$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft File: OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json) Hash identifier: cngXd90RpF4Ptknc6Ei0XHEeqZs8NxGW7NuyqgeDDj8= Subject key identifier: DE:AD:2B:E1:8E:9A:B8:C3:3C:D0:26:B2:32:58:3A:87:A7:39:E8:77 Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft Manifest number: 0212 Signing time: Sun 27 Sep 2026 03:23:12 +0000 Manifest this update: Sun 27 Sep 2026 03:23:12 +0000 Manifest next update: Sun 04 Oct 2026 03:23:12 +0000 Files and hashes: 1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: 9wAwSxwEwvYSa4wkGnXnnS+vjP90Jl9+kbM8ykwbFrI=) 2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A Validity Not Before: Sep 27 03:23:12 2026 GMT Not After : Oct 4 03:23:12 2026 GMT Subject: CN=6ab88c20-be29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:1b:4d:e1:19:22:9d:e0:97:c3:ef:67:37: 3e:3a:eb:0e:db:cf:55:b5:6d:06:1b:20:4e:8d:23: 3c:90:29:3c:cf:93:95:ea:03:83:e3:4f:31:76:e5: 76:f0:47:7f:77:d3:47:e6:e8:18:c8:37:98:d1:72: 86:bd:dd:bf:48:b6:6a:62:b5:2f:d1:22:8e:29:f2: b5:bf:60:f6:11:b1:cc:31:66:31:24:7f:ee:27:fa: 19:48:2c:55:37:e3:fb:8f:c8:5e:7c:86:b2:73:d5: 42:1b:d1:16:8a:07:8e:0b:b7:79:74:9b:06:9f:97: 59:0f:3d:0a:7e:60:f9:6e:bb:3d:77:48:05:88:72: b5:43:bf:7e:14:e8:e7:a4:25:31:87:17:b4:c7:6b: 39:37:6c:6b:48:ab:29:27:e5:7f:17:f6:a3:8a:10: 72:74:d6:de:8e:38:79:26:10:b1:bb:34:a1:d2:94: 6b:cf:46:f6:3f:f2:ab:08:18:04:97:6d:28:72:15: 6e:74:14:4a:d9:87:03:74:1a:35:64:81:36:8a:d6: f7:64:32:2d:1d:7c:35:35:0f:3f:78:33:01:0f:54: b3:02:51:4d:e4:7d:e9:7f:cc:07:90:14:28:2c:e6: ae:40:b4:9f:3f:7d:26:ab:7b:33:97:33:60:63:e4: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:2B:E1:8E:9A:B8:C3:3C:D0:26:B2:32:58:3A:87:A7:39:E8:77 X509v3 Authority Key Identifier: keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:05:85:2d:3b:17:fc:74:40:e8:bc:00:36:8f:aa:aa:08:d5: 18:21:eb:be:b3:48:d8:9f:7c:b0:83:3f:a6:53:5b:8f:2a:15: 48:91:69:bd:9d:21:ea:59:c5:9a:ad:01:08:98:1c:db:2b:a4: 19:6b:b0:1f:de:4d:61:b8:fc:14:49:e3:ee:f2:27:eb:66:02: 47:a6:90:39:aa:a8:9a:32:af:46:65:b5:23:0e:6f:58:df:00: 4c:9e:13:73:65:9f:42:2c:42:90:0c:d4:3b:22:59:e3:14:91: c7:45:93:66:5a:76:03:a7:4f:bc:de:ba:97:2f:00:35:93:09: 23:17:6c:61:9d:7a:13:b5:3a:ec:ad:60:6b:b6:1d:92:91:68: 6b:7d:0b:ba:ed:2e:2e:f2:08:39:c1:1d:b8:25:42:e2:a7:58: 65:c4:6b:eb:90:f2:09:22:c2:d1:29:ed:f9:e8:3f:22:a3:97: 6d:8f:9d:8d:e3:f8:2f:94:ca:4a:a5:80:40:f2:f0:19:ce:e2: 9d:62:3b:32:b3:79:75:7a:82:c4:7b:c8:be:c0:00:a7:01:fd: be:29:b7:24:31:9f:3e:15:66:4a:a7:59:fe:64:05:c5:ae:37: 44:7c:84:ec:4f:29:48:98:98:fb:e5:81:f8:41:83:b8:ed:5f: d6:98:be:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2 MDlFNkIyMEEwHhcNMjYwOTI3MDMyMzEyWhcNMjYxMDA0MDMyMzEyWjAYMRYwFAYD VQQDEw02YWI4OGMyMC1iZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41cbTeEZIp3gl8PvZzc+OusO289VtW0GGyBOjSM8kCk8z5OV6gOD408xduV2 8Ed/d9NH5ugYyDeY0XKGvd2/SLZqYrUv0SKOKfK1v2D2EbHMMWYxJH/uJ/oZSCxV N+P7j8hefIayc9VCG9EWigeOC7d5dJsGn5dZDz0KfmD5brs9d0gFiHK1Q79+FOjn pCUxhxe0x2s5N2xrSKspJ+V/F/ajihBydNbejjh5JhCxuzSh0pRrz0b2P/KrCBgE l20ochVudBRK2YcDdBo1ZIE2itb3ZDItHXw1NQ8/eDMBD1SzAlFN5H3pf8wHkBQo LOauQLSfP30mq3szlzNgY+QIxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6tK+GO mrjDPNAmsjJYOoenOeh3MB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xNTlBNEFEMDkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3Szlx WW15UmF1bGdKQnRnbm1zZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQWFLTsX/HRA6LwANo+qqgjVGCHrvrNI2J98sIM/plNbjyoVSJFpvZ0h6lnF mq0BCJgc2yukGWuwH95NYbj8FEnj7vIn62YCR6aQOaqomjKvRmW1Iw5vWN8ATJ4T c2WfQixCkAzUOyJZ4xSRx0WTZlp2A6dPvN66ly8ANZMJIxdsYZ16E7U67K1ga7Yd kpFoa30Luu0uLvIIOcEduCVC4qdYZcRr65DyCSLC0Snt+eg/IqOXbY+djeP4L5TK SqWAQPLwGc7inWI7MrN5dXqCxHvIvsAApwH9vim3JDGfPhVmSqdZ/mQFxa43RHyE 7E8pSJiY++WB+EGDuO1f1pi+7g== -----END CERTIFICATE-----Generated at Mon Sep 28 21:24:20 2026 by rpki-client