$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: Bzl0KBE0tXbYn6eCOib3ePlxXaSXkVXmGHeycyraRhA= Subject key identifier: 1A:AB:12:0A:16:D5:99:C5:F5:BB:83:C3:A6:D5:9D:2F:5C:85:66:3C Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: 013F Signing time: Sun 11 Oct 2026 06:04:53 +0000 Manifest this update: Sun 11 Oct 2026 06:04:52 +0000 Manifest next update: Sun 18 Oct 2026 06:04:52 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: FiupeTFcA141A3D4G90YvAQynwrdGBgM80Q+Fv9g66k=) 2: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=) 3: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 06:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Oct 11 06:04:52 2026 GMT Not After : Oct 18 06:04:52 2026 GMT Subject: CN=6acb2705-47e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:43:f8:19:b0:69:b7:a5:91:55:2d:5c:1b: 8e:22:ac:d7:ac:0c:0a:90:f8:b1:43:8d:63:87:21: cd:7a:58:be:39:6b:1b:a2:9f:0a:b1:b8:48:07:b5: 32:fa:7d:58:e4:8a:e2:d3:11:4a:59:3c:57:3b:ae: ac:e4:a3:9e:ad:49:e4:5a:4b:30:d7:7c:bc:27:3d: 72:5b:a3:d1:48:23:e5:9c:99:d8:0f:ad:28:9b:f9: 38:a5:4b:99:b3:8b:3f:a6:69:fd:82:db:7f:1c:71: 81:db:50:fe:1d:40:99:ff:fb:e9:18:d1:53:19:ee: df:d0:6b:e2:b1:5e:f8:27:b4:3c:df:02:5e:ec:e5: d8:a3:12:87:05:ab:d6:50:5d:de:12:f5:71:d3:ff: 39:de:9e:63:9c:43:03:25:ca:92:3d:63:2f:8c:50: c5:4b:af:01:10:e6:b0:b5:45:e0:fd:61:e5:3e:d3: 59:fe:c2:be:27:a8:53:fb:3a:23:2c:28:d1:10:83: 6c:03:5b:fa:c1:94:4c:08:18:ed:1c:2f:ff:9d:3a: eb:7e:69:d4:cd:b5:81:4f:82:df:ba:d6:5a:17:8d: ff:b1:21:df:38:7e:e4:1e:df:fa:f7:6e:f5:3d:da: 8b:a7:45:be:fa:b2:ce:4e:89:08:c7:52:da:0a:df: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:12:0A:16:D5:99:C5:F5:BB:83:C3:A6:D5:9D:2F:5C:85:66:3C X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9e:d3:d0:9f:57:20:71:32:92:ef:06:dc:8e:46:2e:8b:39: fb:2d:77:fd:2a:fe:96:34:a9:f5:b5:5d:19:04:23:90:29:80: d2:70:6d:ae:99:cf:b0:a0:ba:9e:4d:c3:8b:dd:8f:fb:1d:aa: c1:e7:91:af:c1:a6:eb:07:94:3d:c8:41:7d:5e:1d:6b:ad:56: c0:af:c7:56:1e:d2:92:29:bf:ab:07:eb:90:88:3b:57:13:94: 14:bc:70:20:95:64:f0:4f:d3:c1:62:2b:ec:9e:76:13:25:12: c0:24:98:5b:40:43:cf:0a:83:99:38:31:ab:26:45:12:d3:42: 66:80:60:b3:de:11:f4:85:46:b9:75:00:4a:33:ce:c7:56:6c: 85:d6:03:6e:10:3d:66:a5:0f:06:75:ba:4a:2b:89:22:52:3a: 00:01:23:b6:93:d7:12:1b:d9:ea:46:37:13:b7:d3:13:8b:6c: b5:3f:d3:69:ab:0c:dd:20:92:de:05:41:0b:55:5d:3e:74:23: 79:ab:d1:ff:2e:1e:f2:36:8d:41:58:af:87:e0:d3:07:69:2a: a6:3c:95:30:c3:78:52:87:fe:72:71:36:ae:84:40:47:77:a3: 78:9f:4a:68:fc:db:42:ac:81:80:0d:cc:69:11:e5:0e:c9:c7: 5a:50:01:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjYxMDExMDYwNDUyWhcNMjYxMDE4MDYwNDUyWjAYMRYwFAYD VQQDEw02YWNiMjcwNS00N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFND+BmwabelkVUtXBuOIqzXrAwKkPixQ41jhyHNeli+OWsbop8KsbhIB7Uy +n1Y5Iri0xFKWTxXO66s5KOerUnkWksw13y8Jz1yW6PRSCPlnJnYD60om/k4pUuZ s4s/pmn9gtt/HHGB21D+HUCZ//vpGNFTGe7f0GvisV74J7Q83wJe7OXYoxKHBavW UF3eEvVx0/853p5jnEMDJcqSPWMvjFDFS68BEOawtUXg/WHlPtNZ/sK+J6hT+zoj LCjREINsA1v6wZRMCBjtHC//nTrrfmnUzbWBT4LfutZaF43/sSHfOH7kHt/69271 PdqLp0W++rLOTokIx1LaCt8PwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqrEgoW 1ZnF9buDw6bVnS9chWY8MB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm akFpNGtsWDNsWlFhTWNHQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdp7T0J9XIHEyku8G3I5GLos5+y13/Sr+ljSp9bVdGQQjkCmA0nBtrpnPsKC6 nk3Di92P+x2qweeRr8Gm6weUPchBfV4da61WwK/HVh7Skim/qwfrkIg7VxOUFLxw IJVk8E/TwWIr7J52EyUSwCSYW0BDzwqDmTgxqyZFEtNCZoBgs94R9IVGuXUASjPO x1ZshdYDbhA9ZqUPBnW6SiuJIlI6AAEjtpPXEhvZ6kY3E7fTE4tstT/TaasM3SCS 3gVBC1VdPnQjeavR/y4e8jaNQVivh+DTB2kqpjyVMMN4Uof+cnE2roRAR3ejeJ9K aPzbQqyBgA3MaRHlDsnHWlABtQ== -----END CERTIFICATE-----Generated at Sun Oct 11 15:25:54 2026 by rpki-client