$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft File: OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft (raw, json) Hash identifier: IY+TxNc8Cub0iGZGE7cL9BcTtrC/2YbWb0wtNAUIl/0= Subject key identifier: 80:44:43:4C:CE:2B:9D:B0:39:4D:60:61:02:47:65:77:38:EF:24:25 Authority key identifier: 39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD Certificate issuer: /CN=A919A43E/serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft Manifest number: 20 Signing time: Mon 21 Sep 2026 08:51:59 +0000 Manifest this update: Mon 21 Sep 2026 08:51:58 +0000 Manifest next update: Mon 28 Sep 2026 08:51:58 +0000 Files and hashes: 1: OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl (hash: WNE/Ei3QcLG9uCNNt25iDqqjDyWaI/X7y/ZOTMpm8hg=) 2: 13470B1A8A5D11F1831FA6813B11F970.roa (hash: KTWKvrQIcAJhvdnwPkuYb68Uex7MkjqQ3SocdV59zYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A43E, serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD Validity Not Before: Sep 21 08:51:58 2026 GMT Not After : Sep 28 08:51:58 2026 GMT Subject: CN=6ab0f02f-c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:78:b1:d4:4e:eb:e4:14:63:0a:50:10:08: a7:48:52:7b:57:02:07:3d:dc:5c:ee:2a:69:0d:00: 48:a1:16:a2:25:09:d3:2e:14:0c:6a:82:03:9e:de: 69:83:d4:4f:0a:b0:1f:a3:28:3e:d2:95:0c:02:22: 12:09:7f:64:08:4a:b9:3e:c7:15:ca:2b:f8:61:11: d0:ac:9c:f7:f9:41:fd:ac:b5:3c:b5:99:97:2d:97: 65:3c:90:bc:c8:bb:b3:d6:63:1d:3e:6c:8a:1c:13: 1f:c5:fe:5b:c0:7f:a5:8d:38:4f:a6:a4:7e:10:7e: 89:35:80:e9:cf:c4:89:e3:76:90:f6:02:8c:f8:4b: d6:d5:4c:ac:1e:a9:88:dd:61:e2:c0:eb:4d:c3:7a: c9:bd:d6:5f:d8:75:4d:dc:6d:89:47:47:a4:d2:c7: 7f:95:b5:ff:b5:78:25:df:c2:76:05:f3:31:e8:2e: 48:17:b3:75:ec:ba:28:83:a9:27:76:a8:6f:2c:c3: 74:8f:5b:46:1c:15:97:40:cd:7e:dd:82:c8:c6:ab: a8:56:20:04:5e:50:19:5d:3e:be:ae:bf:f1:78:41: ae:9a:3d:68:bf:8e:da:61:e4:54:54:05:98:94:8a: 03:b1:2c:3d:e3:39:4c:2b:a8:62:8a:f7:07:d4:d7: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:44:43:4C:CE:2B:9D:B0:39:4D:60:61:02:47:65:77:38:EF:24:25 X509v3 Authority Key Identifier: keyid:39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:9e:a3:fe:95:3c:a6:5a:f6:1d:80:eb:28:77:9e:82:12:3e: 04:a6:5d:eb:40:7e:d4:de:ae:12:85:34:97:fa:bd:25:98:6f: ed:a8:4f:9a:5e:fe:5c:60:ff:10:b0:62:0e:f0:0e:ca:7c:8d: ac:78:94:0a:9e:92:e8:e4:aa:35:76:02:6c:ea:69:73:a3:33: 1e:d2:86:db:89:78:9d:07:55:a9:10:7c:50:d9:d6:8a:3b:a8: ba:2b:c9:a0:be:b8:4f:dd:87:0a:67:7e:45:cd:c3:95:7e:58: 9c:0c:c0:37:2a:7b:5f:cd:68:c1:60:b1:56:73:8b:9c:ef:1d: 97:b3:57:74:11:fc:d7:7f:28:33:7e:f2:17:03:bd:29:05:f4: 50:c0:b7:5c:ad:55:e4:58:6d:2c:19:1f:fc:0f:c5:15:cc:c8: 67:e8:4b:ef:fa:a7:b3:1b:45:38:ee:bf:80:c4:4a:7f:03:b4: 02:18:b4:01:4d:7a:b5:84:b2:8b:f6:30:17:0a:84:ca:fe:38: 17:33:03:4c:66:47:02:22:10:ea:ea:de:e1:ae:6c:fd:13:aa: 6e:7c:f3:8f:74:5a:7f:30:2b:88:13:2d:e4:5a:14:66:14:4e: d9:7f:20:3c:39:68:47:30:a4:6e:fb:d8:ea:5c:d9:ab:38:cf: de:2e:07:17 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTQzRTExMC8GA1UEBRMoMzk5Qzg3MjUzRTU0RUQ2REUzNzcwRTU1NzQ2NDY2NjYx QUNFRDVDRDAeFw0yNjA5MjEwODUxNThaFw0yNjA5MjgwODUxNThaMBgxFjAUBgNV BAMTDTZhYjBmMDJmLWM3NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC13ix1E7r5BRjClAQCKdIUntXAgc93FzuKmkNAEihFqIlCdMuFAxqggOe3mmD 1E8KsB+jKD7SlQwCIhIJf2QISrk+xxXKK/hhEdCsnPf5Qf2stTy1mZctl2U8kLzI u7PWYx0+bIocEx/F/lvAf6WNOE+mpH4Qfok1gOnPxInjdpD2Aoz4S9bVTKweqYjd YeLA603Desm91l/YdU3cbYlHR6TSx3+Vtf+1eCXfwnYF8zHoLkgXs3XsuiiDqSd2 qG8sw3SPW0YcFZdAzX7dgsjGq6hWIAReUBldPr6uv/F4Qa6aPWi/jtph5FRUBZiU igOxLD3jOUwrqGKK9wfU1+W5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgERDTM4r nbA5TWBhAkdldzjvJCUwHwYDVR0jBBgwFoAUOZyHJT5U7W3jdw5VdGRmZhrO1c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNDNFL0VFQUZFMkFBOEE1 QjExRjE5N0RCM0U2OTNBMTFGOTcwL09aeUhKVDVVN1czamR3NVZkR1JtWmhyTzFj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT1p5SEpUNVU3VzNqZHc1VmRHUm1aaHJPMWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NDNFL0VFQUZFMkFBOEE1QjExRjE5N0RCM0U2OTNBMTFGOTcwL09aeUhKVDVVN1cz amR3NVZkR1JtWmhyTzFjMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCInqP+lTymWvYdgOsod56CEj4Epl3rQH7U3q4ShTSX+r0lmG/tqE+aXv5cYP8Q sGIO8A7KfI2seJQKnpLo5Ko1dgJs6mlzozMe0obbiXidB1WpEHxQ2daKO6i6K8mg vrhP3YcKZ35FzcOVflicDMA3KntfzWjBYLFWc4uc7x2Xs1d0EfzXfygzfvIXA70p BfRQwLdcrVXkWG0sGR/8D8UVzMhn6Evv+qezG0U47r+AxEp/A7QCGLQBTXq1hLKL 9jAXCoTK/jgXMwNMZkcCIhDq6t7hrmz9E6pufPOPdFp/MCuIEy3kWhRmFE7ZfyA8 OWhHMKRu+9jqXNmrOM/eLgcX -----END CERTIFICATE-----Generated at Tue Sep 22 11:11:14 2026 by rpki-client