$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: fdb4Yakaa0Vft2XEipbQUmKqeeTwnG0KhMMLu7DNCRE= Subject key identifier: 6A:EB:53:4E:FB:DE:18:A7:FA:BF:BF:6C:01:25:AC:86:30:B2:12:DD Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 02A1 Signing time: Thu 24 Sep 2026 02:57:42 +0000 Manifest this update: Thu 24 Sep 2026 02:57:41 +0000 Manifest next update: Thu 01 Oct 2026 02:57:41 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: wNAfF5LekLnBcNK1SFtIDAmtpHhxGhxNPfVnsWwPuRs=) 2: 548A6700B6EC11F187F0A2D95E11F970.roa (hash: dbRqjKhb4a7qx+ur3emx5PmM5N4+y5L+XBio2qWLoRc=) 3: 11F334D0B7BE11F187E80DD95D11F970.roa (hash: 8zu8iMIuHPe018l2hsek77RhkvEfDsvsP7M+06oBMNg=) 4: 2EAD49328A4911F1B17FECC73411F970.roa (hash: 3ZUQ8ehSMmQlNLkpaHNTJuGlbh9RcIttBaWEBN6l0Q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 02:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Sep 24 02:57:41 2026 GMT Not After : Oct 1 02:57:41 2026 GMT Subject: CN=6ab491a5-d821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:f3:d3:24:56:42:62:27:36:e0:2d:18:51: d8:2f:17:72:a1:53:40:00:c2:dc:02:e3:4a:0f:a1: 56:6b:71:b5:11:cb:35:c0:88:c3:83:bf:4b:8c:11: d1:cd:c0:a7:24:6f:90:90:4e:94:dd:f5:dd:46:b6: c3:91:4e:9f:0e:81:d4:29:b8:61:8a:1a:99:6c:73: ad:8a:15:33:9e:ef:6e:d0:64:7f:ba:76:2c:8b:c4: 4a:9f:8b:48:c0:21:c7:2f:2a:73:bd:05:8b:70:a1: 6c:b5:e5:3f:89:00:b6:ed:d7:3b:5f:2f:95:30:a1: 1e:b1:e8:81:8f:73:d3:d8:84:c8:d6:3e:ca:07:37: 7c:44:dd:36:94:52:65:58:d0:1d:a4:b3:17:42:86: 18:09:6f:ff:3f:4a:12:b1:d4:23:8d:bf:81:2c:e7: 65:9a:ef:e2:4f:ba:89:90:98:57:0b:46:ca:ef:5e: ec:ea:6d:75:53:32:23:5a:2c:ef:72:f7:01:1d:1a: 97:2d:33:ba:c7:28:cb:79:a4:a6:c6:ca:69:86:a0: cd:36:c4:36:dc:47:30:30:5e:5e:2d:03:95:ce:05: c8:fa:b2:7a:7e:07:d0:ff:5f:e8:bc:ce:da:95:29: d1:4a:f3:ea:58:8e:7e:f8:f9:01:77:35:ff:79:44: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EB:53:4E:FB:DE:18:A7:FA:BF:BF:6C:01:25:AC:86:30:B2:12:DD X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ef:63:f6:43:13:e4:f0:c6:1a:59:9a:96:6b:42:8e:85:e0: 0f:4e:10:52:92:48:62:ab:5f:9f:60:9e:24:86:89:c2:7a:a0: 2f:1f:9b:fd:a8:3a:ad:4f:4d:46:5b:0a:9e:b5:f8:86:3a:22: 05:07:74:dd:0f:36:8e:fb:d8:33:62:d1:b8:3b:3d:1f:a2:ec: d5:ec:94:7e:b3:ae:3d:81:92:01:db:7b:9d:f3:bb:23:f8:5f: 45:0a:31:ee:13:f2:5b:89:74:8b:2c:30:37:d8:7c:69:a3:3b: e7:e6:c3:c1:d6:c8:9b:53:ed:54:90:1e:be:3f:60:8c:7b:0d: 43:84:cf:38:ae:3f:09:55:45:6b:0e:78:97:06:58:aa:98:ed: 5d:00:73:2e:7a:e8:d0:ba:e3:81:8e:a2:a6:56:3f:f5:5d:b2: 56:46:48:2c:43:95:5c:51:66:64:94:09:bd:41:ba:98:1b:27: 51:3c:c0:5e:a5:13:52:c3:c5:09:9f:18:ec:8d:d2:69:3a:82: 76:b0:91:9a:14:d7:82:80:96:b7:9d:13:27:1e:b3:8a:24:45: 53:ab:a9:48:1a:2a:eb:06:5f:bb:01:79:a8:b1:ea:9c:c8:a8: 3e:14:56:d2:c1:98:93:8b:be:8e:28:c5:58:e8:a7:bf:19:81: 8c:df:ac:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjYwOTI0MDI1NzQxWhcNMjYxMDAxMDI1NzQxWjAYMRYwFAYD VQQDEw02YWI0OTFhNS1kODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9rz0yRWQmInNuAtGFHYLxdyoVNAAMLcAuNKD6FWa3G1Ecs1wIjDg79LjBHR zcCnJG+QkE6U3fXdRrbDkU6fDoHUKbhhihqZbHOtihUznu9u0GR/unYsi8RKn4tI wCHHLypzvQWLcKFsteU/iQC27dc7Xy+VMKEeseiBj3PT2ITI1j7KBzd8RN02lFJl WNAdpLMXQoYYCW//P0oSsdQjjb+BLOdlmu/iT7qJkJhXC0bK717s6m11UzIjWizv cvcBHRqXLTO6xyjLeaSmxspphqDNNsQ23EcwMF5eLQOVzgXI+rJ6fgfQ/1/ovM7a lSnRSvPqWI5++PkBdzX/eUQKaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrrU077 3hin+r+/bAElrIYwshLdMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZe9j9kMT5PDGGlmalmtCjoXgD04QUpJIYqtfn2CeJIaJwnqgLx+b/ag6rU9N RlsKnrX4hjoiBQd03Q82jvvYM2LRuDs9H6Ls1eyUfrOuPYGSAdt7nfO7I/hfRQox 7hPyW4l0iywwN9h8aaM75+bDwdbIm1PtVJAevj9gjHsNQ4TPOK4/CVVFaw54lwZY qpjtXQBzLnro0LrjgY6iplY/9V2yVkZILEOVXFFmZJQJvUG6mBsnUTzAXqUTUsPF CZ8Y7I3SaTqCdrCRmhTXgoCWt50TJx6ziiRFU6upSBoq6wZfuwF5qLHqnMioPhRW 0sGYk4u+jijFWOinvxmBjN+smA== -----END CERTIFICATE-----Generated at Thu Sep 24 19:15:57 2026 by rpki-client