$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: DZP/0nluYxLiglW1xm9FAcPLILu9asgi/2iwe38uOF8= Subject key identifier: 87:9C:CD:10:4C:42:9A:38:26:B9:F2:7E:5F:11:A9:3D:5B:0B:B4:D9 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 038D Signing time: Mon 21 Sep 2026 00:33:04 +0000 Manifest this update: Mon 21 Sep 2026 00:33:03 +0000 Manifest next update: Mon 28 Sep 2026 00:33:03 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: dUZVhVOnysufLMPawp+KjVynghw0OF7N4CnYrvVVTU0=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: AL1NzX9lNGPHM09HP1wQ+++0IfWrYhSei2NeZGdZGpw=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Sep 21 00:33:03 2026 GMT Not After : Sep 28 00:33:03 2026 GMT Subject: CN=6ab07b3f-2b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:2c:5f:c2:95:21:d3:ca:ba:fa:e9:83:a0: 56:44:e3:36:82:d9:d1:fc:0e:e1:62:9b:6d:6b:7c: 0d:73:09:48:4c:18:27:c5:8a:44:10:6e:a1:7a:4e: 37:da:97:9e:91:79:07:9e:7d:79:5b:ec:a3:ee:0c: 09:80:ca:03:c8:9d:f9:19:01:81:84:2c:f8:cb:23: 38:f3:7f:e5:02:62:1d:39:9d:93:bc:e7:5a:2a:34: 7e:a6:2b:aa:d7:41:01:a8:5d:a4:0a:a8:35:8d:55: f0:62:62:af:08:48:c4:9e:26:aa:25:76:27:10:97: 18:c8:eb:07:cc:c6:9b:b8:55:82:cf:18:5e:3f:cb: 92:b8:b6:14:a7:09:ba:5f:35:f2:b4:c9:64:f8:53: 5a:ec:10:b1:45:04:15:63:a1:1c:cd:8b:dd:d7:45: b1:09:29:ff:5b:cb:0b:8b:16:0e:ce:42:51:af:73: 41:c9:53:fe:27:d5:03:32:10:51:84:04:e5:45:0b: d3:a7:5b:bc:e9:df:d4:af:95:6c:ea:a0:90:cf:30: 99:c3:ee:88:c3:7e:29:32:92:02:2d:56:4a:4e:55: 9b:a8:5e:7c:34:0b:26:80:dd:bf:bb:6d:84:56:2d: ce:ef:74:19:03:9e:b5:7b:71:7d:24:0e:d4:67:75: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9C:CD:10:4C:42:9A:38:26:B9:F2:7E:5F:11:A9:3D:5B:0B:B4:D9 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:83:c4:33:b8:65:20:15:30:5e:c0:57:e3:90:64:96:ea:dd: 26:8a:ce:6d:44:77:7d:18:4d:2b:df:08:2c:d0:41:86:3c:98: 47:ce:c3:05:51:80:ad:24:67:c6:a9:59:20:30:31:36:71:0d: a3:7d:1e:97:ab:7a:2f:2c:29:01:d7:d2:37:66:fb:a8:1e:33: c5:7a:74:f5:fd:91:fb:c1:9d:05:94:40:b4:59:ad:dc:4c:b2: 22:ee:0b:3f:65:20:fe:19:4d:68:d7:70:f7:df:93:55:99:0a: f4:dd:a5:5f:21:e2:b7:e7:a5:53:b1:94:24:9a:fd:b6:4b:b6: a4:ef:bf:61:0b:1c:2c:5a:01:96:f1:c7:2c:c5:31:eb:9e:39: 46:64:25:b4:c3:69:5d:a9:39:e4:a5:a4:4b:3e:51:a7:64:0d: d0:1c:06:4c:cc:77:70:36:ae:41:a8:86:3a:33:69:30:a5:ea: da:ea:59:40:12:22:02:c5:5b:25:54:f7:32:f0:40:27:23:be: e5:0b:0c:9d:3e:bf:7e:a2:58:a1:41:d9:da:02:d2:fd:c6:de: d2:a2:c2:28:1f:98:99:2d:46:98:48:ae:f8:a5:c3:25:98:ed: 4a:6d:ac:5b:46:48:be:26:9d:f1:46:fd:50:4f:56:bd:b1:1d: 53:33:b1:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjYwOTIxMDAzMzAzWhcNMjYwOTI4MDAzMzAzWjAYMRYwFAYD VQQDEw02YWIwN2IzZi0yYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUksX8KVIdPKuvrpg6BWROM2gtnR/A7hYptta3wNcwlITBgnxYpEEG6hek43 2peekXkHnn15W+yj7gwJgMoDyJ35GQGBhCz4yyM483/lAmIdOZ2TvOdaKjR+piuq 10EBqF2kCqg1jVXwYmKvCEjEniaqJXYnEJcYyOsHzMabuFWCzxheP8uSuLYUpwm6 XzXytMlk+FNa7BCxRQQVY6EczYvd10WxCSn/W8sLixYOzkJRr3NByVP+J9UDMhBR hATlRQvTp1u86d/Ur5Vs6qCQzzCZw+6Iw34pMpICLVZKTlWbqF58NAsmgN2/u22E Vi3O73QZA561e3F9JA7UZ3UhkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeczRBM Qpo4Jrnyfl8RqT1bC7TZMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWoPEM7hlIBUwXsBX45BklurdJorObUR3fRhNK98ILNBBhjyYR87DBVGArSRn xqlZIDAxNnENo30el6t6LywpAdfSN2b7qB4zxXp09f2R+8GdBZRAtFmt3EyyIu4L P2Ug/hlNaNdw99+TVZkK9N2lXyHit+elU7GUJJr9tku2pO+/YQscLFoBlvHHLMUx 6545RmQltMNpXak55KWkSz5Rp2QN0BwGTMx3cDauQaiGOjNpMKXq2upZQBIiAsVb JVT3MvBAJyO+5QsMnT6/fqJYoUHZ2gLS/cbe0qLCKB+YmS1GmEiu+KXDJZjtSm2s W0ZIviad8Ub9UE9WvbEdUzOxxw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:27:13 2026 by rpki-client