$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft File: cnOFPaBj78uOxUSwMg1acHuUwIk.mft (raw, json) Hash identifier: rm4dw9r/Ea+xOmULZ4bsahxHOqboTNctDyb7gZIaqWM= Subject key identifier: 63:B1:5C:3D:EC:58:BF:07:92:12:EF:D7:D9:21:0C:E5:57:91:64:F5 Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft Manifest number: 2EF7 Signing time: Tue 22 Sep 2026 15:37:37 +0000 Manifest this update: Tue 22 Sep 2026 15:37:36 +0000 Manifest next update: Tue 29 Sep 2026 15:37:36 +0000 Files and hashes: 1: cnOFPaBj78uOxUSwMg1acHuUwIk.crl (hash: 2VoIn2XB6JIh4cXjx5G0Vt4yR3XKrIAZoXvO2M5mgr8=) 2: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (hash: 1/JNtgxrsCQgMCZg/xoCtiLGpLNRukBhGSMeMiBFJLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Validity Not Before: Sep 22 15:37:36 2026 GMT Not After : Sep 29 15:37:36 2026 GMT Subject: CN=6ab2a0c1-ffc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:fa:b4:8a:25:f0:6d:a8:38:c3:9a:9f:f6: 10:d9:b6:30:2e:8c:1b:bc:10:27:97:6d:40:81:02: 34:97:48:08:6a:40:e8:ea:14:22:9f:d0:68:17:fb: 94:9c:40:bd:95:6a:b6:fa:d3:1f:74:05:f8:7d:f1: 02:16:9c:8e:ed:e5:c1:11:a9:8b:9d:30:dd:f2:6d: 4a:4f:95:51:2c:6b:46:14:dd:1d:a3:5d:8a:31:52: b3:3d:7c:5d:d1:9d:98:cb:19:59:44:fd:6d:6f:4d: 58:b5:1f:f1:3c:64:04:fd:c5:17:de:92:dd:ae:7b: ca:cc:81:db:4f:28:2e:65:5a:fa:8e:54:8e:65:36: b6:72:4e:ab:3e:25:50:d8:27:63:20:5d:0e:6f:41: 43:b5:78:5d:02:85:81:55:18:a6:c6:70:32:22:8e: ae:1e:f1:45:e1:0e:e3:89:2e:88:7d:a1:12:e1:bb: 0f:79:87:ec:d0:0c:5e:bb:84:62:d0:19:06:1a:10: 2e:8f:1f:ef:58:c8:f6:13:07:6b:50:48:f3:43:c0: a4:f0:7b:0b:30:83:88:38:61:ad:48:8a:31:d6:c2: aa:55:d7:15:1b:bb:3a:c8:71:77:16:48:67:cb:1d: fb:44:a0:c3:b2:3b:59:bd:88:9a:2e:9a:7f:92:1b: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:5C:3D:EC:58:BF:07:92:12:EF:D7:D9:21:0C:E5:57:91:64:F5 X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ae:1d:2f:b4:ca:90:63:ab:0c:c1:60:98:07:85:00:6b:34: d6:f2:81:ba:52:28:1f:00:5b:38:c7:84:35:e0:7b:2e:f5:ec: 71:9c:60:73:5d:8a:d5:91:f5:1d:eb:3e:4b:ee:bb:07:60:73: 29:d3:88:8e:ac:2a:8b:59:21:90:2b:44:fd:df:eb:b4:1a:94: 79:00:bb:39:f5:71:68:ec:86:af:4b:de:62:b7:d5:b5:87:e3: 94:d9:84:36:0e:da:38:e9:7d:35:a2:66:6e:f6:5f:06:69:ff: 4e:dd:b1:e1:ee:98:a3:95:be:a1:c8:14:ee:dc:eb:24:8a:c4: 56:b2:a5:ca:2a:5c:bc:e9:d2:e2:21:56:a9:19:01:c7:23:0c: 54:8d:bd:10:bc:e9:c2:52:12:43:10:b9:66:58:33:60:fa:9a: b4:f4:89:d2:f3:12:a5:14:84:85:43:f3:71:f2:30:c8:87:70: 18:5e:b2:ab:f1:41:70:f7:4a:2c:4b:a8:46:be:e5:f0:b2:d5: f5:c2:60:86:da:44:13:6f:e0:3c:b1:32:df:47:57:bb:34:e1: d6:42:ea:ed:cb:f2:f3:fe:0c:77:41:7e:74:ca:06:f0:8a:09: 05:66:7c:28:73:86:da:b3:aa:75:5c:85:6a:60:9f:73:45:fe: 93:10:42:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjYwOTIyMTUzNzM2WhcNMjYwOTI5MTUzNzM2WjAYMRYwFAYD VQQDEw02YWIyYTBjMS1mZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQf6tIol8G2oOMOan/YQ2bYwLowbvBAnl21AgQI0l0gIakDo6hQin9BoF/uU nEC9lWq2+tMfdAX4ffECFpyO7eXBEamLnTDd8m1KT5VRLGtGFN0do12KMVKzPXxd 0Z2YyxlZRP1tb01YtR/xPGQE/cUX3pLdrnvKzIHbTyguZVr6jlSOZTa2ck6rPiVQ 2CdjIF0Ob0FDtXhdAoWBVRimxnAyIo6uHvFF4Q7jiS6IfaES4bsPeYfs0Axeu4Ri 0BkGGhAujx/vWMj2EwdrUEjzQ8Ck8HsLMIOIOGGtSIox1sKqVdcVG7s6yHF3Fkhn yx37RKDDsjtZvYiaLpp/khskJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOxXD3s WL8HkhLv19khDOVXkWT1MB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4 dU94VVN3TWcxYWNIdVV3SWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACa4dL7TKkGOrDMFgmAeFAGs01vKBulIoHwBbOMeENeB7LvXscZxgc12K1ZH1 Hes+S+67B2BzKdOIjqwqi1khkCtE/d/rtBqUeQC7OfVxaOyGr0veYrfVtYfjlNmE Ng7aOOl9NaJmbvZfBmn/Tt2x4e6Yo5W+ocgU7tzrJIrEVrKlyipcvOnS4iFWqRkB xyMMVI29ELzpwlISQxC5ZlgzYPqatPSJ0vMSpRSEhUPzcfIwyIdwGF6yq/FBcPdK LEuoRr7l8LLV9cJghtpEE2/gPLEy30dXuzTh1kLq7cvy8/4Md0F+dMoG8IoJBWZ8 KHOG2rOqdVyFamCfc0X+kxBCWw== -----END CERTIFICATE-----Generated at Thu Sep 24 11:56:59 2026 by rpki-client