$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: BgpvpeT3lfKEPiZxdzuixpTcAzp69pIbRL0BOSvurP0= Subject key identifier: 7A:E5:83:BF:3D:41:1C:4F:88:0C:F1:4B:3D:A7:0E:25:CF:AC:10:FF Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 0872 Signing time: Wed 04 Nov 2026 21:10:33 +0000 Manifest this update: Wed 04 Nov 2026 21:10:32 +0000 Manifest next update: Wed 11 Nov 2026 21:10:32 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: LoJ2gf0r1sErWHA1kh0oIfzeTpedfUeErDNAk/PHMgQ=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: 1TQcMsBjuJd+6jfZHoOFpWn4FM5EaS3VBNXt5OgzVck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 21:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Nov 4 21:10:32 2026 GMT Not After : Nov 11 21:10:32 2026 GMT Subject: CN=6aeb9f48-33ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:32:f2:a6:80:d2:a9:5f:a1:89:30:35:54: ed:8f:15:59:27:9f:a4:1c:43:9b:e2:73:32:86:1c: 43:44:3f:e9:df:78:42:03:a9:ae:8d:e6:d1:90:d4: bd:41:36:9c:c7:fc:1c:5a:6a:aa:b7:8c:f9:54:d9: a4:a4:86:cf:aa:7c:dd:8a:40:f6:ca:be:87:9b:57: 44:3d:6a:e5:b4:9d:ad:9c:31:1f:b7:60:6b:90:d2: 5e:0f:dc:0d:16:a5:4d:74:f5:a2:ba:d0:e6:51:1d: 39:75:83:b3:30:e4:d2:e4:53:a1:bc:e6:1d:dc:4d: 5e:80:1a:d4:eb:63:7e:a2:4e:74:e1:36:d0:90:7a: 00:cf:69:15:38:7a:7e:0f:69:ab:de:10:87:fc:9e: 17:82:f6:4c:de:57:a6:16:1b:08:f6:9e:dc:27:90: 7f:9a:b8:c7:a8:e2:b0:d4:bf:a0:a0:2f:64:d8:00: 6a:bb:ca:ff:eb:65:7e:6e:57:db:37:70:12:49:a3: 6e:f7:10:d2:27:49:20:f0:32:49:02:d4:bb:e3:f5: 4a:9d:bb:9b:1f:73:1b:98:16:50:f8:c7:11:ee:e6: 3f:07:ca:db:dd:e0:1b:9c:9c:0e:dc:da:7b:11:21: 94:a5:87:8c:47:e7:5e:73:29:07:73:d8:3a:a2:3c: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:83:BF:3D:41:1C:4F:88:0C:F1:4B:3D:A7:0E:25:CF:AC:10:FF X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:02:93:7d:83:23:08:38:82:39:e3:aa:61:5f:11:67:a6:40: ff:95:9d:bb:63:e9:65:7a:04:80:45:7e:05:bf:6d:4f:fb:2d: 4d:89:88:bf:88:94:1f:b5:0f:b0:f4:a3:e6:47:61:c1:71:e8: 81:1d:06:d0:26:59:8b:18:92:6d:21:48:03:a9:65:c4:8b:be: 32:0c:1d:91:09:ca:1a:1e:ec:7b:5b:78:fc:23:eb:4f:af:e2: 3f:90:2a:0d:0c:b5:b5:85:77:00:a9:0c:79:0f:cd:fa:3f:c5: 3e:a4:5c:6b:8e:59:20:a3:64:af:55:1c:e2:12:67:8b:98:75: e2:f2:74:41:c2:c0:92:0a:97:fc:9c:71:28:78:78:7f:ef:87: 3d:05:f8:c6:46:43:07:f4:94:01:8d:38:86:9c:65:0e:31:3a: 04:54:fb:1c:fd:6d:92:60:36:1c:29:09:34:c0:7f:10:d7:e9: d2:d8:13:87:91:c4:44:89:44:8b:64:7e:89:8b:54:dd:25:7a: a4:40:3b:02:6d:65:28:55:58:20:7d:2b:b6:5e:c6:15:68:f5: b2:16:42:4a:3a:de:e5:05:01:13:ae:67:10:35:80:ab:aa:c7: 12:4d:f0:98:16:ea:b2:18:db:1c:ea:ca:e4:fc:c9:61:3f:69: 85:ba:b0:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjYxMTA0MjExMDMyWhcNMjYxMTExMjExMDMyWjAYMRYwFAYD VQQDEw02YWViOWY0OC0zM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjoUy8qaA0qlfoYkwNVTtjxVZJ5+kHEOb4nMyhhxDRD/p33hCA6mujebRkNS9 QTacx/wcWmqqt4z5VNmkpIbPqnzdikD2yr6Hm1dEPWrltJ2tnDEft2BrkNJeD9wN FqVNdPWiutDmUR05dYOzMOTS5FOhvOYd3E1egBrU62N+ok504TbQkHoAz2kVOHp+ D2mr3hCH/J4XgvZM3lemFhsI9p7cJ5B/mrjHqOKw1L+goC9k2ABqu8r/62V+blfb N3ASSaNu9xDSJ0kg8DJJAtS74/VKnbubH3MbmBZQ+McR7uY/B8rb3eAbnJwO3Np7 ESGUpYeMR+decykHc9g6ojzoHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrlg789 QRxPiAzxSz2nDiXPrBD/MB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAugKTfYMjCDiCOeOqYV8RZ6ZA/5Wdu2PpZXoEgEV+Bb9tT/stTYmIv4iUH7UP sPSj5kdhwXHogR0G0CZZixiSbSFIA6llxIu+MgwdkQnKGh7se1t4/CPrT6/iP5Aq DQy1tYV3AKkMeQ/N+j/FPqRca45ZIKNkr1Uc4hJni5h14vJ0QcLAkgqX/JxxKHh4 f++HPQX4xkZDB/SUAY04hpxlDjE6BFT7HP1tkmA2HCkJNMB/ENfp0tgTh5HERIlE i2R+iYtU3SV6pEA7Am1lKFVYIH0rtl7GFWj1shZCSjre5QUBE65nEDWAq6rHEk3w mBbqshjbHOrK5PzJYT9phbqwww== -----END CERTIFICATE-----Generated at Thu Nov 5 09:31:03 2026 by rpki-client