$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: HVF5x+mpQ9zWWxJyf2aXBSmFs5Jw1xmAozecNh+WIQw= Subject key identifier: 77:21:A9:08:98:3D:7D:88:94:9B:89:D4:A9:38:7E:45:DB:E9:43:A3 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 0218 Signing time: Fri 25 Sep 2026 03:10:11 +0000 Manifest this update: Fri 25 Sep 2026 03:10:11 +0000 Manifest next update: Fri 02 Oct 2026 03:10:11 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: /5i9gaZisWDmHaOovp3aE1rgDdSWeeKuqFiy1xx3H7U=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Sep 25 03:10:11 2026 GMT Not After : Oct 2 03:10:11 2026 GMT Subject: CN=6ab5e613-c285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:c2:25:d2:6f:5a:83:34:33:0c:5e:30:92: d4:e9:73:cc:79:74:de:f9:1e:3f:a2:d3:c0:f3:21: 79:33:fc:00:be:55:32:49:77:1c:fb:e1:e3:79:db: 87:c9:c3:f7:84:b5:6f:78:42:77:51:6f:50:19:1a: dd:c6:df:12:a7:9b:b5:9f:a0:19:78:14:2a:15:a1: be:70:9c:57:e1:52:9d:b3:59:c6:5f:83:c9:2a:72: 5d:8c:b5:02:19:1a:9f:12:90:02:8c:83:50:c7:b4: 20:01:5a:27:96:fe:cf:5b:9d:74:4b:85:65:88:f0: f9:3b:88:0b:91:cf:c2:9c:c6:4a:eb:c8:65:01:dd: b7:8e:9b:69:67:f2:e8:20:f1:b4:46:0d:5e:33:fb: 2a:4e:cf:b1:67:dd:52:b6:34:4c:1a:35:1b:b6:b5: fd:df:5f:38:6f:68:f6:e7:f8:a9:df:a5:9c:44:ba: d3:7e:02:c2:c1:33:94:c3:08:2e:01:bf:78:45:16: 94:af:a3:c9:9c:bb:ed:c9:f2:35:71:84:76:aa:88: 96:6d:6a:af:7b:11:95:1b:07:d6:4a:cc:ae:16:af: c9:9a:6d:77:d6:08:8d:4c:b7:19:e8:70:ea:a1:79: c8:16:7d:7e:8a:3f:61:c5:47:4b:f5:24:4c:90:bf: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:A9:08:98:3D:7D:88:94:9B:89:D4:A9:38:7E:45:DB:E9:43:A3 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:77:f6:94:aa:d3:13:5a:6f:77:bd:c2:54:7a:1c:1f:82:5a: 78:a9:23:c5:8b:e4:bb:6d:33:8a:2d:6d:5f:e0:a8:f8:6e:3a: ad:7b:1a:a3:3b:21:7f:30:52:ec:68:eb:d3:79:e4:44:da:07: 08:da:92:92:1e:aa:bd:5b:d9:dc:64:c0:cf:9f:25:2f:15:01: 02:67:15:fc:51:66:f0:32:67:22:3e:77:f7:0f:68:e7:87:0f: dd:0a:27:7e:b8:f5:7b:14:c6:c5:d2:60:4d:3f:6a:2e:f4:c1: ea:38:94:d9:1f:0f:fc:5c:f4:8e:0a:79:26:e4:04:05:91:78: 61:70:87:1d:6e:66:bc:eb:5d:50:8d:60:a2:fc:24:cf:40:43: a0:33:7e:57:46:c6:b7:6d:bd:87:aa:1f:53:e2:87:dd:12:2e: b1:39:5e:24:51:35:93:b2:cb:20:6a:25:24:57:9c:84:3e:1b: 80:0b:21:23:de:55:20:0b:69:fd:38:9a:f4:22:20:e9:b3:56: 6d:48:32:6d:25:d0:fa:4c:bf:65:37:5f:35:56:2c:86:ce:d4: 4e:2b:2a:3c:9c:a3:eb:bc:5a:32:85:b5:ba:e5:f3:51:fd:5b: 48:e3:67:76:27:4b:10:9c:d7:e3:13:a1:14:4a:14:dc:95:41: 25:53:1b:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYwOTI1MDMxMDExWhcNMjYxMDAyMDMxMDExWjAYMRYwFAYD VQQDEw02YWI1ZTYxMy1jMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycHCJdJvWoM0MwxeMJLU6XPMeXTe+R4/otPA8yF5M/wAvlUySXcc++HjeduH ycP3hLVveEJ3UW9QGRrdxt8Sp5u1n6AZeBQqFaG+cJxX4VKds1nGX4PJKnJdjLUC GRqfEpACjINQx7QgAVonlv7PW510S4VliPD5O4gLkc/CnMZK68hlAd23jptpZ/Lo IPG0Rg1eM/sqTs+xZ91StjRMGjUbtrX93184b2j25/ip36WcRLrTfgLCwTOUwwgu Ab94RRaUr6PJnLvtyfI1cYR2qoiWbWqvexGVGwfWSsyuFq/Jmm131giNTLcZ6HDq oXnIFn1+ij9hxUdL9SRMkL/oGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHchqQiY PX2IlJuJ1Kk4fkXb6UOjMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsXf2lKrTE1pvd73CVHocH4JaeKkjxYvku20zii1tX+Co+G46rXsaozshfzBS 7Gjr03nkRNoHCNqSkh6qvVvZ3GTAz58lLxUBAmcV/FFm8DJnIj539w9o54cP3Qon frj1exTGxdJgTT9qLvTB6jiU2R8P/Fz0jgp5JuQEBZF4YXCHHW5mvOtdUI1govwk z0BDoDN+V0bGt229h6ofU+KH3RIusTleJFE1k7LLIGolJFechD4bgAshI95VIAtp /Tia9CIg6bNWbUgybSXQ+ky/ZTdfNVYshs7UTisqPJyj67xaMoW1uuXzUf1bSONn didLEJzX4xOhFEoU3JVBJVMbCg== -----END CERTIFICATE-----Generated at Sat Sep 26 12:46:29 2026 by rpki-client