$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft File: OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json) Hash identifier: QZguu6bhHE6g5Q8h+RqagjPIbeAeyytQcV1nNHOOS2Q= Subject key identifier: C8:F8:93:71:92:0D:CB:4E:5E:A3:2A:05:63:12:31:28:4D:3B:7D:C1 Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A Certificate issuer: /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Certificate serial: 1B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft Manifest number: 1B53 Signing time: Tue 06 Oct 2026 16:18:13 +0000 Manifest this update: Tue 06 Oct 2026 16:18:13 +0000 Manifest next update: Tue 13 Oct 2026 16:18:13 +0000 Files and hashes: 1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: 4Ncu86v3RuAX7tuXFzSaPGJQ01X1R6VMley34pTPjqY=) 2: 95851A544E8F11F1BB8AFF5DB7833773.roa (hash: bjzn1i56aX7nhZkQIU0OEQDjrscerkhHzwk56zyo5ro=) 3: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: GXp1aLaRCBlpn2Ppiw041HUg4IkVO4mFqlloeENr4R8=) 4: 96F7E1784E8F11F1BB8AFF5DB7833773.roa (hash: a61Ie/aCG9CN03x2NjRNh6RVX/PaVqNU4tVN2I7ZfeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7063 (0x1b97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A Validity Not Before: Oct 6 16:18:13 2026 GMT Not After : Oct 13 16:18:13 2026 GMT Subject: CN=6ac51f45-241d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:76:31:0b:32:f0:01:e5:28:0c:40:44:c5: 59:3c:ea:a7:ac:71:0d:59:d0:aa:12:58:87:09:de: 44:91:ee:91:17:ae:5c:28:44:ea:6b:93:a5:23:7b: 6b:c8:d5:53:00:5b:e2:ab:f5:12:de:ad:a9:1e:d2: aa:06:59:72:d9:75:a8:6c:d8:45:20:de:a5:47:ff: 7e:26:91:13:a7:bc:55:16:4b:c9:23:2b:43:72:01: e8:dc:09:70:0f:a1:71:0d:b0:66:b8:8f:e0:e5:97: 29:0b:83:9d:ce:24:3e:1e:5b:76:e1:c1:59:4b:77: 7d:dd:a5:7c:52:ce:f6:83:14:d9:c8:30:0f:8a:4f: e1:8f:f2:df:42:cc:d9:05:81:a6:ed:29:46:26:0c: fe:f0:e9:9a:5b:36:19:c1:4a:27:0c:1a:d8:b8:4d: ab:cf:17:a6:e6:94:a7:27:89:66:b0:67:ed:5a:7e: c5:32:de:28:76:45:2f:b0:01:30:06:10:a1:1a:a8: c3:6f:c2:63:df:72:7e:e6:5f:28:3d:d9:e9:3a:6b: d0:0f:37:a9:b1:ef:e7:89:3c:4b:72:0c:f0:29:58: d0:bb:66:b9:32:b4:6a:57:bc:59:bb:b0:f0:80:ae: 1f:e0:3a:6e:fa:76:a2:65:fa:63:eb:c4:34:cd:3d: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F8:93:71:92:0D:CB:4E:5E:A3:2A:05:63:12:31:28:4D:3B:7D:C1 X509v3 Authority Key Identifier: keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:20:26:e1:ba:61:82:c9:02:ce:4d:bb:82:cf:62:fc:e7:ea: 2f:c9:ae:14:6e:65:ce:5b:50:1d:c4:ad:77:c5:4c:0f:7f:da: d5:5b:6f:30:fb:db:28:64:0e:d3:4c:71:70:70:fd:4a:ff:41: 66:0a:cc:a9:33:19:f5:2f:0f:1e:ff:c1:04:81:cc:6e:3f:45: 1b:61:67:d9:16:9a:b1:84:9e:bd:22:2a:8c:c3:e1:ef:7a:84: 84:1d:1e:56:4d:98:4b:d7:01:72:6b:8c:76:6c:62:07:3c:6c: 3c:c1:c2:03:0c:9f:18:5c:9b:be:3d:bb:af:d2:58:bb:7a:52: b5:af:e9:b0:ff:66:09:18:14:46:d9:67:26:19:04:2b:ed:75: ff:2e:d6:4f:ea:5e:74:69:c0:36:4b:74:ab:df:51:79:3e:e2: 28:cc:21:6c:a3:2f:2d:ec:2d:59:e9:f3:46:83:31:df:54:1e: 7d:d9:7f:7b:71:f5:df:64:39:57:be:50:5d:50:1a:9b:1b:18: 6a:a5:51:3f:d0:00:06:a7:e8:04:be:11:d4:d7:a4:f0:ef:48: de:63:9f:3e:86:a3:ec:a1:49:a8:07:6b:cd:21:06:31:1b:e6: 80:bc:08:1b:e2:74:d8:8a:91:98:c0:0b:c9:45:b1:79:48:15: fe:fd:05:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwNzcxMTAvBgNVBAUTKDM4NkY2RjhBQTFFNjZDNTI1NEVBMUU0Nzg4OEMxMDNG NDUzNjIyMkEwHhcNMjYxMDA2MTYxODEzWhcNMjYxMDEzMTYxODEzWjAYMRYwFAYD VQQDEw02YWM1MWY0NS0yNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1N2MQsy8AHlKAxARMVZPOqnrHENWdCqEliHCd5Eke6RF65cKETqa5OlI3tr yNVTAFviq/US3q2pHtKqBlly2XWobNhFIN6lR/9+JpETp7xVFkvJIytDcgHo3Alw D6FxDbBmuI/g5ZcpC4OdziQ+Hlt24cFZS3d93aV8Us72gxTZyDAPik/hj/LfQszZ BYGm7SlGJgz+8OmaWzYZwUonDBrYuE2rzxem5pSnJ4lmsGftWn7FMt4odkUvsAEw BhChGqjDb8Jj33J+5l8oPdnpOmvQDzepse/niTxLcgzwKVjQu2a5MrRqV7xZu7Dw gK4f4Dpu+naiZfpj68Q0zT2g9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMj4k3GS DctOXqMqBWMSMShNO33BMB8GA1UdIwQYMBaAFDhvb4qh5mxSVOoeR4iMED9FNiIq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA3Ny9EQjdCNzAwNjQ4 MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJGSlU2aDVIaUl3UVAwVTJJ aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HOXZpcUhtYkZKVTZoNUhpSXdRUDBVMklpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA3Ny9EQjdCNzAwNjQ4MjQxMUU3OTQwNDFEMkRDNEY5QUUwMi9PRzl2aXFIbWJG SlU2aDVIaUl3UVAwVTJJaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKSAm4bphgskCzk27gs9i/OfqL8muFG5lzltQHcStd8VMD3/a1VtvMPvbKGQO 00xxcHD9Sv9BZgrMqTMZ9S8PHv/BBIHMbj9FG2Fn2RaasYSevSIqjMPh73qEhB0e Vk2YS9cBcmuMdmxiBzxsPMHCAwyfGFybvj27r9JYu3pSta/psP9mCRgURtlnJhkE K+11/y7WT+pedGnANkt0q99ReT7iKMwhbKMvLewtWenzRoMx31Qefdl/e3H132Q5 V75QXVAamxsYaqVRP9AABqfoBL4R1Nek8O9I3mOfPoaj7KFJqAdrzSEGMRvmgLwI G+J02IqRmMALyUWxeUgV/v0F/A== -----END CERTIFICATE-----Generated at Wed Oct 7 11:55:03 2026 by rpki-client