$ rpki-client -vvvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: i1hRaj7+Y/qJdmuWVOvIIR5P1/NJXyoAFWNWOIipqwg= Subject key identifier: 89:02:50:0C:65:35:B9:13:1D:0F:9B:46:2D:8A:85:78:DB:FF:B6:85 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 027D Signing time: Fri 09 Oct 2026 02:22:43 +0000 Manifest this update: Fri 09 Oct 2026 02:22:42 +0000 Manifest next update: Fri 16 Oct 2026 02:22:42 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: Q/Dq3yfY8sz6ljYCcanJjmNHycZnLS+SfJuRIV2UAOY=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: f+SXz/7qnkULN0UO8ykoynDM3JBtbR5ZSL/l0DN40Vo=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Oct 9 02:22:42 2026 GMT Not After : Oct 16 02:22:42 2026 GMT Subject: CN=6ac84ff3-0746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:dc:ff:60:8d:75:29:ce:34:3d:56:94:d9: e2:fb:56:ea:f8:23:a4:78:ed:2b:87:9c:75:d7:e5: 0b:16:26:90:35:05:72:9b:36:d3:8d:d7:51:98:96: a2:51:9f:ee:3a:b8:4b:24:44:3d:60:a0:ae:d7:8d: 6b:e0:ad:f0:17:92:db:a2:fc:73:92:57:e5:9c:9d: 5b:1c:c2:f7:9a:07:fb:6d:68:de:17:fa:b4:7d:28: 32:c6:4f:ef:cf:e6:11:9a:c1:f8:0c:07:0f:83:f4: 9c:a9:67:e5:fb:dd:fb:b0:ac:13:a8:61:55:cf:52: c3:54:ca:4a:40:ce:8c:f0:e1:cc:92:c0:ef:81:cd: d4:b2:29:a2:59:50:85:c9:41:e6:d2:0d:07:39:10: db:b4:84:f4:c9:b4:71:a5:97:a7:95:a5:94:4f:4e: 9d:5f:b8:8b:03:ea:e9:eb:f1:62:2e:55:b3:7d:c2: d1:ae:a0:ea:45:1f:8e:88:e6:9e:74:4c:c0:ef:79: f2:02:ff:46:2d:31:9c:a7:ca:63:fd:1f:35:80:26: 5f:43:76:12:5b:90:fc:32:70:ab:e4:b4:6f:dc:ca: d8:86:4c:c2:55:86:40:13:7f:33:96:7e:76:2a:32: 19:76:6c:02:ca:9e:9c:05:93:a0:59:d1:ae:b5:cd: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:02:50:0C:65:35:B9:13:1D:0F:9B:46:2D:8A:85:78:DB:FF:B6:85 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8c:c7:82:c5:e3:53:1d:6b:1a:38:78:d7:87:ca:2b:89:ff: 39:f2:24:69:0d:58:3e:28:c4:00:60:53:53:80:1e:67:ac:56: 87:25:a3:88:ea:09:f1:6c:ab:61:b7:f4:10:c5:58:9a:98:88: 89:4b:b0:ce:91:2c:8b:5a:f9:c7:f6:e9:0c:59:9d:e1:f6:81: a2:08:bf:3d:34:65:31:56:3e:b3:0a:44:23:49:9c:46:de:fe: 20:ed:84:3f:31:07:5d:22:d1:04:d0:2b:25:ce:b4:88:a6:a5: c4:b6:f1:e3:ae:88:d9:c8:b5:8a:8f:4c:42:3f:bb:81:36:8a: bf:f6:63:e6:ed:c0:f2:be:72:d8:4c:b4:7d:eb:74:04:b5:53: 24:1b:cf:b5:eb:0f:46:35:be:43:9c:40:28:2a:5e:f1:42:1f: 1f:4a:27:84:9b:90:72:01:dd:df:f8:b4:26:0a:56:5c:ab:a7: 11:04:25:6f:a6:96:38:0f:16:c3:dc:97:06:c9:a9:31:7e:39: 4f:6e:e1:8f:27:68:fe:2d:f1:9c:81:47:b2:3f:2e:21:b0:da: 58:ef:f2:87:15:ef:a4:c3:ea:9f:76:b8:6b:0f:8b:49:cc:b3: 89:42:46:5f:36:0a:31:6a:9a:1f:99:84:da:5a:81:87:ad:fa: 38:84:e2:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjYxMDA5MDIyMjQyWhcNMjYxMDE2MDIyMjQyWjAYMRYwFAYD VQQDEw02YWM4NGZmMy0wNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoofc/2CNdSnOND1WlNni+1bq+COkeO0rh5x11+ULFiaQNQVymzbTjddRmJai UZ/uOrhLJEQ9YKCu141r4K3wF5LbovxzklflnJ1bHML3mgf7bWjeF/q0fSgyxk/v z+YRmsH4DAcPg/ScqWfl+937sKwTqGFVz1LDVMpKQM6M8OHMksDvgc3UsimiWVCF yUHm0g0HORDbtIT0ybRxpZenlaWUT06dX7iLA+rp6/FiLlWzfcLRrqDqRR+OiOae dEzA73nyAv9GLTGcp8pj/R81gCZfQ3YSW5D8MnCr5LRv3MrYhkzCVYZAE38zln52 KjIZdmwCyp6cBZOgWdGutc2QLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkCUAxl NbkTHQ+bRi2KhXjb/7aFMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXIzHgsXjUx1rGjh414fKK4n/OfIkaQ1YPijEAGBTU4AeZ6xWhyWjiOoJ8Wyr Ybf0EMVYmpiIiUuwzpEsi1r5x/bpDFmd4faBogi/PTRlMVY+swpEI0mcRt7+IO2E PzEHXSLRBNArJc60iKalxLbx466I2ci1io9MQj+7gTaKv/Zj5u3A8r5y2Ey0fet0 BLVTJBvPtesPRjW+Q5xAKCpe8UIfH0onhJuQcgHd3/i0JgpWXKunEQQlb6aWOA8W w9yXBsmpMX45T27hjydo/i3xnIFHsj8uIbDaWO/yhxXvpMPqn3a4aw+LScyziUJG XzYKMWqaH5mE2lqBh636OITi1g== -----END CERTIFICATE-----Generated at Fri Oct 9 16:10:26 2026 by rpki-client