$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: CsmnLWyOa3lV7nxGpNWCic5cLz/N6DptiHNmZEdTezA= Subject key identifier: 02:D5:8B:59:65:7A:39:D1:F7:F5:0F:57:C7:9E:E3:8D:5D:A6:D6:AB Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 3688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 3608 Signing time: Fri 18 Sep 2026 14:47:51 +0000 Manifest this update: Fri 18 Sep 2026 14:47:50 +0000 Manifest next update: Fri 25 Sep 2026 14:47:50 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: cHKoXfysEkLhNY0E8zseFokMiIlOa0ujK7ruxSuz1DE=) 2: 3556F236591D11F1B1E1CE2EC9833773.roa (hash: xZnAAlTCl+JT5OotaR0JxL8HG25CqlkoxYP53N4yaTg=) 3: y3XF_d_Fz4sNYXjELzqHJsYq6XU.asa (hash: phuSwfjdb7QT4a5GmgCtJ2giqSwUMfci6tv/INJIFq8=) 4: 87C417D4AD1811F1A4C6F2B14011F970.roa (hash: F9QyhjA4QNdilU+ShIfAj3a6gliCU8PF/F7dlar+ZO8=) 5: sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa (hash: I6p3UURilsrl6l6rhn0wT3MhCoiuv3Y8LPk+lcr5FbE=) 6: ZK6dqsz8SNKa9BIRG-wwKoRLm1s.asa (hash: Dz7ClXtb4X0yBRjApTXpt2z96UXZ22eyuTkwMR3LjYw=) 7: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: bGRZ0FpspSCf0cAveUKjR/NLCR8lXup6exlYiK4KDOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13960 (0x3688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Sep 18 14:47:50 2026 GMT Not After : Sep 25 14:47:50 2026 GMT Subject: CN=6aad4f17-5f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:a0:94:dc:14:47:c2:3e:0a:45:f2:11:c6: fe:ae:7b:b0:5f:8a:72:1b:76:cd:83:bb:5b:11:ff: 5e:6d:c6:f2:86:d4:5d:6e:1b:d5:62:d2:43:e8:19: 36:e4:4f:7f:f8:fb:1a:3b:b5:b6:ef:5d:7d:0a:bc: 29:f1:d8:c3:da:69:69:fb:d7:37:34:fe:e4:47:10: c9:ca:7b:31:ce:5d:29:eb:36:c7:95:32:17:5f:ff: 7c:6e:28:30:11:01:60:2f:0a:41:86:c5:c4:ee:76: 8c:0f:5b:e1:cd:89:7c:30:ed:e2:55:77:38:54:38: eb:90:91:88:93:ea:a8:f8:4b:da:c4:cc:32:7e:4f: a1:09:47:c3:b9:ee:f9:14:8e:29:c4:22:53:a4:b3: a2:9d:3c:70:63:b0:9a:e8:0c:be:85:a1:fc:ea:9c: d4:44:c8:a8:3c:da:8b:6d:0d:dd:0f:d2:a1:1f:32: 6c:6b:82:9d:d2:1e:1a:4e:8c:be:da:7e:fa:35:76: cd:97:28:1b:c6:e4:f3:4b:a1:63:6e:95:05:2f:2e: 0f:30:d9:65:35:9a:7b:85:fe:d2:da:2a:8e:85:7e: a0:85:cf:25:96:c3:8c:67:ed:60:fd:66:6e:97:0a: 4a:97:15:51:c0:6b:31:cc:39:4c:27:f5:b6:97:19: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:8B:59:65:7A:39:D1:F7:F5:0F:57:C7:9E:E3:8D:5D:A6:D6:AB X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e9:c0:18:2b:ec:a2:d2:43:31:0d:54:27:70:32:75:d2:c7: e8:21:4c:c9:1e:da:d4:97:3f:bb:15:95:68:e0:83:c0:fc:72: bb:e9:0a:89:92:48:86:07:58:96:bb:ba:19:b1:b1:8e:5f:91: 51:c0:de:bb:29:8e:c5:db:64:93:7d:fb:ae:ee:dd:bb:02:ec: 4a:b7:be:85:0b:89:0a:41:d6:a1:71:17:27:af:09:7b:ae:a7: 8a:68:38:ba:00:1b:00:8d:76:c5:6b:b3:bc:d7:69:31:72:22: 49:10:71:5b:64:89:a9:29:82:b0:51:73:5e:a6:82:87:88:bd: 24:43:4f:f7:3f:71:99:35:b4:9e:04:c7:fd:1b:3d:49:74:03: 99:04:5f:79:0e:e8:08:6a:20:e1:3d:c7:7f:60:02:7c:83:54: 3b:34:47:58:32:45:cf:7b:c1:0b:5f:1b:7a:a3:6d:cf:51:06: 3c:65:d6:6e:7b:e6:4a:d5:1f:67:53:bb:cf:94:48:aa:e7:0c: 45:4e:77:85:5c:1a:0c:0a:a2:3b:8d:c8:06:e2:39:4b:af:c7: df:40:22:ca:19:1b:9a:a6:f2:d4:92:47:a6:e0:a3:1d:8f:e1: c4:6d:b8:e6:51:f0:de:6f:90:10:ac:15:4b:88:cc:fe:3b:32: 64:86:7f:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYwOTE4MTQ0NzUwWhcNMjYwOTI1MTQ0NzUwWjAYMRYwFAYD VQQDEw02YWFkNGYxNy01ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5mglNwUR8I+CkXyEcb+rnuwX4pyG3bNg7tbEf9ebcbyhtRdbhvVYtJD6Bk2 5E9/+PsaO7W27119Crwp8djD2mlp+9c3NP7kRxDJynsxzl0p6zbHlTIXX/98bigw EQFgLwpBhsXE7naMD1vhzYl8MO3iVXc4VDjrkJGIk+qo+EvaxMwyfk+hCUfDue75 FI4pxCJTpLOinTxwY7Ca6Ay+haH86pzURMioPNqLbQ3dD9KhHzJsa4Kd0h4aToy+ 2n76NXbNlygbxuTzS6FjbpUFLy4PMNllNZp7hf7S2iqOhX6ghc8llsOMZ+1g/WZu lwpKlxVRwGsxzDlMJ/W2lxnfTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALVi1ll ejnR9/UPV8ee441dptarMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq+nAGCvsotJDMQ1UJ3AyddLH6CFMyR7a1Jc/uxWVaOCDwPxyu+kKiZJIhgdY lru6GbGxjl+RUcDeuymOxdtkk337ru7duwLsSre+hQuJCkHWoXEXJ68Je66nimg4 ugAbAI12xWuzvNdpMXIiSRBxW2SJqSmCsFFzXqaCh4i9JENP9z9xmTW0ngTH/Rs9 SXQDmQRfeQ7oCGog4T3Hf2ACfINUOzRHWDJFz3vBC18beqNtz1EGPGXWbnvmStUf Z1O7z5RIqucMRU53hVwaDAqiO43IBuI5S6/H30Aiyhkbmqby1JJHpuCjHY/hxG24 5lHw3m+QEKwVS4jM/jsyZIZ/hg== -----END CERTIFICATE-----Generated at Sun Sep 20 15:52:39 2026 by rpki-client