$ rpki-client -vvvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: tpMVES01M3DpLiIVrYFrHH7plZxO9vFOXHVhs6A0q2s= Subject key identifier: 10:62:63:F0:E9:DB:AA:48:4E:E7:EF:37:49:01:6A:66:0E:A6:70:82 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 090A Signing time: Tue 06 Oct 2026 20:25:23 +0000 Manifest this update: Tue 06 Oct 2026 20:25:22 +0000 Manifest next update: Tue 13 Oct 2026 20:25:22 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: ZVWfPK6eZZ0iC+vU29nryeQ0pF+VDbwIMyG1zlQyvaw=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Oct 6 20:25:22 2026 GMT Not After : Oct 13 20:25:22 2026 GMT Subject: CN=6ac55933-4393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:dc:cb:c5:0e:d4:91:11:d6:b2:c7:5d:61: 54:37:fc:ba:db:cd:be:c4:d9:c9:df:45:72:19:0d: ea:ae:c8:e0:c0:ff:1d:65:8b:5b:c5:2d:e5:8f:b0: 66:fa:ee:af:94:4e:98:35:22:6b:38:4a:87:1d:a0: 56:9c:14:55:61:16:df:8d:7d:4a:45:2b:74:5e:76: fa:6a:d5:24:91:34:2b:a2:b2:6b:32:30:36:de:f6: 50:a0:5a:db:4e:2f:9b:ed:99:80:a9:be:b5:8a:7b: 54:17:31:20:55:e6:88:33:a4:75:76:49:60:cd:04: 2a:1c:d2:45:d7:2d:76:ed:d1:cb:53:11:8e:30:1c: c9:88:05:7e:4f:be:87:ab:20:6e:0d:2b:14:a6:db: 00:a1:1b:60:a9:a6:47:74:5a:c7:c6:5b:8c:6b:00: 8d:c4:5e:33:1b:17:69:28:eb:bc:a3:28:b0:58:49: 4d:47:0c:01:f8:6f:e2:62:57:37:55:11:f3:99:ef: 9a:28:26:ca:35:bb:a2:b6:c9:6a:63:0e:33:08:91: f9:e3:44:df:81:dc:81:8c:6e:d1:9f:1d:56:ef:67: 31:20:02:e5:9c:61:35:55:f2:4f:6f:b0:4b:d2:16: 98:b7:41:d0:47:b3:dd:57:10:ba:a6:b0:83:bd:86: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:63:F0:E9:DB:AA:48:4E:E7:EF:37:49:01:6A:66:0E:A6:70:82 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a8:6c:fa:1f:39:ea:f9:3f:85:b8:16:27:a9:71:dc:ad:c1: 1a:8a:8c:4f:75:e2:b0:5c:a9:45:3c:47:65:aa:cf:ed:ba:0c: 5e:61:39:69:9b:57:04:5e:4b:05:20:69:ec:31:2b:3b:7a:04: 5c:cc:0c:2a:ab:72:28:98:66:ef:89:5f:1f:45:bc:a9:a7:c8: 20:0e:12:f2:bb:11:fa:10:3f:d7:15:23:d7:a8:b3:32:22:40: 24:b5:48:d3:a5:36:be:67:63:d1:81:77:d7:8a:69:fb:86:4a: 81:5a:0d:19:9e:c9:d6:78:2f:1a:d2:ec:91:7d:10:d6:3f:c7: 3f:b2:aa:56:b0:f9:b7:0b:18:0d:7c:93:31:70:b8:8b:2d:0a: 2a:62:63:59:85:99:5e:a4:7f:b3:98:f1:4f:80:21:0d:04:22: 52:94:18:50:83:e9:68:30:b0:e0:33:28:f4:b5:3a:dc:66:ec: 0a:23:a1:f6:2b:da:c7:e2:96:9d:cc:dd:eb:a4:e0:95:17:ec: 82:4b:93:ad:5f:77:09:7d:ea:a5:17:2e:cc:d6:ea:94:18:b1: f6:b1:08:b1:a2:b3:0e:4c:05:00:ee:29:21:99:fc:2f:1d:b3: 35:87:62:ff:63:fc:32:8a:ed:c8:05:d2:0c:02:0b:ef:88:37: 21:3e:de:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYxMDA2MjAyNTIyWhcNMjYxMDEzMjAyNTIyWjAYMRYwFAYD VQQDEw02YWM1NTkzMy00MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw7cy8UO1JER1rLHXWFUN/y6282+xNnJ30VyGQ3qrsjgwP8dZYtbxS3lj7Bm +u6vlE6YNSJrOEqHHaBWnBRVYRbfjX1KRSt0Xnb6atUkkTQrorJrMjA23vZQoFrb Ti+b7ZmAqb61intUFzEgVeaIM6R1dklgzQQqHNJF1y127dHLUxGOMBzJiAV+T76H qyBuDSsUptsAoRtgqaZHdFrHxluMawCNxF4zGxdpKOu8oyiwWElNRwwB+G/iYlc3 VRHzme+aKCbKNbuitslqYw4zCJH540TfgdyBjG7Rnx1W72cxIALlnGE1VfJPb7BL 0haYt0HQR7PdVxC6prCDvYYgxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBiY/Dp 26pITufvN0kBamYOpnCCMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg6hs+h856vk/hbgWJ6lx3K3BGoqMT3XisFypRTxHZarP7boMXmE5aZtXBF5L BSBp7DErO3oEXMwMKqtyKJhm74lfH0W8qafIIA4S8rsR+hA/1xUj16izMiJAJLVI 06U2vmdj0YF314pp+4ZKgVoNGZ7J1ngvGtLskX0Q1j/HP7KqVrD5twsYDXyTMXC4 iy0KKmJjWYWZXqR/s5jxT4AhDQQiUpQYUIPpaDCw4DMo9LU63GbsCiOh9ivax+KW nczd66TglRfsgkuTrV93CX3qpRcuzNbqlBix9rEIsaKzDkwFAO4pIZn8Lx2zNYdi /2P8MortyAXSDAIL74g3IT7eVg== -----END CERTIFICATE-----Generated at Thu Oct 8 08:53:05 2026 by rpki-client