$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft File: oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft (raw, json) Hash identifier: x2WSOdCQMGNbm5v1Epiwoeh2GZzYzByl66du7cOOCQw= Subject key identifier: F4:92:7D:54:C5:28:BF:38:7F:50:78:1C:88:99:37:36:17:7C:8D:8E Authority key identifier: A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE Certificate issuer: /CN=A9111537/serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft Manifest number: 22 Signing time: Tue 25 Aug 2026 08:49:11 +0000 Manifest this update: Tue 25 Aug 2026 08:49:10 +0000 Manifest next update: Tue 01 Sep 2026 08:49:10 +0000 Files and hashes: 1: oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl (hash: nbze4PASvhn9rYt6mdgGtqLrpeySX015G1k6ibQ9TuQ=) 2: -f1KKuk3XOdvY5Wq0W7fBdDDcis.asa (hash: 34xWYncooXu/pLgDlCTm9aAnxYEkji43aa8EWG7l/8A=) 3: D5D654E4760611F1B28E97E07AA30FBC.roa (hash: LKzEPMeNq68lEF5DAAViO1AMnnXw1fNEUoGr5S01Lg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111537, serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE Validity Not Before: Aug 25 08:49:10 2026 GMT Not After : Sep 1 08:49:10 2026 GMT Subject: CN=6a8d5707-3e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:c2:90:e0:82:76:90:a2:81:da:80:08:bc: d1:b4:a4:44:a2:b0:dc:c0:aa:90:0e:40:00:5a:5d: 01:35:f8:1b:cb:1d:23:50:2a:78:6a:2d:e9:c3:e3: 91:87:45:b2:e1:82:e0:7e:39:3b:c9:ad:c5:ba:d6: 9b:18:df:fe:b2:c6:5c:89:4c:a3:94:1f:a7:cd:8e: b3:6a:f5:dc:fb:52:11:81:7d:4d:cf:41:e1:60:12: 4d:a3:ff:7e:b4:b9:01:97:20:cb:7d:ec:be:7c:63: 93:66:5b:20:88:4e:cf:50:2b:44:08:ac:6f:de:dc: ef:bb:3d:00:de:14:f1:ba:8d:35:32:f3:2c:16:3b: 20:e3:f6:73:cf:4f:ee:89:90:5a:55:e4:5e:8e:5c: 94:d1:c7:00:2e:12:2e:74:d1:66:56:f0:e2:53:cd: a1:06:46:02:43:a4:83:0d:24:b2:39:68:09:b1:6c: c6:27:01:97:0a:d0:74:2b:72:2b:4b:42:40:9d:33: d0:3d:e8:80:ca:c1:a6:40:cd:1f:ab:95:b5:90:01: 51:ed:d8:fd:a7:b5:25:64:99:ef:28:5b:37:dd:f2: 13:8c:3f:d0:d0:96:b0:68:42:4e:bd:9c:d4:bd:93: f3:3d:13:4f:65:25:a1:c2:4a:38:55:0a:45:8d:7a: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:92:7D:54:C5:28:BF:38:7F:50:78:1C:88:99:37:36:17:7C:8D:8E X509v3 Authority Key Identifier: keyid:A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:51:eb:bf:35:3c:9d:6a:96:d3:0f:4e:c7:20:fd:e8:f5:05: 3b:16:8a:23:2c:b1:b5:28:c4:cd:4a:f4:6d:66:13:b5:b9:33: 25:a8:e1:2f:89:c6:03:23:d7:c0:17:8b:27:de:ad:27:e0:88: 80:c3:d6:1a:61:98:10:68:10:26:48:3c:c0:d1:97:1f:6d:51: 51:6e:0b:aa:a5:95:84:bc:94:a1:0c:42:4d:04:76:c0:fa:23: 9f:46:e8:c7:15:7a:73:21:46:70:66:ea:1c:23:47:db:1d:b5: 9f:fa:6f:d4:0e:ab:85:cd:4f:15:1b:92:04:14:c2:0b:6f:74: 23:aa:80:59:eb:6d:85:55:6b:93:af:4d:62:b8:ea:f4:60:13: f2:c7:0e:15:04:39:d2:c4:87:1b:79:49:25:97:4d:33:eb:23: 93:e1:3a:96:2a:10:0e:cf:2b:f8:ac:1d:97:3b:c4:3e:f1:b5: b8:34:33:41:45:5d:67:df:dc:21:94:f0:a8:aa:9d:33:e3:c8: 8f:c4:34:22:b6:a4:5e:ce:88:9c:d9:7a:df:e5:57:1b:02:61: 38:23:5c:ab:c7:c4:23:38:a3:1c:13:27:89:06:14:7f:b2:32: 52:9e:1f:6f:cf:c8:e6:4d:a4:44:5d:f8:b6:e0:35:3b:43:13: 09:f2:6c:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTUzNzExMC8GA1UEBRMoQTA4ODUwRDUzMTVGNzRCNjE0OEMyRTU2Rjk2NEE3REMx OTM2NDBBRTAeFw0yNjA4MjUwODQ5MTBaFw0yNjA5MDEwODQ5MTBaMBgxFjAUBgNV BAMTDTZhOGQ1NzA3LTNlMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTEsKQ4IJ2kKKB2oAIvNG0pESisNzAqpAOQABaXQE1+BvLHSNQKnhqLenD45GH RbLhguB+OTvJrcW61psY3/6yxlyJTKOUH6fNjrNq9dz7UhGBfU3PQeFgEk2j/360 uQGXIMt97L58Y5NmWyCITs9QK0QIrG/e3O+7PQDeFPG6jTUy8ywWOyDj9nPPT+6J kFpV5F6OXJTRxwAuEi500WZW8OJTzaEGRgJDpIMNJLI5aAmxbMYnAZcK0HQrcitL QkCdM9A96IDKwaZAzR+rlbWQAVHt2P2ntSVkme8oWzfd8hOMP9DQlrBoQk69nNS9 k/M9E09lJaHCSjhVCkWNesWtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9JJ9VMUo vzh/UHgciJk3Nhd8jY4wHwYDVR0jBBgwFoAUoIhQ1TFfdLYUjC5W+WSn3Bk2QK4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNTM3L0Q1QjNCNTQwNzYw MzExRjFCOUI2NDhBQzc5QTMwRkJDL29JaFExVEZmZExZVWpDNVctV1NuM0JrMlFL NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0loUTFURmZkTFlVakM1Vy1XU24zQmsyUUs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NTM3L0Q1QjNCNTQwNzYwMzExRjFCOUI2NDhBQzc5QTMwRkJDL29JaFExVEZmZExZ VWpDNVctV1NuM0JrMlFLNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCrUeu/NTydapbTD07HIP3o9QU7FoojLLG1KMTNSvRtZhO1uTMlqOEvicYDI9fA F4sn3q0n4IiAw9YaYZgQaBAmSDzA0ZcfbVFRbguqpZWEvJShDEJNBHbA+iOfRujH FXpzIUZwZuocI0fbHbWf+m/UDquFzU8VG5IEFMILb3QjqoBZ622FVWuTr01iuOr0 YBPyxw4VBDnSxIcbeUkll00z6yOT4TqWKhAOzyv4rB2XO8Q+8bW4NDNBRV1n39wh lPCoqp0z48iPxDQitqRezoic2Xrf5VcbAmE4I1yrx8QjOKMcEyeJBhR/sjJSnh9v z8jmTaREXfi24DU7QxMJ8mzl -----END CERTIFICATE-----Generated at Tue Aug 25 11:49:05 2026 by rpki-client