$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: 1coD7P/lP4gdsr4eC3wy6ayGTc0KwaLsC/T+rNecLAU= Subject key identifier: 61:39:11:77:81:F7:3C:70:C3:40:1E:B9:32:DC:97:B6:8F:FC:02:BE Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0CF1 Signing time: Tue 06 Oct 2026 18:32:34 +0000 Manifest this update: Tue 06 Oct 2026 18:32:33 +0000 Manifest next update: Tue 13 Oct 2026 18:32:33 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: i0lPGKSKVFBKGgaG+z98oiCiRo4Zo8PtrbIj5f683p4=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: Oct 6 18:32:33 2026 GMT Not After : Oct 13 18:32:33 2026 GMT Subject: CN=6ac53ec2-9eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:ad:e2:c6:ee:7a:b0:28:c3:1e:bd:ef:cb: 35:5f:ba:a3:26:b7:e1:6f:ae:be:d9:ac:0f:df:ad: 89:b9:48:4c:2d:95:57:25:09:36:e8:a5:b7:eb:60: 8f:74:7b:fd:90:bc:6e:cf:34:c2:7b:4a:30:1c:d5: 99:d9:48:12:5b:3f:af:32:16:28:4c:80:b2:f4:83: ac:a3:5c:9c:75:1d:f7:ff:f7:69:b7:1e:6f:3f:d0: eb:e1:aa:2e:a3:81:b9:0c:45:9e:8f:b5:7e:77:17: 19:5c:a1:9e:0e:01:41:45:dd:0d:8f:74:6a:c3:5e: 7b:e6:b3:25:34:83:75:a1:47:51:93:6b:24:9d:bf: f9:71:dd:5e:6a:f8:b4:cd:eb:26:a0:e8:f2:5d:ca: 13:b7:ff:a6:27:2e:62:bb:03:f5:68:05:4e:48:35: ed:47:01:90:cc:b4:5f:6e:24:00:ec:58:ac:bb:e4: bf:5f:85:ca:81:bb:74:cc:c9:74:95:cd:f7:5a:25: 33:3c:56:76:0e:ff:86:48:3f:fa:f6:d0:5d:74:a6: aa:c1:1e:dc:96:f1:b9:a3:c0:2b:9f:ba:2f:c7:ed: 03:2a:13:8d:62:6b:be:b2:ff:ae:7b:bb:23:7b:42: d2:a1:e5:a5:74:24:31:2e:53:04:fe:8f:fa:5c:40: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:11:77:81:F7:3C:70:C3:40:1E:B9:32:DC:97:B6:8F:FC:02:BE X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:05:a2:0a:66:a8:e7:61:3e:81:a8:37:a0:6d:a7:ba:13:41: be:32:4e:4f:50:db:16:b5:14:23:53:c2:c9:46:3b:f1:d3:40: 0c:71:1f:74:ad:b0:00:56:a8:72:65:20:23:09:00:dc:bc:dd: 8f:48:36:23:f5:1d:38:fa:8b:3d:66:44:be:ab:c0:cc:88:13: f5:b1:ca:d7:9f:aa:30:14:2e:0c:79:1e:8a:fe:f7:78:bd:e0: cc:2b:d4:45:06:14:fc:bb:1e:1a:9e:b5:f5:b6:ec:fc:aa:73: 0a:bf:2a:bd:ec:12:f5:cc:64:91:49:b3:b0:48:70:c4:c9:8e: ed:8e:2e:5d:0f:61:44:10:6c:f1:1f:f8:a0:26:52:06:d9:a8: 0b:5b:d5:11:b0:b0:ca:f7:39:f2:7c:56:4d:79:ce:02:3c:c7: 2e:d4:b2:38:55:58:5e:04:50:14:ce:66:d6:74:31:f7:cb:da: 80:cf:70:b3:a8:93:8e:7c:f9:6e:c4:6d:e0:e9:91:1c:48:64: d8:45:0e:f8:5b:d0:1d:04:4a:01:47:02:19:16:d8:dd:37:e0: 5c:74:41:8b:7c:70:c3:b0:c3:6c:77:9b:95:c5:58:85:a9:13: 1b:32:35:25:bc:9c:4b:b0:66:f9:45:a7:39:01:22:49:07:59: ca:42:a8:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjYxMDA2MTgzMjMzWhcNMjYxMDEzMTgzMjMzWjAYMRYwFAYD VQQDEw02YWM1M2VjMi05ZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42at4sbuerAowx6978s1X7qjJrfhb66+2awP362JuUhMLZVXJQk26KW362CP dHv9kLxuzzTCe0owHNWZ2UgSWz+vMhYoTICy9IOso1ycdR33//dptx5vP9Dr4aou o4G5DEWej7V+dxcZXKGeDgFBRd0Nj3Rqw1575rMlNIN1oUdRk2sknb/5cd1eavi0 zesmoOjyXcoTt/+mJy5iuwP1aAVOSDXtRwGQzLRfbiQA7Fisu+S/X4XKgbt0zMl0 lc33WiUzPFZ2Dv+GSD/69tBddKaqwR7clvG5o8Arn7ovx+0DKhONYmu+sv+ue7sj e0LSoeWldCQxLlME/o/6XECh/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGE5EXeB 9zxww0AeuTLcl7aP/AK+MB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIgWiCmao52E+gag3oG2nuhNBvjJOT1DbFrUUI1PCyUY78dNADHEfdK2wAFao cmUgIwkA3Lzdj0g2I/UdOPqLPWZEvqvAzIgT9bHK15+qMBQuDHkeiv73eL3gzCvU RQYU/LseGp619bbs/KpzCr8qvewS9cxkkUmzsEhwxMmO7Y4uXQ9hRBBs8R/4oCZS BtmoC1vVEbCwyvc58nxWTXnOAjzHLtSyOFVYXgRQFM5m1nQx98vagM9ws6iTjnz5 bsRt4OmRHEhk2EUO+FvQHQRKAUcCGRbY3TfgXHRBi3xww7DDbHeblcVYhakTGzI1 JbycS7Bm+UWnOQEiSQdZykKo/w== -----END CERTIFICATE-----Generated at Wed Oct 7 02:45:10 2026 by rpki-client