$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: sOJQPPqMFrQeup2kQ5XHOg/gvW+jTzf3nFYOnZDhZJc= Subject key identifier: 16:15:2C:7B:A0:80:C9:EF:AC:E6:B9:DB:D4:D9:D6:F1:DD:CA:00:48 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0AF3 Signing time: Sat 14 Nov 2026 21:04:21 +0000 Manifest this update: Sat 14 Nov 2026 21:04:21 +0000 Manifest next update: Sat 21 Nov 2026 21:04:21 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: vrJcxZOWhObVgntyXYnv+AFdDzvTfn6slVLFjTMtn7w=) 2: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=) 3: 18E343FA3A3411F195AC72659C833773.roa (hash: 2LSM3eiQ6uSa3mcP9nx4IAJuA3izNuR+FLwE9vPZ8yU=) 4: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=) 5: CA9608C6DCCD11F1BA378C0E1066CEF9.roa (hash: dcUSZVGpnp3URdV9VrMaiOOY7XqQtQH8XN7T7bMXrwo=) 6: 61EE2500936E11F091943583C4F9AE02.roa (hash: 1DroOyIzK/C8S5BPpljDo+Tuv6IF58exjbel4nRge88=) 7: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=) 8: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=) 9: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 21:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Nov 14 21:04:21 2026 GMT Not After : Nov 21 21:04:21 2026 GMT Subject: CN=6af8ccd5-2668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:58:3a:b1:83:8d:94:97:08:ec:f7:f5:ed: 71:a2:a7:b7:18:e8:6d:38:2a:79:d0:2a:c4:83:f8: 95:b2:0a:f6:bd:0c:7b:3e:d9:27:80:6f:bf:dc:99: 4c:92:de:14:7e:51:e0:98:48:34:42:05:20:e0:f8: 1a:7b:39:9f:f5:c9:85:71:4f:33:78:94:41:2f:c5: ed:84:8d:73:fe:7f:c2:0f:dd:16:2d:93:da:c9:65: b0:2d:c1:69:12:0e:0b:b8:d2:91:17:9f:d2:02:09: 7f:33:49:6c:49:b0:15:31:01:33:3d:35:e3:ca:b5: d5:b9:ec:70:93:2e:5b:74:f2:30:47:e4:5e:98:38: d7:fa:b5:14:1d:19:38:ad:a4:d0:db:75:ea:b3:87: 3d:d8:79:08:19:c6:41:e3:e5:95:da:79:cb:cd:56: c4:1a:31:34:65:f8:ce:37:f2:b5:18:04:fd:10:c0: 5a:ad:12:38:23:d0:85:eb:ab:23:ae:2d:a1:b5:b4: 8f:99:53:44:5f:95:40:e5:6d:bb:8c:b3:5e:dc:60: 7a:3e:91:9a:b1:2e:69:94:72:e8:69:d4:e7:cb:b5: 06:0b:6c:89:d5:a8:5a:d3:5a:a6:78:45:40:dc:83: 4d:bb:20:95:9b:b8:46:e4:ed:d6:cc:20:6d:61:35: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:2C:7B:A0:80:C9:EF:AC:E6:B9:DB:D4:D9:D6:F1:DD:CA:00:48 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:66:7b:82:e4:e4:06:5a:2a:c4:3d:86:3b:cb:fb:0c:cb:a4: 42:a5:54:8c:6e:70:ce:fa:dc:de:bd:87:cd:37:9f:7b:c3:f0: a2:ef:44:e3:f8:2d:12:75:fd:58:27:ac:8c:27:b7:65:c2:21: 33:1d:fd:e4:2e:7f:3c:d4:0e:5b:10:a7:f7:f4:47:4e:6b:89: 71:22:5b:73:c9:ef:03:af:e5:5a:01:87:5a:d5:31:04:a8:18: f5:34:14:1b:c7:06:d0:97:75:7f:85:2a:1a:49:d0:b5:d4:d1: 35:02:a5:ff:ef:91:ad:be:db:c9:24:4a:56:60:77:86:78:54: ea:40:2b:3f:82:25:d1:a1:d6:35:73:aa:f0:ea:bf:08:5f:e6: a9:69:b1:bf:72:6f:56:c2:56:6a:c0:5f:2f:ba:b1:e3:29:98: dd:38:0f:69:2b:f8:51:ba:c6:9d:91:e9:8c:3a:a4:8f:ae:af: 6b:31:24:ef:de:4c:3f:1f:a5:58:50:cc:2f:e0:b8:00:5b:69: 8e:82:e5:e6:4e:c7:15:d5:13:68:57:84:0f:9e:dd:11:fd:5a: aa:db:62:48:27:7b:b4:08:06:cb:01:86:84:c0:8e:90:ff:0d: f6:e7:99:0d:aa:9f:a2:45:46:26:5a:ff:1a:cc:49:32:3a:e0: c1:46:07:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYxMTE0MjEwNDIxWhcNMjYxMTIxMjEwNDIxWjAYMRYwFAYD VQQDEw02YWY4Y2NkNS0yNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RVYOrGDjZSXCOz39e1xoqe3GOhtOCp50CrEg/iVsgr2vQx7PtkngG+/3JlM kt4UflHgmEg0QgUg4Pgaezmf9cmFcU8zeJRBL8XthI1z/n/CD90WLZPayWWwLcFp Eg4LuNKRF5/SAgl/M0lsSbAVMQEzPTXjyrXVuexwky5bdPIwR+RemDjX+rUUHRk4 raTQ23Xqs4c92HkIGcZB4+WV2nnLzVbEGjE0ZfjON/K1GAT9EMBarRI4I9CF66sj ri2htbSPmVNEX5VA5W27jLNe3GB6PpGasS5plHLoadTny7UGC2yJ1aha01qmeEVA 3INNuyCVm7hG5O3WzCBtYTVf6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYVLHug gMnvrOa529TZ1vHdygBIMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAemZ7guTkBloqxD2GO8v7DMukQqVUjG5wzvrc3r2HzTefe8Pwou9E4/gtEnX9 WCesjCe3ZcIhMx395C5/PNQOWxCn9/RHTmuJcSJbc8nvA6/lWgGHWtUxBKgY9TQU G8cG0Jd1f4UqGknQtdTRNQKl/++Rrb7bySRKVmB3hnhU6kArP4Il0aHWNXOq8Oq/ CF/mqWmxv3JvVsJWasBfL7qx4ymY3TgPaSv4UbrGnZHpjDqkj66vazEk795MPx+l WFDML+C4AFtpjoLl5k7HFdUTaFeED57dEf1aqttiSCd7tAgGywGGhMCOkP8N9ueZ DaqfokVGJlr/GsxJMjrgwUYHxQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:45:01 2026 by rpki-client