$ rpki-client -vvvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: LZfrgGnAmFLhNCcwSDOW+lz8UvVfUmB7+CXmnZ5zIEI= Subject key identifier: 66:F5:50:DF:CF:04:8D:75:B0:0C:B7:89:35:B2:7E:46:0A:C7:E5:23 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 032B Signing time: Wed 23 Sep 2026 13:45:18 +0000 Manifest this update: Wed 23 Sep 2026 13:45:18 +0000 Manifest next update: Wed 30 Sep 2026 13:45:18 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: EbT2ovoRLYZ4BmYsYwGHsHQPXXUxwhMh5oG6kyPdewk=) 2: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=) 3: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=) 4: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=) 5: 00E3030AB75511F1A7E99B4C3E11F970.roa (hash: htejeUQZGmG8s7XpwqleOsPqRAojf7v947B9VwgYY6I=) 6: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=) 7: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=) 8: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 13:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Sep 23 13:45:18 2026 GMT Not After : Sep 30 13:45:18 2026 GMT Subject: CN=6ab3d7ee-b213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:09:0c:6f:cf:4c:a3:fe:fe:22:b6:b8:25: 3d:37:7c:ce:d1:d7:39:0f:83:b7:86:06:91:1e:bd: 1d:02:2b:f2:d6:39:c4:66:45:61:c3:7a:94:60:1a: 6e:2e:11:23:1b:8b:db:e1:65:0b:a4:5d:00:32:6e: 66:4a:95:d3:a7:cc:57:7b:23:74:e3:10:cc:b3:98: 47:57:d1:d0:41:e8:ae:dd:5d:15:3e:12:26:ce:5a: 8a:aa:63:e9:ff:5f:b3:e2:66:90:4d:5c:59:e9:ae: d0:40:a0:b2:db:0b:0a:a1:ac:c3:38:7b:cf:76:c0: eb:43:c3:ef:10:25:93:85:78:c5:42:6c:62:90:c4: 54:ee:ad:e8:89:ba:ed:ff:04:5b:79:a3:be:c4:55: 01:b0:81:38:1d:1c:30:8f:52:70:f9:75:74:17:14: d1:d3:f5:90:aa:dc:fe:9a:b4:cc:c7:7b:08:d2:95: 2e:c3:46:83:d4:ac:63:a5:e6:da:4e:9d:aa:9f:3a: 88:2f:c4:64:83:5f:f5:f8:34:67:c1:e4:18:46:81: 60:60:96:78:00:dd:29:bc:2b:50:39:a2:97:73:c2: a1:6d:93:45:19:dc:38:5f:9e:dd:30:21:2c:66:79: d9:a7:e9:c3:53:37:c1:9e:a6:78:8e:43:e2:35:e3: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F5:50:DF:CF:04:8D:75:B0:0C:B7:89:35:B2:7E:46:0A:C7:E5:23 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:31:50:83:7d:25:64:fc:33:ca:cd:45:af:c5:59:ac:36:54: 30:f3:55:29:40:f8:64:c6:41:4d:97:49:d6:07:13:50:d2:d3: e6:c3:eb:88:b9:30:4c:fe:69:7a:9b:39:57:ce:f1:2a:a9:64: d2:79:a8:22:21:51:c4:2c:23:a0:86:e8:1c:b0:12:43:3f:5c: 32:d4:b5:45:17:73:ea:85:4d:20:20:1a:e7:80:39:ec:00:62: 61:f2:e0:64:75:7e:e6:73:aa:a2:30:28:a1:e0:32:0d:f6:82: cf:04:31:b6:3a:f1:b4:82:f0:e7:17:e4:09:07:f3:a1:43:4d: 0c:71:46:36:82:47:f6:ff:a4:6d:3a:01:7b:7d:32:99:d0:7c: c5:c5:14:68:ca:ba:a9:b9:15:39:90:f3:9c:20:1b:63:ae:85: 13:d9:37:ad:1c:b0:23:77:4c:96:4a:5b:13:63:4d:78:c1:f0: ff:92:aa:4d:b4:b8:ff:95:25:b9:13:ef:1f:eb:e1:78:76:c7: 43:9a:f4:4e:e4:12:1b:e9:fc:e4:b6:68:b7:e8:d4:30:62:33: 29:5e:b3:87:96:53:b6:44:69:bc:ef:21:ea:a5:0c:f7:20:63: be:03:6f:df:40:b2:77:72:b9:31:f2:e0:a1:73:42:9d:93:44: 49:29:e6:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYwOTIzMTM0NTE4WhcNMjYwOTMwMTM0NTE4WjAYMRYwFAYD VQQDEw02YWIzZDdlZS1iMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAibMJDG/PTKP+/iK2uCU9N3zO0dc5D4O3hgaRHr0dAivy1jnEZkVhw3qUYBpu LhEjG4vb4WULpF0AMm5mSpXTp8xXeyN04xDMs5hHV9HQQeiu3V0VPhImzlqKqmPp /1+z4maQTVxZ6a7QQKCy2wsKoazDOHvPdsDrQ8PvECWThXjFQmxikMRU7q3oibrt /wRbeaO+xFUBsIE4HRwwj1Jw+XV0FxTR0/WQqtz+mrTMx3sI0pUuw0aD1Kxjpeba Tp2qnzqIL8Rkg1/1+DRnweQYRoFgYJZ4AN0pvCtQOaKXc8KhbZNFGdw4X57dMCEs ZnnZp+nDUzfBnqZ4jkPiNeNoSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGb1UN/P BI11sAy3iTWyfkYKx+UjMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTFQg30lZPwzys1Fr8VZrDZUMPNVKUD4ZMZBTZdJ1gcTUNLT5sPriLkwTP5p eps5V87xKqlk0nmoIiFRxCwjoIboHLASQz9cMtS1RRdz6oVNICAa54A57ABiYfLg ZHV+5nOqojAooeAyDfaCzwQxtjrxtILw5xfkCQfzoUNNDHFGNoJH9v+kbToBe30y mdB8xcUUaMq6qbkVOZDznCAbY66FE9k3rRywI3dMlkpbE2NNeMHw/5KqTbS4/5Ul uRPvH+vheHbHQ5r0TuQSG+n85LZot+jUMGIzKV6zh5ZTtkRpvO8h6qUM9yBjvgNv 30Cyd3K5MfLgoXNCnZNESSnmrg== -----END CERTIFICATE-----Generated at Thu Sep 24 05:29:56 2026 by rpki-client