$ rpki-client -vvvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft File: OxaIpfe3JKr754IKLGPZey6o5SI.mft (raw, json) Hash identifier: e7vxAFM6SpQtllNBuc2rSLlPIuQw8UPRWpTW53ukQa4= Subject key identifier: 32:D1:15:10:52:43:7F:39:E2:0C:59:40:75:BE:DB:73:83:19:9D:22 Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft Manifest number: 0415 Signing time: Fri 25 Sep 2026 00:10:41 +0000 Manifest this update: Fri 25 Sep 2026 00:10:41 +0000 Manifest next update: Fri 02 Oct 2026 00:10:41 +0000 Files and hashes: 1: OxaIpfe3JKr754IKLGPZey6o5SI.crl (hash: Ko6uk2aOFAS7hMKNP7T1TpzBgjE+gt04gI+11vBkdno=) 2: EF8CB49CD78F11EC91680D49C4F9AE02.roa (hash: hsXlGwRGvGPxUguulNF29dR42fVylbNtBhEHVdKJ8n0=) 3: 2D613294CD7611EC83259862C4F9AE02.roa (hash: wIyzsjW5BRzmcndW2dr3tP73GPQanoCiUm2iVewXNHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Validity Not Before: Sep 25 00:10:41 2026 GMT Not After : Oct 2 00:10:41 2026 GMT Subject: CN=6ab5bc01-777f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:47:b8:46:22:64:b5:81:8c:5e:8d:ce:90: ab:10:c9:76:f0:03:7b:53:7c:91:58:38:95:89:ed: 04:78:d5:a1:bb:05:c6:04:a1:3f:20:db:15:98:2a: 04:7d:03:76:9e:98:f6:55:72:e1:11:24:c8:2c:e4: 6b:e3:9e:12:53:de:c4:f7:dd:4d:ba:74:39:f0:22: a8:31:89:82:c3:45:b0:27:58:9d:0e:31:aa:0c:3e: 44:ab:58:07:f7:43:66:1d:e8:dc:e1:73:14:2d:fd: eb:c9:be:f1:d0:d5:d3:b7:ec:8c:32:4a:1a:f8:bd: b1:32:3d:d6:6f:bd:89:d5:28:67:9e:d4:1e:e3:05: f2:41:61:89:de:54:4d:64:fa:34:d8:db:d8:60:77: 8b:39:13:6c:ae:26:94:6b:14:51:53:b8:2e:c9:b3: 5e:ac:85:9f:5a:56:3f:b6:3e:51:b0:08:31:56:52: c1:a0:91:4c:bc:d5:f5:e3:b6:20:64:2d:e6:d2:d9: 65:eb:64:95:ee:db:e7:df:64:e9:0f:31:bd:4d:99: 12:7e:56:a1:e2:ee:1a:be:ab:81:08:58:58:eb:49: 0a:09:df:7f:c8:67:fb:f9:2f:78:45:69:72:7a:40: 55:69:db:3b:e3:2b:90:6c:79:74:9b:da:5a:34:98: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D1:15:10:52:43:7F:39:E2:0C:59:40:75:BE:DB:73:83:19:9D:22 X509v3 Authority Key Identifier: keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:78:51:f3:28:44:0b:e1:e5:59:8d:39:d4:9c:f5:9b:bf:72: 27:58:38:d2:9e:83:ae:24:82:b6:5c:26:38:12:ed:6c:75:13: 37:18:86:b3:06:9b:76:b8:8d:58:64:5b:16:6a:6c:b5:a9:72: ae:63:d2:da:33:cf:1b:b0:50:d6:a6:bd:c3:01:67:a4:fa:5e: 8d:2c:96:bf:f8:3f:35:33:77:86:be:c0:88:2f:da:6d:22:ca: 4f:fd:59:e4:aa:5f:1f:11:20:b8:1c:cc:fa:dc:db:f1:b9:14: 29:45:9a:86:d3:ed:eb:4e:0c:fa:3e:99:a2:51:02:f5:aa:45: 2d:e7:da:48:92:bc:db:26:e8:34:d0:c5:b1:15:d3:36:67:9f: b2:1a:16:9c:d3:72:60:7d:21:d3:ea:de:8a:fb:de:5e:27:7a: 96:aa:bf:64:f8:fc:c4:90:24:2e:aa:dc:6f:69:c6:e4:42:b7: c9:0b:a5:65:03:a2:26:15:d9:85:96:8d:8b:fd:15:81:e9:c1: c8:2d:d0:78:e0:60:60:f4:74:0a:f1:38:2a:b1:6e:52:e2:22: 58:98:c0:1b:2e:58:69:73:ef:5e:40:c9:42:c1:26:83:6e:be: f5:47:6f:d1:32:a4:94:59:34:77:cd:96:5c:60:38:62:29:db: f8:40:53:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC MkVBOEU1MjIwHhcNMjYwOTI1MDAxMDQxWhcNMjYxMDAyMDAxMDQxWjAYMRYwFAYD VQQDEw02YWI1YmMwMS03NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvflHuEYiZLWBjF6NzpCrEMl28AN7U3yRWDiVie0EeNWhuwXGBKE/INsVmCoE fQN2npj2VXLhESTILORr454SU97E991NunQ58CKoMYmCw0WwJ1idDjGqDD5Eq1gH 90NmHejc4XMULf3ryb7x0NXTt+yMMkoa+L2xMj3Wb72J1ShnntQe4wXyQWGJ3lRN ZPo02NvYYHeLORNsriaUaxRRU7guybNerIWfWlY/tj5RsAgxVlLBoJFMvNX147Yg ZC3m0tll62SV7tvn32TpDzG9TZkSflah4u4avquBCFhY60kKCd9/yGf7+S94RWly ekBVads74yuQbHl0m9paNJgW9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLRFRBS Q3854gxZQHW+23ODGZ0iMB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzJGQS9ENzI0NDU2MkNENzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pL cjc1NElLTEdQWmV5Nm81U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXhR8yhEC+HlWY051Jz1m79yJ1g40p6DriSCtlwmOBLtbHUTNxiGswabdriN WGRbFmpstalyrmPS2jPPG7BQ1qa9wwFnpPpejSyWv/g/NTN3hr7AiC/abSLKT/1Z 5KpfHxEguBzM+tzb8bkUKUWahtPt604M+j6ZolEC9apFLefaSJK82yboNNDFsRXT NmefshoWnNNyYH0h0+reivveXid6lqq/ZPj8xJAkLqrcb2nG5EK3yQulZQOiJhXZ hZaNi/0VgenByC3QeOBgYPR0CvE4KrFuUuIiWJjAGy5YaXPvXkDJQsEmg26+9Udv 0TKklFk0d82WXGA4Yinb+EBTwg== -----END CERTIFICATE-----Generated at Fri Sep 25 03:25:50 2026 by rpki-client