$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: 6v1aonnV+FL+V1gQgfkxYtuhiUn6zhuMGhzuETsD7Ik= Subject key identifier: 3A:23:6D:1C:BA:34:57:38:2E:78:CD:37:60:59:45:14:D9:AE:36:82 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 0215 Signing time: Mon 05 Oct 2026 03:17:43 +0000 Manifest this update: Mon 05 Oct 2026 03:17:43 +0000 Manifest next update: Mon 12 Oct 2026 03:17:43 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: 90vce2a5z0KRjTikwoNju67ThrHvQWhSrHkmPjP+uDo=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: nHCvFgPSrTxrO0kFePutm+yZWHN0E1TjfcetCjk+YR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Oct 5 03:17:43 2026 GMT Not After : Oct 12 03:17:43 2026 GMT Subject: CN=6ac316d7-d959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a8:48:ff:55:d4:5e:4c:83:67:66:cf:be:70: 14:49:10:34:17:f7:23:34:50:d3:88:68:a9:31:a1: 7c:6c:ff:fa:5b:60:e8:cf:1d:24:bc:c7:f0:18:e5: c3:b7:d7:c7:4c:43:a1:aa:07:fd:49:28:92:b4:96: bc:ce:ad:7c:be:cf:a8:37:66:e0:e0:a9:28:a4:78: ff:77:e0:fe:81:08:5e:54:b9:8a:c4:d9:b8:2b:aa: 6b:d8:50:56:54:0d:54:c3:59:30:02:38:12:db:65: 8c:e6:06:7f:1a:f0:76:ef:1e:cf:d7:73:a8:80:15: 00:8b:d0:35:51:9d:1b:65:9c:02:a6:1d:38:de:6a: 2a:45:4e:77:2c:05:ae:de:bd:38:34:fa:00:7e:1f: 6a:ef:72:24:57:37:84:2d:ac:23:a0:d3:0a:18:c5: e0:c5:d6:ba:73:4c:a6:4b:b3:86:86:89:25:0d:55: 77:40:08:24:1d:8d:92:33:d9:e0:c9:85:98:f8:3c: c0:93:a7:c7:bf:f3:00:01:ed:83:75:34:47:74:93: 62:f1:a3:dc:68:2c:84:1f:b7:23:40:32:e1:4b:3c: cd:46:d2:8b:f4:9b:6e:90:a9:e9:92:d5:1e:24:f3: 8a:86:5f:77:79:ea:ed:22:5b:68:6a:9d:0f:1f:9e: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:6D:1C:BA:34:57:38:2E:78:CD:37:60:59:45:14:D9:AE:36:82 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:10:31:9a:ce:7d:50:3e:bb:41:89:9a:94:50:cf:57:4e:df: 5a:6f:ff:fb:83:cc:1e:b5:28:a3:47:ea:21:91:b6:3a:7c:13: 40:ea:e6:75:15:ce:9b:46:77:ae:24:40:2f:32:14:41:aa:45: ba:2a:8c:ac:c5:fa:2e:e0:47:a7:1c:34:89:ce:39:f8:44:7c: e7:ba:8b:81:c8:e2:9e:c8:98:68:59:34:d9:a0:f7:34:26:58: f9:83:af:6e:e7:31:5d:c8:d5:59:f9:3f:7a:0b:fa:81:16:77: 2c:02:ec:f2:65:6b:cf:41:e8:d3:c0:58:6e:ca:47:6b:62:3c: 81:a0:fd:c0:8a:e9:51:c9:90:ab:03:1b:93:bb:1e:90:9e:7f: cf:0a:21:23:06:dd:8a:a3:ba:54:31:fa:b4:02:68:83:c9:2c: c8:68:3d:1d:17:c5:49:1e:b8:8e:9a:46:1b:1c:56:3d:ef:63: fc:0e:03:e0:fe:3e:57:9a:a8:9f:c6:40:15:de:a8:89:f6:c4: 9f:aa:2c:0d:c1:43:6c:da:67:bc:28:a2:3c:ff:1f:e3:cf:e2: c3:ed:d6:71:b6:0d:a3:53:65:8e:70:06:ee:13:03:40:44:81: b6:97:5a:2d:31:37:42:e4:5e:13:54:0a:cb:a0:ae:fe:f0:80: 6f:b7:25:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjYxMDA1MDMxNzQzWhcNMjYxMDEyMDMxNzQzWjAYMRYwFAYD VQQDEw02YWMzMTZkNy1kOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KhI/1XUXkyDZ2bPvnAUSRA0F/cjNFDTiGipMaF8bP/6W2Dozx0kvMfwGOXD t9fHTEOhqgf9SSiStJa8zq18vs+oN2bg4KkopHj/d+D+gQheVLmKxNm4K6pr2FBW VA1Uw1kwAjgS22WM5gZ/GvB27x7P13OogBUAi9A1UZ0bZZwCph043moqRU53LAWu 3r04NPoAfh9q73IkVzeELawjoNMKGMXgxda6c0ymS7OGhoklDVV3QAgkHY2SM9ng yYWY+DzAk6fHv/MAAe2DdTRHdJNi8aPcaCyEH7cjQDLhSzzNRtKL9JtukKnpktUe JPOKhl93eertIltoap0PH56nAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDojbRy6 NFc4LnjNN2BZRRTZrjaCMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYRAxms59UD67QYmalFDPV07fWm//+4PMHrUoo0fqIZG2OnwTQOrmdRXOm0Z3 riRALzIUQapFuiqMrMX6LuBHpxw0ic45+ER857qLgcjinsiYaFk02aD3NCZY+YOv bucxXcjVWfk/egv6gRZ3LALs8mVrz0Ho08BYbspHa2I8gaD9wIrpUcmQqwMbk7se kJ5/zwohIwbdiqO6VDH6tAJog8ksyGg9HRfFSR64jppGGxxWPe9j/A4D4P4+V5qo n8ZAFd6oifbEn6osDcFDbNpnvCiiPP8f48/iw+3WcbYNo1NljnAG7hMDQESBtpda LTE3QuReE1QKy6Cu/vCAb7clTQ== -----END CERTIFICATE-----Generated at Mon Oct 5 06:32:40 2026 by rpki-client