$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: GztNRbIZs+4ze1Pt8DHYP8PyNdDuvYbOIo+voBBJmuc= Subject key identifier: 6C:38:6A:63:24:BE:08:7D:8C:10:B7:C2:A7:BA:EC:BE:14:67:C8:57 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 116A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 115F Signing time: Sat 10 Oct 2026 17:15:03 +0000 Manifest this update: Sat 10 Oct 2026 17:15:03 +0000 Manifest next update: Sat 17 Oct 2026 17:15:03 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: rK+qHmAu81SiIBkzjz1b54U/9iQiq1HvIU4W0I53YFs=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: Qlspkhh8uor8ecMraj5PR2UqS4cARaGBWVRKRXzt500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4458 (0x116a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Oct 10 17:15:03 2026 GMT Not After : Oct 17 17:15:03 2026 GMT Subject: CN=6aca7297-a119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:11:26:1a:ee:6b:9a:2c:8c:88:fe:df:47: e5:58:bb:4d:cf:b0:67:40:5d:b1:a5:50:b4:55:9c: 78:cc:5d:1b:ca:0c:7a:38:62:7a:76:8a:fb:bf:6c: af:46:b3:c2:0f:f8:4d:4b:54:9e:5d:61:3e:04:71: 67:e7:cc:e0:99:21:b6:0e:b6:7c:86:71:50:4c:3e: 2e:6c:a9:a8:df:0f:82:f9:1d:de:d0:60:9d:06:c8: 8e:52:bc:93:22:e3:ec:35:ba:36:fb:ca:d3:77:ce: 5b:dc:79:b6:74:19:3d:2c:f7:17:53:57:1c:97:52: 22:33:ee:d3:09:02:d1:c3:20:32:1c:c7:a8:7c:8e: 2b:6c:30:10:f3:c0:b4:b8:58:9d:98:62:fa:a6:28: a4:bf:42:62:04:2b:8f:8b:34:9f:65:c2:2c:61:0f: 9d:e7:51:ac:dc:17:80:43:bf:aa:e3:db:fd:6b:41: 52:6b:df:82:34:7b:69:76:24:6b:05:4a:20:68:28: 1e:20:cf:5e:2a:63:9a:c2:a0:04:78:31:81:85:9f: d3:c9:b8:d1:7a:28:fa:88:cc:9c:63:c6:3a:eb:b2: 32:9e:2e:22:06:b7:cf:00:bb:13:62:7c:13:72:d2: cf:58:2f:8d:01:91:cd:28:10:57:a9:02:f5:ed:be: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:6A:63:24:BE:08:7D:8C:10:B7:C2:A7:BA:EC:BE:14:67:C8:57 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6e:c4:54:93:7a:38:ec:84:67:63:c8:39:68:d6:89:5e:de: 9c:9c:76:e7:48:ca:20:51:e2:d7:a2:2a:aa:ac:a8:bc:6d:c5: 7b:c3:28:8c:c3:44:cf:88:ed:b5:9e:73:84:07:19:a9:d2:5e: 0d:e2:9a:1b:22:c2:b5:35:0b:d3:3a:aa:e5:2f:5a:4d:c0:dc: 4f:52:d0:f5:35:65:95:fa:f2:2b:06:4a:4d:29:53:2a:e3:80: 98:18:75:f3:b2:e9:e1:bd:2f:05:9d:83:8b:0a:33:fb:45:b6: 85:35:43:b5:f8:2d:92:7a:43:4a:19:55:e3:09:62:ec:52:fa: 01:50:1c:a8:f9:67:a6:3c:7c:15:8c:38:73:04:1b:46:45:cc: 99:c3:e6:b7:38:38:cc:22:01:bf:a4:b8:14:29:2a:32:d1:20: 44:c8:df:e4:a0:6d:15:e9:07:f8:e3:ce:9e:11:cd:7c:45:af: 96:17:b3:52:1a:42:0d:1e:95:5b:f8:e4:9e:9d:b8:00:90:37: 69:87:e1:58:24:8f:c2:1f:00:f3:5c:67:da:34:9d:39:e5:08: 0d:1d:b1:5f:ff:5b:79:fa:33:01:1a:cf:c1:75:a6:b8:17:db: 9e:f2:d4:c2:4f:09:0a:3d:b4:86:83:61:8d:1a:4b:94:a4:37: c1:50:4f:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjYxMDEwMTcxNTAzWhcNMjYxMDE3MTcxNTAzWjAYMRYwFAYD VQQDEw02YWNhNzI5Ny1hMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7cRJhrua5osjIj+30flWLtNz7BnQF2xpVC0VZx4zF0bygx6OGJ6dor7v2yv RrPCD/hNS1SeXWE+BHFn58zgmSG2DrZ8hnFQTD4ubKmo3w+C+R3e0GCdBsiOUryT IuPsNbo2+8rTd85b3Hm2dBk9LPcXU1ccl1IiM+7TCQLRwyAyHMeofI4rbDAQ88C0 uFidmGL6piikv0JiBCuPizSfZcIsYQ+d51Gs3BeAQ7+q49v9a0FSa9+CNHtpdiRr BUogaCgeIM9eKmOawqAEeDGBhZ/TybjReij6iMycY8Y667Iyni4iBrfPALsTYnwT ctLPWC+NAZHNKBBXqQL17b5cKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGw4amMk vgh9jBC3wqe67L4UZ8hXMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABG7EVJN6OOyEZ2PIOWjWiV7enJx250jKIFHi16IqqqyovG3Fe8MojMNEz4jt tZ5zhAcZqdJeDeKaGyLCtTUL0zqq5S9aTcDcT1LQ9TVllfryKwZKTSlTKuOAmBh1 87Lp4b0vBZ2Diwoz+0W2hTVDtfgtknpDShlV4wli7FL6AVAcqPlnpjx8FYw4cwQb RkXMmcPmtzg4zCIBv6S4FCkqMtEgRMjf5KBtFekH+OPOnhHNfEWvlhezUhpCDR6V W/jknp24AJA3aYfhWCSPwh8A81xn2jSdOeUIDR2xX/9befozARrPwXWmuBfbnvLU wk8JCj20hoNhjRpLlKQ3wVBPqg== -----END CERTIFICATE-----Generated at Sat Oct 10 23:23:13 2026 by rpki-client