$ rpki-client -vvvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: XA4YO+aZ9pHIjEm5EBwbMaKuBZoTmtHeNzK0cZjuydo= Subject key identifier: 11:3A:A9:0B:49:67:20:96:72:78:E2:F1:D6:A7:BB:10:98:B1:C7:98 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 08C9 Signing time: Tue 22 Sep 2026 20:18:46 +0000 Manifest this update: Tue 22 Sep 2026 20:18:46 +0000 Manifest next update: Tue 29 Sep 2026 20:18:46 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: rS4lVYlpk6yMtu0GqDBKDOwme7mAi5M+ngPMu60rm8Q=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Sep 22 20:18:46 2026 GMT Not After : Sep 29 20:18:46 2026 GMT Subject: CN=6ab2e2a6-f302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:7b:3c:55:da:7a:58:e2:8d:67:15:bc:70: 00:73:6b:47:12:49:a9:9f:98:25:e5:e0:1e:5a:c2: f8:ba:5f:61:cd:da:71:df:f4:bf:0e:e2:7c:73:ea: 79:97:e3:b7:33:6a:1e:0e:1d:01:6e:79:04:bf:e4: d6:d6:89:36:4f:c9:e0:fb:36:a6:00:f6:0d:cf:c2: 57:64:a3:93:e9:0a:6e:eb:f5:b5:ba:8c:b8:89:ca: f8:68:3c:0f:82:0b:8c:83:60:9b:80:ca:2f:9c:78: 3c:b3:9f:de:3e:a5:32:05:60:7a:00:ac:e8:67:44: c9:68:ce:8f:56:a5:f6:75:b5:85:89:8d:15:b5:bc: 2e:df:dd:9a:d0:72:8a:9a:0d:9a:ee:d2:09:6b:85: aa:1d:1d:c1:d2:63:11:37:96:b5:35:f9:c0:08:e2: b3:96:fa:35:9c:85:37:9d:c5:70:38:8f:63:4a:fe: 29:f9:a1:40:ee:a6:ca:f1:1c:e7:da:eb:48:61:03: d4:8f:dc:7c:c2:c6:29:a4:ac:31:f2:d6:e5:c6:b2: 0f:20:08:3d:55:f1:88:5c:fc:4a:25:5c:8e:a7:0c: 5c:1f:80:80:e8:3b:eb:65:e7:20:39:32:0e:c3:50: 86:38:76:d0:c1:8a:e6:94:ed:ca:88:bf:c7:04:4f: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3A:A9:0B:49:67:20:96:72:78:E2:F1:D6:A7:BB:10:98:B1:C7:98 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:62:47:aa:ef:1a:f6:68:89:dd:88:09:61:72:35:23:52:28: 38:68:81:55:a7:5b:45:28:72:a3:cd:3c:cb:8e:3d:36:f3:e4: 9e:52:78:9f:d5:0a:b1:bf:12:d4:ec:c4:c0:a0:54:c0:c3:92: 84:ff:5e:d2:aa:a5:5f:86:5b:25:bd:c4:5b:03:a9:20:97:78: 5c:fa:4f:8e:41:50:ac:ac:91:76:d1:5b:9b:83:74:a1:77:8a: ff:ef:0f:48:bc:c1:25:ad:b0:93:22:7c:00:d3:98:3d:33:33: 8a:29:48:70:c0:07:cf:4e:52:07:15:27:82:5d:2d:50:b6:1e: 37:52:b6:87:8f:6e:20:ab:e6:3a:4c:2e:24:6b:67:3b:a5:6b: bd:c2:04:c9:fb:f9:cf:16:10:1c:93:43:05:2c:ca:5e:79:a3: 06:1a:c1:cc:ba:9e:88:10:38:de:26:52:0c:a8:bb:34:b5:c9: a3:25:6d:b0:b1:93:a0:c7:b3:f8:8b:b8:6f:c9:fa:79:25:d9: 4f:5f:0e:94:59:0b:0b:da:14:05:a4:49:37:7d:9b:81:e1:1a: 53:5d:a3:ec:4e:fc:08:56:fc:93:5b:5f:07:2d:53:44:06:aa: 38:fc:e4:cc:3b:2b:b2:02:c5:2e:90:4b:da:c6:02:24:60:61: a5:6c:b3:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjYwOTIyMjAxODQ2WhcNMjYwOTI5MjAxODQ2WjAYMRYwFAYD VQQDEw02YWIyZTJhNi1mMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgRl7PFXaeljijWcVvHAAc2tHEkmpn5gl5eAeWsL4ul9hzdpx3/S/DuJ8c+p5 l+O3M2oeDh0BbnkEv+TW1ok2T8ng+zamAPYNz8JXZKOT6Qpu6/W1uoy4icr4aDwP gguMg2CbgMovnHg8s5/ePqUyBWB6AKzoZ0TJaM6PVqX2dbWFiY0Vtbwu392a0HKK mg2a7tIJa4WqHR3B0mMRN5a1NfnACOKzlvo1nIU3ncVwOI9jSv4p+aFA7qbK8Rzn 2utIYQPUj9x8wsYppKwx8tblxrIPIAg9VfGIXPxKJVyOpwxcH4CA6DvrZecgOTIO w1CGOHbQwYrmlO3KiL/HBE8Z2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBE6qQtJ ZyCWcnji8danuxCYsceYMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFGJHqu8a9miJ3YgJYXI1I1IoOGiBVadbRShyo808y449NvPknlJ4n9UKsb8S 1OzEwKBUwMOShP9e0qqlX4ZbJb3EWwOpIJd4XPpPjkFQrKyRdtFbm4N0oXeK/+8P SLzBJa2wkyJ8ANOYPTMziilIcMAHz05SBxUngl0tULYeN1K2h49uIKvmOkwuJGtn O6VrvcIEyfv5zxYQHJNDBSzKXnmjBhrBzLqeiBA43iZSDKi7NLXJoyVtsLGToMez +Iu4b8n6eSXZT18OlFkLC9oUBaRJN32bgeEaU12j7E78CFb8k1tfBy1TRAaqOPzk zDsrsgLFLpBL2sYCJGBhpWyzhQ== -----END CERTIFICATE-----Generated at Tue Sep 22 23:45:47 2026 by rpki-client