$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: iOE/f6D3B0rN06mnZ3gbSa6nRcmokXiz4ild6bQ/ie4= Subject key identifier: E0:EA:A1:51:C6:62:DE:5A:98:76:07:D3:61:82:36:4A:08:99:2A:E5 Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 0AC7 Signing time: Fri 02 Oct 2026 19:44:26 +0000 Manifest this update: Fri 02 Oct 2026 19:44:25 +0000 Manifest next update: Fri 09 Oct 2026 19:44:25 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: oiLk6R46Gj46lBHmCmrQebRv++SXjbqcXXd0UMLr3vA=) 2: D65601C8861C11F188AD997381A30FBC.roa (hash: WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=) 3: 6FD03784861C11F18E80495A81A30FBC.roa (hash: +OaHRdor7FrSH8stlmfhFUun2yan7PWVuqWKNlAkwUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 19:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Oct 2 19:44:25 2026 GMT Not After : Oct 9 19:44:25 2026 GMT Subject: CN=6ac00999-8eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:ac:3f:3f:82:92:75:de:30:f3:fb:bd:9e: b1:19:51:1a:8b:a1:49:93:f9:81:44:b3:1c:2b:1e: ec:bb:be:18:5a:7a:a7:fe:5e:26:f2:2d:11:80:d4: a2:f3:68:98:49:07:eb:d6:40:d8:47:b0:a2:cb:da: 64:39:05:11:44:06:36:50:f8:00:04:10:67:8e:5f: 23:53:fe:76:4e:28:1f:26:81:c6:ce:c2:1a:d5:8b: 31:8f:92:0b:ac:db:7c:55:01:d1:84:bf:c7:41:e0: 7e:37:37:15:ec:06:b6:ef:a0:82:ae:44:bb:28:ad: 27:53:0d:41:ae:6e:6f:71:fe:a0:5e:df:6a:89:77: e8:77:f4:8d:29:e5:ff:78:bb:9e:67:b1:a2:e3:f7: 3c:0a:73:ea:0f:c2:08:08:4a:a0:dc:47:d1:cb:32: 59:6b:fd:dc:e5:dc:7c:b3:9b:fd:70:f3:2c:0f:23: 4e:aa:00:15:bc:d1:cd:c3:65:f3:dc:2c:25:22:5f: 59:25:ad:5f:e5:e3:3d:47:74:cf:40:69:02:f0:e5: 04:87:3b:51:cd:d8:84:61:dd:e0:b0:1e:fa:ea:b8: db:d8:4a:30:c3:0c:56:11:80:d4:cd:89:90:8e:e9: ea:fc:d0:0d:8e:13:5a:73:3a:a2:d7:c7:16:cf:69: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:A1:51:C6:62:DE:5A:98:76:07:D3:61:82:36:4A:08:99:2A:E5 X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:50:ad:ba:22:78:f0:82:d8:6c:d6:52:88:d8:32:61:d6:63: 3d:70:c4:6b:4f:df:45:e9:e5:ef:49:9f:c6:49:08:ab:e2:64: 61:1e:fe:95:3e:0a:ba:99:8b:4e:2c:b9:f2:e4:fd:e0:6c:11: b9:12:17:63:25:ad:10:54:ff:05:dd:18:d5:a9:a2:99:5c:46: 86:0a:71:3e:94:e3:d6:c9:a6:fa:c1:03:bb:bb:d3:9f:f1:37: fe:f4:7a:12:6d:89:ed:2b:d5:c2:6f:ff:5c:8d:35:79:21:fb: 22:bf:ff:69:58:3b:7b:ec:14:06:83:d6:11:49:cc:e9:f9:44: 3e:05:e7:e8:dc:5d:a9:62:59:c3:b6:de:83:43:08:a0:f4:01: bd:f8:8d:08:2c:20:71:72:f5:e5:31:96:7d:8c:54:a8:5b:e8: 21:53:bb:78:33:82:38:b1:e4:79:8a:db:24:67:ab:6f:25:6e: f3:04:22:ea:c1:4f:5b:68:15:5e:9d:0a:06:39:a5:58:b7:ab: 36:a3:08:25:d0:4b:1f:6d:64:ad:2a:b0:75:d5:9a:77:86:d1: 6f:04:42:f5:87:c6:84:e4:c0:95:7d:55:33:6f:ba:92:2b:0c: c7:13:60:ff:ca:f5:97:6d:6b:f8:f9:16:c6:df:67:5d:e0:f7: 4d:03:03:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjYxMDAyMTk0NDI1WhcNMjYxMDA5MTk0NDI1WjAYMRYwFAYD VQQDEw02YWMwMDk5OS04ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26qsPz+CknXeMPP7vZ6xGVEai6FJk/mBRLMcKx7su74YWnqn/l4m8i0RgNSi 82iYSQfr1kDYR7Ciy9pkOQURRAY2UPgABBBnjl8jU/52TigfJoHGzsIa1Ysxj5IL rNt8VQHRhL/HQeB+NzcV7Aa276CCrkS7KK0nUw1Brm5vcf6gXt9qiXfod/SNKeX/ eLueZ7Gi4/c8CnPqD8IICEqg3EfRyzJZa/3c5dx8s5v9cPMsDyNOqgAVvNHNw2Xz 3CwlIl9ZJa1f5eM9R3TPQGkC8OUEhztRzdiEYd3gsB766rjb2EowwwxWEYDUzYmQ junq/NANjhNaczqi18cWz2npjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODqoVHG Yt5amHYH02GCNkoImSrlMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYlCtuiJ48ILYbNZSiNgyYdZjPXDEa0/fRenl70mfxkkIq+JkYR7+lT4KupmL Tiy58uT94GwRuRIXYyWtEFT/Bd0Y1amimVxGhgpxPpTj1smm+sEDu7vTn/E3/vR6 Em2J7SvVwm//XI01eSH7Ir//aVg7e+wUBoPWEUnM6flEPgXn6NxdqWJZw7beg0MI oPQBvfiNCCwgcXL15TGWfYxUqFvoIVO7eDOCOLHkeYrbJGerbyVu8wQi6sFPW2gV Xp0KBjmlWLerNqMIJdBLH21krSqwddWad4bRbwRC9YfGhOTAlX1VM2+6kisMxxNg /8r1l21r+PkWxt9nXeD3TQMDZg== -----END CERTIFICATE-----Generated at Sun Oct 4 19:44:17 2026 by rpki-client