$ rpki-client -vvvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: 8wGDRY9khYjSfBuHWJ0BGG2pYi1AxG0PwbMEDkqvcIw= Subject key identifier: 67:4D:B2:10:02:51:11:2B:F9:01:F7:6D:95:18:3B:42:77:1C:EF:C4 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 090C Signing time: Sat 10 Oct 2026 20:22:09 +0000 Manifest this update: Sat 10 Oct 2026 20:22:08 +0000 Manifest next update: Sat 17 Oct 2026 20:22:08 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: 7zEE4VAwD/ShQn/35eD28FW+w/jMVDrzTFTX+ti5GH0=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Oct 10 20:22:08 2026 GMT Not After : Oct 17 20:22:08 2026 GMT Subject: CN=6aca9e71-7ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:c3:73:90:b9:17:cf:bd:1a:e3:ed:19:56: a1:8a:62:a3:6e:6c:2b:c8:22:95:fe:72:57:46:81: 4e:3d:58:e4:fb:d1:5f:5c:67:18:11:c9:78:32:ab: f9:45:e8:08:87:85:0d:c3:96:83:54:41:c3:be:fa: 9d:b8:a5:9c:46:53:38:3f:8d:41:e5:8f:98:89:8e: fe:53:b1:f8:2d:3f:21:09:9e:f2:14:ac:5f:63:c5: 2c:52:82:41:50:ee:a0:06:5c:10:8b:ac:5d:7a:70: 04:d6:27:06:8c:06:82:7a:4b:d6:bd:a0:a4:35:f9: 67:b2:25:0c:14:80:2f:f7:c8:66:c9:b5:43:55:2d: 66:10:47:ab:c0:47:22:10:c6:12:a2:64:f6:01:9f: 9d:e5:a6:ac:2b:af:7d:19:50:be:d3:e4:17:49:43: 23:82:c3:7e:e7:2b:d6:7b:e6:e1:5c:df:d7:e6:ea: e1:41:7d:04:45:da:0f:6b:df:05:71:90:28:f4:74: 18:41:f9:55:35:9b:ef:cc:9d:e6:31:72:a8:c0:e6: e5:f9:ca:fc:fe:fe:e4:02:b0:14:94:19:10:55:44: 9d:f0:5f:bd:c3:de:ef:04:aa:5e:1c:63:79:6b:d1: 98:b3:09:fe:a7:ae:db:7c:ab:6e:26:99:aa:75:81: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:B2:10:02:51:11:2B:F9:01:F7:6D:95:18:3B:42:77:1C:EF:C4 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:83:84:5a:d2:87:e0:ad:39:df:e4:e5:a3:a4:cb:2b:7d:66: 22:95:e5:22:d0:7b:bd:0a:1d:9c:b8:e8:06:52:cf:7c:86:7e: 32:24:1b:f1:c1:a5:29:86:a2:d6:de:fe:d8:49:37:9e:e6:1d: 7e:db:9f:64:ec:88:b5:cb:aa:f3:d2:16:d1:2f:d3:83:43:6e: 1d:7a:67:8d:ee:b0:bd:57:14:dc:92:0c:1e:fe:d2:db:97:ce: d5:dc:6e:0d:42:a4:9e:b4:ff:5e:93:eb:3e:9e:1d:c5:64:ad: 34:6c:2c:0c:7a:9e:99:e1:af:18:c7:8a:c4:d6:df:f9:31:0e: c6:49:2b:30:bb:a4:75:e6:b6:ca:a4:f7:74:45:ae:7a:03:2d: 65:de:71:6b:03:33:56:59:40:a8:5a:b5:ba:20:25:35:85:33: 27:25:ee:6f:45:52:8c:ec:fe:a5:d3:fe:0d:c1:46:99:77:fb: d8:d4:dd:33:d7:33:3c:29:15:12:43:06:a1:b7:c6:91:86:3a: 95:d4:18:21:20:26:a2:6c:ef:ca:7b:b2:76:65:6d:63:e1:f5: ce:66:78:a5:51:a2:7c:dd:49:d5:5b:38:4c:b6:1f:3e:12:52: 5f:fd:7f:f1:e9:fc:e5:8d:10:5a:26:5a:e2:36:e2:fb:3a:6c: 64:bb:fe:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYxMDEwMjAyMjA4WhcNMjYxMDE3MjAyMjA4WjAYMRYwFAYD VQQDEw02YWNhOWU3MS03YmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjaTDc5C5F8+9GuPtGVahimKjbmwryCKV/nJXRoFOPVjk+9FfXGcYEcl4Mqv5 RegIh4UNw5aDVEHDvvqduKWcRlM4P41B5Y+YiY7+U7H4LT8hCZ7yFKxfY8UsUoJB UO6gBlwQi6xdenAE1icGjAaCekvWvaCkNflnsiUMFIAv98hmybVDVS1mEEerwEci EMYSomT2AZ+d5aasK699GVC+0+QXSUMjgsN+5yvWe+bhXN/X5urhQX0ERdoPa98F cZAo9HQYQflVNZvvzJ3mMXKowObl+cr8/v7kArAUlBkQVUSd8F+9w97vBKpeHGN5 a9GYswn+p67bfKtuJpmqdYHCGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdNshAC UREr+QH3bZUYO0J3HO/EMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB4OEWtKH4K053+Tlo6TLK31mIpXlItB7vQodnLjoBlLPfIZ+MiQb8cGlKYai 1t7+2Ek3nuYdftufZOyItcuq89IW0S/Tg0NuHXpnje6wvVcU3JIMHv7S25fO1dxu DUKknrT/XpPrPp4dxWStNGwsDHqemeGvGMeKxNbf+TEOxkkrMLukdea2yqT3dEWu egMtZd5xawMzVllAqFq1uiAlNYUzJyXub0VSjOz+pdP+DcFGmXf72NTdM9czPCkV EkMGobfGkYY6ldQYISAmomzvynuydmVtY+H1zmZ4pVGifN1J1Vs4TLYfPhJSX/1/ 8en85Y0QWiZa4jbi+zpsZLv+EA== -----END CERTIFICATE-----Generated at Sun Oct 11 15:23:18 2026 by rpki-client