GMT Subject: CN=6aa8b7aa-45c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:fc:2c:25:7a:3d:f6:2b:8d:d0:bb:4a:e2: 9c:c6:85:77:48:48:12:22:89:f1:e0:68:e1:b7:e7: d9:41:69:4a:8c:1c:49:c0:c2:6c:db:cf:da:1f:cd: 51:d4:1b:68:d0:69:fa:63:8b:6d:59:6c:9a:d3:4e: 91:2a:40:34:f5:05:74:08:8d:55:4d:d5:58:42:12: 29:57:63:31:2f:1d:bb:f4:2f:e5:32:c7:17:ac:ce: f9:d5:02:0b:0f:ba:d8:8c:ba:eb:91:fd:d9:52:79: 52:6b:3e:66:6e:33:77:ec:67:d5:ab:47:71:db:7f: 93:2d:e8:e3:5c:ae:80:97:1a:95:d5:0d:0d:a7:1c: ff:1b:c9:b8:7f:e2:b9:e3:5c:8e:ca:39:10:f9:33: 86:87:76:53:a1:60:49:be:18:61:c6:ff:a0:78:aa: 62:a6:57:72:59:8c:aa:96:89:1b:ea:0e:ea:0e:4c: 0d:eb:16:5d:ce:b0:a1:da:b9:b7:ed:c5:4c:76:8d: fa:e1:91:7f:0b:00:10:3a:7b:10:dc:8e:ba:3c:12: 53:e9:de:01:62:bc:32:8b:d7:a5:2c:6b:39:9e:2d: 6d:01:51:e7:e8:6d:f5:4f:e3:38:97:6a:4f:ef:da: f1:24:08:e0:9e:cd:db:1c:dc:08:95:02:9e:28:ac: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:77:1F:8B:87:5C:96:41:7B:3D:EA:88:24:30:15:3D:60:5E:8B:83 X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9e:2c:21:47:a0:1a:26:d5:9f:2f:26:76:91:7b:cc:f4:5c: ce:a2:a6:0f:32:c7:43:a5:31:44:c4:41:7f:a3:02:20:b5:b5: 52:81:d8:5b:af:e0:93:e7:70:12:0b:8a:ca:40:94:9e:cf:78: cf:d9:e1:e1:32:4a:b2:03:d2:51:95:5d:a8:08:1e:37:94:5f: 83:ca:83:bb:73:1e:fd:53:96:70:b3:37:e9:d5:0b:15:74:ed: 2d:20:86:32:ad:f6:5e:fd:e2:be:16:ba:15:55:93:15:fb:48: 97:0f:dd:98:2b:6c:46:70:8c:92:fc:e9:73:7c:cc:db:2a:d7: 2c:1b:87:f6:44:9c:cc:ba:07:6b:6f:42:e2:42:b8:1e:da:95: 87:a8:d7:1e:2c:1f:8e:b4:35:a7:be:b4:b2:7b:d1:b1:bc:b3: 37:c7:db:8a:86:0a:8f:28:fd:ab:84:ce:3e:39:e8:1b:9f:20: 2c:92:52:cf:4e:4c:14:3b:4e:9a:4f:9d:36:9d:ee:5e:98:7c: f0:62:90:ef:c8:16:50:e1:c9:b6:44:72:17:81:43:16:34:11: 2a:94:3a:88:30:b1:7a:6e:75:cd:43:17:b7:f2:ed:0d:bc:9c: fc:11:e9:c9:85:46:ba:dc:d7:c0:96:01:48:17:c5:e1:a5:64: 0f:bf:88:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjYwOTE1MDMxMjQxWhcNMjYwOTIyMDMxMjQxWjAYMRYwFAYD VQQDEw02YWE4YjdhYS00NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuz8LCV6PfYrjdC7SuKcxoV3SEgSIonx4Gjht+fZQWlKjBxJwMJs28/aH81R 1Bto0Gn6Y4ttWWya006RKkA09QV0CI1VTdVYQhIpV2MxLx279C/lMscXrM751QIL D7rYjLrrkf3ZUnlSaz5mbjN37GfVq0dx23+TLejjXK6AlxqV1Q0Npxz/G8m4f+K5 41yOyjkQ+TOGh3ZToWBJvhhhxv+geKpipldyWYyqlokb6g7qDkwN6xZdzrCh2rm3 7cVMdo364ZF/CwAQOnsQ3I66PBJT6d4BYrwyi9elLGs5ni1tAVHn6G31T+M4l2pP 79rxJAjgns3bHNwIlQKeKKyQuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFx3H4uH XJZBez3qiCQwFT1gXouDMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMJ4sIUegGibVny8mdpF7zPRczqKmDzLHQ6UxRMRBf6MCILW1UoHYW6/gk+dw EguKykCUns94z9nh4TJKsgPSUZVdqAgeN5Rfg8qDu3Me/VOWcLM36dULFXTtLSCG Mq32Xv3ivha6FVWTFftIlw/dmCtsRnCMkvzpc3zM2yrXLBuH9kSczLoHa29C4kK4 HtqVh6jXHiwfjrQ1p760snvRsbyzN8fbioYKjyj9q4TOPjnoG58gLJJSz05MFDtO mk+dNp3uXph88GKQ78gWUOHJtkRyF4FDFjQRKpQ6iDCxem51zUMXt/LtDbyc/BHp yYVGutzXwJYBSBfF4aVkD7+ICg== -----END CERTIFICATE-----Generated at Tue Sep 15 23:58:34 2026 by rpki-client