$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft File: oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json) Hash identifier: APrUmIiAu2A+FgjCf+guVFjAvBODle3sgeLcN1IM6r0= Subject key identifier: 33:84:02:38:60:49:2B:63:5A:36:98:F0:32:D9:AC:E3:08:23:73:86 Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A Certificate issuer: /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft Manifest number: 0882 Signing time: Fri 18 Sep 2026 20:44:12 +0000 Manifest this update: Fri 18 Sep 2026 20:44:11 +0000 Manifest next update: Fri 25 Sep 2026 20:44:11 +0000 Files and hashes: 1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: TUUlT1E954S3BhUate6BCtIcUuaqwztdedcHgelgU3U=) 2: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=) 3: xosLs9gxjLye4Md2p_wN9v341dg.asa (hash: ELumtCiBu3e8hIqFAE5GuOwgdm+a08Wy8PhqYRVWwfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A Validity Not Before: Sep 18 20:44:11 2026 GMT Not After : Sep 25 20:44:11 2026 GMT Subject: CN=6aada29c-6942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:ad:1b:ac:5e:5b:3b:d6:0a:b1:5a:cc:20: 15:da:50:65:49:23:87:62:7c:f6:03:c6:29:94:3a: f4:0d:50:a4:0c:c2:db:61:f0:08:e5:33:28:b1:d6: 1f:e5:21:53:46:e5:65:98:fd:9b:7a:b4:44:82:d8: b3:6d:2a:f0:03:81:e7:e2:3c:10:5a:2a:09:d8:7e: a2:ac:dc:1b:3e:cf:31:69:e0:9d:22:a4:d8:33:86: 60:d7:bb:c9:9a:a0:08:0b:c7:c8:1c:13:62:6d:c4: 21:a5:41:d3:8f:68:d2:75:05:79:ad:fe:8b:8a:3f: a2:0c:bb:b7:6f:9c:f6:a1:2f:8c:53:20:4d:96:77: a3:60:ca:17:8a:9d:06:64:39:29:fd:99:43:c6:b0: 7d:35:21:ae:d4:e3:1d:3b:fa:e2:0e:59:c2:6c:ac: 75:6f:b6:d2:aa:22:ff:a8:41:ad:8c:00:c4:c9:8c: cf:bd:1b:e6:91:5d:1f:c6:a4:77:3e:24:b4:6d:c7: fd:37:ed:61:90:c4:31:8b:6d:a7:6b:6d:78:3e:cd: 08:ac:87:8b:ae:40:7a:9a:b5:83:08:35:10:61:eb: 1f:00:69:02:3a:f2:23:8e:b3:88:71:16:71:38:c7: 50:60:3d:05:79:10:0b:e3:49:c7:cb:76:f5:b1:9d: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:84:02:38:60:49:2B:63:5A:36:98:F0:32:D9:AC:E3:08:23:73:86 X509v3 Authority Key Identifier: keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:2a:84:51:22:9d:2a:5f:b5:43:9f:0f:9e:02:3c:bc:4a:4e: bd:e6:8d:d6:77:22:cc:be:30:75:52:98:b8:ba:a0:4b:a3:f7: 46:55:65:4b:b1:4e:62:44:f0:99:6c:c8:ba:7f:b4:9a:b6:4e: 4c:0b:37:f3:8c:87:ae:45:85:c6:7b:bd:0f:de:c2:2b:ab:60: 92:46:62:d7:76:a0:37:06:e7:02:7b:5d:0d:f3:6f:94:c3:18: c0:64:ee:9c:23:b7:31:f0:5d:fe:86:8e:df:5b:4a:8c:2e:20: f3:b5:02:cc:e0:10:f3:70:c5:e6:e7:43:bb:bf:59:fe:57:a1: 17:03:20:c8:a2:5f:99:28:d1:3c:ef:7e:a4:c0:55:10:90:f2: 4e:3b:2e:23:72:0e:74:6e:bb:e2:f1:2a:65:e1:b3:d7:55:cc: b5:b9:60:e6:f5:d6:87:68:9b:f3:f8:44:92:a0:d1:9c:5c:bb: bc:f1:56:67:7b:02:b9:d5:ba:5a:76:f8:6a:b6:04:da:85:c4: 91:e3:99:ba:d5:ed:73:a6:e9:e4:3f:40:ae:98:74:b2:5e:da: de:fe:14:b1:41:8f:8a:72:f8:80:d8:7a:98:2a:99:f1:c7:10: 26:55:46:e8:d1:bb:5b:57:d9:11:2d:0b:fd:8a:fc:66:2a:05: 9f:e7:ac:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxNzcxMTAvBgNVBAUTKEEyMjJCNkQ2RDA1MjgyMTQyMjFENEFDRUE0N0UxQUM2 MTFFRjQyN0EwHhcNMjYwOTE4MjA0NDExWhcNMjYwOTI1MjA0NDExWjAYMRYwFAYD VQQDEw02YWFkYTI5Yy02OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QGtG6xeWzvWCrFazCAV2lBlSSOHYnz2A8YplDr0DVCkDMLbYfAI5TMosdYf 5SFTRuVlmP2berREgtizbSrwA4Hn4jwQWioJ2H6irNwbPs8xaeCdIqTYM4Zg17vJ mqAIC8fIHBNibcQhpUHTj2jSdQV5rf6Lij+iDLu3b5z2oS+MUyBNlnejYMoXip0G ZDkp/ZlDxrB9NSGu1OMdO/riDlnCbKx1b7bSqiL/qEGtjADEyYzPvRvmkV0fxqR3 PiS0bcf9N+1hkMQxi22na214Ps0IrIeLrkB6mrWDCDUQYesfAGkCOvIjjrOIcRZx OMdQYD0FeRAL40nHy3b1sZ2T/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOEAjhg SStjWjaY8DLZrOMII3OGMB8GA1UdIwQYMBaAFKIittbQUoIUIh1KzqR+GsYR70J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjE3Ny84MkVFNTgyNjBF MDYxMUVCODY4NzZFNTNDNEY5QUUwMi9vaUsyMXRCU2doUWlIVXJPcEg0YXhoSHZR bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pSzIxdEJTZ2hRaUhVck9wSDRheGhIdlFuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjE3Ny84MkVFNTgyNjBFMDYxMUVCODY4NzZFNTNDNEY5QUUwMi9vaUsyMXRCU2do UWlIVXJPcEg0YXhoSHZRbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCqEUSKdKl+1Q58PngI8vEpOveaN1ncizL4wdVKYuLqgS6P3RlVlS7FOYkTw mWzIun+0mrZOTAs384yHrkWFxnu9D97CK6tgkkZi13agNwbnAntdDfNvlMMYwGTu nCO3MfBd/oaO31tKjC4g87UCzOAQ83DF5udDu79Z/lehFwMgyKJfmSjRPO9+pMBV EJDyTjsuI3IOdG674vEqZeGz11XMtblg5vXWh2ib8/hEkqDRnFy7vPFWZ3sCudW6 Wnb4arYE2oXEkeOZutXtc6bp5D9Arph0sl7a3v4UsUGPinL4gNh6mCqZ8ccQJlVG 6NG7W1fZES0L/Yr8ZioFn+esdA== -----END CERTIFICATE-----Generated at Sun Sep 20 13:54:43 2026 by rpki-client