$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: NBCw62Os9ATqEcx4eLqfegAIMo0fSAD1N4t3eetZ7Aw= Subject key identifier: E2:5C:67:49:B2:88:6A:8B:A0:61:08:C3:1A:F1:46:F1:92:1F:29:02 Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: 0134 Signing time: Sat 03 Oct 2026 06:16:22 +0000 Manifest this update: Sat 03 Oct 2026 06:16:21 +0000 Manifest next update: Sat 10 Oct 2026 06:16:21 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: TIe01XUL5MDMfeYU6STRz2zcLGZEN3wa7qCSdmbSBJc=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: FNVk1Hkb1JajhsNAiR0O9BCUIhbtgvJuSIfetEBCoj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: Oct 3 06:16:21 2026 GMT Not After : Oct 10 06:16:21 2026 GMT Subject: CN=6ac09db6-31a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:10:2b:17:21:77:e6:a5:5c:2e:f6:eb:02: a6:3e:24:f6:a9:44:2a:e3:cd:4d:be:a4:7c:45:d7: 40:bb:ec:0c:c4:6c:8c:5b:d0:da:e8:b1:02:0f:e1: 52:5c:d0:c0:b8:fd:c3:52:60:ec:74:69:59:61:72: 05:9c:00:76:8d:89:fd:6f:8c:59:d6:83:a4:7e:b7: 79:1c:b0:21:d6:92:ba:f6:c3:5a:53:31:ec:e4:97: e5:2d:10:fb:eb:87:0e:07:02:51:b5:43:f7:d2:8e: 0b:76:c4:62:fb:4a:86:42:bf:04:c3:b5:d9:85:f9: 58:69:ba:d4:d4:17:67:28:55:6e:9c:cd:c6:81:93: 81:f5:f2:93:dd:64:ed:a0:71:03:dc:6a:df:62:5f: 19:a3:5d:23:65:eb:0b:d7:31:17:cb:fb:30:57:c0: ed:42:76:4a:b5:ed:38:ba:51:95:66:db:41:17:a6: 58:b9:72:cb:79:d4:be:13:59:01:1d:13:0f:31:14: 12:a6:61:24:19:c7:4e:cf:ed:5a:f2:f2:8d:8a:0f: 84:4d:b8:fe:55:17:c6:eb:cb:a1:13:74:d9:07:56: 55:a9:bd:56:75:46:48:44:ea:a4:67:fb:54:3c:d9: 98:f9:86:c4:87:4f:06:71:a6:d6:9a:9a:49:3d:f4: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:67:49:B2:88:6A:8B:A0:61:08:C3:1A:F1:46:F1:92:1F:29:02 X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c5:5a:bf:db:3e:b9:4e:ff:04:d9:c1:a9:74:69:8d:95:fb: 8e:7d:bd:6b:a2:d1:a2:1f:0a:86:ba:5d:d1:4b:c3:c3:e8:ab: a4:6c:94:55:d4:17:7b:af:ee:cf:18:0b:06:63:d6:e2:ad:2a: 44:fa:cc:d9:f9:58:dd:ef:85:d2:ea:2f:99:49:42:a0:4e:62: a3:e9:5d:e8:b5:71:aa:d4:51:39:0e:4d:f6:71:d7:45:3a:34: 44:7e:68:9b:5d:ea:02:db:0f:36:e1:9c:b4:f7:f9:bb:04:31: d5:16:ab:86:79:87:9a:fd:2f:da:53:44:cc:7d:c9:58:d7:f8: 3b:1e:1f:26:e1:02:61:94:83:da:dc:1f:8e:68:8a:70:79:a2: 91:fe:12:c7:fc:3d:4d:f1:c6:86:84:35:dc:2d:cf:38:58:fa: 7a:1c:03:e6:a2:c4:af:a9:e5:f6:e0:fd:b8:43:06:1e:5e:38: 31:82:37:08:e2:b9:cc:9f:dd:ee:29:ab:08:b9:3b:d1:52:d6: 99:aa:da:e3:31:2d:7f:86:c1:13:05:59:6b:da:dd:bd:ea:cd: 9e:b9:32:39:9f:86:1f:d6:22:94:57:5a:b5:de:73:bf:40:86: 52:97:3f:54:cc:1d:c3:2a:b8:79:59:90:0d:c7:48:d8:88:a8: ab:02:0f:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGM0IxMTAvBgNVBAUTKEEzOEQ0ODdCRDVEOUE4QTg5NDgwMjc0RkU2RjdDMDYx QzYyNEJDQzAwHhcNMjYxMDAzMDYxNjIxWhcNMjYxMDEwMDYxNjIxWjAYMRYwFAYD VQQDEw02YWMwOWRiNi0zMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+4QKxchd+alXC726wKmPiT2qUQq481NvqR8RddAu+wMxGyMW9Da6LECD+FS XNDAuP3DUmDsdGlZYXIFnAB2jYn9b4xZ1oOkfrd5HLAh1pK69sNaUzHs5JflLRD7 64cOBwJRtUP30o4LdsRi+0qGQr8Ew7XZhflYabrU1BdnKFVunM3GgZOB9fKT3WTt oHED3GrfYl8Zo10jZesL1zEXy/swV8DtQnZKte04ulGVZttBF6ZYuXLLedS+E1kB HRMPMRQSpmEkGcdOz+1a8vKNig+ETbj+VRfG68uhE3TZB1ZVqb1WdUZIROqkZ/tU PNmY+YbEh08GcabWmppJPfQd7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJcZ0my iGqLoGEIwxrxRvGSHykCMB8GA1UdIwQYMBaAFKONSHvV2aiolIAnT+b3wGHGJLzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUYzQi9BQzc2MjIwMEU5 QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFLaVVnQ2RQNXZmQVljWWt2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUYzQi9BQzc2MjIwMEU5QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFL aVVnQ2RQNXZmQVljWWt2TUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiMVav9s+uU7/BNnBqXRpjZX7jn29a6LRoh8Khrpd0UvDw+irpGyUVdQXe6/u zxgLBmPW4q0qRPrM2flY3e+F0uovmUlCoE5io+ld6LVxqtRROQ5N9nHXRTo0RH5o m13qAtsPNuGctPf5uwQx1RarhnmHmv0v2lNEzH3JWNf4Ox4fJuECYZSD2twfjmiK cHmikf4Sx/w9TfHGhoQ13C3POFj6ehwD5qLEr6nl9uD9uEMGHl44MYI3COK5zJ/d 7imrCLk70VLWmara4zEtf4bBEwVZa9rdverNnrkyOZ+GH9YilFdatd5zv0CGUpc/ VMwdwyq4eVmQDcdI2IioqwIP1A== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:36 2026 by rpki-client