$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: /OhNf9E0Y2leLbNCxwLID2dxLI+VC0c6ZSvdNs+L8lM= Subject key identifier: DA:9D:68:54:7E:14:71:06:05:02:7E:E0:BD:B9:8C:3E:08:EC:83:31 Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 0851 Signing time: Sun 20 Sep 2026 20:54:17 +0000 Manifest this update: Sun 20 Sep 2026 20:54:17 +0000 Manifest next update: Sun 27 Sep 2026 20:54:17 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: K6it3tpyJabZ37JuUjLp0v3m3yumbk/kjt+94N+cbJY=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: xBMELOpqJ4lnqq47hcS7bDXF3hPxxlzBtOSvLVgcPrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: Sep 20 20:54:17 2026 GMT Not After : Sep 27 20:54:17 2026 GMT Subject: CN=6ab047f9-019e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:1b:18:57:09:d7:ef:f2:6b:da:b8:ea:e8: cc:e3:d2:07:95:ee:ea:13:d1:d0:9f:b4:22:15:e3: 81:89:b5:b5:35:4a:d9:a5:3f:76:cb:37:1c:d5:32: 52:45:88:65:2e:3d:a6:fa:9d:e8:14:fa:37:4e:29: 3c:0d:34:df:22:48:e5:68:d3:c6:58:e2:3c:6f:3c: 26:4b:5f:6c:0d:c1:b6:94:0c:c3:ed:2f:ec:29:31: 44:e2:07:e8:b7:52:2a:f4:05:eb:f0:8c:5f:e9:09: 68:1f:f3:36:a7:0b:81:c4:d0:d8:df:2f:2b:78:f1: 9e:ee:af:1b:72:03:b9:f9:82:b8:b6:2d:64:1e:14: 60:4a:01:bb:9e:e3:48:14:b6:dc:95:e0:f9:99:12: f0:1b:1e:c1:ab:cb:65:9f:38:06:9a:94:70:70:c3: 0c:98:71:fa:73:c6:49:75:91:11:4c:3b:dc:b7:8a: 83:98:f7:09:78:a5:dc:c9:15:26:67:72:4d:ed:ea: f1:b1:50:a8:82:67:68:3b:0a:f6:77:32:94:0d:c8: d4:14:e4:7d:6e:91:db:60:05:a4:b5:ed:6c:6d:4f: 22:c2:49:e3:fe:df:22:1d:88:e8:43:a0:97:f5:0e: c1:6a:5b:9e:5a:57:5d:11:62:77:5b:da:be:2d:d0: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9D:68:54:7E:14:71:06:05:02:7E:E0:BD:B9:8C:3E:08:EC:83:31 X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d8:e4:61:08:37:22:0d:24:fd:3b:b4:76:25:d0:36:b6:b0: eb:ac:10:a4:23:32:3f:a0:7a:be:21:9c:eb:c8:ea:a4:90:ab: 61:fd:45:34:e9:31:a3:ad:fc:b3:60:45:8a:e2:61:28:4b:ea: 39:28:76:a7:73:1a:3c:f6:3b:ab:c7:5c:b7:ad:7c:89:d0:6e: fd:27:07:1a:b5:3d:48:65:b1:2f:ba:bc:26:5c:77:c8:63:ce: 05:d3:7b:f3:1a:c6:6c:6a:b9:11:d9:20:d5:af:3f:bf:ef:0f: 7d:2e:21:99:92:30:8f:3f:53:85:2e:26:59:b3:1d:7f:c1:bf: 37:5b:63:00:2b:c0:f2:7e:00:03:16:53:e3:1a:df:c6:ee:23: 54:fd:dc:eb:16:88:9f:7e:0f:c6:6c:2d:df:7d:02:5a:06:a0: 63:20:31:34:a4:56:12:29:43:39:04:cb:82:4f:dc:0e:6a:85: fe:6c:27:ab:c6:ac:2e:4f:ea:0b:f3:0a:9a:9d:6f:d2:71:8b: d8:a4:54:24:0d:d3:fc:83:54:e7:8b:0f:a0:12:11:b1:33:24: cc:d0:7f:cd:a9:a2:fb:02:48:c2:e1:42:c1:42:52:30:40:16: b1:06:87:67:d9:55:46:71:ff:ce:c4:55:2c:f4:8e:2d:26:b7: e7:53:62:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjYwOTIwMjA1NDE3WhcNMjYwOTI3MjA1NDE3WjAYMRYwFAYD VQQDEw02YWIwNDdmOS0wMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlq4bGFcJ1+/ya9q46ujM49IHle7qE9HQn7QiFeOBibW1NUrZpT92yzcc1TJS RYhlLj2m+p3oFPo3Tik8DTTfIkjlaNPGWOI8bzwmS19sDcG2lAzD7S/sKTFE4gfo t1Iq9AXr8Ixf6QloH/M2pwuBxNDY3y8rePGe7q8bcgO5+YK4ti1kHhRgSgG7nuNI FLbcleD5mRLwGx7Bq8tlnzgGmpRwcMMMmHH6c8ZJdZERTDvct4qDmPcJeKXcyRUm Z3JN7erxsVCogmdoOwr2dzKUDcjUFOR9bpHbYAWkte1sbU8iwknj/t8iHYjoQ6CX 9Q7BalueWlddEWJ3W9q+LdBGbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqdaFR+ FHEGBQJ+4L25jD4I7IMxMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGdjkYQg3Ig0k/Tu0diXQNraw66wQpCMyP6B6viGc68jqpJCrYf1FNOkxo638 s2BFiuJhKEvqOSh2p3MaPPY7q8dct618idBu/ScHGrU9SGWxL7q8Jlx3yGPOBdN7 8xrGbGq5Edkg1a8/v+8PfS4hmZIwjz9ThS4mWbMdf8G/N1tjACvA8n4AAxZT4xrf xu4jVP3c6xaIn34Pxmwt330CWgagYyAxNKRWEilDOQTLgk/cDmqF/mwnq8asLk/q C/MKmp1v0nGL2KRUJA3T/INU54sPoBIRsTMkzNB/zami+wJIwuFCwUJSMEAWsQaH Z9lVRnH/zsRVLPSOLSa351NiQQ== -----END CERTIFICATE-----Generated at Tue Sep 22 07:46:25 2026 by rpki-client