$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft File: oaOkEem3sQig0u6lKRHrNHEHOj4.mft (raw, json) Hash identifier: LOAJVZN7+jp3zHMB5C33PWouBizcVboVjapgzzlf1e8= Subject key identifier: F4:8E:90:4F:F7:A5:03:4E:D2:B9:75:17:1C:23:3A:A6:BD:37:A8:25 Authority key identifier: A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E Certificate issuer: /CN=A9158D68/serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft Manifest number: 16 Signing time: Fri 25 Sep 2026 09:12:09 +0000 Manifest this update: Fri 25 Sep 2026 09:12:08 +0000 Manifest next update: Fri 02 Oct 2026 09:12:08 +0000 Files and hashes: 1: oaOkEem3sQig0u6lKRHrNHEHOj4.crl (hash: 12Oa4qmACxX6BohEacNFoZhhaFcnU1gf3WZpsJfGsNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.crl rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D68, serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E Validity Not Before: Sep 25 09:12:08 2026 GMT Not After : Oct 2 09:12:08 2026 GMT Subject: CN=6ab63ae9-55bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:02:6b:c9:1b:e9:09:38:49:00:6e:22:dc: 61:3b:8c:ed:93:b3:3b:c6:68:91:89:e4:38:ea:34: e9:1a:fc:bf:87:26:eb:57:df:a2:28:d4:b6:80:dd: d6:11:e4:18:22:60:75:90:64:57:09:28:be:bf:df: af:3d:9d:0f:f8:ac:9f:35:a6:f8:9c:01:0b:50:22: 27:f6:df:0a:65:58:07:7d:5a:3c:df:cd:1c:1b:0f: 7c:b2:a2:68:b4:bf:a4:13:62:25:fb:db:95:39:9d: b5:df:84:cc:d7:49:98:2e:e6:f6:6c:fa:cf:af:3b: d7:4f:37:2e:63:88:29:9e:0c:46:73:d7:42:45:3c: 49:12:f2:90:c2:32:f3:79:b4:f3:2f:f8:9d:79:a3: 9f:8a:f4:06:33:1b:07:bc:c7:bc:b2:51:b8:b1:16: 6f:e4:93:bc:7f:7e:8e:70:10:ee:be:94:50:bb:71: 9c:cc:99:58:ec:2a:eb:bb:e4:5c:cc:1e:b2:4e:3a: d3:89:cd:1c:1a:e1:5c:95:1a:52:27:40:ea:04:3a: e1:6d:49:bb:30:09:0f:6c:dc:4e:69:58:75:c3:ab: 36:f4:ea:21:31:83:b2:30:d8:d7:45:95:80:c3:98: 42:51:39:65:d7:31:56:0d:2b:1e:6d:ac:b8:bd:b9: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8E:90:4F:F7:A5:03:4E:D2:B9:75:17:1C:23:3A:A6:BD:37:A8:25 X509v3 Authority Key Identifier: keyid:A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:15:5e:01:2d:5c:fc:05:fc:7d:44:04:9c:56:45:8e:76:cc: 9d:a3:89:fe:86:eb:ce:b1:de:37:0a:51:db:a0:cf:16:50:56: d4:2c:72:6c:22:82:96:09:2e:54:48:90:56:85:9b:d8:95:d8: 3b:b9:67:62:6d:4c:cd:36:2d:4b:db:ba:ad:45:ba:32:5f:57: 51:fa:d3:50:b2:e8:c6:e9:f3:f6:51:46:32:3a:b6:cb:28:ff: 73:9a:b8:c2:e2:57:50:29:cb:76:1b:17:a6:93:3a:20:6d:8c: b9:7b:d7:ed:8f:fb:5d:13:76:f1:0e:62:30:1c:e2:32:ad:15: 78:9d:4f:3b:73:18:52:9f:b7:b0:09:ec:b4:2c:45:a3:ed:42: 39:3e:96:ee:30:82:89:53:84:36:ba:85:1b:11:2d:77:29:93: c8:e9:2c:f0:8d:ac:38:cb:23:0a:77:f0:64:04:17:2f:f1:87: 2a:97:f8:5a:55:ee:ee:90:c6:16:f0:48:47:20:2f:18:4e:e8: c4:09:ab:52:f2:84:c8:3c:8f:92:ad:05:5b:f7:8a:f4:f2:bd: da:50:ba:72:03:9d:31:6c:bd:e2:48:90:ea:6c:56:6b:09:69: 2f:61:1f:45:29:51:36:34:c9:a8:fa:a7:48:82:ad:7c:ad:74: 11:4a:dc:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ2ODExMC8GA1UEBRMoQTFBM0E0MTFFOUI3QjEwOEEwRDJFRUE1MjkxMUVCMzQ3 MTA3M0EzRTAeFw0yNjA5MjUwOTEyMDhaFw0yNjEwMDIwOTEyMDhaMBgxFjAUBgNV BAMTDTZhYjYzYWU5LTU1YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZQwJryRvpCThJAG4i3GE7jO2TszvGaJGJ5DjqNOka/L+HJutX36Io1LaA3dYR 5BgiYHWQZFcJKL6/3689nQ/4rJ81pvicAQtQIif23wplWAd9WjzfzRwbD3yyomi0 v6QTYiX725U5nbXfhMzXSZgu5vZs+s+vO9dPNy5jiCmeDEZz10JFPEkS8pDCMvN5 tPMv+J15o5+K9AYzGwe8x7yyUbixFm/kk7x/fo5wEO6+lFC7cZzMmVjsKuu75FzM HrJOOtOJzRwa4VyVGlInQOoEOuFtSbswCQ9s3E5pWHXDqzb06iExg7Iw2NdFlYDD mEJROWXXMVYNKx5trLi9uRbxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9I6QT/el A07SuXUXHCM6pr03qCUwHwYDVR0jBBgwFoAUoaOkEem3sQig0u6lKRHrNHEHOj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDY4LzdBNDM3Q0MwOUFE MTExRjE4OTJCRUY1MjRDMTFGOTcwL29hT2tFZW0zc1FpZzB1NmxLUkhyTkhFSE9q NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2FPa0VlbTNzUWlnMHU2bEtSSHJOSEVIT2o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RDY4LzdBNDM3Q0MwOUFEMTExRjE4OTJCRUY1MjRDMTFGOTcwL29hT2tFZW0zc1Fp ZzB1NmxLUkhyTkhFSE9qNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYFV4BLVz8Bfx9RAScVkWOdsydo4n+huvOsd43ClHboM8WUFbULHJsIoKWCS5U SJBWhZvYldg7uWdibUzNNi1L27qtRboyX1dR+tNQsujG6fP2UUYyOrbLKP9zmrjC 4ldQKct2GxemkzogbYy5e9ftj/tdE3bxDmIwHOIyrRV4nU87cxhSn7ewCey0LEWj 7UI5PpbuMIKJU4Q2uoUbES13KZPI6Szwjaw4yyMKd/BkBBcv8Ycql/haVe7ukMYW 8EhHIC8YTujECatS8oTIPI+SrQVb94r08r3aULpyA50xbL3iSJDqbFZrCWkvYR9F KVE2NMmo+qdIgq18rXQRStz/ -----END CERTIFICATE-----Generated at Sat Sep 26 13:14:33 2026 by rpki-client