$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft File: oaOkEem3sQig0u6lKRHrNHEHOj4.mft (raw, json) Hash identifier: 1DxjtuyyUd5klySl8cHy1nJWzO8tG/oBtvpVxx68J+o= Subject key identifier: 4E:98:FD:AF:C3:87:A6:6C:04:78:F1:BD:20:0D:B0:1C:AE:D2:10:BD Authority key identifier: A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E Certificate issuer: /CN=A9158D68/serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft Manifest number: 1B Signing time: Mon 05 Oct 2026 09:27:14 +0000 Manifest this update: Mon 05 Oct 2026 09:27:13 +0000 Manifest next update: Mon 12 Oct 2026 09:27:13 +0000 Files and hashes: 1: oaOkEem3sQig0u6lKRHrNHEHOj4.crl (hash: +aCKCdsGU5cWDXfIDIqs9d09qwWo/L8HvddEe0pqAag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.crl rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D68, serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E Validity Not Before: Oct 5 09:27:13 2026 GMT Not After : Oct 12 09:27:13 2026 GMT Subject: CN=6ac36d72-0c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:d7:88:64:dd:a6:60:d5:2d:25:10:b0:53: 6b:f8:73:27:11:a5:8b:fd:49:33:ce:65:ab:51:ec: ee:12:5b:f8:30:82:99:ac:be:25:1b:f5:a2:9f:ad: bf:06:25:02:84:73:2f:51:f0:9f:2a:cb:cd:8f:7e: 8a:ae:9f:10:c3:d3:1c:e5:48:34:75:61:53:8b:08: a8:e3:00:7f:ef:4a:82:69:90:49:46:53:51:fa:33: 15:16:f6:32:07:f4:cc:59:c9:04:8f:f8:fe:ef:66: 22:f0:90:d8:53:b6:41:5b:47:a4:fd:fd:16:1b:94: f7:d8:3f:ad:5f:2e:b5:37:8c:8b:11:ba:74:e1:3b: 9a:e6:00:aa:fd:b3:e3:58:d0:d9:ad:4e:c6:04:49: 51:09:29:e9:b9:3c:05:1a:89:6b:87:06:f3:06:30: 46:75:d9:3c:38:5b:08:e3:8c:c3:24:7e:07:a6:ed: 26:70:ec:f2:41:ca:de:b4:c1:22:ea:73:bc:34:3c: 79:dd:65:f4:33:84:a9:23:1a:76:73:3b:2b:5d:45: 4e:a9:f5:69:ca:f5:87:06:cb:8b:48:0d:0b:83:11: dd:53:94:16:46:50:5c:95:fc:13:79:99:db:c8:29: b0:38:60:2c:eb:2d:59:52:b0:d8:f4:34:d4:52:7c: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:FD:AF:C3:87:A6:6C:04:78:F1:BD:20:0D:B0:1C:AE:D2:10:BD X509v3 Authority Key Identifier: keyid:A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:84:f1:36:63:6d:a5:1d:31:58:4d:b0:8b:2b:5a:56:c3:99: a4:25:3f:eb:45:a7:74:11:98:0b:1b:eb:6c:1b:72:d0:6d:48: 8d:3f:f9:a9:88:95:7a:2e:46:6b:93:91:a9:b2:8d:d6:49:50: e9:a1:b7:ee:d9:f6:d6:2f:4f:cb:0c:e1:bb:38:35:fa:bf:a9: bc:d3:f0:d7:c8:05:04:05:7e:98:2e:74:ff:55:9d:d2:41:d9: cf:04:cc:81:04:6b:45:91:fd:fd:b1:6b:4f:42:6c:84:d9:24: f4:a0:67:03:bf:4c:fc:43:83:27:4c:09:3a:92:d9:0d:97:fb: f3:24:85:53:8f:ff:52:90:da:9e:36:03:38:cc:0e:c7:05:9a: d7:dc:9e:06:2c:a3:91:69:fb:e2:a8:9b:b4:a2:f6:db:5b:a2: 4d:75:d4:77:53:44:e9:96:fc:81:93:60:18:b3:95:f6:f5:4d: d4:e9:4f:1f:c3:a0:25:e9:10:85:a8:dc:08:ff:6a:ea:9c:eb: 5b:d9:2e:c5:b8:69:29:94:c8:0f:20:00:e7:e0:60:da:e2:6a: 02:ae:1d:ae:7a:23:11:2a:d4:92:1c:9a:87:ad:94:0f:18:6f: 34:60:36:85:80:fd:3c:8d:b8:9d:d2:9c:9f:02:a1:d0:af:80: ae:d0:22:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ2ODExMC8GA1UEBRMoQTFBM0E0MTFFOUI3QjEwOEEwRDJFRUE1MjkxMUVCMzQ3 MTA3M0EzRTAeFw0yNjEwMDUwOTI3MTNaFw0yNjEwMTIwOTI3MTNaMBgxFjAUBgNV BAMTDTZhYzM2ZDcyLTBjMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkGdeIZN2mYNUtJRCwU2v4cycRpYv9STPOZatR7O4SW/gwgpmsviUb9aKfrb8G JQKEcy9R8J8qy82PfoqunxDD0xzlSDR1YVOLCKjjAH/vSoJpkElGU1H6MxUW9jIH 9MxZyQSP+P7vZiLwkNhTtkFbR6T9/RYblPfYP61fLrU3jIsRunThO5rmAKr9s+NY 0NmtTsYESVEJKem5PAUaiWuHBvMGMEZ12Tw4WwjjjMMkfgem7SZw7PJByt60wSLq c7w0PHndZfQzhKkjGnZzOytdRU6p9WnK9YcGy4tIDQuDEd1TlBZGUFyV/BN5mdvI KbA4YCzrLVlSsNj0NNRSfNfHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTpj9r8OH pmwEePG9IA2wHK7SEL0wHwYDVR0jBBgwFoAUoaOkEem3sQig0u6lKRHrNHEHOj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDY4LzdBNDM3Q0MwOUFE MTExRjE4OTJCRUY1MjRDMTFGOTcwL29hT2tFZW0zc1FpZzB1NmxLUkhyTkhFSE9q NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2FPa0VlbTNzUWlnMHU2bEtSSHJOSEVIT2o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RDY4LzdBNDM3Q0MwOUFEMTExRjE4OTJCRUY1MjRDMTFGOTcwL29hT2tFZW0zc1Fp ZzB1NmxLUkhyTkhFSE9qNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC6hPE2Y22lHTFYTbCLK1pWw5mkJT/rRad0EZgLG+tsG3LQbUiNP/mpiJV6LkZr k5Gpso3WSVDpobfu2fbWL0/LDOG7ODX6v6m80/DXyAUEBX6YLnT/VZ3SQdnPBMyB BGtFkf39sWtPQmyE2ST0oGcDv0z8Q4MnTAk6ktkNl/vzJIVTj/9SkNqeNgM4zA7H BZrX3J4GLKORafviqJu0ovbbW6JNddR3U0TplvyBk2AYs5X29U3U6U8fw6Al6RCF qNwI/2rqnOtb2S7FuGkplMgPIADn4GDa4moCrh2ueiMRKtSSHJqHrZQPGG80YDaF gP08jbid0pyfAqHQr4Cu0CIW -----END CERTIFICATE-----Generated at Tue Oct 6 14:42:12 2026 by rpki-client