$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json) Hash identifier: uXhJZrwQ69B0q8tAY6s38GLmbmnGVCbMr0W3YPtCY+o= Subject key identifier: C8:73:CD:CC:C0:EB:43:42:5B:9D:BE:3D:2C:36:42:6F:68:64:21:54 Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft Manifest number: 01DB Signing time: Fri 09 Oct 2026 02:17:46 +0000 Manifest this update: Fri 09 Oct 2026 02:17:46 +0000 Manifest next update: Fri 16 Oct 2026 02:17:46 +0000 Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: rYC1NNnZ82BAHCgMPmixuAZrieKuqb1ZGHqagiKh6mE=) 2: 35BF2AEEB59E11F194E7428B3311F970.roa (hash: R/CLrk+ss+xAqg707krYyYSBez8f9zY5TlrmSiSHgjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Validity Not Before: Oct 9 02:17:46 2026 GMT Not After : Oct 16 02:17:46 2026 GMT Subject: CN=6ac84eca-c145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:e9:63:07:f2:15:ae:9d:f1:93:ca:05:e4: 68:6f:3c:0c:80:d5:dd:56:cd:ba:d1:2e:3e:1d:d3: 5c:4e:c0:8c:e5:0b:ee:a4:af:46:9d:68:04:9a:0f: 82:85:8d:bb:03:c5:ff:f4:78:14:65:9f:60:67:8b: b9:d9:54:9f:7d:ef:c4:3f:0d:04:0f:9c:ab:31:7e: cb:bf:a0:61:78:9b:bb:c7:78:91:de:c8:6b:cf:cc: 41:a8:e8:00:f5:d7:2f:09:45:ad:2b:e9:01:81:e9: b6:25:c9:4d:45:ff:60:87:c8:68:7c:f0:c2:b3:ae: 44:9c:b1:82:37:84:06:34:6c:32:f9:2a:a8:e4:f9: 1c:47:ed:88:f3:8d:30:07:6e:a9:9b:59:64:ca:60: dc:e7:58:21:5a:f3:ab:b4:64:a4:c6:c5:94:2c:0c: 72:0b:0e:0e:b0:50:5d:bc:8c:54:25:9a:60:e5:c9: aa:d7:a7:ae:01:37:8c:4a:4f:f2:ea:3b:7d:03:21: 41:bc:7f:6d:4c:f3:2f:71:6d:18:0f:d8:87:47:ef: 23:32:5a:15:1d:3a:a2:22:35:43:1e:43:eb:a5:0e: 8e:5e:40:54:d2:49:49:67:e1:e3:f9:2e:53:99:63: ef:22:64:81:fa:ba:85:ef:49:9b:6e:bb:b4:f5:c0: b0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:73:CD:CC:C0:EB:43:42:5B:9D:BE:3D:2C:36:42:6F:68:64:21:54 X509v3 Authority Key Identifier: keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:08:ac:45:51:52:71:df:90:dc:1d:c9:86:f3:1c:1e:b3:2e: e4:36:29:fb:96:8f:85:2d:f9:39:3f:d8:ef:11:39:76:f8:06: b8:27:92:3a:bc:9b:3c:d5:f7:83:95:cc:e4:64:e9:5a:c2:cc: 25:38:4c:54:66:76:4a:24:de:46:9f:2f:8d:05:4a:9c:47:c6: 4d:d0:77:36:6e:b1:1c:72:0c:78:71:0a:9b:f6:ff:58:9b:a0: f0:b4:60:9e:a2:cd:2f:c5:c7:61:53:b3:78:58:87:c8:b9:2a: ce:b1:f4:1b:f0:61:96:18:fb:a4:e8:b0:38:74:f5:ae:22:7e: 45:c9:64:5c:e5:26:52:1b:66:1f:7a:04:a3:42:74:6c:80:0f: d4:aa:5b:04:5b:a2:c0:ee:f1:2a:ab:d6:f9:0f:8b:4c:15:c0: fd:6a:cc:c6:be:be:7e:56:76:0c:0f:94:2a:da:d5:de:ad:68: 7e:f9:5d:c8:71:4c:e5:a6:34:fb:99:f8:d7:3c:57:75:95:5b: 1e:1d:4d:b5:21:7e:fd:84:7a:7e:dc:5c:d3:1b:f5:3f:4d:d3: db:84:71:c8:91:4e:13:16:80:5d:8b:88:e9:fc:08:6e:44:8a: 36:76:5e:29:f3:5c:39:f4:ce:0d:a6:37:2d:2c:ce:40:ef:2a: 9b:8f:aa:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE QURCNTIxMkEwHhcNMjYxMDA5MDIxNzQ2WhcNMjYxMDE2MDIxNzQ2WjAYMRYwFAYD VQQDEw02YWM4NGVjYS1jMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtPpYwfyFa6d8ZPKBeRobzwMgNXdVs260S4+HdNcTsCM5QvupK9GnWgEmg+C hY27A8X/9HgUZZ9gZ4u52VSffe/EPw0ED5yrMX7Lv6BheJu7x3iR3shrz8xBqOgA 9dcvCUWtK+kBgem2JclNRf9gh8hofPDCs65EnLGCN4QGNGwy+Sqo5PkcR+2I840w B26pm1lkymDc51ghWvOrtGSkxsWULAxyCw4OsFBdvIxUJZpg5cmq16euATeMSk/y 6jt9AyFBvH9tTPMvcW0YD9iHR+8jMloVHTqiIjVDHkPrpQ6OXkBU0klJZ+Hj+S5T mWPvImSB+rqF70mbbru09cCwAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhzzczA 60NCW52+PSw2Qm9oZCFUMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEwisRVFScd+Q3B3JhvMcHrMu5DYp+5aPhS35OT/Y7xE5dvgGuCeSOrybPNX3 g5XM5GTpWsLMJThMVGZ2SiTeRp8vjQVKnEfGTdB3Nm6xHHIMeHEKm/b/WJug8LRg nqLNL8XHYVOzeFiHyLkqzrH0G/Bhlhj7pOiwOHT1riJ+RclkXOUmUhtmH3oEo0J0 bIAP1KpbBFuiwO7xKqvW+Q+LTBXA/WrMxr6+flZ2DA+UKtrV3q1ofvldyHFM5aY0 +5n41zxXdZVbHh1NtSF+/YR6ftxc0xv1P03T24RxyJFOExaAXYuI6fwIbkSKNnZe KfNcOfTODaY3LSzOQO8qm4+qQA== -----END CERTIFICATE-----Generated at Sat Oct 10 17:22:56 2026 by rpki-client