$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: 3aivGWQHACB4wQgw7gZnW/giUT+9jVm4cQpoTsgeAh4= Subject key identifier: B8:5F:15:FF:0A:CE:FD:4A:CD:AA:BE:97:2B:ED:96:3B:DA:EE:D8:A1 Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0A42 Signing time: Sun 20 Sep 2026 19:38:12 +0000 Manifest this update: Sun 20 Sep 2026 19:38:11 +0000 Manifest next update: Sun 27 Sep 2026 19:38:11 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: CbpUKpwxQJgnaYcac3A9Xk8CEEfUyMWrXz7ydBtE4Jo=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: zMtRMkuQyjR3f+OZcrZ0sMRUtol4cpm+c1eIBbUYQJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Sep 20 19:38:11 2026 GMT Not After : Sep 27 19:38:11 2026 GMT Subject: CN=6ab03624-9b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:71:1c:1f:66:d0:b7:7a:4e:d1:89:4a:bf: b6:b3:f8:12:bb:33:45:dd:fb:fd:c4:ea:5e:97:03: 9d:94:44:e7:8b:d5:8e:12:20:f7:42:34:20:aa:84: 8d:4f:1c:d5:34:e7:cc:0c:11:81:6e:56:43:d3:bf: 23:ea:4a:ce:a0:84:14:9a:17:d4:7d:24:c4:92:19: 64:56:67:3b:a0:31:98:12:f4:58:2e:76:f2:fa:6a: 5b:e3:bb:cc:fe:82:e4:ba:7f:35:bf:02:90:a6:dd: 12:a2:71:76:56:c0:91:77:76:20:fb:00:52:ce:b0: 17:b7:05:57:ea:50:3a:4b:0c:bb:55:e7:e7:e0:9c: 87:0e:0f:0c:72:6c:52:29:85:c0:ea:9d:8f:c4:bc: 77:52:3f:67:fb:c9:f1:84:76:42:67:b7:69:a9:61: f1:f4:04:2a:a2:f6:b4:8c:97:26:22:64:56:4d:4b: a3:39:7c:22:46:33:fe:12:ab:07:3d:ec:97:79:cc: 22:f9:76:7b:53:d2:70:11:73:56:2b:59:ef:41:4c: 6a:e5:c0:dd:56:05:28:2f:a3:75:59:8f:fe:9a:8c: b9:f1:18:d5:b0:35:cf:01:a3:a2:f1:dc:b5:e0:3c: 35:ab:58:4c:b5:d5:cf:68:9f:97:4f:67:39:52:3f: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:15:FF:0A:CE:FD:4A:CD:AA:BE:97:2B:ED:96:3B:DA:EE:D8:A1 X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:29:9f:08:14:4c:26:2c:08:20:2a:94:3c:53:96:90:b2:3d: aa:46:82:ec:5f:99:0a:cc:db:08:26:21:7f:b0:41:8c:23:ec: ae:34:ae:a8:67:2e:55:a4:1a:6e:bc:ab:c4:5b:71:e8:7a:15: f8:33:7a:d0:fe:09:eb:b8:38:25:83:a3:38:bc:10:8d:52:9d: 14:13:d7:1a:ac:d7:c2:b7:d2:35:3c:34:ae:49:25:94:6b:1f: de:8e:ff:ac:0e:2c:89:18:8c:95:b8:25:d4:21:6e:a1:49:ed: d3:fa:d9:3a:e7:c0:2f:0c:fc:8a:85:67:03:27:91:ce:7c:e4: 43:ce:b3:77:95:86:45:45:c3:91:ff:fa:df:e0:ae:b7:b6:6a: 18:73:12:5a:ab:77:6e:2a:fa:37:83:dc:96:56:27:9b:35:c1: 42:c5:7a:6d:3b:93:30:6b:f4:c8:a3:23:b7:41:43:74:7d:bb: a4:ea:af:6f:83:f1:15:1b:9e:5b:95:b5:4e:b4:b8:3e:60:8e: 2b:f8:1c:b9:7c:3e:8c:d4:5b:de:6b:d4:86:7d:51:a2:ac:d6: d3:08:98:87:6e:bc:ae:99:b5:88:38:a8:ad:d5:2e:5a:9a:a9: 79:4d:ec:9a:c2:a8:03:88:5d:d4:f6:ae:33:ea:93:00:bc:c8: 83:de:39:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjYwOTIwMTkzODExWhcNMjYwOTI3MTkzODExWjAYMRYwFAYD VQQDEw02YWIwMzYyNC05YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3pxHB9m0Ld6TtGJSr+2s/gSuzNF3fv9xOpelwOdlETni9WOEiD3QjQgqoSN TxzVNOfMDBGBblZD078j6krOoIQUmhfUfSTEkhlkVmc7oDGYEvRYLnby+mpb47vM /oLkun81vwKQpt0SonF2VsCRd3Yg+wBSzrAXtwVX6lA6Swy7Vefn4JyHDg8McmxS KYXA6p2PxLx3Uj9n+8nxhHZCZ7dpqWHx9AQqova0jJcmImRWTUujOXwiRjP+EqsH PeyXecwi+XZ7U9JwEXNWK1nvQUxq5cDdVgUoL6N1WY/+moy58RjVsDXPAaOi8dy1 4Dw1q1hMtdXPaJ+XT2c5Uj/UewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhfFf8K zv1Kzaq+lyvtljva7tihMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAECmfCBRMJiwIICqUPFOWkLI9qkaC7F+ZCszbCCYhf7BBjCPsrjSuqGcuVaQa bryrxFtx6HoV+DN60P4J67g4JYOjOLwQjVKdFBPXGqzXwrfSNTw0rkkllGsf3o7/ rA4siRiMlbgl1CFuoUnt0/rZOufALwz8ioVnAyeRznzkQ86zd5WGRUXDkf/63+Cu t7ZqGHMSWqt3bir6N4PcllYnmzXBQsV6bTuTMGv0yKMjt0FDdH27pOqvb4PxFRue W5W1TrS4PmCOK/gcuXw+jNRb3mvUhn1RoqzW0wiYh268rpm1iDiordUuWpqpeU3s msKoA4hd1PauM+qTALzIg945Tg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:02:23 2026 by rpki-client