$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft File: OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json) Hash identifier: G1tU21ErT7vg1yy5FWGaKEquHlY6iR9dgD5QvvtVUn4= Subject key identifier: 31:46:22:2C:43:52:6F:0B:C4:59:BE:52:E0:78:52:66:27:36:25:72 Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft Manifest number: 0159 Signing time: Wed 23 Sep 2026 01:44:42 +0000 Manifest this update: Wed 23 Sep 2026 01:44:41 +0000 Manifest next update: Wed 30 Sep 2026 01:44:41 +0000 Files and hashes: 1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: CRVL1Fo7pYKDJ13TD9saj0aDC3CXpDqEtU4RBxwQWrU=) 2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: LyR1iv+/BLoRmPRdRTSwxRSYCihT/qICYCrr65jscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Validity Not Before: Sep 23 01:44:41 2026 GMT Not After : Sep 30 01:44:41 2026 GMT Subject: CN=6ab32f0a-411d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:8e:23:35:17:ec:ac:fa:c7:3b:2d:6c:24: 3f:b8:77:9d:3c:eb:c4:5f:87:b8:35:05:5a:40:c5: 47:0f:df:f8:94:9f:2f:a2:d1:0c:57:f6:06:88:df: 9a:d2:11:97:38:dc:54:09:69:9f:71:32:f7:ef:ae: c8:78:bb:13:08:be:43:4b:64:61:ba:d9:c4:5b:c7: ba:68:5c:d2:44:3f:b3:bc:65:83:de:2a:49:e5:b3: f4:35:89:0f:6d:be:fc:ea:5d:9a:62:1f:4a:e8:e1: 86:bf:1f:54:f5:d9:25:61:ae:05:c5:2f:40:35:af: 75:98:0d:9d:45:05:d3:66:36:3a:7b:60:5b:03:fd: 85:80:88:de:3c:13:3d:0c:f5:92:e6:c2:2f:d3:7e: f9:77:bf:d6:20:47:45:4e:05:99:8a:7b:e4:88:8d: d5:79:16:cf:1b:fb:d9:58:95:d7:78:d7:93:ce:e8: 3e:1d:b9:28:58:c7:e7:05:2e:81:3e:d6:f6:7c:e3: 73:4c:9d:09:0a:3f:46:18:47:1b:8f:97:fb:4c:9f: fa:bf:30:37:84:56:06:e7:32:ad:8d:72:1c:31:6a: a6:5d:96:03:b7:7b:7c:53:30:b3:07:76:e3:3a:5d: 3d:03:3c:60:af:0e:d9:83:b5:47:3f:7f:42:46:b7: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:22:2C:43:52:6F:0B:C4:59:BE:52:E0:78:52:66:27:36:25:72 X509v3 Authority Key Identifier: keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:76:b0:ae:4d:0a:56:86:b1:15:47:e8:77:23:8b:89:00:c9: 61:59:1f:4a:d4:4d:f8:d2:86:53:c2:68:dc:62:a3:59:a2:a7: e0:64:7a:ed:bf:a9:72:51:82:5e:ee:0d:dc:ce:14:73:b1:e0: 2e:2d:18:5d:4d:94:97:e6:11:36:06:c3:41:49:ef:c0:71:84: ad:e0:df:0f:79:6e:53:fc:c3:d2:15:5e:24:d3:ce:3e:7a:2e: 39:c9:5f:be:ce:47:86:58:a3:9e:89:00:65:05:fc:d5:49:bd: 99:81:72:a1:23:9f:8a:75:47:83:8d:41:78:91:b6:1c:69:1d: 10:d7:02:b5:d5:2b:eb:fd:58:c3:b1:19:bb:39:8c:74:43:0a: a9:18:a9:7c:99:d3:41:c0:ac:4b:eb:70:36:f7:36:1a:9b:d9: 21:03:50:2f:93:c8:a9:05:33:cd:34:3c:7e:5b:3a:5b:40:1e: be:a7:d1:81:49:60:48:ed:2f:f4:71:7e:48:7b:70:34:2d:4b: 21:31:2d:2b:11:71:d5:f5:01:0a:93:52:85:f8:58:ea:8f:cf: 20:22:a1:38:7e:7a:56:45:1d:9d:80:44:ef:cd:c0:63:1a:df: 60:b2:04:89:5f:a3:90:81:b4:05:83:da:f1:66:b8:45:48:1c: 1c:e9:39:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2 MjQyNkFBNUQwHhcNMjYwOTIzMDE0NDQxWhcNMjYwOTMwMDE0NDQxWjAYMRYwFAYD VQQDEw02YWIzMmYwYS00MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdCOIzUX7Kz6xzstbCQ/uHedPOvEX4e4NQVaQMVHD9/4lJ8votEMV/YGiN+a 0hGXONxUCWmfcTL3767IeLsTCL5DS2RhutnEW8e6aFzSRD+zvGWD3ipJ5bP0NYkP bb786l2aYh9K6OGGvx9U9dklYa4FxS9ANa91mA2dRQXTZjY6e2BbA/2FgIjePBM9 DPWS5sIv0375d7/WIEdFTgWZinvkiI3VeRbPG/vZWJXXeNeTzug+HbkoWMfnBS6B Ptb2fONzTJ0JCj9GGEcbj5f7TJ/6vzA3hFYG5zKtjXIcMWqmXZYDt3t8UzCzB3bj Ol09Azxgrw7Zg7VHP39CRre0awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFGIixD Um8LxFm+UuB4UmYnNiVyMB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3 NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80Q0ZDMDhEQUI3NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEky NVFjZnVLXzYxQjFpUW1xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXawrk0KVoaxFUfodyOLiQDJYVkfStRN+NKGU8Jo3GKjWaKn4GR67b+pclGC Xu4N3M4Uc7HgLi0YXU2Ul+YRNgbDQUnvwHGEreDfD3luU/zD0hVeJNPOPnouOclf vs5HhlijnokAZQX81Um9mYFyoSOfinVHg41BeJG2HGkdENcCtdUr6/1Yw7EZuzmM dEMKqRipfJnTQcCsS+twNvc2GpvZIQNQL5PIqQUzzTQ8fls6W0AevqfRgUlgSO0v 9HF+SHtwNC1LITEtKxFx1fUBCpNShfhY6o/PICKhOH56VkUdnYBE783AYxrfYLIE iV+jkIG0BYPa8Wa4RUgcHOk5aQ== -----END CERTIFICATE-----Generated at Wed Sep 23 06:38:40 2026 by rpki-client