$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json) Hash identifier: tEzZqCZjijsCzd25mc7o+/K8Y4Q9Y5z0IMGkMLcx+8o= Subject key identifier: E2:41:21:7A:8D:E9:56:18:82:80:8A:2B:8E:34:46:2D:6B:3D:C4:48 Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft Manifest number: 8A Signing time: Wed 23 Sep 2026 07:20:03 +0000 Manifest this update: Wed 23 Sep 2026 07:20:03 +0000 Manifest next update: Wed 30 Sep 2026 07:20:03 +0000 Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: PTu0Hg+wAmxNjAw87RfNbzNsPdMTG1ePKEtZ+tsu4DI=) 2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Sep 23 07:20:03 2026 GMT Not After : Sep 30 07:20:03 2026 GMT Subject: CN=6ab37da3-51d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:7a:0c:d7:30:5e:04:dc:29:c4:78:ab:b5: 5c:09:49:02:a6:28:7e:8d:bb:84:6d:1a:0d:14:bb: 24:2a:28:33:5f:c1:7f:38:23:c5:54:ce:eb:46:11: 27:7a:f3:32:5f:8c:c8:27:8a:23:11:ea:d0:4b:b4: cb:c3:21:be:30:a2:c3:e7:b1:c6:1b:7c:b1:f1:af: 96:43:ea:b4:b5:46:3d:24:14:17:47:a2:8a:ea:11: 5d:84:60:58:4c:54:b3:5b:b9:82:c1:0f:6a:7c:2b: 9f:6c:56:1b:eb:d6:35:ea:fc:13:c3:bb:0b:e2:f4: dc:b0:76:83:81:14:1c:24:85:96:0f:3e:8a:20:65: a8:d1:14:40:0b:60:df:67:74:5a:77:c5:a5:18:ac: 50:9d:55:71:56:88:15:64:ca:af:e7:3a:eb:37:c2: 0f:b0:89:da:5d:06:0e:1d:fb:78:58:5d:d3:ac:8c: f5:6e:3f:80:97:5c:e5:5d:bb:de:39:4c:c6:d4:6a: c4:72:3b:e2:06:3a:de:91:4c:ea:47:41:b7:82:bf: a6:9c:8c:c9:bd:73:67:ce:34:87:45:24:12:20:33: 03:dd:66:2f:8d:db:5a:7d:34:de:09:db:36:36:02: a1:60:71:31:3e:5c:e5:b4:54:35:de:30:9a:2a:63: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:41:21:7A:8D:E9:56:18:82:80:8A:2B:8E:34:46:2D:6B:3D:C4:48 X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b7:75:1b:90:f9:ec:64:ca:e4:ca:22:e9:65:fb:9a:6a:0c: f5:80:49:26:34:55:84:eb:32:67:28:8a:c9:98:bc:9a:5b:52: b5:2a:a5:9b:72:84:3f:31:77:20:02:80:06:53:86:02:3d:0e: 0b:42:67:9e:74:74:92:6a:8d:e2:a7:1a:5c:cd:f0:69:ab:ab: 48:e5:44:2d:c4:4a:36:67:c0:0e:81:17:89:bb:63:4c:59:a2: 14:fb:e2:15:c2:1f:83:4b:86:e8:e5:1c:78:ba:a6:8c:56:c6: 5c:6e:b8:91:e8:88:15:b2:66:39:db:cf:52:79:e0:2b:13:9d: bb:f9:34:bf:66:e3:08:86:e9:f3:c2:ea:19:52:2a:92:3a:ce: e2:70:00:e3:8e:07:c3:9c:d9:6c:0e:70:e5:70:f5:9b:6a:44: 86:67:d4:4e:9e:04:b9:d8:ac:1a:03:11:a0:df:03:44:49:90: ff:1c:5c:7c:db:d2:ad:0b:85:10:e1:61:7a:6d:79:c5:9a:86: 94:06:5d:49:1e:79:3e:59:4f:4b:06:f5:1b:fe:ff:84:c7:a2: 6a:aa:6d:18:7e:3b:5d:c3:45:b6:83:8d:d4:09:03:37:eb:93: 3b:43:0c:ad:52:56:66:ca:69:dc:68:f4:21:00:f7:ef:1d:7b: 7a:6f:13:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4RjYxMTAvBgNVBAUTKEExQUEyQTJDNTZFNjRBOUQ5QkJBQTMzN0I2RDZBQjM2 MTcyRDM2OEYwHhcNMjYwOTIzMDcyMDAzWhcNMjYwOTMwMDcyMDAzWjAYMRYwFAYD VQQDEw02YWIzN2RhMy01MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOZ6DNcwXgTcKcR4q7VcCUkCpih+jbuEbRoNFLskKigzX8F/OCPFVM7rRhEn evMyX4zIJ4ojEerQS7TLwyG+MKLD57HGG3yx8a+WQ+q0tUY9JBQXR6KK6hFdhGBY TFSzW7mCwQ9qfCufbFYb69Y16vwTw7sL4vTcsHaDgRQcJIWWDz6KIGWo0RRAC2Df Z3Rad8WlGKxQnVVxVogVZMqv5zrrN8IPsInaXQYOHft4WF3TrIz1bj+Al1zlXbve OUzG1GrEcjviBjrekUzqR0G3gr+mnIzJvXNnzjSHRSQSIDMD3WYvjdtafTTeCds2 NgKhYHExPlzltFQ13jCaKmPMnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJBIXqN 6VYYgoCKK440Ri1rPcRIMB8GA1UdIwQYMBaAFKGqKixW5kqdm7qjN7bWqzYXLTaP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRThGNi8zRDZEOEZGMEU3 QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy9vYW9xTEZibVNwMmJ1cU0zdHRhck5oY3RO bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5vOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RThGNi8zRDZEOEZGMEU3QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy9vYW9xTEZibVNw MmJ1cU0zdHRhck5oY3RObzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKrd1G5D57GTK5Moi6WX7mmoM9YBJJjRVhOsyZyiKyZi8mltStSqlm3KEPzF3 IAKABlOGAj0OC0JnnnR0kmqN4qcaXM3waaurSOVELcRKNmfADoEXibtjTFmiFPvi FcIfg0uG6OUceLqmjFbGXG64keiIFbJmOdvPUnngKxOdu/k0v2bjCIbp88LqGVIq kjrO4nAA444Hw5zZbA5w5XD1m2pEhmfUTp4EudisGgMRoN8DREmQ/xxcfNvSrQuF EOFhem15xZqGlAZdSR55PllPSwb1G/7/hMeiaqptGH47XcNFtoON1AkDN+uTO0MM rVJWZspp3Gj0IQD37x17em8T4w== -----END CERTIFICATE-----Generated at Thu Sep 24 09:21:30 2026 by rpki-client