$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: fDZIkdnbKutyjJIPuVmal2E91Nq3iHS7wA7R+e1H2Zg= Subject key identifier: E0:97:2E:8C:C7:7A:4A:64:71:52:71:D7:32:9B:11:83:AD:B8:97:64 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: D8 Signing time: Thu 03 Sep 2026 13:16:59 +0000 Manifest this update: Thu 03 Sep 2026 13:16:58 +0000 Manifest next update: Thu 10 Sep 2026 13:16:58 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: qcfpJynyTqPSlkSZzb2UqpmQeoqEgwZaq3W/DjIgHJk=) 2: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 3: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) 5: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 6: 69256D56A5CE11F1B7F696C43311F970.roa (hash: /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=) 7: BB2BF88CA79911F1857810AE4811F970.roa (hash: Y+Ntf8yGJA3+2z975NNw0RpsGbbTUVm9WQmnhNftTf0=) 8: 688C64E4A5CE11F1B7F696C43311F970.roa (hash: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 13:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Sep 3 13:16:58 2026 GMT Not After : Sep 10 13:16:58 2026 GMT Subject: CN=6a99734a-1d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:44:26:95:94:93:7f:67:c9:2c:bf:b1:f6:41: 49:e8:0f:be:f5:d7:be:07:f1:87:60:1d:ba:7c:0f: e5:e4:d3:34:31:b1:fe:0c:14:55:04:34:57:5c:49: 98:02:2d:36:98:a2:90:84:a7:d9:95:ec:1d:0b:43: 47:c0:5b:49:93:3a:27:d9:05:bc:25:c3:2a:4d:d1: 73:46:8d:be:36:e1:ba:b4:2b:e5:30:58:b4:e3:e5: 58:fc:93:99:8c:22:0a:98:c1:8c:8a:13:38:97:f1: 82:79:37:c3:b2:dd:5a:df:c2:73:81:27:0b:ef:ce: 48:f5:79:48:37:3b:6a:8a:c9:0b:8d:02:b5:e3:7c: 84:be:c6:25:bd:06:7c:75:3b:ed:42:be:c3:18:69: 04:8c:f2:f4:7b:d2:7d:b5:5c:ea:68:57:3d:15:6a: 33:7f:4d:53:8f:bd:6e:12:a3:17:7b:b8:25:f0:d9: 3c:35:97:cd:b5:4a:0f:ef:a8:3e:81:ed:c9:74:0b: 35:d8:0e:b8:53:29:3b:38:6d:a0:63:77:84:78:59: 1b:df:2a:65:ee:c7:e3:2b:a9:53:2e:c1:ca:b3:18: 60:d7:18:42:bf:64:04:4b:a7:c9:31:d2:1a:0a:33: b0:0c:15:67:93:9c:15:1d:0f:65:6d:32:bf:e4:ea: 82:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:2E:8C:C7:7A:4A:64:71:52:71:D7:32:9B:11:83:AD:B8:97:64 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d1:48:ff:4a:3f:ee:f9:a3:6a:9d:85:81:c2:ac:4a:b0:f6: d3:59:09:b7:22:fc:75:78:a1:ce:d2:bd:ed:70:83:0e:82:71: 2a:7f:8d:47:97:9c:3c:b5:86:cd:d3:26:79:b5:82:0f:45:ca: 1f:0e:2a:96:ea:96:e6:ef:93:fb:2c:fc:9e:80:52:99:c0:b3: fc:64:c3:09:9a:e0:95:65:f0:02:20:45:76:98:4e:62:ab:14: cb:a1:26:79:6c:bb:98:22:3a:22:6a:fa:58:ab:d6:03:65:00: f8:3b:0c:07:da:ab:69:f7:12:44:31:eb:a4:12:fe:b7:06:29: 72:47:5f:c3:97:53:98:88:8b:c1:16:b7:b0:29:39:87:f1:96: f6:bc:ce:f1:5c:58:5a:7f:81:a5:99:de:f7:0a:22:16:9f:67: 44:8c:53:58:6e:98:12:eb:6e:25:23:8b:82:e8:e1:e0:81:ae: 67:66:2c:ae:98:eb:2b:d1:bf:d9:08:47:bc:da:d2:31:62:36: fe:04:8e:dd:9f:73:ac:ed:79:d7:6d:9c:d2:85:ba:87:a7:c7: e5:7e:86:21:fe:6c:39:eb:90:39:bb:a9:0f:e3:cb:4e:3a:17: 0b:12:5a:82:fe:db:63:8e:5a:19:1f:1f:50:c6:85:d7:63:fa: 0a:5d:6f:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwOTAzMTMxNjU4WhcNMjYwOTEwMTMxNjU4WjAYMRYwFAYD VQQDEw02YTk5NzM0YS0xZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UQmlZSTf2fJLL+x9kFJ6A++9de+B/GHYB26fA/l5NM0MbH+DBRVBDRXXEmY Ai02mKKQhKfZlewdC0NHwFtJkzon2QW8JcMqTdFzRo2+NuG6tCvlMFi04+VY/JOZ jCIKmMGMihM4l/GCeTfDst1a38JzgScL785I9XlINztqiskLjQK143yEvsYlvQZ8 dTvtQr7DGGkEjPL0e9J9tVzqaFc9FWozf01Tj71uEqMXe7gl8Nk8NZfNtUoP76g+ ge3JdAs12A64Uyk7OG2gY3eEeFkb3ypl7sfjK6lTLsHKsxhg1xhCv2QES6fJMdIa CjOwDBVnk5wVHQ9lbTK/5OqCgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCXLozH ekpkcVJx1zKbEYOtuJdkMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADtFI/0o/7vmjap2FgcKsSrD201kJtyL8dXihztK97XCDDoJxKn+NR5ecPLWG zdMmebWCD0XKHw4qluqW5u+T+yz8noBSmcCz/GTDCZrglWXwAiBFdphOYqsUy6Em eWy7mCI6Imr6WKvWA2UA+DsMB9qrafcSRDHrpBL+twYpckdfw5dTmIiLwRa3sCk5 h/GW9rzO8VxYWn+BpZne9woiFp9nRIxTWG6YEutuJSOLgujh4IGuZ2YsrpjrK9G/ 2QhHvNrSMWI2/gSO3Z9zrO15122c0oW6h6fH5X6GIf5sOeuQObupD+PLTjoXCxJa gv7bY45aGR8fUMaF12P6Cl1vlw== -----END CERTIFICATE-----Generated at Sat Sep 5 01:50:49 2026 by rpki-client