$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: DpMge3NtxhuJTaL9c1a9CFHNfKnpaKBy19SACHzANN8= Subject key identifier: 89:6A:1C:A3:57:47:AD:86:AD:64:D4:54:B4:D0:F1:3D:76:FB:49:39 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 22A5 Signing time: Mon 12 Oct 2026 15:52:55 +0000 Manifest this update: Mon 12 Oct 2026 15:52:54 +0000 Manifest next update: Mon 19 Oct 2026 15:52:54 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: mlOWl/i0rA5gRSFsbz3mbU9waUef58MnL/yyXe6GyTY=) 2: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: E7gJCHO64l/SwQNJtTfMdoKvHZZkCVR7yeRccRJKNd0=) 3: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: er6HKXl7FLdoikxrG89uSXtId0RqHn988XNTcZ7SGH0=) 4: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: n49HYQFs+n+UQYY5FL252SsROTNSrZW0k/I/T/iUp6U=) 5: 2D477384D9C711F098E1B70271D3641D.roa (hash: ROx2oTl8579O/SlPl9MGo4W4+JgkbrC2WF23+Uko3DM=) 6: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: Xj5Qy789mJaiAcI+C7hmnOQRIBKOGzpsW/xGSyO3hqY=) 7: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: DUmSWxjXvMqVaz5OCjZCWsLLjmpvDKB9aD6r7hfT8hM=) 8: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: +pFbpy8Dn0pTC9uC7eJS6idkPLrhGivA2+tGuCgnLro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8966 (0x2306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 12 15:52:54 2026 GMT Not After : Oct 19 15:52:54 2026 GMT Subject: CN=6acd0257-ecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:9f:c3:0f:39:8c:3b:17:5f:6e:ae:1f:04: 3f:d9:8d:c4:26:82:0c:ca:bc:7b:bb:90:9a:6b:8b: 8c:35:4e:5e:a4:d2:f9:ee:e9:a6:9b:f7:ab:09:41: 63:7a:39:24:ca:bc:6e:92:b2:46:fb:71:e6:aa:a3: e6:a5:e7:3a:51:65:fa:4a:06:e7:50:5b:e2:1d:02: f5:b0:24:7e:b3:44:81:2c:c7:59:e7:6c:10:27:84: a2:9b:ad:44:f5:52:00:05:e2:3b:25:90:c5:20:f6: 7b:10:3d:5f:43:32:08:75:c6:01:c3:75:27:fb:3b: 20:d2:4d:2a:6c:a1:33:05:02:a4:01:24:76:7c:74: 1e:9c:8c:b6:4a:f7:70:f6:bc:ea:33:17:ff:28:81: 40:08:bb:4a:3b:26:5f:31:55:0e:a8:3c:40:b3:d4: 79:0c:cb:16:23:33:1e:9b:ef:d0:bb:0c:f7:48:7a: 21:5f:82:36:30:7d:76:2d:4b:8b:da:28:35:6e:3e: 3a:07:11:82:6d:fe:29:b6:27:69:97:d4:05:d8:45: 3a:61:4c:2b:3c:86:83:c5:2a:67:a8:8e:62:39:3c: 08:1d:64:f1:7e:d9:e1:7b:11:41:f7:2e:e5:1f:ca: 9a:50:13:3b:61:cc:0d:b7:ea:2b:7b:f8:d4:f7:17: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6A:1C:A3:57:47:AD:86:AD:64:D4:54:B4:D0:F1:3D:76:FB:49:39 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5b:98:44:f0:44:38:da:a4:87:a0:38:0a:9c:21:8c:35:72: 73:26:db:1a:12:b6:cb:6d:03:66:9d:ba:8a:f6:17:a7:16:15: 20:fc:70:b3:a7:9d:c3:31:e6:da:d4:87:ea:84:b1:85:67:23: d7:10:46:fd:78:5e:09:71:87:db:03:98:65:06:ad:b1:4e:a4: 10:52:b8:80:22:27:e1:05:3d:81:07:33:f5:cf:ae:2c:78:b1: 5b:3c:77:be:dc:fa:d7:98:4a:08:d2:63:24:dd:3a:62:6f:49: d5:e1:78:57:17:c0:33:14:d2:d5:e7:ab:72:1f:b5:96:92:01: ba:1b:e4:de:78:55:7f:81:e3:69:f0:1e:21:4c:e9:35:94:5e: ab:58:36:a7:b8:f4:33:11:4a:50:24:12:60:f9:45:88:f1:39: aa:98:3c:f4:8d:81:f0:d1:ec:0a:82:2f:ac:47:2d:fd:b8:4e: f9:6e:22:ab:8f:42:08:c8:1e:48:ff:21:9b:cc:09:4c:11:00: da:7e:d8:c6:50:8d:ae:77:2a:37:9f:1c:88:5c:d2:fc:2c:fd: 46:7c:28:8e:a6:69:47:34:e6:29:1b:29:76:26:59:54:96:f4: 2f:44:7c:f0:c1:a7:3a:a8:48:e4:4c:e9:8b:20:12:08:c3:4a: a7:80:ea:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYxMDEyMTU1MjU0WhcNMjYxMDE5MTU1MjU0WjAYMRYwFAYD VQQDEw02YWNkMDI1Ny1lY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lqfww85jDsXX26uHwQ/2Y3EJoIMyrx7u5Caa4uMNU5epNL57ummm/erCUFj ejkkyrxukrJG+3HmqqPmpec6UWX6SgbnUFviHQL1sCR+s0SBLMdZ52wQJ4Sim61E 9VIABeI7JZDFIPZ7ED1fQzIIdcYBw3Un+zsg0k0qbKEzBQKkASR2fHQenIy2Svdw 9rzqMxf/KIFACLtKOyZfMVUOqDxAs9R5DMsWIzMem+/Quwz3SHohX4I2MH12LUuL 2ig1bj46BxGCbf4ptidpl9QF2EU6YUwrPIaDxSpnqI5iOTwIHWTxftnhexFB9y7l H8qaUBM7YcwNt+ore/jU9xexMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlqHKNX R62GrWTUVLTQ8T12+0k5MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg1uYRPBEONqkh6A4CpwhjDVycybbGhK2y20DZp26ivYXpxYVIPxws6edwzHm 2tSH6oSxhWcj1xBG/XheCXGH2wOYZQatsU6kEFK4gCIn4QU9gQcz9c+uLHixWzx3 vtz615hKCNJjJN06Ym9J1eF4VxfAMxTS1eerch+1lpIBuhvk3nhVf4HjafAeIUzp NZReq1g2p7j0MxFKUCQSYPlFiPE5qpg89I2B8NHsCoIvrEct/bhO+W4iq49CCMge SP8hm8wJTBEA2n7YxlCNrncqN58ciFzS/Cz9RnwojqZpRzTmKRspdiZZVJb0L0R8 8MGnOqhI5EzpiyASCMNKp4DqrA== -----END CERTIFICATE-----Generated at Mon Oct 12 22:21:52 2026 by rpki-client