$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: xGtduu1ssfPHnRzAqNOohMzEU8i28X3tlaXvkTV0lZ0= Subject key identifier: 17:7B:85:4B:F8:A0:3D:EB:E0:8D:E0:7D:16:18:B0:88:31:1F:39:1A Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: 013A Signing time: Thu 01 Oct 2026 06:42:46 +0000 Manifest this update: Thu 01 Oct 2026 06:42:45 +0000 Manifest next update: Thu 08 Oct 2026 06:42:45 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: RpY5659mJrYV6Bgq8tbdbWLM5XGqMjc74alhnvW0I70=) 2: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=) 3: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 06:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Oct 1 06:42:45 2026 GMT Not After : Oct 8 06:42:45 2026 GMT Subject: CN=6abe00e5-5dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:ef:93:c8:64:e0:7d:78:14:e7:2e:bd:f5: 0a:45:37:e0:7e:3d:c1:3a:07:c6:6d:b5:fc:b9:5d: cd:8b:94:12:5b:8d:50:e6:eb:1c:34:1e:75:5d:13: 50:4d:e7:b2:42:fc:f4:22:2e:54:51:7b:1f:f7:de: 4b:1d:5a:ba:d2:a1:bd:97:bb:17:e3:a1:11:a3:47: 29:da:aa:00:07:19:0f:be:10:91:84:29:8f:2b:e1: ed:dd:4c:6f:39:e8:cf:75:d5:1f:b2:40:01:3d:bf: 48:67:12:18:6c:0d:6d:fe:8f:63:6c:dd:f1:79:53: 04:51:d1:fd:02:39:e9:eb:67:8d:92:83:0c:d9:e3: 82:19:c0:50:57:d9:53:bc:27:1b:db:0f:b0:b2:5f: ee:32:b5:ff:83:b7:87:a0:b9:18:84:ae:b3:f7:8e: 1f:6d:65:ae:d5:01:d4:68:cb:c8:c3:f2:65:89:38: 47:7f:70:2a:36:91:6c:3a:6b:09:82:02:ea:93:e7: e8:b7:22:fd:8c:a7:f6:a6:58:c0:c9:55:64:4c:f7: 99:63:e6:1b:f3:78:58:0f:6d:e0:ba:bb:ec:3d:dc: 03:96:8e:b6:88:01:19:43:08:e7:95:10:f9:55:c7: 2c:30:2d:e3:a2:f9:57:03:26:57:7c:9c:d7:82:a5: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7B:85:4B:F8:A0:3D:EB:E0:8D:E0:7D:16:18:B0:88:31:1F:39:1A X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:93:b0:7f:5a:dc:4d:09:c9:c2:01:f0:e5:08:51:c9:81:95: 01:d2:ee:11:f7:2f:63:ce:16:c0:50:6b:43:65:4f:a0:a0:29: 6d:63:4c:6d:01:7e:4c:53:40:56:5d:18:cc:83:12:71:6a:f8: f6:6d:16:91:21:a7:f6:ba:7d:a3:86:0c:5b:cc:52:5d:f5:07: cc:5d:51:3a:68:81:26:37:72:4e:7b:9a:59:9d:bd:2a:1f:6d: 0a:7b:6f:da:7f:4b:d2:b9:4f:69:0d:d1:45:d8:c7:55:6a:25: a7:a3:16:db:be:1c:d3:78:c1:2c:b6:25:7a:3d:69:25:99:a9: 53:9f:91:25:2c:94:9f:e4:ea:ad:de:a5:b4:66:70:c4:df:d7: 47:40:b9:8e:7b:b4:cb:f5:31:7c:71:b3:42:a1:1a:1f:0b:1e: d1:71:70:e8:3d:ae:67:b2:33:a7:3d:3c:25:6b:fa:87:c7:67: 46:15:5d:14:29:6d:97:58:2e:0e:7c:83:f9:1a:aa:e6:52:ff: 27:82:e3:8f:41:8b:38:c8:e4:cc:a0:9d:ec:8b:85:78:36:26: 3e:b0:36:65:5b:28:84:67:05:a8:12:65:97:43:5e:60:f8:50: 71:f5:9e:93:65:d3:8c:03:42:5e:f9:c8:97:b7:f8:e4:ca:43: 4f:3a:2f:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjYxMDAxMDY0MjQ1WhcNMjYxMDA4MDY0MjQ1WjAYMRYwFAYD VQQDEw02YWJlMDBlNS01ZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIbvk8hk4H14FOcuvfUKRTfgfj3BOgfGbbX8uV3Ni5QSW41Q5uscNB51XRNQ TeeyQvz0Ii5UUXsf995LHVq60qG9l7sX46ERo0cp2qoABxkPvhCRhCmPK+Ht3Uxv OejPddUfskABPb9IZxIYbA1t/o9jbN3xeVMEUdH9Ajnp62eNkoMM2eOCGcBQV9lT vCcb2w+wsl/uMrX/g7eHoLkYhK6z944fbWWu1QHUaMvIw/JliThHf3AqNpFsOmsJ ggLqk+fotyL9jKf2pljAyVVkTPeZY+Yb83hYD23gurvsPdwDlo62iAEZQwjnlRD5 VccsMC3jovlXAyZXfJzXgqWlnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBd7hUv4 oD3r4I3gfRYYsIgxHzkaMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm akFpNGtsWDNsWlFhTWNHQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO5Owf1rcTQnJwgHw5QhRyYGVAdLuEfcvY84WwFBrQ2VPoKApbWNMbQF+TFNA Vl0YzIMScWr49m0WkSGn9rp9o4YMW8xSXfUHzF1ROmiBJjdyTnuaWZ29Kh9tCntv 2n9L0rlPaQ3RRdjHVWolp6MW274c03jBLLYlej1pJZmpU5+RJSyUn+Tqrd6ltGZw xN/XR0C5jnu0y/UxfHGzQqEaHwse0XFw6D2uZ7Izpz08JWv6h8dnRhVdFCltl1gu DnyD+Rqq5lL/J4Ljj0GLOMjkzKCd7IuFeDYmPrA2ZVsohGcFqBJll0NeYPhQcfWe k2XTjANCXvnIl7f45MpDTzovIQ== -----END CERTIFICATE-----Generated at Fri Oct 2 06:51:42 2026 by rpki-client