$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: DR6E67VvgSypAYbsh6gSzdhlS6geZn9wCcwjp/o5xcY= Subject key identifier: E4:1E:E3:B6:AE:D0:AE:C5:7A:53:C2:77:A6:53:8E:19:CF:A5:40:FF Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 055F Signing time: Wed 30 Sep 2026 23:46:57 +0000 Manifest this update: Wed 30 Sep 2026 23:46:57 +0000 Manifest next update: Wed 07 Oct 2026 23:46:57 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: +PYn/HWoXyos8cONkPLLUQGnX5RN+QTNhQHf6PnGe8A=) 2: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) 3: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 23:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Sep 30 23:46:57 2026 GMT Not After : Oct 7 23:46:57 2026 GMT Subject: CN=6abd9f71-fc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:8b:90:c1:27:44:7f:dc:47:1a:b2:6a:4a: 01:0f:07:0a:5d:be:13:d0:91:95:27:c3:ae:25:b8: 4c:eb:85:b2:27:54:c5:68:ba:48:36:04:34:92:ec: 0b:92:8b:18:43:47:ad:2f:6a:23:ee:cf:9f:22:5c: 4e:73:e1:89:fc:bb:0b:b6:7a:92:78:8a:06:51:50: 67:a9:ef:5e:56:3c:7f:66:a2:ee:fa:a3:7c:50:31: fc:d0:6a:2b:f1:37:e6:a3:04:a7:ba:a2:db:a1:24: 03:f3:dd:ff:3f:a4:b8:c6:ad:55:2c:5d:93:3c:52: ab:83:f5:02:51:19:dc:b2:d4:df:b8:e3:df:cd:c0: e0:f2:1c:85:77:7a:51:1d:dd:fa:88:3f:5c:73:48: 9d:05:e0:20:d0:0c:9b:cd:92:b0:0c:56:cc:69:c3: 41:bb:c3:c4:92:10:b7:15:f1:cd:40:5b:7f:ca:88: 5d:1e:5e:da:b1:eb:3a:4c:af:17:d0:1d:a3:86:62: ae:be:fb:c5:1e:91:e8:93:10:17:4e:ec:b6:d7:28: 48:5d:9e:03:8f:50:6a:f7:08:e0:fb:38:e5:fd:08: 3b:6e:2f:c5:20:85:39:5f:8a:98:d4:6c:c0:c7:dc: 2f:a4:a9:a5:0f:de:8d:74:f1:5b:d8:ba:d8:28:bd: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:E3:B6:AE:D0:AE:C5:7A:53:C2:77:A6:53:8E:19:CF:A5:40:FF X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:70:8a:ad:62:f3:4e:4a:ba:ae:1f:40:35:a5:e6:cd:5a:fe: 7d:80:a4:9b:78:b1:ee:7c:bc:09:9e:12:57:8f:f2:88:eb:80: cc:52:da:fb:12:12:81:11:c4:30:d5:15:43:14:cf:4a:a2:ae: 03:95:ea:fd:5a:29:7e:9c:36:c7:4d:09:12:42:da:c5:0c:ac: 05:9e:da:8f:cb:8b:6d:ec:c9:a9:73:c6:13:63:52:c4:8c:6b: 8a:fa:bc:61:a2:71:8b:6d:b1:ea:37:82:ec:a3:ac:22:91:10: bd:7e:55:ea:e6:e9:da:3b:08:27:52:60:e1:f0:ac:63:8b:f4: fd:69:d0:5b:68:ef:ed:a1:42:71:57:ab:c9:e5:44:1c:06:de: 14:22:cf:51:05:d3:11:35:6a:c7:aa:37:ac:8a:88:45:19:5e: 36:b5:8a:7c:a0:9c:92:44:c1:95:b3:7b:98:21:75:71:1f:3b: 60:1d:c4:c7:f1:db:b9:b1:0c:44:34:62:81:54:e7:9a:37:70: 0d:1e:64:61:30:9a:5c:50:b4:22:fd:d1:86:95:1a:8a:bb:0b: 62:68:7d:5d:80:91:b7:4c:e4:14:76:17:c1:c7:aa:20:a9:cf: 5b:60:85:4d:2b:2f:bb:fe:ef:95:1a:c7:a9:e1:36:ee:f4:02: 30:08:31:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYwOTMwMjM0NjU3WhcNMjYxMDA3MjM0NjU3WjAYMRYwFAYD VQQDEw02YWJkOWY3MS1mYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRuLkMEnRH/cRxqyakoBDwcKXb4T0JGVJ8OuJbhM64WyJ1TFaLpINgQ0kuwL kosYQ0etL2oj7s+fIlxOc+GJ/LsLtnqSeIoGUVBnqe9eVjx/ZqLu+qN8UDH80Gor 8TfmowSnuqLboSQD893/P6S4xq1VLF2TPFKrg/UCURncstTfuOPfzcDg8hyFd3pR Hd36iD9cc0idBeAg0AybzZKwDFbMacNBu8PEkhC3FfHNQFt/yohdHl7ases6TK8X 0B2jhmKuvvvFHpHokxAXTuy21yhIXZ4Dj1Bq9wjg+zjl/Qg7bi/FIIU5X4qY1GzA x9wvpKmlD96NdPFb2LrYKL0jhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQe47au 0K7FelPCd6ZTjhnPpUD/MB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb3CKrWLzTkq6rh9ANaXmzVr+fYCkm3ix7ny8CZ4SV4/yiOuAzFLa+xISgRHE MNUVQxTPSqKuA5Xq/Vopfpw2x00JEkLaxQysBZ7aj8uLbezJqXPGE2NSxIxrivq8 YaJxi22x6jeC7KOsIpEQvX5V6ubp2jsIJ1Jg4fCsY4v0/WnQW2jv7aFCcVeryeVE HAbeFCLPUQXTETVqx6o3rIqIRRleNrWKfKCckkTBlbN7mCF1cR87YB3Ex/HbubEM RDRigVTnmjdwDR5kYTCaXFC0Iv3RhpUairsLYmh9XYCRt0zkFHYXwceqIKnPW2CF TSsvu/7vlRrHqeE27vQCMAgx1g== -----END CERTIFICATE-----Generated at Thu Oct 1 17:59:22 2026 by rpki-client