$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: HI+oq5HXGyWmOVFcVwbBVNGGysdHlNNFcDccfuVX96I= Subject key identifier: DA:F2:C0:F2:5A:74:3E:5A:FE:7A:B1:CE:93:9C:9F:6D:56:4F:11:9D Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0DAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0D9F Signing time: Tue 06 Oct 2026 18:01:25 +0000 Manifest this update: Tue 06 Oct 2026 18:01:25 +0000 Manifest next update: Tue 13 Oct 2026 18:01:25 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: kX8D+eDrYNq3Zzxx1WWkf9swxGRBDJAYiO/8R96bUTE=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Oct 6 18:01:25 2026 GMT Not After : Oct 13 18:01:25 2026 GMT Subject: CN=6ac53775-537c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:90:a8:f2:64:75:32:2b:b5:8d:71:7e:c7:70: 2c:96:1a:c7:1e:ff:a4:62:4e:2a:7e:b8:38:b3:d4: 44:a2:e5:ab:7f:a9:6d:35:c0:93:8a:f3:b3:58:8d: d2:1c:a1:cd:14:e5:3f:9d:d8:bd:90:b1:dd:97:cd: 31:e0:57:bd:bd:b7:93:69:ea:cc:56:5d:85:8e:50: c3:21:f7:31:11:55:79:f6:73:79:04:23:3e:bb:ff: 96:54:3c:63:35:a4:d4:7e:19:4b:6f:e3:ae:c0:d0: 68:d6:99:1b:b8:36:ec:50:7f:db:4f:1a:65:05:27: c2:2c:78:95:9c:52:e5:99:47:53:09:db:1e:54:83: a2:51:31:0c:9d:79:23:a7:03:88:2c:2f:62:44:3c: e8:df:a6:89:fb:7b:07:be:17:d1:ad:3c:2b:77:52: e2:aa:8a:d4:ed:3f:f1:d8:f1:88:33:99:3c:15:0f: d2:06:5d:4a:b1:f8:4b:15:c9:ed:a3:9e:f7:9e:03: 97:5d:bc:47:06:c0:b9:36:a2:65:2d:0d:41:fc:95: 14:26:9f:ab:04:78:0f:19:68:1c:df:72:95:dd:a0: 79:34:be:72:67:c6:4d:b4:ba:88:4f:34:48:8e:9c: 4f:29:6d:b7:42:6a:6a:c6:94:64:0b:b9:5f:65:7c: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F2:C0:F2:5A:74:3E:5A:FE:7A:B1:CE:93:9C:9F:6D:56:4F:11:9D X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c8:dd:52:18:fb:3c:22:20:2e:c3:44:fa:86:b2:5c:fc:02: 36:06:e6:ed:3b:39:ba:56:77:8d:04:38:90:79:9e:b6:c0:01: 9e:55:fe:60:e8:f2:77:26:ed:5b:d9:d6:5d:47:b3:3b:13:08: a6:d5:3e:07:5b:e1:71:3c:3a:64:f7:3c:8d:6e:59:31:e6:04: a7:86:a1:5a:30:83:9d:db:c3:f6:ba:bf:1f:a0:42:e2:55:11: 0b:ee:0e:55:f6:e6:cb:6f:11:29:e8:38:2d:13:7a:13:ac:3f: aa:55:66:7e:21:aa:1b:6c:60:bb:e9:f7:48:55:1b:7d:02:8f: 32:70:b5:b0:4e:f2:51:15:ba:e9:6d:00:f6:ad:84:25:8f:66: 39:d4:0b:a9:12:31:df:63:65:be:38:97:9d:b5:04:36:e5:7a: 09:27:62:32:ab:d1:73:54:dc:d0:c5:3c:98:0d:ae:2c:24:5d: 97:ab:f8:33:be:5e:88:f0:26:aa:c9:da:78:6c:83:91:d7:7c: f9:2f:b2:08:07:66:50:f1:ad:58:6c:bc:1d:d2:02:28:be:92: f5:d9:8d:06:d7:f3:ee:c2:fb:58:92:a2:20:15:c7:22:65:0c: b3:c0:fa:94:a2:61:e5:06:fe:2d:e0:98:10:46:aa:f0:62:25: c3:96:e5:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjYxMDA2MTgwMTI1WhcNMjYxMDEzMTgwMTI1WjAYMRYwFAYD VQQDEw02YWM1Mzc3NS01MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZCo8mR1Miu1jXF+x3AslhrHHv+kYk4qfrg4s9REouWrf6ltNcCTivOzWI3S HKHNFOU/ndi9kLHdl80x4Fe9vbeTaerMVl2FjlDDIfcxEVV59nN5BCM+u/+WVDxj NaTUfhlLb+OuwNBo1pkbuDbsUH/bTxplBSfCLHiVnFLlmUdTCdseVIOiUTEMnXkj pwOILC9iRDzo36aJ+3sHvhfRrTwrd1LiqorU7T/x2PGIM5k8FQ/SBl1KsfhLFcnt o573ngOXXbxHBsC5NqJlLQ1B/JUUJp+rBHgPGWgc33KV3aB5NL5yZ8ZNtLqITzRI jpxPKW23QmpqxpRkC7lfZXzYdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrywPJa dD5a/nqxzpOcn21WTxGdMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADsjdUhj7PCIgLsNE+oayXPwCNgbm7Ts5ulZ3jQQ4kHmetsABnlX+YOjydybt W9nWXUezOxMIptU+B1vhcTw6ZPc8jW5ZMeYEp4ahWjCDndvD9rq/H6BC4lURC+4O Vfbmy28RKeg4LRN6E6w/qlVmfiGqG2xgu+n3SFUbfQKPMnC1sE7yURW66W0A9q2E JY9mOdQLqRIx32NlvjiXnbUENuV6CSdiMqvRc1Tc0MU8mA2uLCRdl6v4M75eiPAm qsnaeGyDkdd8+S+yCAdmUPGtWGy8HdICKL6S9dmNBtfz7sL7WJKiIBXHImUMs8D6 lKJh5Qb+LeCYEEaq8GIlw5bl/w== -----END CERTIFICATE-----Generated at Thu Oct 8 01:04:40 2026 by rpki-client