$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: E1pgPDBbwYAfCdr0difiseUQNVdtD+vb4n8ilQFrLUs= Subject key identifier: 0C:85:A5:D0:98:5A:13:7F:E0:88:D6:A1:DA:CB:79:5B:56:47:E4:7A Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: E3 Signing time: Fri 25 Sep 2026 06:42:42 +0000 Manifest this update: Fri 25 Sep 2026 06:42:42 +0000 Manifest next update: Fri 02 Oct 2026 06:42:42 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: GpYKG5HcoTOcCGsBfvsaCP+XbZsF9BkKmjifs6QZ/+k=) 2: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 3: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) 5: 69256D56A5CE11F1B7F696C43311F970.roa (hash: /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=) 6: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 7: BB2BF88CA79911F1857810AE4811F970.roa (hash: Y+Ntf8yGJA3+2z975NNw0RpsGbbTUVm9WQmnhNftTf0=) 8: 688C64E4A5CE11F1B7F696C43311F970.roa (hash: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Sep 25 06:42:42 2026 GMT Not After : Oct 2 06:42:42 2026 GMT Subject: CN=6ab617e2-4317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:5a:2e:3d:5c:98:a0:c1:bf:7f:76:ea:54: 27:ae:75:e6:82:82:8d:8a:d5:8d:56:e9:d3:52:2f: 7f:d5:5d:a8:39:b2:88:db:d1:ec:ab:15:38:a2:29: 19:52:eb:96:86:d8:a5:73:da:6c:c1:a3:72:5a:c4: 90:72:d6:76:61:45:ce:d5:94:7f:d5:66:1f:d8:fd: 15:5c:ff:18:f3:49:0e:8e:af:27:fd:96:d6:a4:72: 85:d7:f3:0d:6c:23:11:d3:cd:42:79:80:a1:1f:d4: 7b:06:88:67:c5:df:14:4f:a4:fd:4c:35:8c:c5:e9: 86:7e:a2:63:25:9a:55:47:99:aa:14:27:6a:2d:23: d0:18:cc:1e:18:36:11:95:15:cf:30:df:a3:67:05: 93:02:ea:48:0d:51:bd:ee:54:bc:bf:fd:f4:a0:3d: c2:b5:5d:58:bf:55:f1:58:5f:29:0a:71:ec:c1:ae: 40:c4:49:2d:5f:46:64:7a:2a:83:4a:9a:5b:d4:ac: 35:72:54:8e:c6:c2:6e:36:ae:f9:94:33:85:58:74: d2:c9:e2:c8:5a:63:7f:fe:66:c4:83:86:f7:65:a0: 96:e0:4b:29:8a:3b:35:53:8e:c1:33:13:39:b5:f9: ef:3f:8b:df:4f:14:8f:08:13:b0:7e:00:f4:c6:14: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:85:A5:D0:98:5A:13:7F:E0:88:D6:A1:DA:CB:79:5B:56:47:E4:7A X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:eb:77:0d:31:45:5b:38:ef:b3:d4:47:c9:c3:16:b9:fb:e6: c3:2a:ba:3c:98:e5:d7:71:5e:0e:8b:41:e1:53:20:54:15:db: a9:a2:f9:8a:63:18:f0:5e:a9:b6:c2:6c:61:33:eb:b7:67:30: 77:fe:1c:97:ec:6a:86:69:d7:e1:e3:42:8b:c3:97:eb:13:3c: db:a4:83:50:e0:15:6e:7b:de:21:a1:fd:fd:c6:9f:db:ab:c1: 8c:e2:fb:04:ca:ce:37:cf:0c:3d:45:8f:6a:e1:3e:0f:a1:c6: 04:1f:ed:ea:7c:f0:a8:69:fd:ee:44:29:cc:97:01:21:f2:75: 93:98:2d:e2:24:bb:00:1b:40:cf:9b:b0:19:74:22:be:0b:91: 1b:0d:85:11:d5:fc:99:de:df:48:dc:0e:80:6b:53:2d:e2:07: 90:dd:85:6f:41:b8:d8:fa:b7:e5:8d:bd:1e:e2:5b:7c:37:48: 06:f7:aa:9a:5a:71:fc:93:95:f3:f2:f8:22:3b:ef:17:31:f5: fb:3f:d7:85:e4:dc:6e:b3:ff:bd:fc:b8:8f:1a:15:8e:4a:ee: be:13:b7:a7:64:08:ea:dc:09:64:2e:ed:a5:c7:ed:7f:c5:5d: 97:14:9b:56:81:1e:7e:92:10:99:92:71:d2:22:13:64:43:84: e6:7d:59:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwOTI1MDY0MjQyWhcNMjYxMDAyMDY0MjQyWjAYMRYwFAYD VQQDEw02YWI2MTdlMi00MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXhaLj1cmKDBv3926lQnrnXmgoKNitWNVunTUi9/1V2oObKI29HsqxU4oikZ UuuWhtilc9pswaNyWsSQctZ2YUXO1ZR/1WYf2P0VXP8Y80kOjq8n/ZbWpHKF1/MN bCMR081CeYChH9R7Bohnxd8UT6T9TDWMxemGfqJjJZpVR5mqFCdqLSPQGMweGDYR lRXPMN+jZwWTAupIDVG97lS8v/30oD3CtV1Yv1XxWF8pCnHswa5AxEktX0ZkeiqD Sppb1Kw1clSOxsJuNq75lDOFWHTSyeLIWmN//mbEg4b3ZaCW4Espijs1U47BMxM5 tfnvP4vfTxSPCBOwfgD0xhRfpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAyFpdCY WhN/4IjWodrLeVtWR+R6MB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbut3DTFFWzjvs9RHycMWufvmwyq6PJjl13FeDotB4VMgVBXbqaL5imMY8F6p tsJsYTPrt2cwd/4cl+xqhmnX4eNCi8OX6xM826SDUOAVbnveIaH9/caf26vBjOL7 BMrON88MPUWPauE+D6HGBB/t6nzwqGn97kQpzJcBIfJ1k5gt4iS7ABtAz5uwGXQi vguRGw2FEdX8md7fSNwOgGtTLeIHkN2Fb0G42Pq35Y29HuJbfDdIBveqmlpx/JOV 8/L4IjvvFzH1+z/XheTcbrP/vfy4jxoVjkruvhO3p2QI6twJZC7tpcftf8VdlxSb VoEefpIQmZJx0iITZEOE5n1ZIQ== -----END CERTIFICATE-----Generated at Fri Sep 25 15:54:16 2026 by rpki-client