$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: zOjj+CGwbQPR+rH2Mwz271Od6e9TQZE34swQuVyktSo= Subject key identifier: 8B:C4:92:A4:3C:69:53:C2:14:8A:F1:1E:30:D1:59:71:DE:FD:69:99 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 0210 Signing time: Fri 25 Sep 2026 03:03:50 +0000 Manifest this update: Fri 25 Sep 2026 03:03:50 +0000 Manifest next update: Fri 02 Oct 2026 03:03:50 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: R+mNUVzYIQoqgNzcNYqUAhRAVk12pPeRt8eIJRKazRA=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: nHCvFgPSrTxrO0kFePutm+yZWHN0E1TjfcetCjk+YR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Sep 25 03:03:50 2026 GMT Not After : Oct 2 03:03:50 2026 GMT Subject: CN=6ab5e496-48be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:af:d3:d0:be:89:dd:23:7d:31:25:df:80: ae:b4:d3:db:6c:41:3f:7e:96:6c:ee:30:13:8a:27: 4d:0e:fd:34:0e:69:5e:9f:78:7c:c7:41:00:8d:44: 80:0d:1b:27:64:f4:7c:61:41:18:ba:b5:f3:be:82: b6:fa:b6:a0:7d:58:3c:2d:07:0a:7e:33:44:15:bd: cb:2e:32:8b:0f:44:6e:ed:fb:25:25:83:9f:43:e4: 28:6a:c1:bd:39:67:c7:7c:27:b0:bf:3f:3d:80:f6: d7:b6:a4:37:1e:56:76:ac:0a:64:65:91:a4:42:b8: 23:af:9e:84:03:89:7b:47:b2:41:02:c7:76:82:8c: 3b:47:7e:eb:77:6d:7e:9c:d8:33:ba:64:cb:a0:d2: 43:60:ac:84:ff:f9:4e:83:0f:af:3a:98:95:c9:ad: a5:ba:fb:7a:d4:a8:74:0f:f2:5e:30:d5:50:4d:7a: 9f:5b:11:5a:61:e2:87:5d:e2:bd:da:8e:82:dd:5f: d9:61:9c:43:fa:ac:e2:d3:c1:64:63:fd:55:a1:be: d2:6e:dd:35:53:8b:e7:f9:89:a7:2e:76:f6:70:64: 5e:3c:32:17:c9:81:4d:64:e3:0f:70:f3:05:b9:18: 1c:3c:5d:ab:1e:fa:5c:73:3d:1c:c0:5d:6d:ca:c8: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C4:92:A4:3C:69:53:C2:14:8A:F1:1E:30:D1:59:71:DE:FD:69:99 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:8b:af:fc:9c:75:82:43:73:57:99:26:bd:12:40:4d:87:61: 2d:48:a7:81:b0:f5:f0:8b:67:c1:b6:6f:a4:24:0d:44:46:84: 3f:4c:fc:fb:f3:f0:d9:60:27:f0:3a:1e:44:f6:4e:3e:41:a1: 20:be:e8:82:89:1f:72:61:ba:0b:01:52:a7:28:dd:80:fb:ea: ec:b6:1f:09:30:54:63:91:4f:8f:af:0f:40:31:c4:2a:d4:69: 19:9f:ca:cf:37:fd:9f:53:e3:47:6a:0d:70:bf:28:d2:53:73: 4b:63:38:87:b5:f9:9c:cd:54:24:9b:42:7b:33:31:e4:ba:30: a2:a4:24:15:cc:8c:a0:b1:73:de:7c:1c:2a:22:28:1e:07:28: fc:12:93:6f:0a:4c:34:7a:aa:15:a9:c6:8b:cd:88:fd:35:76: 3e:46:54:0a:33:50:ef:99:c0:29:bd:da:88:f9:47:96:e2:b6: cf:5f:08:06:2f:e9:a6:76:01:50:04:22:72:3a:cd:90:9e:08: b1:17:0b:79:bf:6c:9e:c6:64:30:78:cc:a8:87:dd:ab:fe:35: bc:12:d7:e8:0a:33:00:d8:65:dc:10:b8:e5:91:99:6c:d7:e4: 0e:4e:1d:d8:e2:db:6e:c3:64:5e:c5:ad:37:29:51:a8:b4:c6: 86:b3:7f:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjYwOTI1MDMwMzUwWhcNMjYxMDAyMDMwMzUwWjAYMRYwFAYD VQQDEw02YWI1ZTQ5Ni00OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxev09C+id0jfTEl34CutNPbbEE/fpZs7jATiidNDv00Dmlen3h8x0EAjUSA DRsnZPR8YUEYurXzvoK2+ragfVg8LQcKfjNEFb3LLjKLD0Ru7fslJYOfQ+QoasG9 OWfHfCewvz89gPbXtqQ3HlZ2rApkZZGkQrgjr56EA4l7R7JBAsd2gow7R37rd21+ nNgzumTLoNJDYKyE//lOgw+vOpiVya2luvt61Kh0D/JeMNVQTXqfWxFaYeKHXeK9 2o6C3V/ZYZxD+qzi08FkY/1Vob7Sbt01U4vn+YmnLnb2cGRePDIXyYFNZOMPcPMF uRgcPF2rHvpccz0cwF1tysgMgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvEkqQ8 aVPCFIrxHjDRWXHe/WmZMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAouv/Jx1gkNzV5kmvRJATYdhLUingbD18ItnwbZvpCQNREaEP0z8+/Pw2WAn 8DoeRPZOPkGhIL7ogokfcmG6CwFSpyjdgPvq7LYfCTBUY5FPj68PQDHEKtRpGZ/K zzf9n1PjR2oNcL8o0lNzS2M4h7X5nM1UJJtCezMx5LowoqQkFcyMoLFz3nwcKiIo Hgco/BKTbwpMNHqqFanGi82I/TV2PkZUCjNQ75nAKb3aiPlHluK2z18IBi/ppnYB UAQicjrNkJ4IsRcLeb9snsZkMHjMqIfdq/41vBLX6AozANhl3BC45ZGZbNfkDk4d 2OLbbsNkXsWtNylRqLTGhrN/hg== -----END CERTIFICATE-----Generated at Fri Sep 25 22:10:27 2026 by rpki-client