$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: P1KChbDK3VDwttWP3nG7WrmhFEGAlt+cqUh75ieShZ8= Subject key identifier: 30:AB:03:F3:12:8F:5A:E5:8F:A8:D1:CB:0F:35:B9:1B:BE:7E:00:20 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 028E Signing time: Mon 21 Sep 2026 01:50:08 +0000 Manifest this update: Mon 21 Sep 2026 01:50:08 +0000 Manifest next update: Mon 28 Sep 2026 01:50:08 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: Hd87Xk0JvSi5y4yjYwr/DxSKS4D7EqVcuq138pMEVyg=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Sep 21 01:50:08 2026 GMT Not After : Sep 28 01:50:08 2026 GMT Subject: CN=6ab08d50-00d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:8b:64:12:39:a5:2d:d8:9e:8a:83:e8:41: 5b:be:7c:8e:f3:1d:0f:81:ba:ba:a2:a7:85:da:42: 9e:f2:a3:e3:96:a4:9b:8d:6f:86:d2:9e:fc:e6:94: fc:46:c5:c1:b5:84:fd:e0:8d:6c:93:74:9a:66:12: 83:05:9c:ee:38:c9:54:58:71:6b:07:61:fa:d0:3d: cf:5d:11:b2:04:79:d6:d7:b6:1c:12:e7:65:2f:ff: bc:e8:e3:b6:1d:66:34:13:51:8e:0c:89:17:52:ae: 7d:0e:17:e3:19:bb:7a:e1:63:f0:93:4f:f3:42:5e: 9c:49:5c:e0:1b:61:9d:f7:57:66:60:8d:79:ff:61: bd:6d:b1:73:ce:df:2c:0b:14:4d:11:14:1c:e1:fa: 32:b0:b5:1f:61:c6:76:c6:3a:e4:7c:9c:b0:ff:83: 8c:e9:66:4d:65:ab:41:e7:5f:d4:6f:b3:4f:d3:6b: fd:31:fe:b1:f8:90:76:9f:6f:fa:61:5a:42:1b:b3: 42:5b:a8:ac:13:38:fc:da:f9:79:27:32:b4:30:92: d6:4d:93:0e:77:48:68:0f:ff:cc:7a:76:ed:aa:80: ac:44:a5:01:55:78:a8:2e:e1:94:43:39:3e:41:78: d4:fb:f0:5c:f7:47:fc:b0:46:36:9e:5d:78:8b:f0: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AB:03:F3:12:8F:5A:E5:8F:A8:D1:CB:0F:35:B9:1B:BE:7E:00:20 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:49:43:3b:70:9d:b7:ca:7c:98:61:94:e3:9c:10:a6:d1:0a: 87:46:ce:da:ed:e9:11:84:22:ad:a5:6c:94:7f:51:b0:45:a6: 68:bb:89:e3:b3:bc:15:98:54:17:10:d9:b3:88:5f:c0:bf:b5: 76:96:c6:f6:21:bf:3c:81:d2:01:66:ee:21:01:37:7b:97:23: 1f:45:ab:c2:0c:82:5f:4d:70:c1:96:88:99:f7:4d:35:f8:00: 24:54:4f:32:2f:26:a0:8d:28:3c:29:b0:f4:96:de:45:4e:f8: b3:87:fc:d3:bc:7a:d2:0c:a9:b9:62:0e:e9:08:fa:5d:7b:58: 23:44:62:8b:1e:bf:ce:9b:5b:d7:1f:36:51:a3:d9:aa:27:0e: 69:66:fd:cb:30:f6:db:81:a8:a4:50:45:17:8a:78:ec:79:c3: df:df:33:0a:d1:5c:ce:d2:b5:85:97:00:9b:e0:b6:05:01:d6: 2d:71:2c:04:e6:b9:6b:74:aa:de:48:d0:ca:b2:47:98:28:ef: fa:59:2d:6d:a7:85:24:48:d1:ba:3a:fb:e2:81:90:7c:bf:24: 74:50:a9:d7:4a:fa:b8:eb:a0:66:c9:7a:1c:8f:4a:94:a0:bb: 61:2e:c7:c6:cb:09:16:a5:d0:1e:aa:86:fe:d3:14:40:b7:b1: 10:ca:74:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjYwOTIxMDE1MDA4WhcNMjYwOTI4MDE1MDA4WjAYMRYwFAYD VQQDEw02YWIwOGQ1MC0wMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eCLZBI5pS3YnoqD6EFbvnyO8x0Pgbq6oqeF2kKe8qPjlqSbjW+G0p785pT8 RsXBtYT94I1sk3SaZhKDBZzuOMlUWHFrB2H60D3PXRGyBHnW17YcEudlL/+86OO2 HWY0E1GODIkXUq59DhfjGbt64WPwk0/zQl6cSVzgG2Gd91dmYI15/2G9bbFzzt8s CxRNERQc4foysLUfYcZ2xjrkfJyw/4OM6WZNZatB51/Ub7NP02v9Mf6x+JB2n2/6 YVpCG7NCW6isEzj82vl5JzK0MJLWTZMOd0hoD//MenbtqoCsRKUBVXioLuGUQzk+ QXjU+/Bc90f8sEY2nl14i/ANwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCrA/MS j1rlj6jRyw81uRu+fgAgMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiklDO3Cdt8p8mGGU45wQptEKh0bO2u3pEYQiraVslH9RsEWmaLuJ47O8FZhU FxDZs4hfwL+1dpbG9iG/PIHSAWbuIQE3e5cjH0WrwgyCX01wwZaImfdNNfgAJFRP Mi8moI0oPCmw9JbeRU74s4f807x60gypuWIO6Qj6XXtYI0Riix6/zptb1x82UaPZ qicOaWb9yzD224GopFBFF4p47HnD398zCtFcztK1hZcAm+C2BQHWLXEsBOa5a3Sq 3kjQyrJHmCjv+lktbaeFJEjRujr74oGQfL8kdFCp10r6uOugZsl6HI9KlKC7YS7H xssJFqXQHqqG/tMUQLexEMp0AA== -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:30 2026 by rpki-client