$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: 5RpU8sPsYLZ0mghHEbcJIJhGOqPON2feFbrTNNKnVpA= Subject key identifier: 86:31:C2:E9:3D:A3:2D:AA:E1:F5:6F:5D:49:C8:AF:7E:F8:D8:28:04 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 359F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 3592 Signing time: Tue 22 Sep 2026 14:31:33 +0000 Manifest this update: Tue 22 Sep 2026 14:31:33 +0000 Manifest next update: Tue 29 Sep 2026 14:31:33 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: 1ZaRDG/bl+II8TOCaMSfaAkcwU3Y3jhUJp1w3pUjFhc=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: onsBo5Bz4rkJbVswoyhTU6gtfIuIlfG0ZfPWcTezyxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13727 (0x359f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Sep 22 14:31:33 2026 GMT Not After : Sep 29 14:31:33 2026 GMT Subject: CN=6ab29145-c549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:50:57:cf:7c:d2:78:62:87:ef:6e:32:ed: 67:9c:80:f0:38:2e:10:f7:40:93:73:f2:61:2e:cf: 03:84:67:26:3f:6f:17:27:e5:36:0a:ee:13:50:b0: 10:ad:f5:68:2f:69:ca:82:6b:1f:63:24:f3:ae:a2: a9:96:3e:f7:09:4b:fe:1e:bc:76:db:31:a0:7c:32: 2e:e6:70:5b:be:7a:45:17:af:0b:5d:81:41:41:75: 46:9f:bf:d3:ad:4e:f7:d8:e4:a5:26:b8:d8:cd:22: 15:61:af:dc:42:ea:bc:fb:9d:31:77:fd:3b:4f:d5: 9a:51:40:eb:46:74:8c:24:f0:de:80:d5:a7:5b:c7: ad:52:0b:aa:cc:82:b0:1f:fa:ce:02:3c:d8:4d:80: b6:82:b7:54:f9:6c:22:09:41:be:01:d0:11:62:6f: b1:27:83:7e:db:48:10:39:53:70:2b:42:84:a6:12: 5a:e7:db:19:32:29:3a:b0:34:5c:13:57:d0:be:8d: 98:00:fb:c6:fd:cc:ae:23:d3:e2:f2:4b:0d:26:cd: 89:3d:93:6c:06:b7:c6:6e:cc:a3:44:b7:d9:13:ca: 75:9a:e8:01:75:48:27:9a:e0:19:d3:01:0e:27:e7: a0:2a:2a:3f:f7:0e:0d:4a:16:bc:91:75:19:61:c9: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:C2:E9:3D:A3:2D:AA:E1:F5:6F:5D:49:C8:AF:7E:F8:D8:28:04 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:35:64:d6:e6:ea:e6:6c:f8:9a:ca:a7:e3:e4:a1:52:b3:74: b4:d3:13:89:10:63:c9:8a:e3:09:02:03:f7:4a:f6:7b:4b:07: 07:28:cb:07:f9:71:ac:dd:00:bf:d5:d5:3a:ad:63:c2:ec:ec: a7:26:ec:cb:76:fd:af:de:5d:5b:cd:32:81:25:45:e6:2c:90: 48:21:0b:e3:e4:3d:8a:7e:5f:ab:98:e1:0b:6f:c9:6a:9a:f7: b1:31:05:1a:d8:5a:3a:63:70:c7:67:d2:e2:f0:4c:da:b9:b7: c8:f0:a7:fc:51:88:b4:55:26:fd:d9:86:b3:73:2b:4e:16:e5: 8e:34:5a:ae:49:c9:92:c6:2c:65:8b:38:ff:ac:87:4e:fc:22: b6:47:cf:3b:eb:a2:c7:72:47:f6:06:bd:1f:3f:06:d4:a3:fa: 4a:7d:f4:73:bd:ef:61:f6:b0:0c:30:83:66:dc:ee:1e:c4:35: 43:4c:47:03:0d:a5:6f:cb:14:a3:f1:44:b6:79:45:c9:4e:57: ae:95:88:1d:71:06:63:30:71:73:f4:e5:b4:f2:35:28:b9:9b: 8a:05:dd:6e:d1:28:f6:41:bb:af:59:bf:a5:46:53:36:6c:52: 64:de:95:ca:87:21:a6:00:e3:89:7d:93:ed:e8:31:8a:08:98: f4:63:59:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjYwOTIyMTQzMTMzWhcNMjYwOTI5MTQzMTMzWjAYMRYwFAYD VQQDEw02YWIyOTE0NS1jNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqB5QV8980nhih+9uMu1nnIDwOC4Q90CTc/JhLs8DhGcmP28XJ+U2Cu4TULAQ rfVoL2nKgmsfYyTzrqKplj73CUv+Hrx22zGgfDIu5nBbvnpFF68LXYFBQXVGn7/T rU732OSlJrjYzSIVYa/cQuq8+50xd/07T9WaUUDrRnSMJPDegNWnW8etUguqzIKw H/rOAjzYTYC2grdU+WwiCUG+AdARYm+xJ4N+20gQOVNwK0KEphJa59sZMik6sDRc E1fQvo2YAPvG/cyuI9Pi8ksNJs2JPZNsBrfGbsyjRLfZE8p1mugBdUgnmuAZ0wEO J+egKio/9w4NSha8kXUZYcmUiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYxwuk9 oy2q4fVvXUnIr3742CgEMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzVk1ubq5mz4msqn4+ShUrN0tNMTiRBjyYrjCQID90r2e0sHByjLB/lxrN0A v9XVOq1jwuzspybsy3b9r95dW80ygSVF5iyQSCEL4+Q9in5fq5jhC2/Japr3sTEF GthaOmNwx2fS4vBM2rm3yPCn/FGItFUm/dmGs3MrThbljjRarknJksYsZYs4/6yH TvwitkfPO+uix3JH9ga9Hz8G1KP6Sn30c73vYfawDDCDZtzuHsQ1Q0xHAw2lb8sU o/FEtnlFyU5XrpWIHXEGYzBxc/TltPI1KLmbigXdbtEo9kG7r1m/pUZTNmxSZN6V yochpgDjiX2T7egxigiY9GNZtQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:42:56 2026 by rpki-client