$ rpki-client -vvvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json) Hash identifier: usB2d/mSEGaOPizLV3HGEbn45oxy+zsm5lLMAIuEXhk= Subject key identifier: A4:85:12:A8:56:41:60:C6:4F:2D:B0:37:75:3B:AB:D7:AF:7B:48:F6 Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft Manifest number: 0229 Signing time: Mon 21 Sep 2026 02:47:50 +0000 Manifest this update: Mon 21 Sep 2026 02:47:50 +0000 Manifest next update: Mon 28 Sep 2026 02:47:50 +0000 Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: nHjvXiLk26yg0/us88fD9SRjqTx1aC3huPYgfXSaPrI=) 2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: Sep 21 02:47:50 2026 GMT Not After : Sep 28 02:47:50 2026 GMT Subject: CN=6ab09ad6-b70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:1a:6a:51:32:19:57:7b:5f:99:40:1b:d4: 89:74:bf:81:9a:d8:f8:98:a5:33:48:12:c8:59:bc: 62:0b:05:1a:ee:49:d8:d1:62:ca:39:19:05:ba:55: 3c:ea:32:50:e8:ea:71:93:7c:48:42:c4:5c:d4:28: a0:2d:48:66:94:d0:d5:cf:15:8a:81:98:e7:aa:fc: 63:ed:a2:69:f2:16:5f:35:7a:e1:2a:76:3b:6c:34: 2f:77:0e:61:c0:16:39:f3:2a:8c:f7:40:db:2e:35: 34:c5:18:3c:a1:d8:af:d7:6d:ca:3d:dc:35:fc:e0: 9a:2d:a5:a7:f3:ac:da:c2:e6:ef:0d:82:a2:2e:d6: 2e:5d:6f:d1:91:66:09:24:97:f9:ea:1d:d3:b6:c5: 1f:34:cb:87:1f:51:ab:0d:19:3c:7b:56:65:06:1a: 33:83:50:3c:67:61:a8:1d:f3:56:75:a7:68:d3:3e: 2e:2d:78:36:11:1e:39:45:1a:af:9e:03:49:be:4f: 57:f3:83:ac:16:b2:53:1c:91:bf:04:d0:00:3e:a0: 0c:c3:88:a5:fe:c4:b9:c4:22:a7:98:7c:3a:d0:5b: ce:f2:be:7e:3d:db:8f:03:b3:05:5f:62:f7:19:24: 66:56:b1:5a:6e:87:00:ed:a8:63:13:65:c8:99:71: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:85:12:A8:56:41:60:C6:4F:2D:B0:37:75:3B:AB:D7:AF:7B:48:F6 X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9f:d5:0f:65:da:d3:6d:d8:df:31:59:f5:e9:3c:e9:a6:6b: 36:c5:b5:44:fd:aa:0e:ad:a4:4e:11:9c:65:1d:7e:19:95:c8: 2d:a3:1e:0c:e5:a9:9d:f8:37:a6:16:f7:52:30:c4:2d:4c:c3: fd:fc:f5:55:de:7c:b8:86:ba:ce:4d:13:0f:24:83:82:c9:54: 3e:b4:96:32:dc:3c:c0:cb:b3:69:ed:e0:04:8c:f7:9e:c3:88: 26:fe:ca:53:4e:2e:82:ed:74:a1:a2:e8:9f:16:e8:71:a6:73: a3:94:8f:04:e8:77:1e:6f:ae:e3:9b:5a:91:db:18:54:7d:ab: 8c:68:30:c5:d2:06:52:33:c6:c5:7a:47:50:9f:36:fb:2f:63: ca:84:15:31:1c:d2:d2:bd:5a:10:f9:47:b2:0b:a9:14:ef:78: 54:07:7f:cc:57:fa:bf:7b:29:20:ab:18:7c:9e:8c:a2:e6:04: a7:39:a9:94:b6:ea:b0:5f:dc:27:bc:82:3c:18:bd:28:3f:f5: 78:a8:c1:69:f9:0a:4f:9e:aa:cf:52:5c:b0:39:d2:69:b1:5f: 5f:07:33:da:59:a8:26:e9:bf:70:65:6b:88:1a:da:c8:2a:df: 5c:86:c4:66:1f:71:e9:4a:ee:b2:63:31:f5:73:26:05:75:40: 8d:15:31:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjYwOTIxMDI0NzUwWhcNMjYwOTI4MDI0NzUwWjAYMRYwFAYD VQQDEw02YWIwOWFkNi1iNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dgaalEyGVd7X5lAG9SJdL+Bmtj4mKUzSBLIWbxiCwUa7knY0WLKORkFulU8 6jJQ6Opxk3xIQsRc1CigLUhmlNDVzxWKgZjnqvxj7aJp8hZfNXrhKnY7bDQvdw5h wBY58yqM90DbLjU0xRg8odiv123KPdw1/OCaLaWn86zawubvDYKiLtYuXW/RkWYJ JJf56h3TtsUfNMuHH1GrDRk8e1ZlBhozg1A8Z2GoHfNWdado0z4uLXg2ER45RRqv ngNJvk9X84OsFrJTHJG/BNAAPqAMw4il/sS5xCKnmHw60FvO8r5+PduPA7MFX2L3 GSRmVrFabocA7ahjE2XImXFoiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSFEqhW QWDGTy2wN3U7q9eve0j2MB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq WjZDMXc2eXJrY1RwOHhHTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR5/VD2Xa023Y3zFZ9ek86aZrNsW1RP2qDq2kThGcZR1+GZXILaMeDOWpnfg3 phb3UjDELUzD/fz1Vd58uIa6zk0TDySDgslUPrSWMtw8wMuzae3gBIz3nsOIJv7K U04ugu10oaLonxbocaZzo5SPBOh3Hm+u45takdsYVH2rjGgwxdIGUjPGxXpHUJ82 +y9jyoQVMRzS0r1aEPlHsgupFO94VAd/zFf6v3spIKsYfJ6MouYEpzmplLbqsF/c J7yCPBi9KD/1eKjBafkKT56qz1JcsDnSabFfXwcz2lmoJum/cGVriBrayCrfXIbE Zh9x6UrusmMx9XMmBXVAjRUxKA== -----END CERTIFICATE-----Generated at Tue Sep 22 23:03:34 2026 by rpki-client