$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: 78M5NQHHGPGFq/59a7T2zODnjGQSEpnx2HpSH2kSMRo= Subject key identifier: 95:C8:5C:65:3C:72:44:65:1E:38:93:6F:62:5E:9F:68:F8:C9:C9:8F Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: F1 Signing time: Fri 23 Oct 2026 07:02:28 +0000 Manifest this update: Fri 23 Oct 2026 07:02:28 +0000 Manifest next update: Fri 30 Oct 2026 07:02:28 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: Gtnf1orD/bQSRmzJLvlTWWejZ4I7wRlZcC/3tMHYfsw=) 2: 69256D56A5CE11F1B7F696C43311F970.roa (hash: /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 4: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 5: BB2BF88CA79911F1857810AE4811F970.roa (hash: Y+Ntf8yGJA3+2z975NNw0RpsGbbTUVm9WQmnhNftTf0=) 6: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 7: 688C64E4A5CE11F1B7F696C43311F970.roa (hash: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=) 8: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 07:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Oct 23 07:02:28 2026 GMT Not After : Oct 30 07:02:28 2026 GMT Subject: CN=6adb0684-15c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:c8:ca:f8:1e:15:35:b3:cc:19:fa:d2:7e: 32:e8:6d:6b:ba:65:f3:f2:ab:e7:03:8e:02:44:dc: 9a:24:32:3b:ef:3e:01:24:86:55:4f:27:9a:b7:bc: c3:11:b3:bb:a7:19:e5:70:28:22:ac:67:bd:92:87: 20:3b:3d:2f:c7:4e:9b:35:8e:56:cb:7f:bc:f8:64: ba:a7:bd:39:b0:1b:3a:97:c6:a3:2f:6b:fb:70:d4: f5:01:85:fc:53:91:f3:4f:f4:14:94:64:dc:4c:cc: ac:9a:25:57:d0:87:69:70:9a:eb:af:91:8b:8f:30: f0:e2:04:82:16:0a:ee:88:ef:62:be:c4:83:60:19: 91:ad:e6:0b:a4:a9:06:ae:ff:ff:a2:77:5d:5f:5c: 34:25:da:76:6e:70:47:47:61:d8:73:9a:63:cd:8a: 30:42:30:5b:85:7a:c4:88:96:31:55:47:d3:07:25: e9:45:a2:41:9f:0e:cf:be:51:0e:db:fd:1f:5b:13: be:9f:0e:1a:68:0d:3c:62:5b:b9:ab:d5:68:35:f9: c5:77:0a:fa:c6:a8:24:73:a1:6f:7f:c2:f8:84:3b: 8d:a8:fd:b2:b0:15:c4:72:f0:cc:45:6b:aa:d3:e6: af:6b:1e:38:47:d8:59:da:4f:44:3d:af:d5:b5:02: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C8:5C:65:3C:72:44:65:1E:38:93:6F:62:5E:9F:68:F8:C9:C9:8F X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:bd:2b:a8:3b:8b:b4:77:76:c7:28:75:f4:1a:20:1f:9e:9d: 15:20:b3:ab:bb:14:40:33:17:de:a2:5f:83:77:37:98:9d:ea: bc:c1:95:e0:ec:6c:95:80:81:63:9b:eb:d6:33:c7:25:43:68: 6e:e1:df:7f:20:77:6b:2a:20:5b:63:fd:2a:d0:02:0e:65:54: 82:a7:70:53:7d:8b:5d:e0:c1:4d:98:51:e6:4f:e1:ca:ab:ca: 76:1b:58:a4:6a:a8:db:dc:46:06:ef:8d:b1:ac:ca:99:72:66: 5f:99:39:3b:27:b3:82:89:64:c4:96:10:ad:49:ab:68:d1:e9: 30:06:b8:5d:f1:25:30:52:ca:0b:9a:80:f2:94:a0:ec:74:e8: 81:cf:d2:0c:ef:ab:26:6b:27:9c:35:dd:ff:b8:29:b6:6f:a2: 6a:f1:36:8d:ad:3e:18:96:73:a3:11:cc:a4:a4:61:e5:bd:da: ff:85:5e:d8:37:b0:52:f3:9e:4c:68:8f:8a:af:b4:6d:c8:5b: d1:59:3d:9d:fd:d6:1a:ae:a7:d1:96:dd:33:1a:b1:5a:72:44: 19:81:64:91:2b:a6:a1:ff:36:37:b4:f4:50:34:e3:e0:cc:6a: 84:52:f3:56:f2:31:51:db:76:61:2d:7a:76:b1:ac:b5:52:9e: 5c:c9:bc:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYxMDIzMDcwMjI4WhcNMjYxMDMwMDcwMjI4WjAYMRYwFAYD VQQDEw02YWRiMDY4NC0xNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzbIyvgeFTWzzBn60n4y6G1rumXz8qvnA44CRNyaJDI77z4BJIZVTyeat7zD EbO7pxnlcCgirGe9kocgOz0vx06bNY5Wy3+8+GS6p705sBs6l8ajL2v7cNT1AYX8 U5HzT/QUlGTcTMysmiVX0IdpcJrrr5GLjzDw4gSCFgruiO9ivsSDYBmRreYLpKkG rv//onddX1w0Jdp2bnBHR2HYc5pjzYowQjBbhXrEiJYxVUfTByXpRaJBnw7PvlEO 2/0fWxO+nw4aaA08Ylu5q9VoNfnFdwr6xqgkc6Fvf8L4hDuNqP2ysBXEcvDMRWuq 0+avax44R9hZ2k9EPa/VtQIiKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXIXGU8 ckRlHjiTb2Jen2j4ycmPMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqr0rqDuLtHd2xyh19BogH56dFSCzq7sUQDMX3qJfg3c3mJ3qvMGV4OxslYCB Y5vr1jPHJUNobuHffyB3ayogW2P9KtACDmVUgqdwU32LXeDBTZhR5k/hyqvKdhtY pGqo29xGBu+NsazKmXJmX5k5OyezgolkxJYQrUmraNHpMAa4XfElMFLKC5qA8pSg 7HTogc/SDO+rJmsnnDXd/7gptm+iavE2ja0+GJZzoxHMpKRh5b3a/4Ve2DewUvOe TGiPiq+0bchb0Vk9nf3WGq6n0ZbdMxqxWnJEGYFkkSumof82N7T0UDTj4MxqhFLz VvIxUdt2YS16drGstVKeXMm8og== -----END CERTIFICATE-----Generated at Sat Oct 24 10:40:36 2026 by rpki-client