$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft File: O-7kvaWgSxBLHXLmAcMJONuktkQ.mft (raw, json) Hash identifier: KFVGN2HnFt0NGO0wmV5AdNr9zJfmfL/sy82AhlRQ488= Subject key identifier: AE:CF:66:CD:5B:C6:62:DF:71:FE:D0:D0:20:45:3A:E8:06:1D:70:D8 Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44 Certificate issuer: /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644 Certificate serial: 1610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft Manifest number: 1601 Signing time: Fri 02 Oct 2026 17:48:17 +0000 Manifest this update: Fri 02 Oct 2026 17:48:17 +0000 Manifest next update: Fri 09 Oct 2026 17:48:17 +0000 Files and hashes: 1: O-7kvaWgSxBLHXLmAcMJONuktkQ.crl (hash: 7G8nSiP4cXkW4k3c18aNATHFIJ9xJehKp4mCJnfdKVo=) 2: D9EDB272C44C11ECA07C2D77C4F9AE02.roa (hash: DJ4I97O5v0aU8HleXouiaPdcBM6EY3fv5eqakvOyiz0=) 3: hFMZsglF8S5qKyYe0loV0EpQwqA.asa (hash: ba3cl00WkDcRPVUDQo4uuufiFG3d+xglLs/+ri+2/Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5648 (0x1610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D2A3, serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644 Validity Not Before: Oct 2 17:48:17 2026 GMT Not After : Oct 9 17:48:17 2026 GMT Subject: CN=6abfee61-8ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:48:ed:c9:a1:87:91:08:38:0e:c3:d0:2a: 76:37:85:51:94:a8:00:dc:a7:ff:de:69:1d:12:b0: cc:30:52:99:de:8b:c9:d2:bd:50:90:b2:4b:63:54: ea:4e:eb:78:cb:6a:18:91:65:ea:ba:58:31:00:09: ed:05:73:1d:bf:9f:89:3e:35:0d:e9:a1:89:5a:8f: af:d4:0c:86:23:a3:58:8d:5c:89:78:08:8a:54:3a: 92:b9:6c:d3:85:4f:35:f2:2c:14:11:73:4b:67:ae: f5:35:91:89:87:79:7f:56:39:dd:f1:f2:67:6d:6c: 46:b6:ca:0d:83:5e:ad:7c:99:dc:04:09:8a:b2:31: 1a:29:f6:82:a8:63:f6:15:11:15:af:e1:3c:c7:0d: 4a:4d:c7:b0:83:6f:d4:7b:8e:f4:40:01:34:9e:43: 04:b3:9c:6b:d8:7e:2e:bb:64:8b:3c:32:b7:36:23: 7a:e7:39:01:a9:c0:27:d2:11:6d:19:2c:db:91:41: 15:ab:62:87:0f:2e:ca:b6:87:2c:6e:51:20:ba:dc: dd:09:79:d1:8b:ed:4a:d7:74:2b:c9:dc:83:8f:04: fa:bd:09:2c:6c:08:92:de:22:0d:92:35:6e:62:ed: 99:8a:db:74:b2:b8:a7:83:8e:10:58:1f:86:08:03: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CF:66:CD:5B:C6:62:DF:71:FE:D0:D0:20:45:3A:E8:06:1D:70:D8 X509v3 Authority Key Identifier: keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:f3:6e:2a:c5:e4:93:09:e2:97:3f:5a:53:63:0e:88:f7: 