$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: HiUZVr1OIwIll6Kr2Jp+fM48si9Bc0essNMhlHsNMTU= Subject key identifier: 79:37:82:ED:FA:92:A0:04:D4:41:F7:4D:06:14:6B:C1:62:81:37:AF Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 0858 Signing time: Sun 04 Oct 2026 21:02:25 +0000 Manifest this update: Sun 04 Oct 2026 21:02:25 +0000 Manifest next update: Sun 11 Oct 2026 21:02:25 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: ZZt+HNaln5CrSMMrDZwVsPKT0HXuA6J1VVUE1iOsey0=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: xBMELOpqJ4lnqq47hcS7bDXF3hPxxlzBtOSvLVgcPrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: Oct 4 21:02:25 2026 GMT Not After : Oct 11 21:02:25 2026 GMT Subject: CN=6ac2bee1-fabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:69:48:59:38:5c:89:2f:13:d3:15:d0:51: 82:64:ec:84:c6:73:ed:3e:5d:d9:b8:19:c8:df:75: 35:36:84:39:39:91:9f:11:f6:71:4c:55:a1:6a:55: 22:62:c3:4e:84:ab:35:26:d0:07:ea:ae:47:10:87: 74:72:23:ad:3a:82:59:9c:6b:a0:59:1c:15:37:48: 88:42:e9:11:5d:4f:e4:33:25:0f:a2:e9:e6:30:11: 39:a7:c1:bf:40:7d:9b:5b:93:82:8d:98:85:8b:83: ff:1e:70:c5:65:98:15:3b:31:15:8f:b7:d6:65:7a: a3:5f:f4:4e:9d:48:b1:c2:f6:4b:02:d2:67:83:35: 3c:a2:86:d7:ce:ef:12:d6:c8:28:1f:51:7b:06:86: 5a:40:eb:3b:e4:eb:25:81:2a:b9:db:0d:ec:14:05: 5e:40:d1:bf:4d:6c:c1:61:e5:0d:6c:30:45:2e:fd: 65:3b:c8:a5:42:9c:ad:33:59:d6:13:bc:9e:02:d1: a8:73:78:3e:a2:6c:e6:8e:59:7a:1e:26:f8:5f:72: ae:1e:c1:27:77:cf:1b:a8:57:11:76:d4:ec:3f:ba: 27:ed:7c:04:ce:47:01:80:7b:78:cd:13:6a:58:b0: 83:fd:88:d8:72:84:f7:a8:e8:79:44:29:d8:40:b6: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:82:ED:FA:92:A0:04:D4:41:F7:4D:06:14:6B:C1:62:81:37:AF X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f7:80:6c:76:fa:3a:5f:c2:56:46:15:b7:b5:81:4f:b1:64: 4a:f8:b8:60:10:c7:6b:1e:e3:15:af:35:be:cb:ae:5e:7d:43: a5:43:47:6d:fa:29:36:24:09:19:53:9e:91:46:7c:b1:e8:f5: f7:8d:23:b5:2c:ec:e2:9e:84:48:bd:dc:fd:b9:f1:53:86:ac: 9b:e6:0d:81:c2:3a:f5:57:24:5d:d0:71:d5:48:9f:8c:3f:7a: cd:be:c9:08:53:6d:35:39:9e:85:d5:b6:5f:06:8f:85:78:d9: c6:19:be:83:9f:24:72:95:e2:08:a0:70:9b:24:a1:95:e2:cf: 6d:18:3c:39:46:8a:53:d5:bf:b3:8a:59:4e:eb:e9:65:73:ef: ec:f2:9e:e5:74:31:a4:5e:5c:87:76:d0:05:7b:19:f6:6f:54: 18:c5:d3:29:25:7b:4c:70:71:6b:aa:a3:3a:56:e7:e2:0c:c0: d4:69:ab:0a:41:33:d6:31:1f:3b:4f:19:2a:eb:7e:a0:79:36: c8:7a:d9:7f:88:b4:32:b6:a6:b0:03:7a:32:d0:f5:26:2e:af: 72:ab:f7:a7:27:e0:b3:ba:6f:f2:80:76:d9:ae:17:0a:55:eb: 8e:5d:a6:c5:91:d4:10:73:81:08:53:e3:2a:4f:2d:17:96:07: 59:64:da:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjYxMDA0MjEwMjI1WhcNMjYxMDExMjEwMjI1WjAYMRYwFAYD VQQDEw02YWMyYmVlMS1mYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkElpSFk4XIkvE9MV0FGCZOyExnPtPl3ZuBnI33U1NoQ5OZGfEfZxTFWhalUi YsNOhKs1JtAH6q5HEId0ciOtOoJZnGugWRwVN0iIQukRXU/kMyUPounmMBE5p8G/ QH2bW5OCjZiFi4P/HnDFZZgVOzEVj7fWZXqjX/ROnUixwvZLAtJngzU8oobXzu8S 1sgoH1F7BoZaQOs75OslgSq52w3sFAVeQNG/TWzBYeUNbDBFLv1lO8ilQpytM1nW E7yeAtGoc3g+omzmjll6Hib4X3KuHsEnd88bqFcRdtTsP7on7XwEzkcBgHt4zRNq WLCD/YjYcoT3qOh5RCnYQLbgfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHk3gu36 kqAE1EH3TQYUa8FigTevMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMveAbHb6Ol/CVkYVt7WBT7FkSvi4YBDHax7jFa81vsuuXn1DpUNHbfopNiQJ GVOekUZ8sej1940jtSzs4p6ESL3c/bnxU4asm+YNgcI69VckXdBx1UifjD96zb7J CFNtNTmehdW2XwaPhXjZxhm+g58kcpXiCKBwmyShleLPbRg8OUaKU9W/s4pZTuvp ZXPv7PKe5XQxpF5ch3bQBXsZ9m9UGMXTKSV7THBxa6qjOlbn4gzA1GmrCkEz1jEf O08ZKut+oHk2yHrZf4i0MramsAN6MtD1Ji6vcqv3pyfgs7pv8oB22a4XClXrjl2m xZHUEHOBCFPjKk8tF5YHWWTaBQ== -----END CERTIFICATE-----Generated at Tue Oct 6 18:10:48 2026 by rpki-client