$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: m45Z3+Nrs5dk5JntLNbpKpqJ9JakiW/86NBjNgeXqAo= Subject key identifier: 92:85:F7:4C:B4:6E:61:40:1D:62:61:F7:A6:99:E5:70:96:48:E8:65 Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 380A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 36DC Signing time: Sun 20 Sep 2026 14:24:09 +0000 Manifest this update: Sun 20 Sep 2026 14:24:08 +0000 Manifest next update: Sun 27 Sep 2026 14:24:08 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: P87JtWGMItZff1H5xGr2Te/NB3Ojg4Qja2OXK9TK6bw=) 2: DDBF75E8AC0F11F18FA02B357011F970.roa (hash: XkgCJ50UlAocEgPti+/VSXFYIwUrWzt3O9MV4EIAwHw=) 3: rQSAPyGUXtGkb8Ui1URzc0kbX3M.asa (hash: e5gGUoXTbgO3Bqx/dg2NaRASCiNn+/PB5Y+WJNAkgGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14346 (0x380a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Sep 20 14:24:08 2026 GMT Not After : Sep 27 14:24:08 2026 GMT Subject: CN=6aafec89-cacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:8d:ca:fa:97:a9:2b:55:30:d7:9d:b3:5f: ff:4f:07:f7:d2:8b:35:74:b9:8a:56:a4:88:01:0e: b3:6e:b9:f2:04:0a:a4:6d:d2:cf:7a:6f:1e:aa:8c: 93:5d:60:3e:1c:06:91:ff:93:e4:3b:5c:a6:3a:0d: 34:55:0b:4e:fb:0f:06:4e:ab:85:dd:3b:6e:d0:af: 95:b1:e4:d6:de:57:9e:8f:e0:02:90:d0:e4:d6:4f: 24:4b:93:ed:90:e7:16:97:ab:d5:43:68:dd:14:b2: 85:42:5e:ff:33:30:c3:1f:e4:a1:da:34:d6:0d:9b: c3:2a:c3:f4:8a:27:6f:bf:73:08:21:79:c5:2f:88: 2d:d2:e2:43:71:5b:93:94:b1:8d:6b:02:0b:03:5c: 61:53:d5:72:11:d6:aa:04:6f:17:95:57:a6:dd:54: b9:db:fe:fa:5c:99:28:a3:58:3c:40:4d:53:08:74: c0:b0:51:2f:eb:70:13:b3:3a:b1:42:13:a9:ea:f7: 62:5f:cb:73:ec:30:3b:48:ce:68:bc:f0:49:77:10: f6:59:b5:b4:3e:89:70:00:b2:fb:6d:42:9b:be:4c: 08:63:01:a5:48:31:63:ba:b1:8a:c6:eb:17:fc:db: 42:b7:af:3c:fa:ab:f1:21:b7:0a:7b:db:b7:66:32: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:85:F7:4C:B4:6E:61:40:1D:62:61:F7:A6:99:E5:70:96:48:E8:65 X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9f:11:86:70:89:f7:a6:f6:b8:b5:e9:c7:9e:b7:7c:78:c4: 1e:65:29:80:f0:24:41:ff:ff:31:1d:44:05:97:89:70:0f:c2: 91:53:85:4b:02:2a:34:8f:a4:e6:aa:ff:11:68:79:46:a8:4c: bb:f1:fa:e1:ae:08:b2:98:13:4b:b5:9c:27:33:5a:b2:0c:b2: 21:12:ef:3d:8d:09:15:a7:01:24:26:1c:03:14:6e:37:64:f5: d6:5f:e7:78:cd:30:d2:5b:d3:d2:3c:b4:94:50:cc:59:36:1f: 74:e4:84:a3:da:bb:d4:b4:bd:8e:7a:a1:9f:44:a6:37:43:b1: 8d:01:23:d0:52:82:7e:a3:33:5b:4c:b6:dc:82:65:18:4d:0f: 0c:cf:05:8b:f1:0b:a0:24:1d:92:e5:5b:cb:51:b5:b2:da:2b: 4b:ab:a8:e1:9c:7b:5a:a6:29:7d:06:89:ff:24:21:88:7a:18: d2:58:42:00:33:20:ae:38:fc:12:51:ad:9c:83:69:8c:b0:89: 54:eb:4a:ab:db:f4:68:b1:37:0b:73:70:32:16:e9:8b:47:3d: f4:d8:2b:7e:9c:f8:73:70:2b:89:ab:0b:7e:1f:c9:26:9b:f7: 90:a4:f5:1e:22:1c:e9:32:45:d9:b3:5a:43:a3:5e:ac:65:07: 8c:be:b0:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjYwOTIwMTQyNDA4WhcNMjYwOTI3MTQyNDA4WjAYMRYwFAYD VQQDEw02YWFmZWM4OS1jYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnf+NyvqXqStVMNeds1//Twf30os1dLmKVqSIAQ6zbrnyBAqkbdLPem8eqoyT XWA+HAaR/5PkO1ymOg00VQtO+w8GTquF3Ttu0K+VseTW3leej+ACkNDk1k8kS5Pt kOcWl6vVQ2jdFLKFQl7/MzDDH+Sh2jTWDZvDKsP0iidvv3MIIXnFL4gt0uJDcVuT lLGNawILA1xhU9VyEdaqBG8XlVem3VS52/76XJkoo1g8QE1TCHTAsFEv63ATszqx QhOp6vdiX8tz7DA7SM5ovPBJdxD2WbW0PolwALL7bUKbvkwIYwGlSDFjurGKxusX /NtCt688+qvxIbcKe9u3ZjJVrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKF90y0 bmFAHWJh96aZ5XCWSOhlMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX58RhnCJ96b2uLXpx563fHjEHmUpgPAkQf//MR1EBZeJcA/CkVOFSwIqNI+k 5qr/EWh5RqhMu/H64a4IspgTS7WcJzNasgyyIRLvPY0JFacBJCYcAxRuN2T11l/n eM0w0lvT0jy0lFDMWTYfdOSEo9q71LS9jnqhn0SmN0OxjQEj0FKCfqMzW0y23IJl GE0PDM8Fi/ELoCQdkuVby1G1storS6uo4Zx7WqYpfQaJ/yQhiHoY0lhCADMgrjj8 ElGtnINpjLCJVOtKq9v0aLE3C3NwMhbpi0c99Ngrfpz4c3AriasLfh/JJpv3kKT1 HiIc6TJF2bNaQ6NerGUHjL6wHA== -----END CERTIFICATE-----Generated at Mon Sep 21 01:16:31 2026 by rpki-client