$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json) Hash identifier: tJaxDBur1VK+cGR+YgKkwNNJZQW+lKoSNZ6w5hFyNfE= Subject key identifier: 1D:DC:C6:A6:D3:D8:4D:17:CE:4A:B6:E0:D5:17:5C:DE:38:3F:A3:5F Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft Manifest number: 08D6 Signing time: Fri 02 Oct 2026 20:42:55 +0000 Manifest this update: Fri 02 Oct 2026 20:42:54 +0000 Manifest next update: Fri 09 Oct 2026 20:42:54 +0000 Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: 4Qe4XRv/gtcYfqUIwVaeF7TFVQ4gHx9YohMpk1MC2cU=) 2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Validity Not Before: Oct 2 20:42:54 2026 GMT Not After : Oct 9 20:42:54 2026 GMT Subject: CN=6ac0174e-80c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:28:6e:bb:9b:ac:04:a1:f0:f0:61:19:70: c0:3f:c7:6e:9f:cf:f5:b1:97:89:73:1c:e7:91:ed: 19:db:44:d6:5f:eb:85:36:db:e4:1e:68:f4:c5:06: 18:fd:e7:dc:ab:ac:f3:80:c4:fc:58:68:0b:89:3f: 1a:61:ec:77:d7:a8:59:86:dd:66:96:bf:39:c9:94: e6:9d:29:db:a1:c0:cb:83:8d:f7:c3:fb:30:21:d4: fe:fc:b0:dd:a8:5d:be:11:a3:1a:b6:8a:92:f7:d3: a8:01:99:0c:17:02:1f:1d:44:1b:01:f2:74:29:d4: e4:16:05:56:1b:c7:25:f5:27:33:b5:04:c1:22:e6: 83:7c:a8:d1:29:f6:45:0b:00:ef:f4:e2:c4:14:c6: db:96:04:6f:03:4c:05:4a:47:a2:99:b3:c0:42:b2: a4:c5:c1:28:9a:fa:34:62:4a:6e:a3:33:7f:48:24: 05:5e:09:4c:0e:ee:51:34:63:c4:02:1a:e2:7c:b6: 48:c6:31:8d:f7:59:a2:15:cc:6b:14:6b:b8:e2:91: 3b:d6:5d:2d:cb:68:e0:7a:ef:42:a9:c4:c5:fe:c1: 24:e2:e4:a0:2e:52:07:a4:c1:cd:fa:da:6d:69:b8: 7c:04:f4:85:e2:92:b4:b2:67:56:8d:99:7b:2b:38: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:C6:A6:D3:D8:4D:17:CE:4A:B6:E0:D5:17:5C:DE:38:3F:A3:5F X509v3 Authority Key Identifier: keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a9:34:68:6a:53:12:46:87:e1:b8:54:e5:d0:9e:af:77:b0: 01:0b:f4:df:c3:25:d4:70:30:ad:11:f0:1a:c1:ac:f5:be:3f: 6c:49:6d:f9:33:be:00:21:f1:82:3a:0b:2b:20:f7:f7:1d:92: 64:7c:ed:60:9a:4c:6f:56:7c:51:c9:bc:f8:80:3c:ed:cd:fc: b4:8d:89:93:12:21:69:03:9f:61:78:a2:6a:51:65:de:09:2e: 1b:be:2c:4a:85:b6:40:12:c6:40:fb:ff:1c:73:07:01:ae:de: d8:aa:df:f8:a8:b1:ee:c9:33:47:57:c5:49:86:d5:8d:13:7a: dd:9e:3b:58:40:46:c0:af:e8:9b:1c:d2:09:a1:37:b4:17:8e: e1:b8:37:e5:17:1c:da:24:79:de:01:dc:06:2b:ea:5c:bc:94: 1a:9a:6b:49:b6:55:ab:2f:89:70:c2:fa:db:14:de:11:f2:85: 60:39:f2:8b:7a:09:ec:e8:e4:d0:18:8e:72:5b:cc:25:b9:c5: 63:a1:de:de:75:da:ab:89:68:f1:a8:89:75:d0:ba:bc:da:5c: fb:94:09:3c:94:bd:5d:54:4b:29:1b:1c:d2:65:eb:93:cf:61: ab:ad:0c:92:72:21:db:28:c9:81:48:c0:59:f1:56:51:cf:02: bf:a1:0a:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4 NTcwMkRBQjEwHhcNMjYxMDAyMjA0MjU0WhcNMjYxMDA5MjA0MjU0WjAYMRYwFAYD VQQDEw02YWMwMTc0ZS04MGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPMobrubrASh8PBhGXDAP8dun8/1sZeJcxznke0Z20TWX+uFNtvkHmj0xQYY /efcq6zzgMT8WGgLiT8aYex316hZht1mlr85yZTmnSnbocDLg433w/swIdT+/LDd qF2+EaMatoqS99OoAZkMFwIfHUQbAfJ0KdTkFgVWG8cl9ScztQTBIuaDfKjRKfZF CwDv9OLEFMbblgRvA0wFSkeimbPAQrKkxcEomvo0YkpuozN/SCQFXglMDu5RNGPE AhrifLZIxjGN91miFcxrFGu44pE71l0ty2jgeu9CqcTF/sEk4uSgLlIHpMHN+tpt abh8BPSF4pK0smdWjZl7KzgheQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3cxqbT 2E0Xzkq24NUXXN44P6NfMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w MENaX3AyU04wXy1GY0MyckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgqk0aGpTEkaH4bhU5dCer3ewAQv038Ml1HAwrRHwGsGs9b4/bElt+TO+ACHx gjoLKyD39x2SZHztYJpMb1Z8Ucm8+IA87c38tI2JkxIhaQOfYXiialFl3gkuG74s SoW2QBLGQPv/HHMHAa7e2Krf+Kix7skzR1fFSYbVjRN63Z47WEBGwK/omxzSCaE3 tBeO4bg35Rcc2iR53gHcBivqXLyUGpprSbZVqy+JcML62xTeEfKFYDnyi3oJ7Ojk 0BiOclvMJbnFY6He3nXaq4lo8aiJddC6vNpc+5QJPJS9XVRLKRsc0mXrk89hq60M knIh2yjJgUjAWfFWUc8Cv6EKWg== -----END CERTIFICATE-----Generated at Sun Oct 4 19:57:35 2026 by rpki-client