$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft File: OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json) Hash identifier: kM8aRIaEH0MOJHC1sM0hlESfH5fkiprQrhJsAB84hrw= Subject key identifier: 20:D2:70:1A:1E:F4:8C:D2:D5:27:22:78:2C:25:8F:02:7D:76:74:50 Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft Manifest number: 0158 Signing time: Mon 21 Sep 2026 08:18:32 +0000 Manifest this update: Mon 21 Sep 2026 08:18:31 +0000 Manifest next update: Mon 28 Sep 2026 08:18:31 +0000 Files and hashes: 1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: Qf7aTilHIUJ5RmL3IoU7iZIpDbK4M2VVfDi+DsYgzys=) 2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: LyR1iv+/BLoRmPRdRTSwxRSYCihT/qICYCrr65jscuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D Validity Not Before: Sep 21 08:18:31 2026 GMT Not After : Sep 28 08:18:31 2026 GMT Subject: CN=6ab0e857-2983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:0b:6d:c7:ad:df:6e:c1:07:91:21:7d:31: 7b:7a:e8:18:ba:12:9f:b6:42:50:db:c5:98:9c:02: df:cf:a3:e3:a6:f8:68:d6:51:6c:01:44:d9:75:a9: b2:66:92:74:e7:a1:90:bb:43:99:52:5e:39:86:d4: 53:6e:19:5d:6e:09:2b:88:53:11:06:84:a0:33:ac: 6e:ba:1e:06:a3:7b:16:be:ab:31:29:da:e6:41:cf: 55:ed:03:85:4d:cf:9e:6b:fc:7b:97:ce:d5:c2:ab: 94:20:f2:1e:e3:57:3b:06:f3:ef:b5:af:a6:f3:cf: 21:d6:50:1a:f7:cb:1a:e0:24:27:16:f4:b5:a0:04: ec:81:35:3d:04:89:95:27:3a:da:4c:15:6b:57:c4: a4:37:31:48:d9:cb:72:23:c1:c2:df:4b:6e:88:c7: da:49:8c:15:3a:49:0e:7f:20:ba:16:d0:b7:df:5b: 6c:8a:d2:7f:1b:2c:84:95:4c:35:83:bd:e5:cf:4a: 23:e9:f7:65:af:99:fe:ef:ef:9d:c0:73:4a:e5:63: 8d:da:d1:08:e3:16:8f:31:94:7f:21:05:83:ed:b0: f5:d8:80:94:f5:fd:3a:d7:59:ba:10:3d:ba:eb:41: d2:5d:8e:fd:a6:da:f5:08:a6:29:37:45:9b:cb:e0: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:70:1A:1E:F4:8C:D2:D5:27:22:78:2C:25:8F:02:7D:76:74:50 X509v3 Authority Key Identifier: keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2c:a7:1f:bc:ed:d2:0c:38:2f:4e:7f:df:0d:1b:58:0c:8d: 0f:f6:c0:cc:10:d1:59:ec:51:7f:70:3b:a1:14:7c:e7:d8:70: c2:5b:1c:0b:4e:d1:23:8a:e2:1b:eb:25:1a:6c:27:b8:6d:26: 7d:a2:da:85:76:83:5e:35:e7:17:eb:4e:b3:68:41:48:a7:29: 6b:c9:6d:78:3d:59:5f:3a:71:be:1c:6d:97:29:a5:01:0e:ff: c9:e8:ea:04:24:27:e0:04:ef:17:56:8e:15:42:85:8d:d5:4d: 7f:82:cf:24:f1:37:b7:29:6e:2e:83:b7:81:ea:78:d7:d8:2b: 71:e7:42:42:6e:10:8c:34:f5:05:3f:e6:44:0f:95:b1:de:c3: 19:d8:34:6c:e2:68:7c:ed:4f:48:71:e7:dc:e5:34:91:a3:4f: 3f:44:0f:f9:81:21:1b:a2:6a:28:7e:01:7e:3c:18:49:b4:34: 7b:0d:75:c8:f0:cb:6f:8b:5b:b6:b5:06:33:35:0d:61:ec:16: ec:ab:56:d8:72:62:f9:02:5a:6f:f9:33:b9:a6:a6:6e:75:4e: 46:e0:0c:00:66:a6:33:53:f1:65:63:44:64:5a:2c:19:6e:74: e0:af:73:17:d7:55:f1:74:99:ca:f9:24:17:00:ba:8e:17:b5: e6:b3:d2:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2 MjQyNkFBNUQwHhcNMjYwOTIxMDgxODMxWhcNMjYwOTI4MDgxODMxWjAYMRYwFAYD VQQDEw02YWIwZTg1Ny0yOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tkLbcet327BB5EhfTF7eugYuhKftkJQ28WYnALfz6Pjpvho1lFsAUTZdamy ZpJ056GQu0OZUl45htRTbhldbgkriFMRBoSgM6xuuh4Go3sWvqsxKdrmQc9V7QOF Tc+ea/x7l87VwquUIPIe41c7BvPvta+m888h1lAa98sa4CQnFvS1oATsgTU9BImV JzraTBVrV8SkNzFI2ctyI8HC30tuiMfaSYwVOkkOfyC6FtC331tsitJ/GyyElUw1 g73lz0oj6fdlr5n+7++dwHNK5WON2tEI4xaPMZR/IQWD7bD12ICU9f0611m6ED26 60HSXY79ptr1CKYpN0Wby+B41wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDScBoe 9IzS1ScieCwljwJ9dnRQMB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3 NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80Q0ZDMDhEQUI3NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEky NVFjZnVLXzYxQjFpUW1xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAASynH7zt0gw4L05/3w0bWAyND/bAzBDRWexRf3A7oRR859hwwlscC07RI4ri G+slGmwnuG0mfaLahXaDXjXnF+tOs2hBSKcpa8lteD1ZXzpxvhxtlymlAQ7/yejq BCQn4ATvF1aOFUKFjdVNf4LPJPE3tyluLoO3gep419grcedCQm4QjDT1BT/mRA+V sd7DGdg0bOJofO1PSHHn3OU0kaNPP0QP+YEhG6JqKH4BfjwYSbQ0ew11yPDLb4tb trUGMzUNYewW7KtW2HJi+QJab/kzuaambnVORuAMAGamM1PxZWNEZFosGW504K9z F9dV8XSZyvkkFwC6jhe15rPSZg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:09:29 2026 by rpki-client