$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: T4M9VDoFYuAup/2ZjHCkc1B71mkxcBfn/QAVuelTYa0= Subject key identifier: C1:75:3C:6E:6C:2B:B8:6A:66:00:B4:C3:1F:89:B6:B7:E9:08:D6:5D Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0DB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D7F Signing time: Tue 22 Sep 2026 17:56:28 +0000 Manifest this update: Tue 22 Sep 2026 17:56:28 +0000 Manifest next update: Tue 29 Sep 2026 17:56:28 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: AwhL3cepc3iTsXNb0/8zfl8Y8m/uXrc9F+CVqS6f3wQ=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: UDQzazfBuaV3+4EFYL41OYHeyXuzIXRdh8rlJayt6QI=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: Z1URLxTY0TTLZ55tXCgqgDP+6VdIFJvmADvOdJF4n4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Sep 22 17:56:28 2026 GMT Not After : Sep 29 17:56:28 2026 GMT Subject: CN=6ab2c14c-9696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:50:df:c9:a6:1a:f1:a9:ae:57:b6:6f:1d: 90:51:05:09:ee:5b:ab:73:bb:62:4f:e6:d2:c8:96: 49:2d:ab:b5:fd:83:88:0f:20:9a:94:10:82:92:ed: fa:8f:3c:83:78:9b:e0:7b:13:e3:6d:58:33:31:bf: b6:da:07:5d:9e:81:3d:cf:4e:3e:f9:f0:cc:bb:c1: 40:44:a2:87:25:fd:4e:2f:af:5e:0b:24:5f:95:78: b2:1b:55:f5:1e:c6:d5:73:d0:14:c5:d7:26:89:2c: e3:d9:af:07:36:ff:30:71:5f:a2:3a:8e:41:3e:d5: 9a:2b:80:75:54:04:29:1f:c4:7a:28:84:de:60:bf: 7f:6d:bd:50:9d:f6:2f:b0:f1:72:52:19:7c:bb:b7: 82:23:c4:fd:38:64:89:d9:64:df:66:fe:b1:45:79: f0:4e:6b:92:54:2d:8f:3b:81:3f:c4:48:61:19:07: c2:ba:f6:8d:30:73:0c:fc:61:e7:9a:7b:78:c5:ad: 34:ef:4c:80:5f:3c:71:e9:da:b5:d6:b7:08:10:39: 55:58:ab:69:15:9e:ea:3b:9d:11:af:11:ab:7d:49: dc:14:2b:f3:fe:01:ee:de:ec:76:55:21:8b:7b:9d: a3:1d:ac:5f:53:a6:c7:92:a8:36:c8:45:5a:df:09: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:75:3C:6E:6C:2B:B8:6A:66:00:B4:C3:1F:89:B6:B7:E9:08:D6:5D X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:83:88:9a:b1:bc:7b:69:83:5f:56:f4:a0:89:5d:ea:ab:1d: e5:80:7b:63:04:77:a5:a3:c9:64:25:f9:90:d1:c6:d2:c3:3a: f5:f8:8f:35:34:d2:a5:26:f3:b2:53:20:ec:f8:a8:ba:e6:42: ce:5e:61:44:76:b9:30:cd:dc:06:ac:c7:de:a9:64:64:49:f8: ca:b7:92:ba:7a:cc:a8:19:b3:f2:40:1a:93:ce:42:d6:0a:38: 03:d8:56:06:51:5b:49:cd:6a:10:e4:55:18:40:32:16:fb:8f: c7:60:68:0b:39:1c:0e:5b:02:f6:e5:71:d3:a4:7d:6f:24:17: 49:47:7f:23:6e:58:cd:64:d7:34:23:1b:69:45:5f:7d:2c:b5: 85:af:d5:23:fe:38:82:f6:c9:1b:e2:ae:11:b7:e4:8a:a1:3b: 91:86:01:1f:57:30:1d:60:18:01:55:36:ab:50:93:83:26:5f: 0b:93:53:06:12:e4:23:61:e9:e6:a8:c3:62:48:2a:5b:61:a9: d8:b1:c1:7e:de:b9:a6:cf:8b:c1:57:16:a4:e6:e9:d5:e4:92: 11:ab:3c:35:22:dd:9d:0d:fe:16:1f:5a:bd:ce:c6:99:e8:0e: 54:6f:62:a3:34:fb:40:c2:04:62:55:04:77:1e:bc:b4:cd:9d: 61:63:59:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwOTIyMTc1NjI4WhcNMjYwOTI5MTc1NjI4WjAYMRYwFAYD VQQDEw02YWIyYzE0Yy05Njk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYFQ38mmGvGprle2bx2QUQUJ7lurc7tiT+bSyJZJLau1/YOIDyCalBCCku36 jzyDeJvgexPjbVgzMb+22gddnoE9z04++fDMu8FARKKHJf1OL69eCyRflXiyG1X1 HsbVc9AUxdcmiSzj2a8HNv8wcV+iOo5BPtWaK4B1VAQpH8R6KITeYL9/bb1QnfYv sPFyUhl8u7eCI8T9OGSJ2WTfZv6xRXnwTmuSVC2PO4E/xEhhGQfCuvaNMHMM/GHn mnt4xa0070yAXzxx6dq11rcIEDlVWKtpFZ7qO50RrxGrfUncFCvz/gHu3ux2VSGL e52jHaxfU6bHkqg2yEVa3wmsbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMF1PG5s K7hqZgC0wx+JtrfpCNZdMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4OImrG8e2mDX1b0oIld6qsd5YB7YwR3paPJZCX5kNHG0sM69fiPNTTSpSbz slMg7PiouuZCzl5hRHa5MM3cBqzH3qlkZEn4yreSunrMqBmz8kAak85C1go4A9hW BlFbSc1qEORVGEAyFvuPx2BoCzkcDlsC9uVx06R9byQXSUd/I25YzWTXNCMbaUVf fSy1ha/VI/44gvbJG+KuEbfkiqE7kYYBH1cwHWAYAVU2q1CTgyZfC5NTBhLkI2Hp 5qjDYkgqW2Gp2LHBft65ps+LwVcWpObp1eSSEas8NSLdnQ3+Fh9avc7GmegOVG9i ozT7QMIEYlUEdx68tM2dYWNZPw== -----END CERTIFICATE-----Generated at Wed Sep 23 03:38:29 2026 by rpki-client