$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json) Hash identifier: DgGicyNphQImQMb1lFf22pixf3ovcmiU5BM9QLOdJr4= Subject key identifier: 91:49:3E:B5:60:07:E0:D9:8A:DF:3A:A1:92:6B:AA:49:4E:FD:6D:F7 Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft Manifest number: 97 Signing time: Mon 19 Oct 2026 08:07:33 +0000 Manifest this update: Mon 19 Oct 2026 08:07:32 +0000 Manifest next update: Mon 26 Oct 2026 08:07:32 +0000 Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: bFQqAuCU7xvxTd1WJDUOx6aJ4VRmQFfGY8/n1BLmxdU=) 2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Oct 19 08:07:32 2026 GMT Not After : Oct 26 08:07:32 2026 GMT Subject: CN=6ad5cfc5-9c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:2d:1e:ca:48:ad:37:05:1a:a8:db:5c:c5: 21:b0:dc:8c:ef:75:90:db:cd:9b:29:66:31:3d:fa: 58:02:9d:21:09:bc:01:b8:ea:cf:84:08:99:21:2f: 4e:c3:86:11:af:f3:b3:ab:cd:12:17:85:6f:c8:51: c3:6d:27:4f:1c:c2:8d:6e:0b:0e:09:24:9d:10:2e: 51:39:06:85:b2:63:62:81:fa:8a:63:1e:85:63:f2: 01:1a:37:43:c4:58:3c:93:90:75:00:b0:66:e8:3c: 04:76:77:4c:32:10:1f:4a:94:a7:3c:4a:d5:6e:7c: 14:cd:37:11:7f:17:86:79:06:98:9d:86:34:26:10: eb:d1:8e:f4:37:36:46:9e:24:ed:2c:c9:be:5f:a4: 9c:06:a8:ac:71:70:36:e1:a4:2c:23:f9:b6:f6:2e: b0:dd:36:cb:d5:2a:47:06:59:4b:28:f6:74:fc:7b: 6b:73:24:d0:13:0e:01:1b:35:73:05:a5:cd:d4:0c: 1b:72:f0:f9:82:01:1d:9e:e2:22:5f:3b:f4:04:1c: 89:c8:1d:fe:56:87:25:06:d5:64:53:ad:68:19:0a: b9:94:30:de:a8:2e:d3:44:b4:21:51:91:6d:26:85: a0:b8:d8:47:38:d0:bf:70:59:9b:7b:8a:5d:1d:f4: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:3E:B5:60:07:E0:D9:8A:DF:3A:A1:92:6B:AA:49:4E:FD:6D:F7 X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:11:c6:75:56:75:0f:be:4a:97:96:0e:39:1e:b0:2c:3d:22: f0:2a:cb:56:e0:38:a6:ed:31:d2:eb:94:9b:8f:da:d4:77:39: 92:cc:2e:25:02:b7:29:58:d8:f9:8d:a5:df:e5:df:51:56:96: a1:1a:f5:09:f6:aa:bc:a6:91:1d:f9:d6:dd:77:e0:6d:c6:b8: 6f:23:02:e9:c6:6c:e6:d8:67:fb:ca:ab:a5:c7:b4:e8:6d:87: ba:cb:52:e9:fe:d9:ac:4d:67:9b:2c:51:ab:54:17:37:0a:ee: 98:4c:15:98:bc:34:03:3d:e7:e7:9d:53:ed:f1:20:4b:0e:78: 30:ae:57:ad:be:2e:af:7f:ad:e0:4c:6c:1e:11:29:92:23:00: c1:c0:7b:d5:b2:ae:b0:98:5b:38:08:7f:f8:a0:80:01:d5:6a: 7e:02:13:c8:c9:8d:b8:ed:20:b7:38:04:7e:ca:6f:6c:ba:68: 05:2c:fc:ef:74:66:05:84:ec:91:dc:1e:00:02:eb:05:9a:45: c8:12:79:91:3a:c9:4e:11:3f:71:4f:d0:9a:68:25:30:9f:8c: 3e:d8:0a:b7:71:89:40:15:d2:e6:dd:7f:4e:40:0f:f2:0b:0e: b1:05:9d:f2:fe:b1:31:3e:7d:77:8b:ad:a4:da:ee:e3:34:37: f5:24:a6:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4RjYxMTAvBgNVBAUTKEExQUEyQTJDNTZFNjRBOUQ5QkJBQTMzN0I2RDZBQjM2 MTcyRDM2OEYwHhcNMjYxMDE5MDgwNzMyWhcNMjYxMDI2MDgwNzMyWjAYMRYwFAYD VQQDEw02YWQ1Y2ZjNS05YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkPQtHspIrTcFGqjbXMUhsNyM73WQ282bKWYxPfpYAp0hCbwBuOrPhAiZIS9O w4YRr/Ozq80SF4VvyFHDbSdPHMKNbgsOCSSdEC5ROQaFsmNigfqKYx6FY/IBGjdD xFg8k5B1ALBm6DwEdndMMhAfSpSnPErVbnwUzTcRfxeGeQaYnYY0JhDr0Y70NzZG niTtLMm+X6ScBqiscXA24aQsI/m29i6w3TbL1SpHBllLKPZ0/HtrcyTQEw4BGzVz BaXN1AwbcvD5ggEdnuIiXzv0BByJyB3+VoclBtVkU61oGQq5lDDeqC7TRLQhUZFt JoWguNhHONC/cFmbe4pdHfS6OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFJPrVg B+DZit86oZJrqklO/W33MB8GA1UdIwQYMBaAFKGqKixW5kqdm7qjN7bWqzYXLTaP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRThGNi8zRDZEOEZGMEU3 QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy9vYW9xTEZibVNwMmJ1cU0zdHRhck5oY3RO bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5vOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RThGNi8zRDZEOEZGMEU3QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy9vYW9xTEZibVNw MmJ1cU0zdHRhck5oY3RObzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRHGdVZ1D75Kl5YOOR6wLD0i8CrLVuA4pu0x0uuUm4/a1Hc5kswuJQK3KVjY +Y2l3+XfUVaWoRr1CfaqvKaRHfnW3Xfgbca4byMC6cZs5thn+8qrpce06G2HustS 6f7ZrE1nmyxRq1QXNwrumEwVmLw0Az3n551T7fEgSw54MK5Xrb4ur3+t4ExsHhEp kiMAwcB71bKusJhbOAh/+KCAAdVqfgITyMmNuO0gtzgEfspvbLpoBSz873RmBYTs kdweAALrBZpFyBJ5kTrJThE/cU/QmmglMJ+MPtgKt3GJQBXS5t1/TkAP8gsOsQWd 8v6xMT59d4utpNru4zQ39SSm/Q== -----END CERTIFICATE-----Generated at Tue Oct 20 18:31:31 2026 by rpki-client