$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: 1bjM01wKg0QzGR3OeYX2ng0uKScIXZ1j5TRWkuyxSd8= Subject key identifier: 50:1D:D1:7D:7D:BE:48:A3:5D:43:70:13:C5:95:90:DF:2F:F1:F2:EB Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0AE8 Signing time: Fri 30 Oct 2026 21:18:24 +0000 Manifest this update: Fri 30 Oct 2026 21:18:24 +0000 Manifest next update: Fri 06 Nov 2026 21:18:24 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: u9Lolid13yDCJDcNzplaH3I/4QXqoFoIg2QMp0lDYcI=) 2: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=) 3: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=) 4: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=) 5: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=) 6: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=) 7: 61EE2500936E11F091943583C4F9AE02.roa (hash: Sr0fVNeYl1ln2xDUVSQAqiyMaljD76lpBI5XzEQHN/Q=) 8: 18E343FA3A3411F195AC72659C833773.roa (hash: 2LSM3eiQ6uSa3mcP9nx4IAJuA3izNuR+FLwE9vPZ8yU=) 9: BB142084A77811F1AF0DC2223E11F970.roa (hash: XMc9r+I8/TZNHbcApT8CaBfpQOB8jdoiqTsaangB8Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 21:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Oct 30 21:18:24 2026 GMT Not After : Nov 6 21:18:24 2026 GMT Subject: CN=6ae509a0-853a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:e2:d5:a1:03:08:d5:0d:07:d1:6c:9e:b3: 08:48:0f:24:a5:bf:c8:96:48:0f:71:6c:7f:25:be: 4b:28:4f:4c:8c:3e:fe:d4:4e:c8:22:be:37:d8:55: 43:6f:b3:f5:89:fe:e5:be:b4:41:16:02:eb:2b:09: 4e:17:07:b3:89:08:0b:75:26:a5:9b:b8:8e:df:1a: bc:f1:19:35:08:cd:16:f8:a3:e3:cf:6c:39:f2:1d: 26:a7:8d:f8:51:77:d3:7e:f9:91:fc:da:ec:fb:6c: 4d:ef:85:5b:8f:7f:83:8f:9e:7e:ed:a7:64:3e:b6: 6f:a8:94:ad:60:62:9e:1f:5f:be:da:4e:ba:87:ad: fc:d6:0d:64:e0:87:5f:ee:9d:01:9c:da:cf:ed:df: 80:e2:49:74:02:ca:3e:82:72:18:20:2d:e8:d1:a2: 8c:89:c0:91:ba:e4:f1:3f:a2:69:07:ac:22:06:72: 41:93:09:c6:dc:19:85:2e:43:a7:c5:82:81:ed:20: 29:75:c0:80:18:81:ab:84:53:89:42:61:d9:d2:33: e9:bd:87:e9:8e:be:54:92:82:6a:df:c0:94:40:b4: 74:27:d8:dd:a9:4d:ad:9b:bb:49:1d:6b:c8:a7:62: 77:67:97:8a:ef:c6:c4:af:02:e4:b3:07:5f:bb:86: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1D:D1:7D:7D:BE:48:A3:5D:43:70:13:C5:95:90:DF:2F:F1:F2:EB X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2d:15:4e:75:e5:74:e4:15:c4:5f:08:a8:71:70:26:d0:81: 9d:ab:20:c9:50:2b:20:fa:bf:ad:c1:2a:1c:fd:74:9d:1c:63: 51:75:60:f3:fa:be:e4:a7:65:41:7b:b7:60:ac:e0:30:f4:99: f5:e2:3c:a9:c2:a9:e8:26:05:71:87:ca:29:74:86:68:91:df: e3:c3:12:d0:aa:c4:13:e7:a9:e2:b5:67:be:14:2f:69:66:57: fe:29:29:c1:ca:f4:c8:df:a7:28:17:7d:2c:22:6f:55:99:0a: 3f:13:dd:06:f1:0b:ac:f8:b6:d1:55:65:29:83:47:ef:8b:8d: 06:ee:4b:e4:93:f9:57:79:ba:0a:d3:dd:ec:ee:19:09:e8:25: 48:6d:96:cd:c2:f1:ea:9d:d9:8c:e2:6b:ae:05:f2:50:b5:df: b6:07:ea:5b:a3:34:ab:98:07:5c:a5:ce:0e:41:d2:85:05:2c: ae:ce:83:9c:ea:59:d8:e5:1e:16:9e:d0:24:36:fb:90:b2:67: 33:9b:33:61:fb:29:e2:e2:78:e5:d3:79:2f:9c:a9:49:90:48: f3:a7:d0:04:c6:65:f6:e4:b3:b9:51:4d:1e:53:01:3d:bc:49: 58:1b:a0:86:8c:8e:f3:64:85:97:26:a1:26:f9:39:0c:8f:51: b5:70:1a:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYxMDMwMjExODI0WhcNMjYxMTA2MjExODI0WjAYMRYwFAYD VQQDEw02YWU1MDlhMC04NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wni1aEDCNUNB9FsnrMISA8kpb/IlkgPcWx/Jb5LKE9MjD7+1E7IIr432FVD b7P1if7lvrRBFgLrKwlOFweziQgLdSalm7iO3xq88Rk1CM0W+KPjz2w58h0mp434 UXfTfvmR/Nrs+2xN74Vbj3+Dj55+7adkPrZvqJStYGKeH1++2k66h6381g1k4Idf 7p0BnNrP7d+A4kl0Aso+gnIYIC3o0aKMicCRuuTxP6JpB6wiBnJBkwnG3BmFLkOn xYKB7SApdcCAGIGrhFOJQmHZ0jPpvYfpjr5UkoJq38CUQLR0J9jdqU2tm7tJHWvI p2J3Z5eK78bErwLkswdfu4ajOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAd0X19 vkijXUNwE8WVkN8v8fLrMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASi0VTnXldOQVxF8IqHFwJtCBnasgyVArIPq/rcEqHP10nRxjUXVg8/q+5Kdl QXu3YKzgMPSZ9eI8qcKp6CYFcYfKKXSGaJHf48MS0KrEE+ep4rVnvhQvaWZX/ikp wcr0yN+nKBd9LCJvVZkKPxPdBvELrPi20VVlKYNH74uNBu5L5JP5V3m6CtPd7O4Z CeglSG2WzcLx6p3ZjOJrrgXyULXftgfqW6M0q5gHXKXODkHShQUsrs6DnOpZ2OUe Fp7QJDb7kLJnM5szYfsp4uJ45dN5L5ypSZBI86fQBMZl9uSzuVFNHlMBPbxJWBug hoyO82SFlyahJvk5DI9RtXAaBQ== -----END CERTIFICATE-----Generated at Sat Oct 31 08:41:57 2026 by rpki-client