$ rpki-client -vvvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: AWnzrhjmCECIAjUiJzDc3kmq11Q+gWDeo4Q5MVXQSrI= Subject key identifier: 6C:EB:5A:34:E7:93:32:A4:8A:FF:C7:05:A2:75:06:13:A5:E0:A0:BD Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 0910 Signing time: Sun 18 Oct 2026 20:24:42 +0000 Manifest this update: Sun 18 Oct 2026 20:24:42 +0000 Manifest next update: Sun 25 Oct 2026 20:24:42 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: vf4HLAV632r2ew1SESz/sUwDVsEgeCkVB9gVje8+Yyo=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Oct 18 20:24:42 2026 GMT Not After : Oct 25 20:24:42 2026 GMT Subject: CN=6ad52b0a-071a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:0d:5d:1f:3b:28:71:88:35:51:f4:a4:bd: 80:d1:ff:65:0c:5f:ba:54:ef:7b:7a:7c:d2:d0:0c: 6f:70:e4:de:e3:58:47:e6:34:82:66:1e:c4:05:cd: 04:9f:47:cc:41:64:19:5b:96:d5:d0:3f:4d:5c:d8: 3e:35:f2:b0:6e:37:0f:7c:6a:7d:e2:23:8b:d6:ae: 61:0d:c4:2c:d6:70:18:cd:8e:24:ed:6f:55:4a:11: c6:a7:78:3f:89:1a:e8:a6:e0:8f:8b:6e:18:5b:00: f8:ff:67:de:4c:94:22:5d:bc:ec:0c:7e:c6:b4:cc: 85:18:cc:66:9e:cf:c2:8b:a4:8b:a7:4d:25:d0:30: 92:0a:c4:f3:10:b1:a9:88:f3:b4:5d:f5:ff:e2:58: 10:ce:27:ea:b2:4b:3e:0e:f5:d0:61:84:44:9d:6b: 82:bb:3b:3c:4d:b6:5f:21:88:67:b1:f1:84:a8:aa: 29:b1:3c:39:9e:3e:90:68:72:e6:32:4a:0b:9c:3c: 26:db:5f:1a:d5:4b:54:d6:ff:b6:5d:a6:97:fc:d2: d1:92:91:20:aa:fe:0b:d3:98:00:10:76:70:4b:5e: b8:1a:c5:d4:6b:50:ab:f1:00:5b:d4:4b:6e:49:48: 5a:4e:cb:2d:43:fb:44:43:42:8e:f1:b2:7e:61:a6: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EB:5A:34:E7:93:32:A4:8A:FF:C7:05:A2:75:06:13:A5:E0:A0:BD X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ed:2d:c5:bd:78:65:2f:8a:d7:76:2c:d0:69:9b:08:50:f7: 81:23:ef:91:7b:c2:84:26:50:a9:a9:24:d4:91:74:c4:ef:ff: 4e:7b:91:c7:20:1a:fd:13:0e:1b:06:fa:d6:af:e5:1d:dd:d4: cc:e2:89:2a:a3:63:2a:28:06:70:77:96:22:cf:c4:53:95:b8: b7:a9:65:23:bf:a7:25:89:9f:c6:d5:87:83:3f:cf:73:d1:a9: 37:f6:bd:b1:f5:e3:8b:66:29:df:12:13:d4:d6:5f:9b:7e:0e: 2d:9a:53:6d:2b:83:fa:35:a9:13:67:d2:07:aa:db:60:24:dc: a5:3f:b9:39:88:86:72:3f:42:04:41:d2:c9:35:f4:f6:f1:5d: c3:6a:d7:0a:4c:73:8a:09:86:d3:e0:a4:6b:b5:2a:c0:69:80: e8:01:c4:5c:e4:2d:75:c9:b0:e3:96:31:a1:38:b0:07:6c:8c: bf:85:78:51:d1:33:91:2f:0e:b5:45:7b:8b:04:e8:20:2a:55: 76:dd:5c:26:bd:68:bd:2a:16:91:a7:f3:5b:89:c1:25:4a:33: 30:79:66:65:8a:36:0f:33:b7:f1:53:b9:e3:dc:94:de:ab:20: 7c:47:f2:fc:2e:a7:43:60:05:10:72:c1:9b:0b:d9:8a:90:90: d0:ef:8b:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYxMDE4MjAyNDQyWhcNMjYxMDI1MjAyNDQyWjAYMRYwFAYD VQQDEw02YWQ1MmIwYS0wNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2wNXR87KHGINVH0pL2A0f9lDF+6VO97enzS0AxvcOTe41hH5jSCZh7EBc0E n0fMQWQZW5bV0D9NXNg+NfKwbjcPfGp94iOL1q5hDcQs1nAYzY4k7W9VShHGp3g/ iRropuCPi24YWwD4/2feTJQiXbzsDH7GtMyFGMxmns/Ci6SLp00l0DCSCsTzELGp iPO0XfX/4lgQzifqsks+DvXQYYREnWuCuzs8TbZfIYhnsfGEqKopsTw5nj6QaHLm MkoLnDwm218a1UtU1v+2XaaX/NLRkpEgqv4L05gAEHZwS164GsXUa1Cr8QBb1Etu SUhaTsstQ/tEQ0KO8bJ+YaatMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzrWjTn kzKkiv/HBaJ1BhOl4KC9MB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOu0txb14ZS+K13Ys0GmbCFD3gSPvkXvChCZQqakk1JF0xO//TnuRxyAa/RMO Gwb61q/lHd3UzOKJKqNjKigGcHeWIs/EU5W4t6llI7+nJYmfxtWHgz/Pc9GpN/a9 sfXji2Yp3xIT1NZfm34OLZpTbSuD+jWpE2fSB6rbYCTcpT+5OYiGcj9CBEHSyTX0 9vFdw2rXCkxzigmG0+Cka7UqwGmA6AHEXOQtdcmw45YxoTiwB2yMv4V4UdEzkS8O tUV7iwToICpVdt1cJr1ovSoWkafzW4nBJUozMHlmZYo2DzO38VO549yU3qsgfEfy /C6nQ2AFEHLBmwvZipCQ0O+LVA== -----END CERTIFICATE-----Generated at Mon Oct 19 00:52:31 2026 by rpki-client