$ rpki-client -vvvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: TcUwF9hUP5YAkDYugi+uJq4E8izOCwj10hkWReHQ+DM= Subject key identifier: 2F:B1:A0:86:71:3C:99:63:8D:BC:F5:D9:C5:76:FA:3C:E2:92:7B:FC Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 027A Signing time: Sat 03 Oct 2026 02:32:13 +0000 Manifest this update: Sat 03 Oct 2026 02:32:12 +0000 Manifest next update: Sat 10 Oct 2026 02:32:12 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: ew6nfXB1wD3HjglqiD1NlABb/Vgdxt2SFQrcpzRR9WU=) 2: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=) 3: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: f+SXz/7qnkULN0UO8ykoynDM3JBtbR5ZSL/l0DN40Vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Oct 3 02:32:12 2026 GMT Not After : Oct 10 02:32:12 2026 GMT Subject: CN=6ac0692d-630c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:89:be:33:0c:39:c4:ef:bf:6f:a0:f4:69: b1:56:3f:41:f9:12:78:18:2a:9c:b6:f0:08:75:db: 2c:f7:36:46:52:01:2d:b3:04:d7:ed:82:b6:e7:74: b8:e8:7c:e4:a4:70:c3:f6:7c:08:31:41:84:92:7e: 53:4a:20:c7:32:b2:f3:1b:7e:6d:61:d8:d7:f9:12: c1:19:c7:9a:86:82:03:5d:e2:25:cb:0f:4a:54:26: d7:21:74:b8:55:31:5e:b8:9b:df:a0:0e:ef:28:fd: b6:ae:73:31:1a:d7:5e:d8:34:88:b8:bf:d3:a3:2f: 9f:a8:55:81:16:1b:84:df:50:94:aa:18:28:8b:88: 72:d5:28:c0:69:09:aa:ba:30:9b:d1:89:aa:1e:44: 3e:b4:26:1f:a4:db:81:79:0c:e9:fb:92:f2:19:7f: 04:70:15:4d:7b:dc:f8:39:02:e7:fd:0e:b5:d1:49: c4:7b:cb:94:f4:36:f1:22:cf:59:6d:2b:08:51:2c: 27:1b:ac:93:71:76:f0:35:98:f3:d6:bd:1b:dd:73: a3:fe:fc:99:bd:7c:ab:ea:fe:31:34:cc:4a:51:83: bf:9c:90:44:a4:e9:76:ff:c1:e5:44:c8:4b:ce:ba: 29:8a:69:0e:7e:33:db:2a:1c:20:b2:36:5a:80:59: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B1:A0:86:71:3C:99:63:8D:BC:F5:D9:C5:76:FA:3C:E2:92:7B:FC X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:58:36:4e:4b:da:69:d7:64:df:3a:25:e6:a2:ea:2b:d5:bb: 49:a2:a6:5e:ef:b2:59:95:9d:df:52:92:89:25:e2:e3:b1:bf: 04:06:12:ef:c2:5e:a7:2f:f2:65:ca:1d:b2:93:5f:cf:1e:c1: 76:f8:10:be:f9:ab:25:c8:ce:68:e4:4f:90:01:85:5f:f9:df: 59:ed:4d:0c:e7:4c:1c:80:0f:2e:37:90:7e:ac:1d:a4:36:f3: 3f:83:38:c8:d4:67:7f:6a:a7:ba:c3:32:e7:5c:3b:56:3d:2e: 58:f5:58:f3:3b:0b:f3:73:c8:a5:a2:07:ea:d5:00:23:b4:e2: e8:4e:49:a3:9c:f2:43:de:8d:7e:e7:43:e0:5e:ad:28:a6:7d: 8f:33:1b:f5:14:ff:52:ea:c9:7a:3e:70:b0:e7:51:33:31:fc: 16:cb:bf:00:df:56:a0:4f:e5:b3:47:53:dc:9a:0a:bd:62:07: 6c:e4:6a:97:83:b8:07:75:99:2e:98:26:55:2c:b0:46:84:10: 92:be:5e:69:24:5a:85:56:b0:60:35:fa:ea:21:88:10:eb:44: 0f:b4:da:35:71:06:16:72:f4:58:42:25:70:a6:2f:e0:45:f2: 58:51:46:09:26:e7:19:12:e5:8c:73:58:ef:58:8b:55:be:d3: 84:7d:55:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjYxMDAzMDIzMjEyWhcNMjYxMDEwMDIzMjEyWjAYMRYwFAYD VQQDEw02YWMwNjkyZC02MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgciJvjMMOcTvv2+g9GmxVj9B+RJ4GCqctvAIddss9zZGUgEtswTX7YK253S4 6HzkpHDD9nwIMUGEkn5TSiDHMrLzG35tYdjX+RLBGceahoIDXeIlyw9KVCbXIXS4 VTFeuJvfoA7vKP22rnMxGtde2DSIuL/Toy+fqFWBFhuE31CUqhgoi4hy1SjAaQmq ujCb0YmqHkQ+tCYfpNuBeQzp+5LyGX8EcBVNe9z4OQLn/Q610UnEe8uU9DbxIs9Z bSsIUSwnG6yTcXbwNZjz1r0b3XOj/vyZvXyr6v4xNMxKUYO/nJBEpOl2/8HlRMhL zropimkOfjPbKhwgsjZagFmZBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+xoIZx PJljjbz12cV2+jziknv8MB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKVg2Tkvaaddk3zol5qLqK9W7SaKmXu+yWZWd31KSiSXi47G/BAYS78Jepy/y ZcodspNfzx7BdvgQvvmrJcjOaORPkAGFX/nfWe1NDOdMHIAPLjeQfqwdpDbzP4M4 yNRnf2qnusMy51w7Vj0uWPVY8zsL83PIpaIH6tUAI7Ti6E5Jo5zyQ96NfudD4F6t KKZ9jzMb9RT/UurJej5wsOdRMzH8Fsu/AN9WoE/ls0dT3JoKvWIHbORql4O4B3WZ LpgmVSywRoQQkr5eaSRahVawYDX66iGIEOtED7TaNXEGFnL0WEIlcKYv4EXyWFFG CSbnGRLljHNY71iLVb7ThH1VOg== -----END CERTIFICATE-----Generated at Sun Oct 4 20:09:30 2026 by rpki-client