$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json) Hash identifier: wsZSt/73+BrPlOE+s9CyfJfN58V860pFPv3mXs08ODM= Subject key identifier: 34:A9:ED:B1:44:A5:F5:AA:4F:D9:89:BA:F1:3C:28:8C:D8:72:5B:98 Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft Manifest number: 89 Signing time: Mon 21 Sep 2026 07:35:44 +0000 Manifest this update: Mon 21 Sep 2026 07:35:43 +0000 Manifest next update: Mon 28 Sep 2026 07:35:43 +0000 Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: q4slbN9Rf1rJr0UJ4O5fG8//XEaE971zOIVtIxULGbM=) 2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Sep 21 07:35:43 2026 GMT Not After : Sep 28 07:35:43 2026 GMT Subject: CN=6ab0de50-1e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:d9:a5:e2:40:4f:98:b8:e9:5a:7c:80:15: fe:02:1e:19:01:56:85:6e:19:58:3a:28:ea:ac:2c: 69:76:25:73:03:df:1e:20:e4:f5:9b:37:eb:8e:36: 0e:30:65:19:c6:68:62:03:b3:29:dd:25:26:5f:da: ad:32:98:44:47:a0:85:34:fe:4a:81:4b:3f:5f:01: 88:11:41:12:b2:69:fb:46:02:71:a5:f3:6e:84:c6: 8d:19:a1:ec:78:6c:85:74:73:66:eb:db:c8:a9:57: 0b:42:b2:84:1a:d9:2e:9b:b9:f2:6c:e1:83:75:4c: 86:71:ca:f7:d8:06:8f:83:c5:d9:4b:30:83:e0:0f: db:ec:97:d1:f3:4c:5b:77:56:32:3f:30:f7:5a:7e: 8d:b3:ae:a7:85:aa:a9:b2:4e:0a:13:3b:fb:e2:d1: 1d:32:70:f3:d9:07:96:76:da:27:70:c7:cd:c6:61: 93:79:6b:b5:f8:ae:d5:9d:f0:e9:c0:8d:48:2a:82: c0:f4:8b:26:5c:97:58:bd:4e:43:d7:d4:1b:4e:74: 11:e6:38:04:f1:06:1d:c0:f7:00:a6:3c:1b:ea:50: 26:e7:6a:f3:fd:d7:c1:d6:06:3f:5c:e2:7d:0a:f6: fa:b7:0d:f1:61:7e:7a:e2:de:b3:1c:cc:e0:60:cd: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A9:ED:B1:44:A5:F5:AA:4F:D9:89:BA:F1:3C:28:8C:D8:72:5B:98 X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:09:b7:4b:0c:94:ba:46:4b:82:fb:54:e2:23:b1:f4:87:03: a2:9a:be:c1:2b:d1:6f:bb:80:b9:e1:bf:56:da:dd:e7:2a:57: 09:5e:97:de:60:bb:98:cc:29:15:4f:8c:c6:26:9e:cb:eb:dd: 80:ff:7a:4d:20:43:d8:1f:d1:ee:b5:7b:a4:4e:7b:2b:3e:4a: 9c:9b:80:4c:04:eb:59:83:7c:31:7d:98:a6:ad:2a:34:43:ed: aa:4e:9a:dc:b2:a4:a8:3e:b1:09:b5:aa:ca:d9:c8:72:ef:72: dd:40:3c:15:72:05:a7:02:9f:a0:13:bd:af:0b:de:8f:45:81: 83:ed:7f:d9:a1:4d:c1:0e:5a:6b:32:8b:9f:1e:e6:93:d6:7f: 63:25:83:67:e3:e9:d3:ab:a1:a4:1d:50:ee:f0:19:01:8a:4c: c2:26:13:59:bc:4d:cc:bf:eb:f1:2f:f8:0b:d5:77:5d:7d:0c: 23:82:6b:ef:fa:0d:88:60:1f:46:58:bd:a8:7a:a3:4f:01:e1: 1f:e9:78:a3:da:35:89:25:78:85:e4:1d:cd:f6:c3:3f:80:e3: 2d:64:b7:ec:a7:ed:28:10:cc:7c:eb:6d:40:ee:09:06:bf:2c: d3:92:aa:55:ce:6b:2b:4a:66:4d:a1:f4:43:d6:d3:52:5d:05: 06:97:a0:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4RjYxMTAvBgNVBAUTKEExQUEyQTJDNTZFNjRBOUQ5QkJBQTMzN0I2RDZBQjM2 MTcyRDM2OEYwHhcNMjYwOTIxMDczNTQzWhcNMjYwOTI4MDczNTQzWjAYMRYwFAYD VQQDEw02YWIwZGU1MC0xZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyXZpeJAT5i46Vp8gBX+Ah4ZAVaFbhlYOijqrCxpdiVzA98eIOT1mzfrjjYO MGUZxmhiA7Mp3SUmX9qtMphER6CFNP5KgUs/XwGIEUESsmn7RgJxpfNuhMaNGaHs eGyFdHNm69vIqVcLQrKEGtkum7nybOGDdUyGccr32AaPg8XZSzCD4A/b7JfR80xb d1YyPzD3Wn6Ns66nhaqpsk4KEzv74tEdMnDz2QeWdtoncMfNxmGTeWu1+K7VnfDp wI1IKoLA9IsmXJdYvU5D19QbTnQR5jgE8QYdwPcApjwb6lAm52rz/dfB1gY/XOJ9 Cvb6tw3xYX564t6zHMzgYM3vxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDSp7bFE pfWqT9mJuvE8KIzYcluYMB8GA1UdIwQYMBaAFKGqKixW5kqdm7qjN7bWqzYXLTaP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRThGNi8zRDZEOEZGMEU3 QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy9vYW9xTEZibVNwMmJ1cU0zdHRhck5oY3RO bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5vOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RThGNi8zRDZEOEZGMEU3QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy9vYW9xTEZibVNw MmJ1cU0zdHRhck5oY3RObzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQm3SwyUukZLgvtU4iOx9IcDopq+wSvRb7uAueG/Vtrd5ypXCV6X3mC7mMwp FU+Mxiaey+vdgP96TSBD2B/R7rV7pE57Kz5KnJuATATrWYN8MX2Ypq0qNEPtqk6a 3LKkqD6xCbWqytnIcu9y3UA8FXIFpwKfoBO9rwvej0WBg+1/2aFNwQ5aazKLnx7m k9Z/YyWDZ+Pp06uhpB1Q7vAZAYpMwiYTWbxNzL/r8S/4C9V3XX0MI4Jr7/oNiGAf Rli9qHqjTwHhH+l4o9o1iSV4heQdzfbDP4DjLWS37KftKBDMfOttQO4JBr8s05Kq Vc5rK0pmTaH0Q9bTUl0FBpegiA== -----END CERTIFICATE-----Generated at Tue Sep 22 12:43:04 2026 by rpki-client