$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft File: OvnsvEXk4pfSm6bEEfGgXIudqeM.mft (raw, json) Hash identifier: SVWXxW8VktXezLfXtw1x2sc17RmsgkUyR2UeoFwd/y8= Subject key identifier: F9:20:03:6E:4F:AA:CE:4B:42:70:6B:10:38:C6:1A:6F:38:FC:98:FF Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 Certificate issuer: /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft Manifest number: 02A0 Signing time: Mon 21 Sep 2026 01:35:54 +0000 Manifest this update: Mon 21 Sep 2026 01:35:54 +0000 Manifest next update: Mon 28 Sep 2026 01:35:54 +0000 Files and hashes: 1: OvnsvEXk4pfSm6bEEfGgXIudqeM.crl (hash: Gbm9RFEgtDzsnAfcBcubl0cYiULYD3eGhfNd5Bof7Y0=) 2: 82E99F5A10FC11EF95048154C4F9AE02.roa (hash: AXhLJomVJ63tE2qeqNBzn6juE7/Pg7GMaa4t59azamk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA18, serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Validity Not Before: Sep 21 01:35:54 2026 GMT Not After : Sep 28 01:35:54 2026 GMT Subject: CN=6ab089fa-3514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:ff:23:36:f7:85:7a:3f:75:f9:27:60:dd: 71:cb:96:88:46:6e:48:f2:a0:9b:14:1b:42:0e:99: 27:54:89:84:0c:ad:d8:88:8c:0d:c0:4c:a5:97:ec: 70:a9:cf:6b:03:21:07:7b:5d:dc:88:9f:4d:1b:56: 41:61:85:20:de:24:6b:c2:f6:73:a8:41:f8:b4:d1: ac:72:7f:31:68:3d:a5:ee:60:97:9c:00:01:d6:14: 91:d6:88:21:f5:8f:63:e5:4e:b1:0e:e8:5d:25:d2: 53:90:10:83:19:cf:5d:5f:b8:90:21:e2:ee:e2:83: ad:a2:66:b9:12:b3:6a:b9:d9:03:03:10:8b:34:2b: 5d:73:f2:4f:80:9e:78:72:dd:31:48:29:60:f6:a1: 33:df:a8:5c:56:6f:1b:7c:f2:9d:32:d1:a1:63:c3: c8:f6:99:25:fc:98:28:05:b0:ae:1d:4e:30:37:ea: 97:26:29:57:e4:a4:9f:29:78:1f:12:a2:69:2b:8d: 00:f1:4e:3f:61:dd:37:7c:79:42:94:f7:d3:5c:88: e3:a6:c0:6b:0c:e0:58:4c:d3:16:3d:f1:25:71:df: d4:db:82:8f:47:c9:bc:46:df:4a:53:d1:12:cc:bc: 8e:0d:51:26:ca:96:7b:a9:c5:cc:dd:50:36:20:e8: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:03:6E:4F:AA:CE:4B:42:70:6B:10:38:C6:1A:6F:38:FC:98:FF X509v3 Authority Key Identifier: keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a7:2e:24:15:e7:ca:ae:a1:c7:91:e4:71:b6:21:b8:93:3b: 10:cb:46:5e:42:c9:00:a1:2a:1e:92:bd:4b:0e:a4:63:5e:15: ac:f7:53:e6:6e:a1:98:e2:99:6c:e2:5d:4c:e8:68:35:9a:1f: 68:b2:a2:ca:f1:f8:73:a8:e0:d1:a9:9c:18:23:29:43:49:7f: 61:eb:2b:1b:44:23:01:04:d0:68:32:ea:f2:b6:e1:0a:79:1d: b5:06:fb:ea:6e:44:96:7a:c5:54:1c:65:fc:fb:0a:7a:1e:92: 59:f3:4f:25:54:14:63:55:1c:cd:14:91:66:89:5c:58:24:0e: 5a:f9:b9:be:8f:1b:0e:c3:d3:05:f0:e2:2d:95:ed:b1:1b:c7: d5:7e:d2:71:ef:b5:47:39:31:90:b2:74:b9:4c:83:17:a3:9d: b9:15:7d:1b:c1:5a:c9:e9:60:4f:96:27:5a:d6:98:14:68:fa: db:60:3a:0b:1d:9b:04:15:fc:a2:cc:53:33:eb:39:00:5e:46: f9:d5:89:29:25:df:3b:a7:6c:a3:30:f4:57:66:65:90:fa:64: fd:d0:42:9a:89:0a:40:d6:f8:b1:08:39:d6:5e:4c:20:f9:cc: 63:e2:d8:57:59:58:b5:2e:fa:dd:cd:8b:db:fd:bb:2b:96:18: d3:85:c3:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMTgxMTAvBgNVBAUTKDNBRjlFQ0JDNDVFNEUyOTdEMjlCQTZDNDExRjFBMDVD OEI5REE5RTMwHhcNMjYwOTIxMDEzNTU0WhcNMjYwOTI4MDEzNTU0WjAYMRYwFAYD VQQDEw02YWIwODlmYS0zNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p3/Izb3hXo/dfknYN1xy5aIRm5I8qCbFBtCDpknVImEDK3YiIwNwEyll+xw qc9rAyEHe13ciJ9NG1ZBYYUg3iRrwvZzqEH4tNGscn8xaD2l7mCXnAAB1hSR1ogh 9Y9j5U6xDuhdJdJTkBCDGc9dX7iQIeLu4oOtoma5ErNqudkDAxCLNCtdc/JPgJ54 ct0xSClg9qEz36hcVm8bfPKdMtGhY8PI9pkl/JgoBbCuHU4wN+qXJilX5KSfKXgf EqJpK40A8U4/Yd03fHlClPfTXIjjpsBrDOBYTNMWPfElcd/U24KPR8m8Rt9KU9ES zLyODVEmypZ7qcXM3VA2IOgoWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkgA25P qs5LQnBrEDjGGm84/Jj/MB8GA1UdIwQYMBaAFDr57LxF5OKX0pumxBHxoFyLnanj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExOC82RDA1OUJCQ0Ix QjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRwZlNtNmJFRWZHZ1hJdWRx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL092bnN2RVhrNHBmU202YkVFZkdnWEl1ZHFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExOC82RDA1OUJCQ0IxQjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRw ZlNtNmJFRWZHZ1hJdWRxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADKcuJBXnyq6hx5HkcbYhuJM7EMtGXkLJAKEqHpK9Sw6kY14VrPdT5m6hmOKZ bOJdTOhoNZofaLKiyvH4c6jg0amcGCMpQ0l/YesrG0QjAQTQaDLq8rbhCnkdtQb7 6m5ElnrFVBxl/PsKeh6SWfNPJVQUY1UczRSRZolcWCQOWvm5vo8bDsPTBfDiLZXt sRvH1X7Sce+1RzkxkLJ0uUyDF6OduRV9G8FayelgT5YnWtaYFGj622A6Cx2bBBX8 osxTM+s5AF5G+dWJKSXfO6dsozD0V2ZlkPpk/dBCmokKQNb4sQg51l5MIPnMY+LY V1lYtS763c2L2/27K5YY04XDwA== -----END CERTIFICATE-----Generated at Tue Sep 22 04:23:47 2026 by rpki-client