$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: 8ORSvi/IpMKdkKEVxnuiNVVlf01VD6JwOZL2EV+nTJw= Subject key identifier: 82:8D:3F:30:0B:5F:E9:A9:A5:62:00:DB:F4:A6:DB:0A:61:C5:0B:9B Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0ACA Signing time: Thu 10 Sep 2026 21:13:10 +0000 Manifest this update: Thu 10 Sep 2026 21:13:09 +0000 Manifest next update: Thu 17 Sep 2026 21:13:09 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: EwUoXXL1vZ8pwgkc6YRB7SboPqRhJ4DxFv9fwKrXYr4=) 2: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=) 3: 18E343FA3A3411F195AC72659C833773.roa (hash: BLfI70r7P0GWJj9FW86vUnNDLaDw84bHq9j86Nd/HVU=) 4: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=) 5: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=) 6: BB142084A77811F1AF0DC2223E11F970.roa (hash: sMMlBcu5caAUjy52snyuk+pp0k0djieJLhvCkhI7qRg=) 7: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=) 8: 61EE2500936E11F091943583C4F9AE02.roa (hash: xY/zwZDBEi5smovWl329WOv+neCrrgcL8BTsNJk3p+0=) 9: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Sep 10 21:13:09 2026 GMT Not After : Sep 17 21:13:09 2026 GMT Subject: CN=6aa31d66-9294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:80:d8:02:f3:43:f3:8a:f5:87:99:88:02: 3e:9f:af:96:8e:dd:7f:db:74:cb:0c:dc:34:a3:49: a7:d2:b6:dc:db:ab:8c:50:6a:ab:65:8f:8d:a9:fe: ec:1e:09:0f:3a:f8:6a:84:f5:6c:64:75:89:ea:cc: 15:47:7b:6a:58:dc:b5:a1:02:4c:96:7e:8c:20:9f: c2:27:bf:7b:b8:e0:dd:e3:d5:7a:c4:2c:96:fc:dc: 79:61:8e:74:4c:04:f9:0f:c8:b4:fa:8a:00:b0:21: 4d:08:8e:18:d0:81:60:57:55:63:73:b7:91:ac:73: df:fd:15:c0:bd:65:9c:c2:86:50:9c:6a:89:18:e1: b1:6f:61:b5:77:dc:27:34:c9:6a:a1:85:7f:bc:b1: dc:80:64:30:fb:45:62:04:5b:fa:8f:9f:86:87:a7: 02:3b:8f:ea:fa:6d:f6:34:c6:9b:38:62:0a:3d:75: 8c:23:3f:0f:fa:d1:9a:4c:e1:ac:9e:73:3c:20:c3: f4:e8:4d:a9:74:11:72:8a:6f:42:f4:cc:40:c9:e0: 40:d2:21:b0:dd:7d:98:5b:a4:c0:ae:e3:7d:78:6d: e7:b7:b1:93:f5:6b:02:2a:19:3a:e0:83:98:4e:fa: 9b:9f:b8:c3:f6:dc:a6:73:31:73:47:3d:02:cb:3b: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8D:3F:30:0B:5F:E9:A9:A5:62:00:DB:F4:A6:DB:0A:61:C5:0B:9B X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:25:8e:60:19:e4:75:fa:7f:82:05:20:77:b5:53:1f:8d:eb: 92:60:55:11:83:20:e0:b4:39:cf:32:e5:04:22:1a:44:47:81: d1:1d:3f:37:05:e5:31:96:c9:11:9e:e2:d4:0d:e6:31:14:75: e1:4d:2c:0c:96:9a:4e:1d:04:ad:03:80:0f:a0:28:9b:af:7e: d4:a3:c4:3c:c5:ab:59:ab:37:f6:41:05:1f:c9:f9:c6:01:33: 15:d9:71:53:0d:79:26:3a:87:bb:22:ae:29:6b:a1:1a:a0:c7: 6f:06:1e:2e:ff:27:00:50:d3:ba:42:ef:34:39:c4:78:dc:ff: 70:07:c6:87:2b:a0:37:0c:0b:8c:3d:ca:6c:80:56:a1:5f:ee: f4:14:11:d4:20:83:3f:14:6a:65:b8:e4:9d:40:6e:6f:eb:70: ab:3a:20:3a:90:a4:f7:4b:0f:9f:e6:42:4c:ad:b3:aa:59:d4: ef:43:9d:6e:0d:1b:cf:cc:52:f5:19:4b:17:4f:6c:5f:aa:e8: d2:29:f6:d6:93:ff:ef:e1:fa:47:ce:d2:48:6e:88:af:2d:75: 3e:e5:81:c4:93:20:e3:4b:1d:07:53:94:24:1e:ef:58:b0:de: 1d:ff:ec:35:25:0f:4d:57:25:d8:c7:22:84:f6:27:41:44:db: 29:1f:ed:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwOTEwMjExMzA5WhcNMjYwOTE3MjExMzA5WjAYMRYwFAYD VQQDEw02YWEzMWQ2Ni05Mjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSyA2ALzQ/OK9YeZiAI+n6+Wjt1/23TLDNw0o0mn0rbc26uMUGqrZY+Nqf7s HgkPOvhqhPVsZHWJ6swVR3tqWNy1oQJMln6MIJ/CJ797uODd49V6xCyW/Nx5YY50 TAT5D8i0+ooAsCFNCI4Y0IFgV1Vjc7eRrHPf/RXAvWWcwoZQnGqJGOGxb2G1d9wn NMlqoYV/vLHcgGQw+0ViBFv6j5+Gh6cCO4/q+m32NMabOGIKPXWMIz8P+tGaTOGs nnM8IMP06E2pdBFyim9C9MxAyeBA0iGw3X2YW6TAruN9eG3nt7GT9WsCKhk64IOY Tvqbn7jD9tymczFzRz0Cyzv3TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKNPzAL X+mppWIA2/Sm2wphxQubMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATyWOYBnkdfp/ggUgd7VTH43rkmBVEYMg4LQ5zzLlBCIaREeB0R0/NwXlMZbJ EZ7i1A3mMRR14U0sDJaaTh0ErQOAD6Aom69+1KPEPMWrWas39kEFH8n5xgEzFdlx Uw15JjqHuyKuKWuhGqDHbwYeLv8nAFDTukLvNDnEeNz/cAfGhyugNwwLjD3KbIBW oV/u9BQR1CCDPxRqZbjknUBub+twqzogOpCk90sPn+ZCTK2zqlnU70Odbg0bz8xS 9RlLF09sX6ro0in21pP/7+H6R87SSG6Iry11PuWBxJMg40sdB1OUJB7vWLDeHf/s NSUPTVcl2McihPYnQUTbKR/toA== -----END CERTIFICATE-----Generated at Fri Sep 11 09:59:37 2026 by rpki-client