$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: 46cTeMfcMrYLkbWNaqp5cTRKyQTkSw7iNvjEh9mBoYY= Subject key identifier: 00:5E:FB:B3:73:9F:E3:3F:95:AC:F1:97:CD:0B:3D:6C:BD:FF:51:87 Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0AE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 0ACC Signing time: Mon 12 Oct 2026 19:36:42 +0000 Manifest this update: Mon 12 Oct 2026 19:36:41 +0000 Manifest next update: Mon 19 Oct 2026 19:36:41 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: UMVll3mZ30ye6VYtOF+eZl2wtUJiV7RJh153wXWsKdw=) 2: D65601C8861C11F188AD997381A30FBC.roa (hash: WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=) 3: 6FD03784861C11F18E80495A81A30FBC.roa (hash: +OaHRdor7FrSH8stlmfhFUun2yan7PWVuqWKNlAkwUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2790 (0xae6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Oct 12 19:36:41 2026 GMT Not After : Oct 19 19:36:41 2026 GMT Subject: CN=6acd36c9-b79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:63:8f:7b:a0:36:ed:c7:40:68:d7:bd:c8: 6f:6b:5c:a6:8e:34:79:56:7f:5a:1e:88:f8:ba:c5: a2:d4:d6:01:2e:f4:76:83:0b:80:5a:a4:14:a4:29: 94:0e:29:3c:65:08:f2:61:0d:e8:3b:ee:90:fc:54: 52:5d:d7:ba:31:a7:2e:a8:f9:08:ad:04:5e:b3:a3: c0:1b:4b:e8:79:75:f3:07:c4:90:41:6e:94:e9:a9: 43:a2:d1:d1:cd:bc:14:fd:d5:12:23:5e:9a:35:41: d1:d5:24:14:1c:83:02:86:07:6f:1b:4a:b3:a0:fe: 68:66:5e:be:2a:47:5e:23:17:6d:d8:ea:4f:3c:f1: 79:32:e7:48:e7:9a:69:84:21:0a:a6:d7:b0:91:2c: b0:3c:cb:a5:f0:ae:8b:80:a2:c0:be:2f:dd:a4:36: d1:be:7a:c9:34:01:87:4c:ad:11:78:c3:a4:f4:1f: 8e:d9:78:ea:3a:21:76:57:5d:7f:5e:f4:b2:a9:82: 9d:5a:a2:3c:6f:c2:67:8a:60:5d:91:1a:f2:2f:02: df:80:9b:5e:13:9f:97:f5:9a:e1:31:a8:8e:9a:f1: f4:cd:91:ed:87:0e:b1:76:cc:f0:b1:7a:78:36:5b: 5e:e0:b1:0a:6c:07:e5:12:f7:0d:9e:a2:ff:38:1c: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5E:FB:B3:73:9F:E3:3F:95:AC:F1:97:CD:0B:3D:6C:BD:FF:51:87 X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:20:e4:4d:3e:fb:7b:06:c3:2d:c1:09:d1:d9:62:be:61:b8: 9c:20:46:40:9c:8c:cf:57:9b:29:a6:e6:67:67:bc:16:74:61: fa:b9:0b:4e:8d:7e:41:fb:26:34:91:be:74:74:f8:bc:24:3f: fd:6f:e1:bf:38:ec:01:52:8e:f0:e5:1d:b5:ee:ff:af:32:a3: ff:8a:ce:7b:08:4a:4f:8f:9a:4d:f5:14:0e:c8:6b:19:ec:f5: 42:0d:a2:f1:84:80:0c:6c:60:62:fd:3b:13:ba:7d:3a:bc:bf: 3a:8a:f0:29:ad:c0:58:78:cd:1f:e1:b0:ff:2b:a5:6c:cf:61: 1b:f1:71:b8:55:4e:9c:ba:1f:fb:23:43:cc:2c:0a:96:d8:26: e1:2c:c7:25:a0:ea:d0:fa:86:84:68:bf:b2:91:e1:4d:6d:fd: 38:27:a1:a2:93:98:35:1d:ff:f7:32:1d:16:d4:76:3b:7f:38: 20:ec:7a:73:07:1e:69:08:4c:d7:44:ae:c5:c5:0c:69:9a:12: cd:c6:07:44:96:26:09:a6:0e:4e:59:94:3b:44:bc:c8:8e:5b: c5:62:9e:81:28:a7:6e:8f:42:3c:46:e9:c4:f5:21:45:0e:50: 5a:d3:c0:73:a5:14:f2:ca:7d:c0:69:94:7c:da:be:df:18:d9: 2d:e9:bc:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjYxMDEyMTkzNjQxWhcNMjYxMDE5MTkzNjQxWjAYMRYwFAYD VQQDEw02YWNkMzZjOS1iNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqdjj3ugNu3HQGjXvchva1ymjjR5Vn9aHoj4usWi1NYBLvR2gwuAWqQUpCmU Dik8ZQjyYQ3oO+6Q/FRSXde6MacuqPkIrQRes6PAG0voeXXzB8SQQW6U6alDotHR zbwU/dUSI16aNUHR1SQUHIMChgdvG0qzoP5oZl6+KkdeIxdt2OpPPPF5MudI55pp hCEKptewkSywPMul8K6LgKLAvi/dpDbRvnrJNAGHTK0ReMOk9B+O2XjqOiF2V11/ XvSyqYKdWqI8b8JnimBdkRryLwLfgJteE5+X9ZrhMaiOmvH0zZHthw6xdszwsXp4 Nlte4LEKbAflEvcNnqL/OBy1fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABe+7Nz n+M/lazxl80LPWy9/1GHMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwSDkTT77ewbDLcEJ0dlivmG4nCBGQJyMz1ebKabmZ2e8FnRh+rkLTo1+Qfsm NJG+dHT4vCQ//W/hvzjsAVKO8OUdte7/rzKj/4rOewhKT4+aTfUUDshrGez1Qg2i 8YSADGxgYv07E7p9Ory/OorwKa3AWHjNH+Gw/yulbM9hG/FxuFVOnLof+yNDzCwK ltgm4SzHJaDq0PqGhGi/spHhTW39OCehopOYNR3/9zIdFtR2O384IOx6cwceaQhM 10SuxcUMaZoSzcYHRJYmCaYOTlmUO0S8yI5bxWKegSinbo9CPEbpxPUhRQ5QWtPA c6UU8sp9wGmUfNq+3xjZLem8Sw== -----END CERTIFICATE-----Generated at Tue Oct 13 20:21:03 2026 by rpki-client