$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json) Hash identifier: 2t3J/vuBSplKjKTszgfQHGlr+y5sytvbbqVXbiUmeXM= Subject key identifier: 44:20:B0:E4:6C:CD:78:DE:C8:28:51:28:E5:25:57:FB:B0:7B:78:4C Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft Manifest number: 01D4 Signing time: Fri 25 Sep 2026 01:55:23 +0000 Manifest this update: Fri 25 Sep 2026 01:55:22 +0000 Manifest next update: Fri 02 Oct 2026 01:55:22 +0000 Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: fPLXGd1BdwuJCyI/HEp7/Es1Pln/NmSLQfgHmYSvojY=) 2: 35BF2AEEB59E11F194E7428B3311F970.roa (hash: R/CLrk+ss+xAqg707krYyYSBez8f9zY5TlrmSiSHgjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Validity Not Before: Sep 25 01:55:22 2026 GMT Not After : Oct 2 01:55:22 2026 GMT Subject: CN=6ab5d48b-f334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:2f:3c:5e:34:cf:94:ba:cc:de:ef:73:b9: 6a:e6:39:e9:e6:c8:cf:9a:90:6c:b7:29:61:d6:46: 2f:24:f3:ec:e2:b0:7e:d5:3d:75:51:35:0a:d7:b0: 98:df:b4:1d:21:79:33:44:88:4a:8f:4b:a9:f9:24: 57:49:dd:12:d2:8a:d8:8a:71:33:2b:b0:f9:cf:31: fd:a2:b2:9f:f8:ff:89:d1:60:77:22:3e:6e:6d:02: f3:2b:84:ff:9e:55:f6:c0:8a:4a:d4:60:9a:3f:1f: 4f:cb:ab:0c:a5:5b:f8:f1:cb:aa:82:b3:cd:fb:53: 2e:05:07:99:ce:52:4d:60:4d:46:a6:86:82:95:aa: 79:7e:1c:04:0d:3f:2b:59:cd:4d:98:9c:0c:b1:e3: 8d:64:95:cf:7f:2e:1e:cc:0b:2e:1e:c4:df:2c:9b: c2:5a:89:d7:82:34:a9:8b:55:21:dd:17:49:d9:08: af:7e:f8:da:81:98:5a:04:f0:eb:8d:b7:1b:41:c1: 56:29:dc:34:20:3b:42:f2:7c:81:04:0b:89:20:9a: 1b:eb:bf:c2:d2:78:f2:fa:7a:0f:95:d1:f6:76:1f: b2:e7:8e:55:0c:dd:4b:ee:62:49:42:c1:d7:8c:ee: 0d:e4:42:96:85:46:1e:1a:6c:a9:5e:04:ce:a4:c0: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:B0:E4:6C:CD:78:DE:C8:28:51:28:E5:25:57:FB:B0:7B:78:4C X509v3 Authority Key Identifier: keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f0:be:e1:30:03:c3:dc:62:fa:bf:31:a8:37:7d:ca:ec:06: 30:25:d9:c7:84:96:9c:09:ee:19:0d:f5:87:f9:ee:34:64:af: 35:30:16:86:8d:e1:0d:50:93:16:5e:47:0a:22:85:0b:dd:b1: 01:31:b9:a1:fc:92:01:47:5c:ba:5b:53:5a:33:92:21:3d:1f: aa:08:f5:9c:59:19:4e:de:3d:b4:a0:e1:7e:13:ff:1f:02:d5: 5d:12:2c:79:57:b2:12:49:57:f0:ab:34:2e:6e:99:ec:03:5b: e9:73:f7:58:9c:04:38:51:f6:7c:11:11:26:d5:1f:45:5a:dc: 92:f2:94:ac:66:12:a7:32:38:04:de:46:9b:5b:0a:65:ff:90: 6a:8a:06:07:2f:1b:e8:fb:8f:79:2e:a7:8a:9a:18:6d:9a:97: 2d:03:4b:9f:f7:b2:b7:86:cf:20:24:d3:a6:0d:75:81:ed:2c: 95:26:f1:a7:46:74:a3:40:3b:ee:12:f9:ae:25:ca:c3:b5:40: 5d:2a:1c:ed:c3:c0:36:8f:6c:4c:12:93:6a:1d:0b:29:46:54: 0b:58:36:aa:53:55:4a:98:81:8b:36:4b:da:5e:d5:00:76:3f: 73:01:fa:17:e5:f3:1a:09:d5:a5:d7:f2:49:07:58:98:e0:4b: cf:6c:5a:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE QURCNTIxMkEwHhcNMjYwOTI1MDE1NTIyWhcNMjYxMDAyMDE1NTIyWjAYMRYwFAYD VQQDEw02YWI1ZDQ4Yi1mMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eMvPF40z5S6zN7vc7lq5jnp5sjPmpBstylh1kYvJPPs4rB+1T11UTUK17CY 37QdIXkzRIhKj0up+SRXSd0S0orYinEzK7D5zzH9orKf+P+J0WB3Ij5ubQLzK4T/ nlX2wIpK1GCaPx9Py6sMpVv48cuqgrPN+1MuBQeZzlJNYE1GpoaClap5fhwEDT8r Wc1NmJwMseONZJXPfy4ezAsuHsTfLJvCWonXgjSpi1Uh3RdJ2QivfvjagZhaBPDr jbcbQcFWKdw0IDtC8nyBBAuJIJob67/C0njy+noPldH2dh+y545VDN1L7mJJQsHX jO4N5EKWhUYeGmypXgTOpMDy3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQgsORs zXjeyChRKOUlV/uwe3hMMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArfC+4TADw9xi+r8xqDd9yuwGMCXZx4SWnAnuGQ31h/nuNGSvNTAWho3hDVCT Fl5HCiKFC92xATG5ofySAUdcultTWjOSIT0fqgj1nFkZTt49tKDhfhP/HwLVXRIs eVeyEklX8Ks0Lm6Z7ANb6XP3WJwEOFH2fBERJtUfRVrckvKUrGYSpzI4BN5Gm1sK Zf+QaooGBy8b6PuPeS6nipoYbZqXLQNLn/eyt4bPICTTpg11ge0slSbxp0Z0o0A7 7hL5riXKw7VAXSoc7cPANo9sTBKTah0LKUZUC1g2qlNVSpiBizZL2l7VAHY/cwH6 F+XzGgnVpdfySQdYmOBLz2xaCw== -----END CERTIFICATE-----Generated at Sat Sep 26 18:07:25 2026 by rpki-client