$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft File: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft (raw, json) Hash identifier: PrZPtgkBgVlgDaSQZzs8TBUCjhpnccXjD7N3mlVovpw= Subject key identifier: 9D:40:34:68:9C:17:E2:C4:F2:CF:40:7F:12:BF:FE:29:49:17:BE:24 Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC Certificate issuer: /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft Manifest number: 06A4 Signing time: Fri 18 Sep 2026 22:22:13 +0000 Manifest this update: Fri 18 Sep 2026 22:22:13 +0000 Manifest next update: Fri 25 Sep 2026 22:22:13 +0000 Files and hashes: 1: o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl (hash: LrlNDWCVpP9lAmmHtEFfYdt1hmsOrX2PHO/KRxSl3EU=) 2: 58C1F4C06E2211EE98839C33C4F9AE02.roa (hash: QOzAxMNPfl2xsZK2GJpgLS4yP7Am+9az4cqsUr4KXF0=) 3: 931EBB586D6E11EE8AF4BF30C4F9AE02.roa (hash: FVns4uZR/lgSYkSVzt2crKsv9A2mS6qMtNNtsApC6uY=) 4: DD21ADFACA7311EBAA6E0567C4F9AE02.roa (hash: V6rPhNEgfFSYoMAOj/JkTn27sOkQ/m44MmBwpVWrZVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC Validity Not Before: Sep 18 22:22:13 2026 GMT Not After : Sep 25 22:22:13 2026 GMT Subject: CN=6aadb995-02cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:cf:c8:ee:35:e6:56:bc:f8:d6:5a:aa:7e: ea:d7:88:e0:45:ea:e2:13:d5:f1:ae:06:bc:b0:ea: a9:58:04:d4:96:5b:91:f0:0e:53:e0:e8:3c:6d:35: a1:64:56:48:f0:14:52:e1:77:d6:93:13:ca:33:6f: 9d:45:dc:58:7c:4d:e9:e0:da:0d:5f:c6:a4:de:c6: cf:ec:ec:14:7a:b6:16:f7:c6:21:6d:7d:33:d2:69: b0:aa:75:08:46:f6:ff:66:80:16:cd:94:4d:b1:2c: 70:f9:d3:27:77:8a:38:f3:a3:4d:cd:7c:5f:7d:6d: b3:c7:f9:a9:4e:a5:ea:be:be:68:de:42:14:1f:f6: 3a:95:f7:83:22:ec:fe:8a:ab:aa:02:96:e8:40:69: d0:b5:e5:af:eb:0d:85:79:65:d6:ef:3e:ca:1f:08: 3e:ac:7c:cb:55:ad:88:7f:08:86:60:7b:7f:fb:05: 25:58:f3:28:e1:f9:f6:ba:78:14:5b:67:94:bc:20: ec:d3:c7:dd:1d:08:6f:9d:6e:5f:d4:8a:79:54:73: 2f:d1:eb:2d:69:fe:5f:69:7c:53:73:c3:99:a5:d8: ed:3a:8d:2b:b3:60:4f:92:04:26:f1:3c:bc:5b:10: e6:fa:83:e3:48:f3:12:36:b5:02:98:49:b9:6c:e9: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:40:34:68:9C:17:E2:C4:F2:CF:40:7F:12:BF:FE:29:49:17:BE:24 X509v3 Authority Key Identifier: keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:18:11:d1:92:1f:ff:9e:c7:43:b3:7d:03:9e:b7:dc:be:78: e2:fd:df:77:c5:61:57:7f:07:35:3c:c7:26:17:ed:60:28:ef: 0a:7f:fd:f9:99:8b:5c:38:6c:b9:92:52:42:06:89:fe:cd:8b: f6:73:9f:da:cd:0a:d9:c9:f9:34:b9:13:6c:16:64:8e:5f:bd: a0:a2:6b:3c:f7:16:6f:9e:b7:5f:95:56:17:19:b0:ab:c5:96: 19:0c:73:aa:91:35:65:e9:cf:57:08:22:c0:96:3d:f2:60:ba: 33:a9:32:53:32:a4:30:9d:a3:1d:88:67:3d:ac:1f:7c:3d:a5: a1:ea:c6:ea:bf:0a:b6:41:b7:bd:7a:df:71:6b:03:8c:41:fd: f0:63:1d:c0:1c:15:b7:43:18:c5:29:23:82:20:0c:04:ab:3c: a7:7f:4e:a1:ee:a6:c9:8d:e1:f2:db:e3:24:c2:4f:a0:42:bb: 40:30:42:df:d4:9c:cb:41:9e:24:7f:15:48:aa:8d:10:08:14: 88:60:aa:1a:b2:e1:2c:e5:5c:fc:72:3a:d7:58:a8:e1:ee:70: 6a:a1:0e:66:12:0a:70:25:d5:45:af:65:df:ab:d6:da:dd:49: 3f:e0:42:60:4d:eb:70:a8:23:68:39:87:20:98:f9:58:42:95: d3:12:b7:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg4NzcxMTAvBgNVBAUTKEEzQjE2NDgxQjVENkMxNzlGQzBCNzNBRTFFMEU1M0RF OTY3NjQxREMwHhcNMjYwOTE4MjIyMjEzWhcNMjYwOTI1MjIyMjEzWjAYMRYwFAYD VQQDEw02YWFkYjk5NS0wMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp3PyO415la8+NZaqn7q14jgReriE9Xxrga8sOqpWATUlluR8A5T4Og8bTWh ZFZI8BRS4XfWkxPKM2+dRdxYfE3p4NoNX8ak3sbP7OwUerYW98YhbX0z0mmwqnUI Rvb/ZoAWzZRNsSxw+dMnd4o486NNzXxffW2zx/mpTqXqvr5o3kIUH/Y6lfeDIuz+ iquqApboQGnQteWv6w2FeWXW7z7KHwg+rHzLVa2IfwiGYHt/+wUlWPMo4fn2ungU W2eUvCDs08fdHQhvnW5f1Ip5VHMv0estaf5faXxTc8OZpdjtOo0rs2BPkgQm8Ty8 WxDm+oPjSPMSNrUCmEm5bOlFmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1ANGic F+LE8s9AfxK//ilJF74kMB8GA1UdIwQYMBaAFKOxZIG11sF5/Atzrh4OU96WdkHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODg3Ny9GMDU4NThCOENB NzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dYbjhDM091SGc1VDNwWjJR ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL283RmtnYlhXd1huOEMzT3VIZzVUM3BaMlFkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODg3Ny9GMDU4NThCOENBNzAxMUVCQTlEMkRDNjFDNEY5QUUwMi9vN0ZrZ2JYV3dY bjhDM091SGc1VDNwWjJRZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFBgR0ZIf/57HQ7N9A5633L544v3fd8VhV38HNTzHJhftYCjvCn/9+ZmLXDhs uZJSQgaJ/s2L9nOf2s0K2cn5NLkTbBZkjl+9oKJrPPcWb563X5VWFxmwq8WWGQxz qpE1ZenPVwgiwJY98mC6M6kyUzKkMJ2jHYhnPawffD2loerG6r8KtkG3vXrfcWsD jEH98GMdwBwVt0MYxSkjgiAMBKs8p39Ooe6myY3h8tvjJMJPoEK7QDBC39Scy0Ge JH8VSKqNEAgUiGCqGrLhLOVc/HI611io4e5waqEOZhIKcCXVRa9l36vW2t1JP+BC YE3rcKgjaDmHIJj5WEKV0xK3Cg== -----END CERTIFICATE-----Generated at Sun Sep 20 15:54:18 2026 by rpki-client