$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: Wt1Mv4ZNzwFiSPM3Xm3QF6JA0YoakWCljdMRIRWNZMc= Subject key identifier: 30:14:8C:EE:52:80:CB:D9:F8:EA:1D:47:65:49:79:04:CF:3E:3F:31 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0AD4 Signing time: Thu 24 Sep 2026 21:11:09 +0000 Manifest this update: Thu 24 Sep 2026 21:11:09 +0000 Manifest next update: Thu 01 Oct 2026 21:11:09 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: 8vFdgFEn/wbxRIZtMx9yQl6SJmY4BWpJXjhKw/1hGxQ=) 2: 61EE2500936E11F091943583C4F9AE02.roa (hash: Sr0fVNeYl1ln2xDUVSQAqiyMaljD76lpBI5XzEQHN/Q=) 3: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=) 4: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=) 5: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=) 6: BB142084A77811F1AF0DC2223E11F970.roa (hash: sMMlBcu5caAUjy52snyuk+pp0k0djieJLhvCkhI7qRg=) 7: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=) 8: 18E343FA3A3411F195AC72659C833773.roa (hash: zz14yYtWv/27WYWZnEkZKkJyrwrw+vwUUUze6erSSFQ=) 9: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Sep 24 21:11:09 2026 GMT Not After : Oct 1 21:11:09 2026 GMT Subject: CN=6ab591ed-9f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:e5:3f:1f:bf:36:4e:bd:9b:bf:7d:72:a7: c5:ce:46:4f:c9:ad:18:f1:c7:44:19:b8:f1:f8:8a: 67:c7:ce:9a:41:bd:71:45:b7:24:98:31:3c:90:8e: 68:fa:f5:37:63:89:f4:1a:5e:44:ca:67:fd:3f:26: f3:18:b5:d3:40:53:a2:87:6b:c0:52:5f:a8:d0:41: a9:3a:c5:c3:a5:ad:11:69:e7:b1:08:d5:1e:18:fb: c2:86:74:63:b9:39:54:8c:44:20:3c:1b:af:fc:d3: fd:3b:6d:08:45:6c:86:6f:a2:88:72:4b:c2:2c:fe: 17:21:ad:ae:da:cd:69:e5:70:b9:a9:98:13:6f:73: 48:61:98:aa:65:af:cf:2b:e7:1e:59:51:17:8b:35: ac:cb:7f:87:92:c0:f1:ab:7c:ae:f2:26:2f:49:30: f1:a0:66:12:0f:ae:82:6a:fc:a1:c6:d1:14:44:5f: 02:78:3a:e5:30:cd:70:11:d5:dd:d0:5c:49:0c:2e: ab:d1:17:2b:57:84:57:ca:92:17:bc:43:f3:13:38: aa:81:ec:7d:83:cc:83:8e:bf:d0:11:fb:0b:a2:d0: 0a:78:e0:0b:df:34:4b:2a:60:7e:93:d9:cb:38:c2: 6b:56:72:e9:9a:8f:de:f7:81:e6:41:b1:43:2a:3d: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:8C:EE:52:80:CB:D9:F8:EA:1D:47:65:49:79:04:CF:3E:3F:31 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:df:3c:11:7a:f2:2f:ef:f4:ab:e6:d1:82:78:3c:f4:78:5b: 9a:51:e4:5b:c4:0a:09:80:b6:7a:82:24:64:3b:12:a6:13:16: 85:0b:4d:fd:18:a4:4f:01:fb:0a:9c:dd:50:a6:35:30:00:db: 20:9c:2e:a6:4f:b3:b5:53:13:09:f7:01:fd:bd:2f:9f:e9:b6: 3c:42:31:02:73:b3:b5:5c:53:7c:f8:6e:bc:5d:4e:6f:01:41: ee:99:7a:35:f1:37:2e:51:5a:71:91:dd:2f:f3:e1:bc:15:8f: 5d:b0:a4:77:c5:9a:82:f8:91:04:75:b2:cf:ce:92:5a:a2:e0: 28:52:dc:78:90:c8:f0:0f:49:f0:59:4b:5f:8a:ea:e6:d2:80: 7d:c8:96:ff:e5:a6:e7:2d:d6:bb:03:58:31:b8:bb:6e:47:68: 01:b8:da:cf:80:9f:94:6a:3c:b6:70:39:9c:b1:c4:00:5a:4a: 2b:80:89:d9:f2:42:c3:60:c1:ff:fd:18:20:1c:8d:32:1e:57: 0b:e6:d6:df:65:28:55:b5:88:06:a5:c7:a3:1d:95:df:2d:63: 93:a1:ac:00:46:ff:0f:1b:e3:15:07:3c:18:5e:11:e3:bb:a8: ae:a2:54:a7:c3:62:f6:6d:27:5f:c1:70:aa:d5:07:6f:f9:69: 5a:3b:c4:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwOTI0MjExMTA5WhcNMjYxMDAxMjExMTA5WjAYMRYwFAYD VQQDEw02YWI1OTFlZC05ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTjlPx+/Nk69m799cqfFzkZPya0Y8cdEGbjx+Ipnx86aQb1xRbckmDE8kI5o +vU3Y4n0Gl5Eymf9PybzGLXTQFOih2vAUl+o0EGpOsXDpa0RaeexCNUeGPvChnRj uTlUjEQgPBuv/NP9O20IRWyGb6KIckvCLP4XIa2u2s1p5XC5qZgTb3NIYZiqZa/P K+ceWVEXizWsy3+HksDxq3yu8iYvSTDxoGYSD66CavyhxtEURF8CeDrlMM1wEdXd 0FxJDC6r0RcrV4RXypIXvEPzEziqgex9g8yDjr/QEfsLotAKeOAL3zRLKmB+k9nL OMJrVnLpmo/e94HmQbFDKj2ykwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAUjO5S gMvZ+OodR2VJeQTPPj8xMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuN88EXryL+/0q+bRgng89HhbmlHkW8QKCYC2eoIkZDsSphMWhQtN/RikTwH7 CpzdUKY1MADbIJwupk+ztVMTCfcB/b0vn+m2PEIxAnOztVxTfPhuvF1ObwFB7pl6 NfE3LlFacZHdL/PhvBWPXbCkd8WagviRBHWyz86SWqLgKFLceJDI8A9J8FlLX4rq 5tKAfciW/+Wm5y3WuwNYMbi7bkdoAbjaz4CflGo8tnA5nLHEAFpKK4CJ2fJCw2DB //0YIByNMh5XC+bW32UoVbWIBqXHox2V3y1jk6GsAEb/DxvjFQc8GF4R47uorqJU p8Ni9m0nX8FwqtUHb/lpWjvEZg== -----END CERTIFICATE-----Generated at Fri Sep 25 05:10:42 2026 by rpki-client