80:5d:61:90:90:d4:0e:f9:a5:82:0f:1b:fd:59:e8:4f:09:ec: 06:a8:63:5a:73:05:04:a6:55:74:91:b0:af:b3:4d:b5:12:93: 4a:22:da:83:eb:fc:d1:80:73:14:bb:1c:68:8b:1b:51:00:5b: d9:99:d8:cb:c9:5e:4e:e3:eb:6b:be:93:34:fb:33:f9:41:13: 78:22:c5:2f:03:a2:52:0d:a7:7a:c5:04:b8:24:aa:46:dd:75: b8:3a:5f:8b:90:4d:22:40:54:fe:35:80:17:66:b3:14:8f:f3: 4e:25:ac:ac:62:67:99:42:82:34:cf:c4:51:6b:ea:1c:46:90: c3:eb:89:fe:b1:cc:ff:3c:a1:cd:f8:fe:2d:52:3e:ba:c7:14: cd:d6:09:ae:33:4f:14:21:35:07:9c:0c:83:01:4c:69:38:03: 7f:81:eb:2f:ba:b9:61:47:fa:d9:0e:23:d1:ac:86:44:f2:e9: a3:73:7c:41:c8:a7:3c:43:fb:2e:c4:39:b1:04:14:7a:4a:fa: 57:14:42:78:d7:97:8e:7a:51:77:88:dd:f6:6f:3e:13:77:1f: eb:0d:3f:54:f7:e6:e9:30:8e:8d:e2:3e:7c:8f:14:79:ff:73: 2e:22:2a:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQyQTMxMTAvBgNVBAUTKDNCRUVFNEJEQTVBMDRCMTA0QjFENzJFNjAxQzMwOTM4 REJBNEI2NDQwHhcNMjYxMDAyMTc0ODE3WhcNMjYxMDA5MTc0ODE3WjAYMRYwFAYD VQQDEw02YWJmZWU2MS04ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKRI7cmhh5EIOA7D0Cp2N4VRlKgA3Kf/3mkdErDMMFKZ3ovJ0r1QkLJLY1Tq Tut4y2oYkWXqulgxAAntBXMdv5+JPjUN6aGJWo+v1AyGI6NYjVyJeAiKVDqSuWzT hU818iwUEXNLZ671NZGJh3l/Vjnd8fJnbWxGtsoNg16tfJncBAmKsjEaKfaCqGP2 FREVr+E8xw1KTcewg2/Ue470QAE0nkMEs5xr2H4uu2SLPDK3NiN65zkBqcAn0hFt GSzbkUEVq2KHDy7KtocsblEgutzdCXnRi+1K13QrydyDjwT6vQksbAiS3iINkjVu Yu2Zitt0sring44QWB+GCAMohQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7PZs1b xmLfcf7Q0CBFOugGHXDYMB8GA1UdIwQYMBaAFDvu5L2loEsQSx1y5gHDCTjbpLZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDJBMy9GNkFDNjM4NjRF RkQxMUU4ODkyQjg2ODNDNEY5QUUwMi9PLTdrdmFXZ1N4QkxIWExtQWNNSk9OdWt0 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08tN2t2YVdnU3hCTEhYTG1BY01KT051a3RrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDJBMy9GNkFDNjM4NjRFRkQxMUU4ODkyQjg2ODNDNEY5QUUwMi9PLTdrdmFXZ1N4 QkxIWExtQWNNSk9OdWt0a1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo9jzbirF5JMJ4pc/WlNjDoj3gF1hkJDUDvmlgg8b/VnoTwnsBqhjWnMFBKZV dJGwr7NNtRKTSiLag+v80YBzFLscaIsbUQBb2ZnYy8leTuPra76TNPsz+UETeCLF LwOiUg2nesUEuCSqRt11uDpfi5BNIkBU/jWAF2azFI/zTiWsrGJnmUKCNM/EUWvq HEaQw+uJ/rHM/zyhzfj+LVI+uscUzdYJrjNPFCE1B5wMgwFMaTgDf4HrL7q5YUf6 2Q4j0ayGRPLpo3N8QcinPEP7LsQ5sQQUekr6VxRCeNeXjnpRd4jd9m8+E3cf6w0/ VPfm6TCOjeI+fI8Uef9zLiIqWg== -----END CERTIFICATE-----Generated at Sun Oct 4 08:19:56 2026 by rpki-client