$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: HR04OxuGVCOyP3B4nuwWvXA7LRFKfPorHsdx8IpLAyU= Subject key identifier: 58:56:1E:E8:77:C6:28:81:B8:88:C5:90:B7:EE:A7:7A:A0:3A:4D:35 Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0CB8 Signing time: Mon 12 Oct 2026 18:42:41 +0000 Manifest this update: Mon 12 Oct 2026 18:42:40 +0000 Manifest next update: Mon 19 Oct 2026 18:42:40 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: 9OB0IJJuOjVRObWko4DOtti1xrZBCrr835AQYMg0ghA=) 2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: TA8VtzAfBR5/wy8hzEpd7sJdQRsz8Ezj2Z5t1drRyWc=) 3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: zalQ7o+FdSYsWjWbTlNZweEO/yra9El5eIFNRB9+7Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Oct 12 18:42:40 2026 GMT Not After : Oct 19 18:42:40 2026 GMT Subject: CN=6acd2a20-afde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:9a:fe:75:f6:10:2b:13:fd:28:29:52:9c: c1:0b:96:51:75:b9:57:c3:ae:4e:f3:93:21:d0:56: 31:49:0f:62:3f:c1:d3:1a:fd:26:b5:62:8c:4c:c0: be:a6:94:b0:9f:fe:5b:59:a3:1a:68:f1:f1:05:b0: 49:dc:32:36:93:5a:54:b8:da:e2:6a:f5:a8:7b:2b: 7e:90:17:5b:97:ec:3f:4f:ef:ad:c3:84:34:be:b2: 3f:40:28:4f:b4:6d:de:95:c8:dd:e1:e9:50:7e:98: d2:e5:0b:34:c1:5f:03:0d:de:65:b0:f2:aa:2e:1d: 80:19:bb:58:38:60:93:12:23:d2:f8:17:7a:e8:03: 95:21:f5:51:62:ef:aa:26:19:cc:f2:a1:c3:42:33: 80:a6:d0:92:33:5b:75:9a:8d:47:ea:43:99:28:61: 36:1a:ce:f8:5e:9d:4d:ce:12:03:bd:db:60:2e:ff: 24:1a:29:00:ec:5e:9b:15:a9:57:70:a3:9b:ed:0c: 93:74:fe:1a:97:d9:4c:48:a8:04:d5:5e:57:20:73: 88:01:37:4b:24:6f:88:0a:6b:ca:f3:7c:f9:8d:c2: 26:a0:be:db:ca:f2:84:b8:32:e3:42:e5:64:bb:a6: 46:af:eb:d3:0d:46:b8:5d:23:ee:29:9b:44:75:a7: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:1E:E8:77:C6:28:81:B8:88:C5:90:B7:EE:A7:7A:A0:3A:4D:35 X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:9f:19:62:52:4a:da:50:48:b7:a1:30:39:ae:e4:51:fe:73: 3a:42:e1:7e:3b:10:3e:59:a9:4a:3e:71:d1:7c:b5:84:29:f8: c2:90:20:a7:75:e8:92:6b:b6:74:d6:c0:f7:71:30:6e:ff:4b: 73:a0:80:54:ca:14:84:f8:6e:e3:95:95:61:b0:98:7a:fc:23: 40:d3:c8:5c:f9:3c:0a:e7:f2:60:47:46:38:3a:18:cc:b6:44: 43:39:e3:7b:9c:21:7d:c6:d1:f5:12:65:83:16:2f:db:ed:76: 03:3b:dc:59:d8:ad:b8:05:b9:8c:74:52:24:19:2c:21:b5:2f: 2e:3f:17:e6:17:5a:fb:e1:42:f4:4c:55:5c:ae:b6:31:27:74: 70:a2:1d:44:dd:b6:08:0a:86:60:aa:d0:34:e9:bf:2c:d9:d2: 3b:6b:ae:8d:e3:6b:c3:8a:0b:28:27:ad:65:ff:6c:f0:66:41: 6f:1d:22:d3:3e:24:68:21:5e:e1:0a:ff:15:29:e8:a5:30:21: 8b:37:de:85:7e:c3:71:b4:e1:48:ff:b5:11:2d:7c:0e:9a:1d: 5f:b7:82:f8:be:a9:ba:9e:f9:01:ad:f0:81:08:1c:45:3d:d0: 5b:ad:47:ea:79:8f:6c:05:e3:b3:41:e4:77:7b:e9:82:ea:21: 2f:10:b0:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjYxMDEyMTg0MjQwWhcNMjYxMDE5MTg0MjQwWjAYMRYwFAYD VQQDEw02YWNkMmEyMC1hZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11+a/nX2ECsT/SgpUpzBC5ZRdblXw65O85Mh0FYxSQ9iP8HTGv0mtWKMTMC+ ppSwn/5bWaMaaPHxBbBJ3DI2k1pUuNriavWoeyt+kBdbl+w/T++tw4Q0vrI/QChP tG3elcjd4elQfpjS5Qs0wV8DDd5lsPKqLh2AGbtYOGCTEiPS+Bd66AOVIfVRYu+q JhnM8qHDQjOAptCSM1t1mo1H6kOZKGE2Gs74Xp1NzhIDvdtgLv8kGikA7F6bFalX cKOb7QyTdP4al9lMSKgE1V5XIHOIATdLJG+ICmvK83z5jcImoL7byvKEuDLjQuVk u6ZGr+vTDUa4XSPuKZtEdae4qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhWHuh3 xiiBuIjFkLfup3qgOk01MB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr58ZYlJK2lBIt6EwOa7kUf5zOkLhfjsQPlmpSj5x0Xy1hCn4wpAgp3Xokmu2 dNbA93Ewbv9Lc6CAVMoUhPhu45WVYbCYevwjQNPIXPk8CufyYEdGODoYzLZEQznj e5whfcbR9RJlgxYv2+12AzvcWdituAW5jHRSJBksIbUvLj8X5hda++FC9ExVXK62 MSd0cKIdRN22CAqGYKrQNOm/LNnSO2uujeNrw4oLKCetZf9s8GZBbx0i0z4kaCFe 4Qr/FSnopTAhizfehX7DcbThSP+1ES18DpodX7eC+L6pup75Aa3wgQgcRT3QW61H 6nmPbAXjs0Hkd3vpguohLxCwsg== -----END CERTIFICATE-----Generated at Mon Oct 12 23:40:16 2026 by rpki-client