$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft File: O-7kvaWgSxBLHXLmAcMJONuktkQ.mft (raw, json) Hash identifier: 238jmQORiQeUYxQBghklSH26f9GIlBoDIET17hh4mwU= Subject key identifier: 47:C0:41:F8:B0:B6:72:8B:F7:AC:44:41:B8:4A:34:9F:96:F8:8B:48 Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44 Certificate issuer: /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644 Certificate serial: 1609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft Manifest number: 15FB Signing time: Tue 22 Sep 2026 16:39:24 +0000 Manifest this update: Tue 22 Sep 2026 16:39:23 +0000 Manifest next update: Tue 29 Sep 2026 16:39:23 +0000 Files and hashes: 1: O-7kvaWgSxBLHXLmAcMJONuktkQ.crl (hash: tI3RMWHdNsl2zL01/1lqwes7rH333ohR+T5eFhCVu2M=) 2: D9EDB272C44C11ECA07C2D77C4F9AE02.roa (hash: DJ4I97O5v0aU8HleXouiaPdcBM6EY3fv5eqakvOyiz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5641 (0x1609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D2A3, serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644 Validity Not Before: Sep 22 16:39:23 2026 GMT Not After : Sep 29 16:39:23 2026 GMT Subject: CN=6ab2af3c-f490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:98:e6:e1:1a:f7:e4:86:40:0e:07:e2:a3: b1:cb:0d:cb:73:f5:4a:fd:2d:74:e1:e5:e1:3c:6d: 0b:8f:2d:03:51:d1:38:bb:8e:b8:39:c2:c2:8e:ad: 72:f4:7c:9c:39:bb:fe:93:3b:30:b3:ee:12:22:c3: f8:01:46:6d:0c:a0:61:41:20:a4:e6:df:2d:3f:82: 1f:59:10:34:76:b9:62:5d:2c:31:37:7e:ce:8c:6d: 47:d5:3b:96:f2:ce:61:1a:df:e7:0f:a9:1d:0e:e8: 19:36:a2:bc:b0:d3:5a:b9:16:05:b7:fb:69:5e:12: a5:59:54:68:f4:da:09:22:0b:00:d8:73:d4:00:d5: 39:d7:5e:0d:69:62:1b:57:11:0a:16:06:3f:15:b3: fe:0a:91:c3:0f:c4:b2:50:30:d4:b5:af:c7:20:be: 44:2b:77:ff:89:45:93:b9:ec:3a:04:41:3b:0e:3b: d6:ee:80:ca:5a:fc:45:49:fa:2d:63:61:f4:95:6c: 39:3e:d8:30:e4:56:e2:2c:af:19:64:95:14:c6:7e: 0b:c8:22:d0:90:25:4b:f1:ee:18:8d:50:48:67:75: f6:fe:03:b3:c2:23:07:bb:24:56:be:3d:92:41:73: ca:15:01:19:1f:dd:83:bf:a2:64:2f:1e:bb:fb:9e: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:41:F8:B0:B6:72:8B:F7:AC:44:41:B8:4A:34:9F:96:F8:8B:48 X509v3 Authority Key Identifier: keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:52:6b:78:a5:15:66:89:39:56:28:19:eb:ad:20:49:c0:15: 68:a4:69:26:40:28:b1:e0:82:ec:f4:b0:6b:f9:11:19:7f:f9: 3e:77:6c:98:96:d4:cb:dd:35:f0:50:e4:1a:31:c1:50:f9:75: 28:7f:16:ef:84:d1:31:2e:4b:47:d3:77:95:22:cb:52:ea:b8: e8:56:de:87:51:02:6f:12:22:b1:76:a0:51:e5:05:98:cb:fb: 88:5f:40:f0:f0:82:4f:0e:d5:57:ff:f7:4f:bd:41:98:b2:f1: 91:dd:1b:e3:cf:3c:01:96:60:4b:2d:0f:4c:02:18:cf:07:cd: e0:3f:77:04:40:4c:be:e5:02:8c:1a:8d:0c:cc:e6:92:49:9e: 4b:7a:8e:17:26:f2:71:26:e1:1d:4b:99:6b:9d:93:c4:1b:95: 61:f0:fd:38:d3:5a:47:7c:22:43:dd:e3:50:4e:63:b8:f8:13: 41:4d:1e:f1:50:c2:b8:d8:c0:47:ed:85:6f:a6:4e:ce:40:99: 08:6b:80:d0:ed:6a:a9:34:4a:b9:ec:e8:94:78:46:f0:cc:8d: 55:02:e9:10:0e:40:9a:b4:f0:b1:f8:01:e6:ab:d6:80:46:fe: b0:ff:5e:57:d8:c4:65:11:bc:42:72:78:d7:fe:19:bc:2c:f9: 87:6c:3f:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQyQTMxMTAvBgNVBAUTKDNCRUVFNEJEQTVBMDRCMTA0QjFENzJFNjAxQzMwOTM4 REJBNEI2NDQwHhcNMjYwOTIyMTYzOTIzWhcNMjYwOTI5MTYzOTIzWjAYMRYwFAYD VQQDEw02YWIyYWYzYy1mNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d+Y5uEa9+SGQA4H4qOxyw3Lc/VK/S104eXhPG0Ljy0DUdE4u464OcLCjq1y 9HycObv+kzsws+4SIsP4AUZtDKBhQSCk5t8tP4IfWRA0drliXSwxN37OjG1H1TuW 8s5hGt/nD6kdDugZNqK8sNNauRYFt/tpXhKlWVRo9NoJIgsA2HPUANU5114NaWIb VxEKFgY/FbP+CpHDD8SyUDDUta/HIL5EK3f/iUWTuew6BEE7DjvW7oDKWvxFSfot Y2H0lWw5Ptgw5FbiLK8ZZJUUxn4LyCLQkCVL8e4YjVBIZ3X2/gOzwiMHuyRWvj2S QXPKFQEZH92Dv6JkLx67+54clQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfAQfiw tnKL96xEQbhKNJ+W+ItIMB8GA1UdIwQYMBaAFDvu5L2loEsQSx1y5gHDCTjbpLZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDJBMy9GNkFDNjM4NjRF RkQxMUU4ODkyQjg2ODNDNEY5QUUwMi9PLTdrdmFXZ1N4QkxIWExtQWNNSk9OdWt0 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08tN2t2YVdnU3hCTEhYTG1BY01KT051a3RrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDJBMy9GNkFDNjM4NjRFRkQxMUU4ODkyQjg2ODNDNEY5QUUwMi9PLTdrdmFXZ1N4 QkxIWExtQWNNSk9OdWt0a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWVJreKUVZok5VigZ660gScAVaKRpJkAoseCC7PSwa/kRGX/5PndsmJbUy901 8FDkGjHBUPl1KH8W74TRMS5LR9N3lSLLUuq46Fbeh1ECbxIisXagUeUFmMv7iF9A 8PCCTw7VV//3T71BmLLxkd0b4888AZZgSy0PTAIYzwfN4D93BEBMvuUCjBqNDMzm kkmeS3qOFybycSbhHUuZa52TxBuVYfD9ONNaR3wiQ93jUE5juPgTQU0e8VDCuNjA R+2Fb6ZOzkCZCGuA0O1qqTRKuezolHhG8MyNVQLpEA5AmrTwsfgB5qvWgEb+sP9e V9jEZRG8QnJ41/4ZvCz5h2w/BA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:02:26 2026 by rpki-client