$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: wuIcCwCXAbED4xxGyDWxmiaBInzszjtU2bpf8X5cFyU= Subject key identifier: A7:DC:AD:FB:F6:46:D7:51:AA:8C:6B:B3:12:89:E4:9B:CC:09:46:9A Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 085C Signing time: Tue 22 Sep 2026 20:44:55 +0000 Manifest this update: Tue 22 Sep 2026 20:44:54 +0000 Manifest next update: Tue 29 Sep 2026 20:44:54 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: eHX2qYxDU7IViXzTpMYf59P4uTUjhV6u9KQRQr+hnjY=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: 1TQcMsBjuJd+6jfZHoOFpWn4FM5EaS3VBNXt5OgzVck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Sep 22 20:44:54 2026 GMT Not After : Sep 29 20:44:54 2026 GMT Subject: CN=6ab2e8c7-c6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:73:a4:07:6c:1a:e0:d5:2e:3c:6c:3c:c3: ad:ba:28:c1:6f:c4:1b:27:e0:b6:d9:fa:fa:81:b7: 24:09:75:25:9d:bb:c6:46:2c:85:aa:68:82:4c:f3: 5e:3d:04:b3:49:8a:d8:04:a3:e8:f0:87:fc:96:d1: c4:c7:e8:20:e0:86:12:3c:89:f5:8c:57:93:c5:fb: cf:8e:dd:b1:9d:ef:68:04:f7:1d:92:17:89:71:88: bd:88:3f:2f:a5:1b:bf:88:d9:98:95:3b:45:96:51: 8e:fb:e3:5b:e5:30:c8:18:f7:32:da:78:5e:29:65: 82:f7:72:14:c5:4d:5d:66:f1:b2:ec:fd:dc:54:89: a0:bd:5b:c0:c9:a4:7e:f8:98:ce:e4:7d:f2:b2:81: e5:00:ae:99:19:90:32:a8:80:96:83:38:e1:79:cf: 1a:17:ed:b8:2a:96:cc:52:4e:c9:58:9b:23:41:2f: 4d:d1:e7:bc:88:e9:82:fb:a5:eb:86:1b:a0:1a:31: d1:f5:ac:44:0c:e9:19:45:d1:5e:34:f0:46:73:e8: 72:36:8e:76:38:41:84:58:2c:9b:56:b1:bf:45:44: 1f:28:64:45:4b:e4:8a:6c:0f:92:48:69:33:cf:9d: 40:08:a0:b1:40:8b:d5:f5:59:fc:c8:14:64:89:b5: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DC:AD:FB:F6:46:D7:51:AA:8C:6B:B3:12:89:E4:9B:CC:09:46:9A X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:65:09:a5:dc:eb:fa:eb:90:53:9c:c5:9e:e2:52:b8:d8:df: 66:1c:e5:dc:44:0b:2a:db:d8:5d:af:d4:f2:64:2e:ab:f8:73: d2:da:d4:07:56:69:56:05:1e:47:78:2d:0a:bc:72:67:af:9e: 10:ea:47:67:9d:15:9c:64:f1:9e:05:74:f0:19:d3:98:a6:46: 1e:48:c8:e3:df:22:b3:3f:fd:bb:46:14:78:e6:09:81:05:8a: 63:d7:df:e2:ce:b3:fd:a5:67:3f:05:16:24:4a:ae:58:e6:f5: 53:27:c0:6d:8c:cc:46:57:d9:5f:73:d7:8e:22:93:e7:63:bc: 6e:95:50:96:8e:8b:b5:63:9a:7d:5f:ea:2b:05:af:23:d8:5e: a1:9a:9f:04:64:f1:88:1b:e2:11:94:78:16:32:ea:33:73:ba: 50:39:02:0a:53:04:3b:c1:ba:a5:b5:82:7b:d0:5c:34:d3:8e: 07:be:5f:22:56:ab:32:44:9e:f0:c0:5d:4a:ea:60:d5:04:e1: c8:64:01:7e:a9:ef:a4:c3:87:f5:9c:dc:a3:3b:b8:8d:63:0f: ad:f4:d7:15:b6:6e:ad:20:21:66:97:af:ac:30:82:b7:20:c8: 72:22:e3:e3:dd:9f:39:18:ad:94:ad:d1:50:4c:11:f3:89:3d: b1:26:04:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjYwOTIyMjA0NDU0WhcNMjYwOTI5MjA0NDU0WjAYMRYwFAYD VQQDEw02YWIyZThjNy1jNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn1zpAdsGuDVLjxsPMOtuijBb8QbJ+C22fr6gbckCXUlnbvGRiyFqmiCTPNe PQSzSYrYBKPo8If8ltHEx+gg4IYSPIn1jFeTxfvPjt2xne9oBPcdkheJcYi9iD8v pRu/iNmYlTtFllGO++Nb5TDIGPcy2nheKWWC93IUxU1dZvGy7P3cVImgvVvAyaR+ +JjO5H3ysoHlAK6ZGZAyqICWgzjhec8aF+24KpbMUk7JWJsjQS9N0ee8iOmC+6Xr hhugGjHR9axEDOkZRdFeNPBGc+hyNo52OEGEWCybVrG/RUQfKGRFS+SKbA+SSGkz z51ACKCxQIvV9Vn8yBRkibWJgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfcrfv2 RtdRqoxrsxKJ5JvMCUaaMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARGUJpdzr+uuQU5zFnuJSuNjfZhzl3EQLKtvYXa/U8mQuq/hz0trUB1ZpVgUe R3gtCrxyZ6+eEOpHZ50VnGTxngV08BnTmKZGHkjI498isz/9u0YUeOYJgQWKY9ff 4s6z/aVnPwUWJEquWOb1UyfAbYzMRlfZX3PXjiKT52O8bpVQlo6LtWOafV/qKwWv I9heoZqfBGTxiBviEZR4FjLqM3O6UDkCClMEO8G6pbWCe9BcNNOOB75fIlarMkSe 8MBdSupg1QThyGQBfqnvpMOH9Zzcozu4jWMPrfTXFbZurSAhZpevrDCCtyDIciLj 492fORitlK3RUEwR84k9sSYEug== -----END CERTIFICATE-----Generated at Thu Sep 24 21:07:57 2026 by rpki-client