$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: qr5Bq/D10QYAUw0bVuLFzzf7UmrqrlyrGSBByYw/X9s= Subject key identifier: 84:67:98:27:25:EB:56:EC:F8:AF:3E:E4:0B:A1:1E:FC:D2:6E:D1:03 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: E1 Signing time: Mon 21 Sep 2026 06:38:23 +0000 Manifest this update: Mon 21 Sep 2026 06:38:22 +0000 Manifest next update: Mon 28 Sep 2026 06:38:22 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: F4oxWRvBRRwvvALSbXDl5owRGfeXjxw8wfLiADWogis=) 2: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 4: BB2BF88CA79911F1857810AE4811F970.roa (hash: Y+Ntf8yGJA3+2z975NNw0RpsGbbTUVm9WQmnhNftTf0=) 5: 688C64E4A5CE11F1B7F696C43311F970.roa (hash: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=) 6: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 7: 69256D56A5CE11F1B7F696C43311F970.roa (hash: /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=) 8: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Sep 21 06:38:22 2026 GMT Not After : Sep 28 06:38:22 2026 GMT Subject: CN=6ab0d0df-887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:1c:6e:8c:41:db:88:d7:3e:2e:0b:ba:b0: 45:21:9e:0d:38:5d:33:35:d3:f2:e4:29:dc:ee:a7: 86:09:9e:bf:e3:ee:7b:72:36:94:0f:17:ae:8b:74: 67:96:58:b6:0e:b5:c4:0f:87:9a:dc:6a:31:e1:f3: 1d:73:2c:b1:a7:cb:7e:bf:b3:79:1c:f9:1f:6b:e3: 10:4d:72:47:a2:07:ad:22:d6:a7:c6:82:ad:12:ad: 32:c7:4d:36:4f:4e:21:ba:7f:a5:1c:92:1f:20:73: b4:d9:d6:01:6c:29:12:dd:b6:6e:8c:cf:b2:e3:74: ae:19:58:18:85:58:af:c2:0f:e1:b4:7b:13:85:73: 16:e4:fc:bb:f2:18:6b:8a:81:fe:f9:96:62:45:35: f0:44:b4:12:a0:b2:19:af:89:26:b4:fe:1f:bf:bd: d4:69:da:9e:0e:ce:7b:fb:4e:c4:6d:bd:21:7f:26: 5d:97:eb:c3:d1:27:4c:a8:0f:f3:0c:d2:99:3f:17: c8:39:59:c1:c1:ff:30:51:c0:6b:9c:5b:ce:a4:a8: 79:4d:05:ba:71:82:ae:dc:63:fa:48:fc:ef:e5:07: fc:90:be:e9:04:21:06:ef:ce:05:0c:e5:ec:b7:e7: 25:d2:94:e7:21:bb:06:f8:a5:e0:48:01:c8:29:53: 76:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:98:27:25:EB:56:EC:F8:AF:3E:E4:0B:A1:1E:FC:D2:6E:D1:03 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:89:75:6d:7f:bb:05:36:94:9f:7b:a6:9e:c1:8f:43:36:bd: 4d:d0:26:6d:b4:cf:fa:66:03:ac:e9:d0:9c:ce:74:ad:30:4f: 77:a6:3e:01:3a:c9:e8:ac:97:36:31:92:e4:68:96:c7:19:41: d2:b4:57:d1:ea:b4:8b:03:da:1e:ff:f9:7d:21:dc:a2:6d:ea: 7b:37:9e:06:62:22:66:68:fc:b7:fa:f7:ea:3f:d7:e3:81:46: 03:3e:2c:87:3c:b0:1c:33:32:eb:73:b9:2b:21:df:7e:5f:c2: b6:5b:7b:d1:2a:63:04:60:9a:02:c2:03:4c:b9:35:55:75:f2: 98:1a:a3:87:25:87:c9:dd:71:a9:87:6e:92:15:b1:61:1e:36: c3:27:98:39:7f:5b:bd:92:0c:12:04:ce:16:2d:9e:72:e4:54: ea:2f:ff:70:fa:aa:29:1d:8b:91:ef:68:fb:64:ca:7c:bb:63: cc:05:6d:67:66:84:29:4b:7a:f0:dd:32:d5:02:b3:28:c6:ab: 86:3f:e6:04:74:91:9b:ff:22:41:46:8b:83:bc:3e:5e:01:f6: 79:30:fc:c6:ea:f0:a0:8c:b1:b0:c8:a2:73:68:d4:b5:7a:d9: 09:7e:2f:e4:b6:4a:7d:9d:38:49:18:70:27:54:9a:3b:78:d6: f1:b3:94:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwOTIxMDYzODIyWhcNMjYwOTI4MDYzODIyWjAYMRYwFAYD VQQDEw02YWIwZDBkZi04ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JocboxB24jXPi4LurBFIZ4NOF0zNdPy5Cnc7qeGCZ6/4+57cjaUDxeui3Rn lli2DrXED4ea3Gox4fMdcyyxp8t+v7N5HPkfa+MQTXJHogetItanxoKtEq0yx002 T04hun+lHJIfIHO02dYBbCkS3bZujM+y43SuGVgYhVivwg/htHsThXMW5Py78hhr ioH++ZZiRTXwRLQSoLIZr4kmtP4fv73UadqeDs57+07Ebb0hfyZdl+vD0SdMqA/z DNKZPxfIOVnBwf8wUcBrnFvOpKh5TQW6cYKu3GP6SPzv5Qf8kL7pBCEG784FDOXs t+cl0pTnIbsG+KXgSAHIKVN2IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRnmCcl 61bs+K8+5AuhHvzSbtEDMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk4l1bX+7BTaUn3umnsGPQza9TdAmbbTP+mYDrOnQnM50rTBPd6Y+ATrJ6KyX NjGS5GiWxxlB0rRX0eq0iwPaHv/5fSHcom3qezeeBmIiZmj8t/r36j/X44FGAz4s hzywHDMy63O5KyHffl/Ctlt70SpjBGCaAsIDTLk1VXXymBqjhyWHyd1xqYdukhWx YR42wyeYOX9bvZIMEgTOFi2ecuRU6i//cPqqKR2Lke9o+2TKfLtjzAVtZ2aEKUt6 8N0y1QKzKMarhj/mBHSRm/8iQUaLg7w+XgH2eTD8xurwoIyxsMiic2jUtXrZCX4v 5LZKfZ04SRhwJ1SaO3jW8bOUpw== -----END CERTIFICATE-----Generated at Tue Sep 22 21:12:10 2026 by rpki-client