$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: r3IOO6QfykGud58CLcu++8Ma2w7j5uWmJNVMghoAdlw= Subject key identifier: 9F:9B:6F:72:CD:96:C4:A5:C3:79:EC:AA:C0:98:F4:41:20:3F:E7:E9 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0298 Signing time: Mon 05 Oct 2026 02:21:47 +0000 Manifest this update: Mon 05 Oct 2026 02:21:46 +0000 Manifest next update: Mon 12 Oct 2026 02:21:46 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: gkr0sB65rE//OIeYrBO2IfZSiCGl+Op4DlVa4csJavI=) 2: A78C8AB896E511F195E2E0D45C11F970.roa (hash: y6k5gAl70xPgm1PdqA0djO2XSJUwhklLEIGZFO4hIJc=) 3: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=) 4: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Oct 5 02:21:46 2026 GMT Not After : Oct 12 02:21:46 2026 GMT Subject: CN=6ac309bb-a005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:a7:ff:b6:4a:8a:28:17:e8:2c:dd:2b:9f: 8d:6b:96:03:b8:2a:aa:b6:e0:0c:8e:3b:e7:f5:f0: cc:d5:a6:99:98:1e:44:66:5c:45:1e:28:4c:28:64: 09:0d:06:40:85:7c:e6:35:1b:bb:13:b3:67:8c:2e: 9f:c5:af:d6:ab:d4:d9:a9:2c:0c:f2:7e:eb:96:92: 3d:a8:51:fa:25:9c:76:2b:61:34:14:ad:88:61:6a: d5:da:44:42:a6:78:b5:a6:58:3e:32:2b:b4:6a:7a: 22:99:2c:10:ce:9a:0a:d1:01:7e:52:12:c5:92:c5: 55:1e:b9:34:24:98:91:00:8f:8a:31:66:c1:da:c2: ac:a2:54:c5:95:6f:be:3e:7f:ff:c2:76:af:b2:1e: 8d:7e:b7:43:8a:7e:f9:a2:7d:f8:c0:ee:24:f2:3a: 0f:93:95:55:63:3e:aa:3a:f7:60:77:25:5f:a6:18: ab:ad:da:63:2d:32:39:99:d2:3e:c6:ce:9d:b3:a1: f4:e7:2a:56:de:22:62:d9:b2:eb:ce:8a:c6:aa:08: e0:c6:46:3e:3b:75:be:09:24:5a:2e:66:51:ad:b0: 15:58:6d:14:32:0b:19:a2:1d:4d:7c:a8:ef:cd:64: 80:b8:2a:04:59:78:34:73:15:b7:7a:bb:51:de:d3: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:6F:72:CD:96:C4:A5:C3:79:EC:AA:C0:98:F4:41:20:3F:E7:E9 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1a:34:9a:b2:ca:63:1e:57:03:a1:a1:a5:98:ba:55:d3:ff: 0b:35:a7:f7:bf:ad:b9:59:b4:b8:f3:64:ea:9a:cd:25:e4:d2: dc:33:94:e3:68:18:a7:e9:70:6f:ca:50:eb:02:2d:f5:30:b7: 22:15:ca:66:9d:07:a3:97:84:84:14:02:96:e6:9d:a3:da:b2: ba:11:f6:d4:ea:4e:cb:5f:a9:9a:b5:ff:75:f6:48:62:c0:d3: 1a:0a:db:d3:d8:34:7d:37:11:c0:56:4c:d7:bf:2a:d2:ab:c6: ae:31:fb:69:c1:75:34:c9:97:fa:e6:a1:90:09:e8:55:54:8a: 6f:30:d8:bb:e3:d5:af:8a:c2:5a:f0:7d:34:4e:27:55:51:04: 76:08:df:a3:76:e0:35:6c:8c:32:6c:05:e7:e9:47:84:20:db: 6c:75:9d:e1:40:cc:1c:c0:34:99:ff:3b:e4:93:4d:4d:dc:00: 51:e0:45:1b:06:c5:c7:6c:79:a9:22:f4:c2:41:83:e4:19:5c: e0:c3:19:79:d3:0b:59:41:c7:ee:c4:23:a2:fe:a1:8c:62:bc: 56:7e:d9:c2:6c:80:e8:61:0b:f8:2e:2e:90:06:92:3f:9e:34: 08:13:80:7d:69:55:eb:eb:c0:c4:c1:84:c0:37:20:ab:d4:90: 56:46:0e:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYxMDA1MDIyMTQ2WhcNMjYxMDEyMDIyMTQ2WjAYMRYwFAYD VQQDEw02YWMzMDliYi1hMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZqn/7ZKiigX6CzdK5+Na5YDuCqqtuAMjjvn9fDM1aaZmB5EZlxFHihMKGQJ DQZAhXzmNRu7E7NnjC6fxa/Wq9TZqSwM8n7rlpI9qFH6JZx2K2E0FK2IYWrV2kRC pni1plg+Miu0anoimSwQzpoK0QF+UhLFksVVHrk0JJiRAI+KMWbB2sKsolTFlW++ Pn//wnavsh6NfrdDin75on34wO4k8joPk5VVYz6qOvdgdyVfphirrdpjLTI5mdI+ xs6ds6H05ypW3iJi2bLrzorGqgjgxkY+O3W+CSRaLmZRrbAVWG0UMgsZoh1NfKjv zWSAuCoEWXg0cxW3ertR3tPp8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+bb3LN lsSlw3nsqsCY9EEgP+fpMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKho0mrLKYx5XA6GhpZi6VdP/CzWn97+tuVm0uPNk6prNJeTS3DOU42gYp+lw b8pQ6wIt9TC3IhXKZp0Ho5eEhBQCluado9qyuhH21OpOy1+pmrX/dfZIYsDTGgrb 09g0fTcRwFZM178q0qvGrjH7acF1NMmX+uahkAnoVVSKbzDYu+PVr4rCWvB9NE4n VVEEdgjfo3bgNWyMMmwF5+lHhCDbbHWd4UDMHMA0mf875JNNTdwAUeBFGwbFx2x5 qSL0wkGD5Blc4MMZedMLWUHH7sQjov6hjGK8Vn7ZwmyA6GEL+C4ukAaSP540CBOA fWlV6+vAxMGEwDcgq9SQVkYOXA== -----END CERTIFICATE-----Generated at Mon Oct 5 14:36:30 2026 by rpki-client