$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: BR0wEAfeDPLjSKELMDVe9RJuH6bp6KSxqiDUYDwMJjY= Subject key identifier: 97:A5:C3:C1:7A:40:93:B6:74:28:72:5C:CE:90:BB:4D:54:58:38:69 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 0294 Signing time: Tue 22 Sep 2026 04:04:38 +0000 Manifest this update: Tue 22 Sep 2026 04:04:38 +0000 Manifest next update: Tue 29 Sep 2026 04:04:38 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: StYR0wNh/AbuO8ItFKl0RvlsItfbu55ayX5PM4dgF/g=) 2: 0FDE82648A4911F1987018B83411F970.roa (hash: 0v1JbUOlN/L+TuKNqfztnPPZue2CrvOvQ2tkWu7kpAg=) 3: 2EAD49328A4911F1B17FECC73411F970.roa (hash: dkIzivnox3P2hPTPxMUOI3sSK/751vYlNDiy4Qq+N4s=) 4: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: H62V7SkEUjfULsyQShG7dI+473Zoo/mZ45UEwwtyh80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 04:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Sep 22 04:04:38 2026 GMT Not After : Sep 29 04:04:38 2026 GMT Subject: CN=6ab1fe56-16fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:c7:5a:f8:ff:a5:0f:57:53:9e:ac:1b:20: f7:07:de:da:00:50:77:6b:b7:ad:43:d4:01:5a:ad: f7:63:02:e7:26:11:9a:fe:a6:b1:3b:05:29:eb:bd: e5:2b:e3:29:4c:9b:57:00:a5:b1:93:3e:47:cd:35: 3d:e6:76:ce:f3:70:6f:e7:ba:f8:c8:71:b5:24:8b: f1:de:bc:95:7b:7f:99:79:1b:d7:a9:07:40:4b:d3: b3:b8:be:97:8b:d4:0b:c8:63:77:e6:82:f2:4b:e0: 58:6c:c8:b8:41:01:f4:59:56:ed:a8:4d:fe:2d:8c: c8:f1:d4:64:50:4e:cc:b9:6b:3d:21:6c:ec:2e:f4: 81:96:16:2d:46:bb:b2:c8:9d:2b:ee:2a:7e:63:a3: 86:fc:6e:dc:5e:01:59:2e:28:6c:cb:03:ef:41:0b: 31:e0:19:ca:91:f1:ca:6b:ef:f0:c3:42:5f:4b:7f: 85:89:d3:a6:30:de:96:c8:db:d9:53:f2:2d:fa:a1: 9a:18:5d:c7:30:0e:d4:60:a8:df:ea:18:fe:06:7c: 24:e4:49:bd:8c:f1:07:0c:6f:e3:11:9e:b9:6b:a1: c0:43:de:a9:4a:8b:b8:2f:b4:a7:d3:4a:1a:0d:8c: 25:8f:c0:d8:33:43:7e:69:a0:d4:15:57:0c:32:a4: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:C3:C1:7A:40:93:B6:74:28:72:5C:CE:90:BB:4D:54:58:38:69 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:75:3d:77:9d:a2:93:5f:bc:bb:bb:59:4a:d4:cd:27:e6: 27:fb:80:f6:65:06:cc:a9:bf:a8:a0:22:a7:f1:d8:8c:2c:66: c4:5c:c9:bf:b1:72:bb:27:ae:c1:c2:90:2d:9a:17:45:8c:83: 6a:7a:42:4e:12:6b:c4:51:2c:f4:53:42:cb:61:9e:79:0d:f0: a9:4f:e1:8f:f7:60:71:41:b5:28:a4:6f:2e:41:59:74:f7:e1: 5e:6b:37:c2:bf:8e:1f:60:2b:b8:4c:41:31:74:07:6c:f7:3a: 80:ae:c3:4e:34:9b:50:0f:f1:84:9a:9d:84:dc:ed:93:58:c2: a9:47:01:0a:9f:f3:38:3f:56:c2:8e:79:6a:9a:b1:2e:71:5f: 24:2b:1a:aa:aa:82:a3:12:51:76:b3:01:af:ba:99:71:d3:21: 98:32:07:1a:e7:23:27:5c:f3:5b:87:b2:b3:e4:7f:b4:ec:61: 62:df:61:7e:ee:2a:a7:0d:86:aa:c6:06:6a:8c:e4:9a:1f:b9: d3:9b:d1:12:0b:ce:2a:6b:52:14:3b:65:11:02:1b:1f:01:ab: 86:5c:82:1c:eb:bc:fd:18:c3:83:4a:19:a5:7e:d9:a3:61:b5: cc:86:ff:e9:38:86:e3:93:a8:48:d2:b9:d9:7b:53:9c:48:37: c1:90:50:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjYwOTIyMDQwNDM4WhcNMjYwOTI5MDQwNDM4WjAYMRYwFAYD VQQDEw02YWIxZmU1Ni0xNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscvHWvj/pQ9XU56sGyD3B97aAFB3a7etQ9QBWq33YwLnJhGa/qaxOwUp673l K+MpTJtXAKWxkz5HzTU95nbO83Bv57r4yHG1JIvx3ryVe3+ZeRvXqQdAS9OzuL6X i9QLyGN35oLyS+BYbMi4QQH0WVbtqE3+LYzI8dRkUE7MuWs9IWzsLvSBlhYtRruy yJ0r7ip+Y6OG/G7cXgFZLihsywPvQQsx4BnKkfHKa+/ww0JfS3+FidOmMN6WyNvZ U/It+qGaGF3HMA7UYKjf6hj+Bnwk5Em9jPEHDG/jEZ65a6HAQ96pSou4L7Sn00oa DYwlj8DYM0N+aaDUFVcMMqSA6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJelw8F6 QJO2dChyXM6Qu01UWDhpMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAibh1PXedopNfvLu7WUrUzSfmJ/uA9mUGzKm/qKAip/HYjCxmxFzJv7Fyuyeu wcKQLZoXRYyDanpCThJrxFEs9FNCy2GeeQ3wqU/hj/dgcUG1KKRvLkFZdPfhXms3 wr+OH2AruExBMXQHbPc6gK7DTjSbUA/xhJqdhNztk1jCqUcBCp/zOD9Wwo55apqx LnFfJCsaqqqCoxJRdrMBr7qZcdMhmDIHGucjJ1zzW4eys+R/tOxhYt9hfu4qpw2G qsYGaozkmh+505vREgvOKmtSFDtlEQIbHwGrhlyCHOu8/RjDg0oZpX7Zo2G1zIb/ 6TiG45OoSNK52XtTnEg3wZBQyw== -----END CERTIFICATE-----Generated at Tue Sep 22 11:57:45 2026 by rpki-client