$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: Q1tMtkpC4ggQlrT7UlNJPa/Soi1KPtpAaKJkW9PLwYM= Subject key identifier: 1D:20:90:F7:89:C6:80:FD:E7:E0:89:48:CE:8D:1A:53:53:6C:67:FA Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D7E Signing time: Sun 20 Sep 2026 18:01:18 +0000 Manifest this update: Sun 20 Sep 2026 18:01:17 +0000 Manifest next update: Sun 27 Sep 2026 18:01:17 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: AwoTu8OgJ1BG1sj7bVGBhID19Dden0ehCCGgb9LElSw=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: UDQzazfBuaV3+4EFYL41OYHeyXuzIXRdh8rlJayt6QI=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: Z1URLxTY0TTLZ55tXCgqgDP+6VdIFJvmADvOdJF4n4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Sep 20 18:01:17 2026 GMT Not After : Sep 27 18:01:17 2026 GMT Subject: CN=6ab01f6d-9004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:25:25:34:ae:f1:45:70:1f:0c:cd:09:6f: da:c5:13:70:ef:a8:54:dd:b3:87:51:53:db:b9:c0: fa:7d:00:48:0b:43:97:58:ce:87:e7:f7:e8:68:a5: 05:99:31:c2:24:45:3b:7b:3d:c3:44:29:a0:fb:4d: 00:cb:a4:ac:cd:42:1a:46:42:5e:96:15:4c:ea:cb: f3:f3:80:af:6d:d7:ac:79:99:a3:24:2e:ac:8d:1b: be:65:fc:1a:da:38:62:64:d1:31:c2:58:61:84:28: 22:36:10:05:2f:b7:c8:fc:72:95:72:6a:1c:bb:94: 6e:c0:95:e4:cf:1a:2d:ae:ec:c5:ef:63:1a:5a:1b: c9:41:25:ae:7d:6c:14:76:f3:3d:ac:86:44:38:f5: 6e:e0:9e:65:4e:09:b6:c2:da:0e:65:2d:dd:5a:59: 72:5c:b9:aa:29:16:a5:1d:be:cf:94:41:1e:da:23: ce:da:fc:5b:5d:f1:b2:16:11:9a:df:08:4a:83:9a: 36:b2:2d:16:d3:50:fc:19:45:8e:c0:b3:ec:17:14: c4:79:e4:53:bd:e3:a4:97:a4:c2:de:f3:2a:e9:dd: 26:b0:24:bf:2f:3f:b1:a6:14:a5:d8:30:69:1d:7e: 6d:df:fe:f0:05:07:3b:c6:cd:a5:94:c9:00:fc:10: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:20:90:F7:89:C6:80:FD:E7:E0:89:48:CE:8D:1A:53:53:6C:67:FA X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0e:24:b3:ac:82:52:cc:c1:80:7c:ea:e0:b2:df:b0:aa:b8: cb:b5:de:82:ca:01:c5:89:75:3c:5b:3f:f5:12:bb:26:30:86: 18:40:47:53:27:60:9d:93:78:5f:68:82:c3:a4:16:7c:bd:2e: c5:25:df:4d:eb:37:43:51:73:7a:9a:90:5d:04:56:f4:46:6b: c9:93:ad:f4:92:55:2c:25:08:30:6a:74:3c:6d:28:bc:31:10: e1:19:90:0c:21:f1:28:0a:3d:10:2f:97:79:5a:c9:90:8e:9c: 9a:fb:cb:7d:81:83:12:8e:28:b3:60:67:a8:5d:fc:a3:d8:3b: b3:9a:5d:94:9d:6a:c9:6a:ba:38:72:67:02:d9:28:19:3e:2b: 03:6e:88:ec:5b:98:09:61:8a:d2:79:70:d3:f0:70:91:dd:c0: 8c:b2:3f:ba:39:2f:84:3f:9d:49:5e:2d:a8:99:93:fe:da:a3: 01:8d:bf:a4:e9:32:61:7c:f8:47:5c:31:8e:b4:8e:76:d2:00: fc:ee:80:4a:96:e7:82:a2:33:42:35:e4:b5:98:75:66:17:e6: 07:71:3f:f0:8d:66:59:b3:7f:62:61:52:c1:79:8d:c8:f7:29: 82:77:d7:4b:fb:ac:a9:d4:bb:b8:b4:c6:01:8d:df:ba:33:de: e4:48:3c:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwOTIwMTgwMTE3WhcNMjYwOTI3MTgwMTE3WjAYMRYwFAYD VQQDEw02YWIwMWY2ZC05MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqYlJTSu8UVwHwzNCW/axRNw76hU3bOHUVPbucD6fQBIC0OXWM6H5/foaKUF mTHCJEU7ez3DRCmg+00Ay6SszUIaRkJelhVM6svz84CvbdeseZmjJC6sjRu+Zfwa 2jhiZNExwlhhhCgiNhAFL7fI/HKVcmocu5RuwJXkzxotruzF72MaWhvJQSWufWwU dvM9rIZEOPVu4J5lTgm2wtoOZS3dWllyXLmqKRalHb7PlEEe2iPO2vxbXfGyFhGa 3whKg5o2si0W01D8GUWOwLPsFxTEeeRTveOkl6TC3vMq6d0msCS/Lz+xphSl2DBp HX5t3/7wBQc7xs2llMkA/BC3sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0gkPeJ xoD95+CJSM6NGlNTbGf6MB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOA4ks6yCUszBgHzq4LLfsKq4y7XegsoBxYl1PFs/9RK7JjCGGEBHUydgnZN4 X2iCw6QWfL0uxSXfTes3Q1FzepqQXQRW9EZryZOt9JJVLCUIMGp0PG0ovDEQ4RmQ DCHxKAo9EC+XeVrJkI6cmvvLfYGDEo4os2BnqF38o9g7s5pdlJ1qyWq6OHJnAtko GT4rA26I7FuYCWGK0nlw0/Bwkd3AjLI/ujkvhD+dSV4tqJmT/tqjAY2/pOkyYXz4 R1wxjrSOdtIA/O6ASpbngqIzQjXktZh1ZhfmB3E/8I1mWbN/YmFSwXmNyPcpgnfX S/usqdS7uLTGAY3fujPe5Eg8LA== -----END CERTIFICATE-----Generated at Tue Sep 22 11:45:11 2026 by rpki-client