$ rpki-client -vvvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft File: ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json) Hash identifier: ljQK78mXEnVg9Cl4HHQUckAsRrTseacKJ6hmJzf8IPc= Subject key identifier: 13:B8:54:00:DF:76:82:E2:1D:FF:7C:44:93:5C:CE:C3:AA:5F:1D:4F Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 Certificate issuer: /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft Manifest number: 0210 Signing time: Mon 09 Nov 2026 03:08:51 +0000 Manifest this update: Mon 09 Nov 2026 03:08:51 +0000 Manifest next update: Mon 16 Nov 2026 03:08:51 +0000 Files and hashes: 1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: QFpa3K0ZuKoOJv3+U7ztpPOz4dUZ9fOhGyp2bnX8i3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Validity Not Before: Nov 9 03:08:51 2026 GMT Not After : Nov 16 03:08:51 2026 GMT Subject: CN=6af13943-a3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:6a:66:b4:ad:70:4c:7f:f3:41:61:37:6a: 64:83:f9:b2:20:92:da:85:2e:3c:36:a3:ba:77:00: 9e:82:a3:fa:4d:a7:2a:ec:9e:ee:0d:0f:9c:62:b9: 86:21:7c:94:99:15:7d:3f:65:d1:db:2b:ea:5b:c7: 48:f0:99:ab:96:3d:ea:92:62:eb:8a:ba:16:93:60: 8e:48:22:ee:39:c4:2e:9d:cc:dd:8c:b7:50:b1:56: 6a:ea:e4:db:c4:52:b2:11:de:34:73:d4:49:88:70: 09:9a:c2:57:74:60:f4:d5:1f:fd:b1:12:9c:26:9e: fa:cc:fb:98:63:73:df:e6:af:88:09:86:4c:87:2e: 13:f8:a2:96:86:c2:bd:12:e1:ed:7e:35:9f:6e:6a: 45:af:da:01:24:14:ab:ec:47:67:83:56:80:b9:b6: 40:fc:60:50:81:d1:0b:8d:e8:8e:45:7e:d9:32:11: 37:a5:5d:a4:34:43:8a:d2:8a:3c:62:b3:7e:7a:c1: 77:16:f8:02:d7:92:e0:86:b1:64:be:8c:17:fa:80: e2:b8:41:8b:eb:dd:86:b6:93:f8:2c:a8:fb:b1:1a: b1:4b:ec:73:8b:4b:4e:f7:44:78:ab:67:d0:f1:aa: 63:0c:78:08:cd:84:76:00:a3:3e:91:34:65:a2:5b: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B8:54:00:DF:76:82:E2:1D:FF:7C:44:93:5C:CE:C3:AA:5F:1D:4F X509v3 Authority Key Identifier: keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e0:35:fd:33:c1:db:64:af:3c:ae:04:3f:f5:14:2f:bd:98: 6d:ed:37:af:72:e4:dd:56:c7:85:ee:d9:8d:51:b7:cf:ed:39: 97:19:e9:af:e9:e1:38:2e:01:be:e0:42:47:06:ae:be:65:50: 18:51:95:95:62:d8:ef:d1:af:f5:02:15:ba:5e:ef:96:27:18: a7:15:e6:fd:9c:97:b5:fd:f4:e6:19:42:e4:ce:55:10:b8:71: c4:7e:d8:83:e9:86:15:58:7a:ac:19:e9:5e:0d:ea:5f:0a:4e: ae:17:5e:85:b1:3b:96:27:db:be:6c:61:19:c6:93:c2:63:4f: ca:40:9c:d1:85:71:d6:70:d3:93:09:7a:66:09:a4:20:43:6a: 9f:1b:be:68:2d:8b:29:31:31:61:38:4d:f8:ff:5a:b0:68:a3: cc:e7:d5:8e:e1:ac:22:79:fa:c5:63:37:ba:72:94:1c:bd:79: e0:41:61:91:3f:ff:b3:87:d4:a1:c0:84:0d:8d:7f:02:ad:81: 0b:09:ec:3b:52:65:15:d9:49:c9:99:bc:71:92:f9:c6:39:84: 88:75:d5:72:7f:c6:96:c0:77:f6:8a:3a:66:35:45:40:a8:11: 11:5b:fa:e1:11:80:2b:37:f0:62:be:54:47:27:50:72:d2:f9: 4c:bb:c4:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC ODk0MjlFRjUwHhcNMjYxMTA5MDMwODUxWhcNMjYxMTE2MDMwODUxWjAYMRYwFAYD VQQDEw02YWYxMzk0My1hM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhVqZrStcEx/80FhN2pkg/myIJLahS48NqO6dwCegqP6Tacq7J7uDQ+cYrmG IXyUmRV9P2XR2yvqW8dI8Jmrlj3qkmLriroWk2COSCLuOcQunczdjLdQsVZq6uTb xFKyEd40c9RJiHAJmsJXdGD01R/9sRKcJp76zPuYY3Pf5q+ICYZMhy4T+KKWhsK9 EuHtfjWfbmpFr9oBJBSr7Edng1aAubZA/GBQgdELjeiORX7ZMhE3pV2kNEOK0oo8 YrN+esF3FvgC15LghrFkvowX+oDiuEGL692GtpP4LKj7sRqxS+xzi0tO90R4q2fQ 8apjDHgIzYR2AKM+kTRlolu0UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBO4VADf doLiHf98RJNczsOqXx1PMB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0 QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY MGxmVkd4VF9YRFc0bENudlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACOA1/TPB22SvPK4EP/UUL72Ybe03r3Lk3VbHhe7ZjVG3z+05lxnpr+nhOC4B vuBCRwauvmVQGFGVlWLY79Gv9QIVul7vlicYpxXm/ZyXtf305hlC5M5VELhxxH7Y g+mGFVh6rBnpXg3qXwpOrhdehbE7lifbvmxhGcaTwmNPykCc0YVx1nDTkwl6Zgmk IENqnxu+aC2LKTExYThN+P9asGijzOfVjuGsInn6xWM3unKUHL154EFhkT//s4fU ocCEDY1/Aq2BCwnsO1JlFdlJyZm8cZL5xjmEiHXVcn/GlsB39oo6ZjVFQKgREVv6 4RGAKzfwYr5URydQctL5TLvEhw== -----END CERTIFICATE-----Generated at Mon Nov 9 10:50:24 2026 by rpki-client