$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft File: oOoqcgysMcg3X1Vs-Uv--NERafY.mft (raw, json) Hash identifier: TQCKEB86uC49nYEDAI1ABFdPjiNzJKsrqwEh8rg8WZU= Subject key identifier: E8:A4:6C:1F:FD:8E:63:D7:68:E1:3F:C7:99:0A:22:26:E7:24:C1:F3 Authority key identifier: A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6 Certificate issuer: /CN=A917C0F3/serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft Manifest number: 0149 Signing time: Sun 11 Oct 2026 05:56:26 +0000 Manifest this update: Sun 11 Oct 2026 05:56:25 +0000 Manifest next update: Sun 18 Oct 2026 05:56:25 +0000 Files and hashes: 1: oOoqcgysMcg3X1Vs-Uv--NERafY.crl (hash: 8qj2fkkQ8IshQgxPu/D1PGPeX091OshUZJ6OtZLXOZc=) 2: 02F0D9DED0BA11EFA8B5A526C4F9AE02.roa (hash: 06+m6dabyyzbZGIT4hkbr4VpURLEsXpwD3ACUIi95cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6 Validity Not Before: Oct 11 05:56:25 2026 GMT Not After : Oct 18 05:56:25 2026 GMT Subject: CN=6acb250a-5ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:24:2f:e7:37:24:f9:83:48:a5:b0:36:98: 9b:7a:b0:44:73:9f:f2:01:32:f2:87:08:04:79:73: 9a:f5:85:85:47:dc:76:43:30:0f:32:47:e1:21:9f: 83:72:c9:68:20:c7:f8:61:95:aa:c4:81:9e:76:f3: 92:df:04:5e:d3:6b:d1:5e:7a:b7:8d:e6:39:f0:16: 30:d6:be:a5:64:86:c9:1c:31:5c:58:b5:0f:cd:c2: 8e:9f:5b:d8:c9:95:d4:a5:d1:2b:22:f1:12:86:52: 0e:4d:fe:c4:9e:2a:02:a1:79:61:f5:5c:16:97:17: 8b:99:4d:bd:80:85:81:aa:d8:66:19:bd:f2:b2:65: c3:42:ca:5c:96:b7:da:7e:c8:cb:91:e0:60:17:b1: c6:e3:7a:4a:4c:45:00:8a:3b:51:67:af:92:d5:72: a1:5f:6c:35:6f:16:47:78:76:70:20:d5:92:9a:09: 44:77:2f:c0:af:40:b3:e3:07:b3:2e:48:ea:30:d9: 95:f2:8e:77:b1:fe:8a:aa:8b:2e:b2:5d:e7:21:9a: bf:23:28:e7:dd:42:93:ca:9b:ca:8a:91:6a:13:f2: bb:4f:be:e5:54:5e:a3:74:c1:2c:9a:a1:5e:a8:aa: f9:94:11:0b:4d:cc:1f:d4:2a:77:93:7b:ca:4f:0e: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A4:6C:1F:FD:8E:63:D7:68:E1:3F:C7:99:0A:22:26:E7:24:C1:F3 X509v3 Authority Key Identifier: keyid:A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0d:59:f7:13:bb:d5:df:dc:1a:9f:0c:39:27:7d:b7:90:fa: e0:9f:e3:02:c3:e5:31:5e:1a:94:ac:0b:10:aa:68:ba:d7:51: 03:bc:9a:0f:62:2b:01:4d:6f:3d:74:16:4d:02:3f:a4:68:04: 10:56:a9:f7:15:ad:09:8e:2c:a8:6b:02:00:88:ea:ee:25:23: 87:96:b7:80:3b:19:5a:75:75:86:e4:5b:40:8e:48:50:70:7f: 33:78:46:13:8a:4e:8a:f0:a3:a8:5b:40:77:02:af:c2:9e:f4: aa:16:6f:66:a5:d7:08:86:77:8b:7e:62:28:13:5e:1e:d1:b3: 1c:f1:e7:6b:44:43:0a:9e:90:60:b8:42:95:cd:7f:7c:a0:d7: ab:1c:00:3f:65:ed:cf:58:67:82:b0:e9:e8:80:ab:6b:70:60: 8a:f5:7a:7f:e9:7d:ef:70:d5:d4:c4:af:51:38:47:d2:66:02: 95:14:03:69:0d:fc:70:ff:91:7d:71:b5:0d:09:22:9f:f7:bd: 31:53:b0:52:24:4f:9d:36:6a:e5:69:25:fe:5a:d1:12:e6:d0: 29:fb:a5:8d:b5:c2:c0:73:a5:77:4b:39:e5:c2:2b:49:44:7a: c6:db:22:6f:00:d9:8e:38:16:24:ac:32:bc:e7:2a:5f:82:c6: 42:8c:c2:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjMxMTAvBgNVBAUTKEEwRUEyQTcyMENBQzMxQzgzNzVGNTU2Q0Y5NEJGRUY4 RDExMTY5RjYwHhcNMjYxMDExMDU1NjI1WhcNMjYxMDE4MDU1NjI1WjAYMRYwFAYD VQQDEw02YWNiMjUwYS01ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJ8kL+c3JPmDSKWwNpiberBEc5/yATLyhwgEeXOa9YWFR9x2QzAPMkfhIZ+D csloIMf4YZWqxIGedvOS3wRe02vRXnq3jeY58BYw1r6lZIbJHDFcWLUPzcKOn1vY yZXUpdErIvEShlIOTf7EnioCoXlh9VwWlxeLmU29gIWBqthmGb3ysmXDQspclrfa fsjLkeBgF7HG43pKTEUAijtRZ6+S1XKhX2w1bxZHeHZwINWSmglEdy/Ar0Cz4wez LkjqMNmV8o53sf6Kqosusl3nIZq/Iyjn3UKTypvKipFqE/K7T77lVF6jdMEsmqFe qKr5lBELTcwf1Cp3k3vKTw52bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOikbB/9 jmPXaOE/x5kKIibnJMHzMB8GA1UdIwQYMBaAFKDqKnIMrDHIN19VbPlL/vjREWn2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy82MEUyMDdCQ0Qw QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01jZzNYMVZzLVV2LS1ORVJh ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Pb3FjZ3lzTWNnM1gxVnMtVXYtLU5FUmFmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGMy82MEUyMDdCQ0QwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01j ZzNYMVZzLVV2LS1ORVJhZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjw1Z9xO71d/cGp8MOSd9t5D64J/jAsPlMV4alKwLEKpoutdRA7yaD2IrAU1v PXQWTQI/pGgEEFap9xWtCY4sqGsCAIjq7iUjh5a3gDsZWnV1huRbQI5IUHB/M3hG E4pOivCjqFtAdwKvwp70qhZvZqXXCIZ3i35iKBNeHtGzHPHna0RDCp6QYLhClc1/ fKDXqxwAP2Xtz1hngrDp6ICra3BgivV6f+l973DV1MSvUThH0mYClRQDaQ38cP+R fXG1DQkin/e9MVOwUiRPnTZq5Wkl/lrREubQKfuljbXCwHOld0s55cIrSUR6xtsi bwDZjjgWJKwyvOcqX4LGQozCKQ== -----END CERTIFICATE-----Generated at Sun Oct 11 18:21:09 2026 by rpki-client