$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: 2wn87jKhQuQ3Y810P2qcDJod8LMBAK0V6R3fo23fYh8= Subject key identifier: 5B:83:2C:E7:50:DA:4E:F0:79:FC:E1:26:1B:4C:54:54:E3:72:41:DA Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 0250 Signing time: Fri 25 Sep 2026 02:24:03 +0000 Manifest this update: Fri 25 Sep 2026 02:24:03 +0000 Manifest next update: Fri 02 Oct 2026 02:24:03 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: OA15cUadgpwGWFveR92IvmBTyz0r6VYcmJto5pAlbUM=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: 7rtrVLMZyddd2bc8J1cyHY3+ySdHuEAk7XVUcJ9NUus=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: XP82ynjeu3f3SnDV4F+8eS1osM+/5TBWQsdmPDnKj7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Sep 25 02:24:03 2026 GMT Not After : Oct 2 02:24:03 2026 GMT Subject: CN=6ab5db43-edbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:c1:44:94:f4:9c:a5:b4:de:c7:ad:04:32: e3:1c:28:6e:0a:de:49:b3:69:a0:ed:b7:e3:7f:6c: 02:2e:b3:99:46:a5:2a:fb:66:3c:5b:fa:11:2a:a4: f4:51:99:5d:92:cb:a6:cc:d2:ca:42:bb:45:7c:5a: df:f2:0f:2c:73:b2:34:a4:b6:4a:a3:8b:a5:d7:cf: 5b:30:c2:61:68:42:68:31:d3:0a:6f:5d:b8:0f:36: 6c:27:54:62:24:2a:e2:49:35:5a:93:9c:47:36:98: 36:a5:d0:ea:26:fb:56:7e:c0:61:c4:34:b4:ed:0c: e6:ee:75:47:49:34:7d:7f:5d:f9:07:95:b6:65:57: 70:39:9d:9e:99:0c:bb:4d:f0:32:be:8f:33:0c:7a: aa:b1:c0:43:3c:f4:be:38:f5:ff:94:9c:3c:3a:87: 31:e1:83:d6:54:11:77:22:ad:af:c8:97:0d:23:ce: 24:1a:8c:4b:63:b2:21:df:d6:10:15:cf:cb:9d:5c: 48:8d:ce:2b:7e:17:aa:6f:06:6e:81:78:2a:d2:e6: 41:78:8c:b6:7e:7f:f9:99:53:84:34:42:74:27:51: f1:44:71:62:88:db:55:e7:5c:24:21:78:9a:51:cf: 49:16:dc:c8:22:5c:14:65:6f:da:5b:88:11:f1:ea: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:83:2C:E7:50:DA:4E:F0:79:FC:E1:26:1B:4C:54:54:E3:72:41:DA X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:62:03:c7:e6:91:ea:8d:76:1c:08:31:7e:af:28:43:72:3c: e8:db:aa:da:5d:2c:a9:90:d8:28:26:b3:89:74:3f:c0:1a:8a: e6:2e:11:04:f0:04:0f:06:08:1a:06:21:36:ae:cf:9c:b0:92: 64:7e:8b:db:52:b5:58:62:d6:4c:9c:eb:ac:49:85:80:22:1a: b5:a4:c0:3d:28:5a:22:82:03:3d:d6:98:ea:1e:3f:89:c2:17: 52:99:d3:49:10:cd:8e:70:0a:de:18:d3:18:fb:73:10:9b:e0: fb:ae:84:dc:47:f6:4f:29:c1:9c:79:ac:af:d5:fa:73:c3:27: 4a:25:2b:63:32:66:fd:9e:d8:00:ff:ae:bd:cf:b2:4f:8f:a9: ea:b2:b7:7d:32:39:51:f9:d1:2c:8c:5f:ee:70:bc:c7:5f:2c: bd:6b:e1:6e:8f:dc:cb:ae:b1:11:3c:db:55:66:e9:ab:87:ba: 4b:74:d4:81:75:c6:24:e7:90:cb:8d:f9:7f:86:6f:1c:f5:46: 39:72:44:8b:21:9a:d2:b8:21:95:cf:d2:11:d3:f4:71:ab:fa: 55:8f:31:c2:f4:95:91:f7:e7:d8:eb:d4:4a:7e:38:d5:bd:b4: b8:53:c8:39:48:f3:95:3b:1d:70:27:93:47:76:c6:9f:c1:17: d3:37:3b:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwOTI1MDIyNDAzWhcNMjYxMDAyMDIyNDAzWjAYMRYwFAYD VQQDEw02YWI1ZGI0My1lZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf/BRJT0nKW03setBDLjHChuCt5Js2mg7bfjf2wCLrOZRqUq+2Y8W/oRKqT0 UZldksumzNLKQrtFfFrf8g8sc7I0pLZKo4ul189bMMJhaEJoMdMKb124DzZsJ1Ri JCriSTVak5xHNpg2pdDqJvtWfsBhxDS07Qzm7nVHSTR9f135B5W2ZVdwOZ2emQy7 TfAyvo8zDHqqscBDPPS+OPX/lJw8Oocx4YPWVBF3Iq2vyJcNI84kGoxLY7Ih39YQ Fc/LnVxIjc4rfheqbwZugXgq0uZBeIy2fn/5mVOENEJ0J1HxRHFiiNtV51wkIXia Uc9JFtzIIlwUZW/aW4gR8eoegwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuDLOdQ 2k7wefzhJhtMVFTjckHaMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmIDx+aR6o12HAgxfq8oQ3I86Nuq2l0sqZDYKCaziXQ/wBqK5i4RBPAEDwYI GgYhNq7PnLCSZH6L21K1WGLWTJzrrEmFgCIataTAPShaIoIDPdaY6h4/icIXUpnT SRDNjnAK3hjTGPtzEJvg+66E3Ef2TynBnHmsr9X6c8MnSiUrYzJm/Z7YAP+uvc+y T4+p6rK3fTI5UfnRLIxf7nC8x18svWvhbo/cy66xETzbVWbpq4e6S3TUgXXGJOeQ y435f4ZvHPVGOXJEiyGa0rghlc/SEdP0cav6VY8xwvSVkffn2OvUSn441b20uFPI OUjzlTsdcCeTR3bGn8EX0zc7ZQ== -----END CERTIFICATE-----Generated at Fri Sep 25 23:35:29 2026 by rpki-client