$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: 4ads+/IHjJOIuKe/CQeWZRG05u32JcCURaWVswtfUPk= Subject key identifier: E4:57:41:63:84:06:81:FF:8D:3C:6C:AC:B0:28:AF:61:EE:88:C0:02 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: F0 Signing time: Wed 21 Oct 2026 07:01:51 +0000 Manifest this update: Wed 21 Oct 2026 07:01:51 +0000 Manifest next update: Wed 28 Oct 2026 07:01:51 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: qZHhNB6LBHknh/mT4mdSeSWTawRwsGkm3p3XLJD9L00=) 2: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 3: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 4: 69256D56A5CE11F1B7F696C43311F970.roa (hash: /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=) 5: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 6: BB2BF88CA79911F1857810AE4811F970.roa (hash: Y+Ntf8yGJA3+2z975NNw0RpsGbbTUVm9WQmnhNftTf0=) 7: 688C64E4A5CE11F1B7F696C43311F970.roa (hash: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=) 8: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 07:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Oct 21 07:01:51 2026 GMT Not After : Oct 28 07:01:51 2026 GMT Subject: CN=6ad8635f-af2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:3d:93:33:54:d7:74:84:ec:c8:6f:27:e8: 50:a6:d8:d8:75:b8:cc:da:65:4f:7c:2b:ae:33:bb: aa:10:bf:9c:6f:2f:35:be:95:5e:dd:ce:cb:a3:2d: 44:56:5b:8a:6e:bd:bf:bd:b1:b1:89:f9:f4:50:1f: 8c:fe:99:0c:dd:60:9f:48:14:a1:04:17:97:a7:84: 76:33:10:9f:a0:ce:b2:b9:87:d7:ef:e4:42:71:66: 8a:d4:99:62:eb:b2:22:f4:89:fb:2c:da:14:b9:08: ed:e0:f7:de:a0:c6:e0:1c:e9:05:71:73:d2:3c:53: 05:9f:e7:6f:55:c5:a4:8b:98:c8:2f:75:1b:26:fe: 30:34:11:f3:07:10:9c:45:ea:1b:42:74:62:7d:d4: c6:16:63:5d:84:3e:1f:53:31:ac:3f:00:2a:1d:81: b6:8c:f5:8d:0b:d2:24:db:55:71:9e:9e:04:39:ca: f6:15:d5:ca:43:97:64:77:7e:e9:8e:3a:d9:29:80: 14:31:81:e4:96:5f:63:40:75:64:db:cc:de:18:80: aa:2f:ac:8b:92:4b:97:9d:ee:84:f6:c3:db:33:c3: 86:bf:92:fc:3c:98:76:f5:7f:5e:58:61:50:eb:90: 53:4f:04:a6:8f:13:9a:6f:fb:01:69:2d:4b:ae:f8: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:41:63:84:06:81:FF:8D:3C:6C:AC:B0:28:AF:61:EE:88:C0:02 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:56:d4:28:fe:5a:05:e1:17:cf:7c:33:4d:09:57:40:b7:d0: cf:77:e4:b9:be:48:28:9a:5e:a7:6f:b9:2d:c7:da:ec:8c:78: 8a:7b:57:15:1f:90:0a:e2:f1:bb:42:7f:d4:a9:dd:40:41:54: 82:ca:7f:0e:3f:2d:fe:75:80:f1:8f:4c:65:8a:50:2b:74:77: 89:45:b7:b4:10:8b:84:3c:e7:90:75:12:ca:5f:59:de:66:96: ea:0a:93:68:88:be:13:46:b3:a4:e3:79:ae:60:35:ea:99:36: 59:c4:82:f9:99:28:d2:c6:ce:58:a7:57:36:01:5c:dd:0f:e3: 4d:65:19:2c:23:fd:b5:7a:12:05:0c:73:1e:82:23:a1:2d:a4: 81:fc:cf:a3:b4:4a:3a:e3:ef:b4:fa:5c:bb:15:0e:0b:3c:c0: ee:d3:2d:88:73:a8:8d:2c:d6:b4:9f:66:f5:45:0e:cd:7b:a3: 65:1e:d9:9d:30:f5:d8:ef:e2:85:25:5b:e3:b9:38:e8:dc:d4: 85:9e:be:99:bb:2e:ce:46:01:b5:34:93:84:26:9c:35:c0:42: eb:50:ab:f2:1d:8b:9f:0d:ab:76:f2:6c:e0:27:9c:ff:6e:a4: 71:da:50:c4:29:3b:3f:8c:52:2e:86:af:ed:20:53:d1:41:ad: 9a:b1:88:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYxMDIxMDcwMTUxWhcNMjYxMDI4MDcwMTUxWjAYMRYwFAYD VQQDEw02YWQ4NjM1Zi1hZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/89kzNU13SE7MhvJ+hQptjYdbjM2mVPfCuuM7uqEL+cby81vpVe3c7Loy1E VluKbr2/vbGxifn0UB+M/pkM3WCfSBShBBeXp4R2MxCfoM6yuYfX7+RCcWaK1Jli 67Ii9In7LNoUuQjt4PfeoMbgHOkFcXPSPFMFn+dvVcWki5jIL3UbJv4wNBHzBxCc ReobQnRifdTGFmNdhD4fUzGsPwAqHYG2jPWNC9Ik21Vxnp4EOcr2FdXKQ5dkd37p jjrZKYAUMYHkll9jQHVk28zeGICqL6yLkkuXne6E9sPbM8OGv5L8PJh29X9eWGFQ 65BTTwSmjxOab/sBaS1LrvhJFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORXQWOE BoH/jTxsrLAor2HuiMACMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfFbUKP5aBeEXz3wzTQlXQLfQz3fkub5IKJpep2+5Lcfa7Ix4intXFR+QCuLx u0J/1KndQEFUgsp/Dj8t/nWA8Y9MZYpQK3R3iUW3tBCLhDznkHUSyl9Z3maW6gqT aIi+E0azpON5rmA16pk2WcSC+Zko0sbOWKdXNgFc3Q/jTWUZLCP9tXoSBQxzHoIj oS2kgfzPo7RKOuPvtPpcuxUOCzzA7tMtiHOojSzWtJ9m9UUOzXujZR7ZnTD12O/i hSVb47k46NzUhZ6+mbsuzkYBtTSThCacNcBC61Cr8h2Lnw2rdvJs4Cec/26kcdpQ xCk7P4xSLoav7SBT0UGtmrGIYA== -----END CERTIFICATE-----Generated at Fri Oct 23 09:46:38 2026 by rpki-client