$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: tMZIuaHyYdZvoNyHLMhufMu0PqF9IJG/tiDquhclLUI= Subject key identifier: 5C:99:64:A6:42:8D:E7:4B:FF:DB:A3:8E:1F:2E:D8:DA:3D:90:60:15 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0AD0 Signing time: Sun 20 Sep 2026 21:11:11 +0000 Manifest this update: Sun 20 Sep 2026 21:11:11 +0000 Manifest next update: Sun 27 Sep 2026 21:11:11 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: bolPPfXsMYKFuooCoDLgB6ZNx0f3fohdhMmPnvRgG7A=) 2: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=) 3: 61EE2500936E11F091943583C4F9AE02.roa (hash: xY/zwZDBEi5smovWl329WOv+neCrrgcL8BTsNJk3p+0=) 4: BB142084A77811F1AF0DC2223E11F970.roa (hash: sMMlBcu5caAUjy52snyuk+pp0k0djieJLhvCkhI7qRg=) 5: 18E343FA3A3411F195AC72659C833773.roa (hash: zz14yYtWv/27WYWZnEkZKkJyrwrw+vwUUUze6erSSFQ=) 6: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=) 7: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=) 8: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=) 9: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Sep 20 21:11:11 2026 GMT Not After : Sep 27 21:11:11 2026 GMT Subject: CN=6ab04bef-be54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:5e:15:d3:00:ec:1e:b9:1d:e1:a5:ab:aa: 64:e7:d1:ca:34:1c:fa:12:cf:ec:27:95:37:5a:1f: de:87:a0:5a:2f:06:19:ef:af:24:bf:e8:76:6f:0b: 5e:dc:57:ee:64:9e:29:b6:9c:3d:db:ff:49:38:9b: e9:c9:d5:62:a7:cd:e4:ae:c2:f2:73:4d:6f:0d:82: 6b:3b:7e:d3:49:15:63:d3:81:f7:f3:4e:a4:b7:21: 34:ab:f2:21:82:d7:e3:63:86:6e:dc:5c:f0:e4:22: 16:9f:29:f0:f0:bd:68:63:7a:08:41:16:fd:60:39: fd:4d:40:b9:09:b8:16:16:2b:8b:89:3b:93:e3:32: ab:56:97:f6:5d:8f:19:e2:af:ea:af:cc:2d:4f:9f: da:a2:6c:7d:ae:dc:ff:10:ff:b5:a2:9d:af:4d:be: 82:73:fc:8a:55:f2:aa:53:c2:cd:ad:8c:4f:bd:b8: db:23:f8:a8:01:3d:9d:a6:6c:98:0b:61:7b:fd:5d: d3:e9:61:a6:5b:4d:87:22:fc:0c:ef:db:43:9e:01: 67:90:73:4a:77:1d:40:9c:e7:98:c0:cc:34:f2:5f: 85:5d:78:e8:70:e3:15:3a:ce:83:b4:4d:c0:a7:5e: 43:41:d1:33:4b:e8:e4:04:5e:8d:a8:d4:cc:3e:0c: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:99:64:A6:42:8D:E7:4B:FF:DB:A3:8E:1F:2E:D8:DA:3D:90:60:15 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:19:0a:71:ef:9c:3c:43:85:92:cb:d6:e1:dc:8e:a6:13:a0: 17:2a:8b:64:c1:1c:1e:5f:3c:f1:42:13:1f:54:5e:82:fb:bf: 67:60:ae:dd:33:fc:88:28:e1:02:ad:46:38:87:d3:36:51:62: 07:50:2d:0d:97:76:d8:18:cb:b0:56:af:0f:3e:76:01:1a:4e: 8f:bc:b5:e0:42:ae:cf:f9:bd:6d:75:a8:55:ce:b4:58:c9:c9: 2f:45:ac:2b:71:44:2f:37:23:1b:33:2c:4c:59:41:03:0f:0d: 5f:c6:34:f9:bb:ab:bd:0c:11:90:a5:c2:e8:83:2b:28:7b:2b: 42:76:e4:06:2a:42:de:ae:23:a6:4f:30:00:95:90:c5:9a:89: d9:bf:6b:d5:ff:ca:98:4b:1d:8f:49:db:25:c8:05:93:cb:6d: 9b:c7:64:2c:11:cb:fb:03:1a:20:97:b7:49:5f:3c:83:5e:3e: 1a:3e:81:50:80:ef:63:82:f3:65:29:a3:67:a2:da:51:70:8e: 29:94:8b:7a:e0:71:e6:a7:02:a3:d5:23:29:89:00:88:a6:43: 9c:f4:38:43:92:46:8b:4d:73:b3:13:fc:54:33:77:62:8f:7b: d4:16:e4:68:a2:fd:e6:02:4c:06:6c:26:e6:bc:33:6a:66:ea: 36:08:36:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwOTIwMjExMTExWhcNMjYwOTI3MjExMTExWjAYMRYwFAYD VQQDEw02YWIwNGJlZi1iZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yteFdMA7B65HeGlq6pk59HKNBz6Es/sJ5U3Wh/eh6BaLwYZ768kv+h2bwte 3FfuZJ4ptpw92/9JOJvpydVip83krsLyc01vDYJrO37TSRVj04H3806ktyE0q/Ih gtfjY4Zu3Fzw5CIWnynw8L1oY3oIQRb9YDn9TUC5CbgWFiuLiTuT4zKrVpf2XY8Z 4q/qr8wtT5/aomx9rtz/EP+1op2vTb6Cc/yKVfKqU8LNrYxPvbjbI/ioAT2dpmyY C2F7/V3T6WGmW02HIvwM79tDngFnkHNKdx1AnOeYwMw08l+FXXjocOMVOs6DtE3A p15DQdEzS+jkBF6NqNTMPgyyDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyZZKZC jedL/9ujjh8u2No9kGAVMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1BkKce+cPEOFksvW4dyOphOgFyqLZMEcHl888UITH1Regvu/Z2Cu3TP8iCjh Aq1GOIfTNlFiB1AtDZd22BjLsFavDz52ARpOj7y14EKuz/m9bXWoVc60WMnJL0Ws K3FELzcjGzMsTFlBAw8NX8Y0+burvQwRkKXC6IMrKHsrQnbkBipC3q4jpk8wAJWQ xZqJ2b9r1f/KmEsdj0nbJcgFk8ttm8dkLBHL+wMaIJe3SV88g14+Gj6BUIDvY4Lz ZSmjZ6LaUXCOKZSLeuBx5qcCo9UjKYkAiKZDnPQ4Q5JGi01zsxP8VDN3Yo971Bbk aKL95gJMBmwm5rwzambqNgg2lg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:43:32 2026 by rpki-client