$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft File: RiOppNLqhemPtaEaDSywgDiHjw8.mft (raw, json) Hash identifier: cFqXo25xHdt3WF1ToGe6eMqo1DHKZwNsXawL1fPgXGg= Subject key identifier: F8:AD:54:13:4E:F6:DB:6E:50:33:90:54:BA:A4:A6:BE:8F:A5:34:23 Authority key identifier: 46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F Certificate issuer: /CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft Manifest number: 0CBE Signing time: Mon 31 Aug 2026 18:31:03 +0000 Manifest this update: Mon 31 Aug 2026 18:31:02 +0000 Manifest next update: Mon 07 Sep 2026 18:31:02 +0000 Files and hashes: 1: RiOppNLqhemPtaEaDSywgDiHjw8.crl (hash: 1M99gNf8PB+zhDz4BT1uXySXyDr2wY5sqHPQDOH+6r8=) 2: 75E6DD481BDA11EAB3F45D44C4F9AE02.roa (hash: 1pX+suWdvaKMGIWE2+J1hAusGSSmWNeIkojCLUq1N5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 18:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Validity Not Before: Aug 31 18:31:02 2026 GMT Not After : Sep 7 18:31:02 2026 GMT Subject: CN=6a95c867-9dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:39:de:d9:1b:be:d5:6e:a7:08:23:62:e2: 20:a6:1b:4c:a2:e7:66:2f:84:5e:5f:76:1b:2f:3c: 11:d2:7e:97:2e:9f:bc:0d:0b:e4:f7:6f:f3:7c:0f: cb:d4:07:b3:45:c1:7e:6c:f9:10:61:dc:28:a3:12: 6d:a0:ea:b1:f1:c6:8c:96:a9:73:8e:8b:35:fe:06: 0d:c3:72:c5:6c:4d:aa:53:47:a9:ae:93:61:0e:58: 50:69:ad:27:eb:d6:a5:07:15:2b:8b:46:37:4d:e0: b9:99:c3:9f:a4:79:b0:77:16:f9:be:21:f1:51:99: b2:e5:64:dc:53:88:c6:9f:df:58:4d:75:5b:36:29: c0:aa:1b:b5:43:bd:db:e0:24:7c:d5:ce:d5:ca:d1: 7e:0a:71:4a:59:81:45:fa:e2:9b:3a:b4:4b:81:bb: 07:a6:14:68:ca:53:bd:1b:dc:27:cd:ee:73:d2:35: 28:95:2d:a4:ed:7f:be:4a:b1:ed:01:6c:54:7c:d1: e5:94:3d:ae:a6:67:53:26:bf:fc:7c:1f:d2:b9:96: fb:37:9c:16:3d:f1:b2:88:61:f8:aa:52:09:39:6f: 10:33:eb:58:4e:a1:8d:47:de:50:c6:41:c3:4d:7d: 6a:19:46:f7:ae:3d:6f:89:9b:10:b6:03:b1:6b:a1: 1d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AD:54:13:4E:F6:DB:6E:50:33:90:54:BA:A4:A6:BE:8F:A5:34:23 X509v3 Authority Key Identifier: keyid:46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d4:c1:71:c6:ac:8b:48:2a:43:e0:a5:ce:2c:dd:b1:af:e0: 3f:b4:0b:b0:47:cc:a9:b3:d1:dc:fd:c0:45:4e:45:67:cf:80: 1a:53:d4:4b:4f:a3:62:f2:ad:3a:29:0a:2c:7f:ec:da:5f:b3: 8f:ff:9f:85:37:a2:e3:d8:f1:e1:2c:02:81:59:10:75:67:25: 89:54:61:57:ea:bc:c8:f6:a5:98:dd:dd:44:64:57:39:b2:a3: 81:85:00:a1:04:d2:1c:c2:12:5a:a5:2d:57:6a:ab:51:bb:21: 8d:e2:65:76:78:12:ab:1c:c7:a1:d5:de:d3:18:a1:80:fb:3d: 97:a0:76:de:37:e1:ea:00:fe:23:cc:e4:01:21:ab:d6:cf:f8: b5:d1:fc:27:21:e8:99:e4:ce:c5:02:ec:90:a0:7c:ce:2b:3e: f0:c4:9b:55:67:89:1d:5b:31:2c:c0:57:62:47:b9:5b:85:83: ce:a7:c7:03:d4:15:22:19:3e:fc:b4:3f:dd:4a:b9:76:46:5a: 46:8e:01:6c:2c:41:3b:50:c0:54:91:0f:91:19:8a:5d:7a:13: c1:1e:df:eb:55:6a:bd:a6:da:96:17:7e:90:b3:9d:38:8b:7f: f7:27:7f:e8:35:45:61:23:89:ce:76:67:25:2a:2a:f5:72:ce: d1:8a:b9:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDQ2MjNBOUE0RDJFQTg1RTk4RkI1QTExQTBEMkNCMDgw Mzg4NzhGMEYwHhcNMjYwODMxMTgzMTAyWhcNMjYwOTA3MTgzMTAyWjAYMRYwFAYD VQQDEw02YTk1Yzg2Ny05ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vQ53tkbvtVupwgjYuIgphtMoudmL4ReX3YbLzwR0n6XLp+8DQvk92/zfA/L 1AezRcF+bPkQYdwooxJtoOqx8caMlqlzjos1/gYNw3LFbE2qU0eprpNhDlhQaa0n 69alBxUri0Y3TeC5mcOfpHmwdxb5viHxUZmy5WTcU4jGn99YTXVbNinAqhu1Q73b 4CR81c7VytF+CnFKWYFF+uKbOrRLgbsHphRoylO9G9wnze5z0jUolS2k7X++SrHt AWxUfNHllD2upmdTJr/8fB/SuZb7N5wWPfGyiGH4qlIJOW8QM+tYTqGNR95QxkHD TX1qGUb3rj1viZsQtgOxa6EdowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPitVBNO 9ttuUDOQVLqkpr6PpTQjMB8GA1UdIwQYMBaAFEYjqaTS6oXpj7WhGg0ssIA4h48P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9EMDA0OUY4NjFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhlbVB0YUVhRFN5d2dEaUhq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JpT3BwTkxxaGVtUHRhRWFEU3l3Z0RpSGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9EMDA0OUY4NjFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhl bVB0YUVhRFN5d2dEaUhqdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtTBccasi0gqQ+Clzizdsa/gP7QLsEfMqbPR3P3ARU5FZ8+AGlPUS0+jYvKt OikKLH/s2l+zj/+fhTei49jx4SwCgVkQdWcliVRhV+q8yPalmN3dRGRXObKjgYUA oQTSHMISWqUtV2qrUbshjeJldngSqxzHodXe0xihgPs9l6B23jfh6gD+I8zkASGr 1s/4tdH8JyHomeTOxQLskKB8zis+8MSbVWeJHVsxLMBXYke5W4WDzqfHA9QVIhk+ /LQ/3Uq5dkZaRo4BbCxBO1DAVJEPkRmKXXoTwR7f61Vqvabalhd+kLOdOIt/9yd/ 6DVFYSOJznZnJSoq9XLO0Yq5Ow== -----END CERTIFICATE-----Generated at Tue Sep 1 04:52:11 2026 by rpki-client