$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: P2D5Y9WY0+LeENmu5Nj5mIYkzkvXSNQ7h5MfoO3mgm8= Subject key identifier: 4D:95:02:00:F1:92:3B:CB:72:F0:7C:7D:63:EE:CE:29:86:9F:90:5E Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 0216 Signing time: Mon 21 Sep 2026 03:08:48 +0000 Manifest this update: Mon 21 Sep 2026 03:08:47 +0000 Manifest next update: Mon 28 Sep 2026 03:08:47 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: 5R8MR06LwpflLy51i+1WmUeh4WR8G4WCFmqXsn/SEWw=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Sep 21 03:08:47 2026 GMT Not After : Sep 28 03:08:47 2026 GMT Subject: CN=6ab09fc0-7f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:9d:76:a3:3a:03:1e:9e:0f:a9:75:a4:02: 23:09:45:e1:cf:0d:90:d2:42:a4:57:2e:58:f4:5e: de:15:c6:b7:6e:d5:59:3c:c4:28:db:89:b3:d3:61: d7:df:85:83:a6:ed:e2:f0:cd:e6:95:f3:0c:89:81: 3d:cf:ba:41:2b:52:d3:44:9b:31:64:5b:44:2a:28: fe:2d:96:cf:f8:35:46:26:97:94:82:85:a0:67:d2: b1:f6:06:c3:97:e7:ac:cb:97:fb:27:68:f2:f9:bc: c5:30:a9:54:fd:6a:69:59:fa:ea:5c:dd:be:f0:81: d1:80:00:b5:d9:3b:a0:fa:1b:87:ad:b6:44:9f:4e: f3:6b:54:f2:7c:00:8b:08:15:f3:dd:01:86:15:99: 79:a2:dd:e6:80:de:ff:d7:80:53:76:6d:9c:50:3e: 44:bb:2f:62:29:a8:33:90:67:b0:32:01:94:c9:80: f9:1b:7f:90:75:e2:68:93:66:be:ea:79:0f:01:ad: 13:d4:cc:e7:00:b2:ab:76:ff:29:36:72:a5:97:c2: c6:62:51:57:18:aa:bc:b9:66:c3:7c:cb:00:42:90: b6:63:b8:06:57:22:6a:bb:57:5b:5d:bf:17:ca:86: 0b:a7:cb:ef:d1:da:55:39:f0:2d:ab:3b:3f:5e:32: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:95:02:00:F1:92:3B:CB:72:F0:7C:7D:63:EE:CE:29:86:9F:90:5E X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:d8:be:7c:7e:ce:ff:7e:50:23:85:96:17:af:4a:21:56:6f: cc:b0:bc:5b:96:f4:4c:04:8c:ea:c1:3b:0d:aa:ae:d4:32:eb: 60:5f:fa:48:36:ad:31:91:00:a1:a8:61:af:8b:d1:95:3d:90: e8:03:d6:f2:88:1c:47:7e:99:06:02:eb:c1:6f:e5:af:6a:04: e0:10:33:7a:75:5a:48:ae:66:ef:2e:71:27:b7:63:bc:9f:b8: bc:5a:eb:22:d2:2f:9f:68:3d:08:ba:87:28:9d:87:d6:b9:34: 6f:70:99:f8:5e:92:31:3f:8c:f2:db:68:eb:06:c3:ea:cc:c7: 48:3d:5a:b2:e6:a4:1d:f7:f0:f6:8c:55:c1:80:61:b2:2d:16: 3a:55:c7:9f:0e:ef:a2:5b:c7:d6:77:35:5b:5c:74:cf:08:f0: 18:2b:fc:91:dc:2f:cc:f0:40:0f:6a:dc:85:59:54:b3:10:67: 83:ab:92:fa:4f:9a:b3:7a:cd:b7:30:2b:3f:95:9e:ee:c7:1b: 47:c1:20:fd:a0:73:55:15:2a:2a:49:e3:52:cd:fb:6f:84:08: 41:0b:9b:70:91:23:46:08:f7:40:62:34:3c:46:1e:c4:fe:06: 72:ff:c3:c1:33:11:c6:41:27:72:86:74:34:d3:98:93:d9:db: a5:22:0c:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYwOTIxMDMwODQ3WhcNMjYwOTI4MDMwODQ3WjAYMRYwFAYD VQQDEw02YWIwOWZjMC03ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2iddqM6Ax6eD6l1pAIjCUXhzw2Q0kKkVy5Y9F7eFca3btVZPMQo24mz02HX 34WDpu3i8M3mlfMMiYE9z7pBK1LTRJsxZFtEKij+LZbP+DVGJpeUgoWgZ9Kx9gbD l+esy5f7J2jy+bzFMKlU/WppWfrqXN2+8IHRgAC12Tug+huHrbZEn07za1TyfACL CBXz3QGGFZl5ot3mgN7/14BTdm2cUD5Euy9iKagzkGewMgGUyYD5G3+QdeJok2a+ 6nkPAa0T1MznALKrdv8pNnKll8LGYlFXGKq8uWbDfMsAQpC2Y7gGVyJqu1dbXb8X yoYLp8vv0dpVOfAtqzs/XjLiUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2VAgDx kjvLcvB8fWPuzimGn5BeMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxti+fH7O/35QI4WWF69KIVZvzLC8W5b0TASM6sE7Daqu1DLrYF/6SDatMZEA oahhr4vRlT2Q6APW8ogcR36ZBgLrwW/lr2oE4BAzenVaSK5m7y5xJ7djvJ+4vFrr ItIvn2g9CLqHKJ2H1rk0b3CZ+F6SMT+M8tto6wbD6szHSD1asuakHffw9oxVwYBh si0WOlXHnw7volvH1nc1W1x0zwjwGCv8kdwvzPBAD2rchVlUsxBng6uS+k+as3rN tzArP5We7scbR8Eg/aBzVRUqKknjUs37b4QIQQubcJEjRgj3QGI0PEYexP4Gcv/D wTMRxkEncoZ0NNOYk9nbpSIMwQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:43:19 2026 by rpki-client