$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: v4vuSFSLbWMQXA55TR/cIptGUuREZUjgLPTsZAhhyZI= Subject key identifier: 7D:A4:78:6F:76:51:71:7A:88:50:1E:F0:30:C9:6B:4D:9F:FE:0E:3A Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: E4 Signing time: Sun 27 Sep 2026 07:08:42 +0000 Manifest this update: Sun 27 Sep 2026 07:08:41 +0000 Manifest next update: Sun 04 Oct 2026 07:08:41 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: 9XcBN+jgnORMs4LxCitgWXbHt17WBguxsSkQB4SKazo=) 2: 688C64E4A5CE11F1B7F696C43311F970.roa (hash: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=) 3: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) 4: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 5: BB2BF88CA79911F1857810AE4811F970.roa (hash: Y+Ntf8yGJA3+2z975NNw0RpsGbbTUVm9WQmnhNftTf0=) 6: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 7: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 8: 69256D56A5CE11F1B7F696C43311F970.roa (hash: /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Sep 27 07:08:41 2026 GMT Not After : Oct 4 07:08:41 2026 GMT Subject: CN=6ab8c0fa-33c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:99:24:63:40:ff:11:fc:d4:34:9a:5c:50: 9d:fd:1c:9d:bf:6c:8f:f1:fb:a0:ac:42:7c:ca:59: 21:84:35:9b:c7:bf:b9:01:80:d4:38:74:0c:26:43: f3:6b:5e:28:42:0f:ff:8f:05:28:12:39:e3:3b:5b: 91:cb:1c:a7:5c:eb:d0:ab:ce:65:44:24:33:ff:85: 1f:ae:29:8c:43:f7:04:2b:2e:f7:be:f2:4b:3c:08: e2:34:97:bb:a9:a5:dc:60:35:4a:c5:ee:9b:a2:f7: ce:79:44:08:4f:aa:f2:34:d6:a7:d3:15:f8:6d:ac: 1d:79:63:b9:77:c8:6c:89:d3:68:5f:6b:9f:35:6f: 87:2b:72:fc:85:7e:ff:f4:39:52:78:b8:c6:21:f0: 6a:6c:43:2b:a0:cb:e4:4f:91:ec:30:85:a6:32:ad: a4:a6:09:71:0a:68:a6:ec:84:d3:ec:26:09:57:c0: 07:28:87:9b:c0:51:17:67:fb:32:b8:c5:1d:53:0f: 3e:27:66:69:4f:29:de:e9:89:6a:25:9b:c8:0f:3e: 94:1b:9f:36:aa:82:b7:6f:26:df:54:87:c3:fe:b3: 99:94:91:f7:c0:f0:03:6a:87:fb:83:59:df:68:1d: e5:c5:35:2d:5d:4e:ab:9c:79:23:dc:69:18:3e:73: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:78:6F:76:51:71:7A:88:50:1E:F0:30:C9:6B:4D:9F:FE:0E:3A X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:56:32:02:b7:68:c7:4a:07:8b:f6:6e:8b:53:89:25:41:d3: 59:9f:b3:d2:8e:4a:d0:96:11:85:6b:93:bf:d4:ac:bc:17:1a: 8c:1f:c1:06:90:25:19:f0:2d:9a:0a:39:4f:cb:89:18:bf:d5: fa:c3:fb:8c:f2:85:7c:d1:94:61:4a:35:7e:86:7d:aa:7f:50: e6:04:c6:e6:11:55:f2:19:94:74:c4:59:b7:2a:52:4a:c0:4f: 82:54:55:10:21:c1:47:ac:89:03:9a:b5:40:4d:d3:7d:64:c1: 00:9f:9f:60:23:3e:3d:69:85:f0:5d:1f:31:19:6c:29:8d:e3: 2e:b4:8f:54:90:76:7d:2d:13:44:1a:95:2c:41:d4:d7:fc:37: 5e:6e:0e:70:2d:07:1a:9c:c0:cf:a2:44:9f:bc:48:8a:2a:83: c8:cc:6a:f2:be:1c:a9:bc:72:60:23:35:ff:d7:0d:f6:4a:bb: 27:0f:5f:28:90:7f:9c:5f:95:03:c0:38:2f:4a:f7:16:03:74: e7:8a:0a:25:6c:fb:7d:6b:06:93:06:ee:43:46:b8:5b:12:94: a3:cf:94:d2:3c:07:c2:0b:7d:aa:f7:94:9f:10:71:d6:e5:41: f8:16:f1:4b:3b:63:92:dd:b4:76:6c:78:17:3d:2c:2d:ac:6b: a8:ae:17:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwOTI3MDcwODQxWhcNMjYxMDA0MDcwODQxWjAYMRYwFAYD VQQDEw02YWI4YzBmYS0zM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon+ZJGNA/xH81DSaXFCd/Rydv2yP8fugrEJ8ylkhhDWbx7+5AYDUOHQMJkPz a14oQg//jwUoEjnjO1uRyxynXOvQq85lRCQz/4UfrimMQ/cEKy73vvJLPAjiNJe7 qaXcYDVKxe6bovfOeUQIT6ryNNan0xX4bawdeWO5d8hsidNoX2ufNW+HK3L8hX7/ 9DlSeLjGIfBqbEMroMvkT5HsMIWmMq2kpglxCmim7ITT7CYJV8AHKIebwFEXZ/sy uMUdUw8+J2ZpTyne6YlqJZvIDz6UG582qoK3bybfVIfD/rOZlJH3wPADaof7g1nf aB3lxTUtXU6rnHkj3GkYPnO2+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2keG92 UXF6iFAe8DDJa02f/g46MB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmlYyArdox0oHi/Zui1OJJUHTWZ+z0o5K0JYRhWuTv9SsvBcajB/BBpAlGfAt mgo5T8uJGL/V+sP7jPKFfNGUYUo1foZ9qn9Q5gTG5hFV8hmUdMRZtypSSsBPglRV ECHBR6yJA5q1QE3TfWTBAJ+fYCM+PWmF8F0fMRlsKY3jLrSPVJB2fS0TRBqVLEHU 1/w3Xm4OcC0HGpzAz6JEn7xIiiqDyMxq8r4cqbxyYCM1/9cN9kq7Jw9fKJB/nF+V A8A4L0r3FgN054oKJWz7fWsGkwbuQ0a4WxKUo8+U0jwHwgt9qveUnxBx1uVB+Bbx Sztjkt20dmx4Fz0sLaxrqK4XZg== -----END CERTIFICATE-----Generated at Sun Sep 27 12:20:30 2026 by rpki-client