$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft File: RiOppNLqhemPtaEaDSywgDiHjw8.mft (raw, json) Hash identifier: /d5BN1YRa1FCjlGGHBPr/fSZwwhbMYT8eoKQTvmDq/c= Subject key identifier: 33:0E:8B:74:0F:17:A1:C5:29:C6:91:0D:79:07:D4:4A:1D:18:6A:C0 Authority key identifier: 46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F Certificate issuer: /CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Certificate serial: 0CE0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft Manifest number: 0CD6 Signing time: Sun 18 Oct 2026 18:34:55 +0000 Manifest this update: Sun 18 Oct 2026 18:34:54 +0000 Manifest next update: Sun 25 Oct 2026 18:34:54 +0000 Files and hashes: 1: RiOppNLqhemPtaEaDSywgDiHjw8.crl (hash: LChVwfwptKjSHeBBcNPt4rkJap9CQTuWdkTKHkralxs=) 2: 75E6DD481BDA11EAB3F45D44C4F9AE02.roa (hash: 1pX+suWdvaKMGIWE2+J1hAusGSSmWNeIkojCLUq1N5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Validity Not Before: Oct 18 18:34:54 2026 GMT Not After : Oct 25 18:34:54 2026 GMT Subject: CN=6ad5114f-5eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:75:59:8d:40:37:df:3f:31:4e:28:97:60: 5a:7f:d3:e9:cf:24:02:44:37:d7:65:68:5c:a5:05: b4:59:e4:5a:ab:32:d2:df:5c:4d:f1:fc:dc:30:28: 0c:1e:41:b7:6b:28:bd:62:3c:aa:a2:f1:d3:e4:66: 32:46:39:72:26:bd:02:89:08:b2:74:f5:d7:1d:07: 63:82:7a:0f:d9:07:1a:22:10:96:e0:93:02:7e:ad: 94:8e:5e:7a:fd:f9:47:07:75:b6:11:c7:e9:8e:bb: 25:0b:b1:2f:e0:44:e2:db:ff:76:56:6b:ec:0b:e2: 4f:b3:dd:61:33:15:63:4e:38:17:5c:57:7f:70:65: fe:f1:3d:d7:a4:82:bf:1b:a3:4c:54:6b:cc:2c:bb: 6d:c3:4d:2a:71:39:dc:7d:f0:ae:7a:02:59:0b:7d: 50:61:c6:7d:92:ed:98:99:f5:0e:f1:76:ac:d7:2e: 5b:04:67:56:65:0a:f8:5a:db:97:8a:cb:dc:37:0f: 9f:0e:18:0b:42:ae:34:e5:17:9a:0b:e7:93:92:ee: 31:ab:e7:0d:4f:bb:5c:4f:71:68:31:9c:0e:6e:87: 07:e8:18:57:ba:9b:49:a8:6e:00:70:de:6c:8c:59: b4:d9:fe:bf:26:6e:44:a6:10:0d:e1:c3:26:98:0c: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0E:8B:74:0F:17:A1:C5:29:C6:91:0D:79:07:D4:4A:1D:18:6A:C0 X509v3 Authority Key Identifier: keyid:46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:2c:1c:26:22:a4:e7:55:6c:0e:ed:16:88:1b:16:3f:41:d0: 2e:62:38:82:a7:c9:3d:19:38:42:6f:77:3d:0b:82:bf:2d:61: 59:0d:cf:9c:44:95:5b:fd:6b:30:16:59:b8:b6:1f:87:37:a2: a0:1a:3d:1c:9a:29:19:b7:0e:99:72:21:ce:a7:ac:f8:e4:51: 24:af:13:5e:3d:2b:42:77:9a:69:7a:97:bf:7d:1e:90:f9:d6: 5b:a7:0d:13:72:68:b3:2e:98:f1:94:34:8c:88:bc:47:ee:1e: 68:7a:34:b8:c2:7a:2b:bc:c2:5a:98:64:8d:b7:75:a1:1d:4a: 72:7c:b9:0d:bd:ab:cd:18:69:24:7d:0c:e8:fd:93:cf:a5:17: 2a:b7:22:b6:12:11:54:a6:af:53:a2:a6:e4:1a:e0:38:55:80: a5:2b:ab:13:06:57:2a:8a:15:2a:b0:50:37:f8:8e:dc:61:55: f4:fb:78:5a:a2:b2:d7:c8:66:58:47:b5:8c:61:52:48:54:43: 42:74:ea:52:7f:b5:ab:f2:a7:4f:83:c2:fe:2f:99:fa:60:f1: 70:5e:eb:3c:a4:fe:07:d5:f8:bd:d1:38:89:28:34:51:f4:78: 08:df:73:ea:d6:d8:bd:4f:17:53:04:b3:8c:e0:7a:d6:96:34: 50:4f:8c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDQ2MjNBOUE0RDJFQTg1RTk4RkI1QTExQTBEMkNCMDgw Mzg4NzhGMEYwHhcNMjYxMDE4MTgzNDU0WhcNMjYxMDI1MTgzNDU0WjAYMRYwFAYD VQQDEw02YWQ1MTE0Zi01ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxV1WY1AN98/MU4ol2Baf9PpzyQCRDfXZWhcpQW0WeRaqzLS31xN8fzcMCgM HkG3ayi9YjyqovHT5GYyRjlyJr0CiQiydPXXHQdjgnoP2QcaIhCW4JMCfq2Ujl56 /flHB3W2EcfpjrslC7Ev4ETi2/92VmvsC+JPs91hMxVjTjgXXFd/cGX+8T3XpIK/ G6NMVGvMLLttw00qcTncffCuegJZC31QYcZ9ku2YmfUO8Xas1y5bBGdWZQr4WtuX isvcNw+fDhgLQq405ReaC+eTku4xq+cNT7tcT3FoMZwObocH6BhXuptJqG4AcN5s jFm02f6/Jm5EphAN4cMmmAy8kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMOi3QP F6HFKcaRDXkH1EodGGrAMB8GA1UdIwQYMBaAFEYjqaTS6oXpj7WhGg0ssIA4h48P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9EMDA0OUY4NjFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhlbVB0YUVhRFN5d2dEaUhq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JpT3BwTkxxaGVtUHRhRWFEU3l3Z0RpSGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9EMDA0OUY4NjFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhl bVB0YUVhRFN5d2dEaUhqdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCwcJiKk51VsDu0WiBsWP0HQLmI4gqfJPRk4Qm93PQuCvy1hWQ3PnESVW/1r MBZZuLYfhzeioBo9HJopGbcOmXIhzqes+ORRJK8TXj0rQneaaXqXv30ekPnWW6cN E3Josy6Y8ZQ0jIi8R+4eaHo0uMJ6K7zCWphkjbd1oR1Kcny5Db2rzRhpJH0M6P2T z6UXKrcithIRVKavU6Km5BrgOFWApSurEwZXKooVKrBQN/iO3GFV9Pt4WqKy18hm WEe1jGFSSFRDQnTqUn+1q/KnT4PC/i+Z+mDxcF7rPKT+B9X4vdE4iSg0UfR4CN9z 6tbYvU8XUwSzjOB61pY0UE+M/w== -----END CERTIFICATE-----Generated at Mon Oct 19 01:45:52 2026 by rpki-client