$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft File: oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft (raw, json) Hash identifier: SPwl/CT6yfiUS5aI2ICMhbgKWORqevSU2NK5M2ZRvFk= Subject key identifier: 42:02:8B:6F:EB:93:2B:83:31:09:F7:94:53:4D:7E:E0:D6:B2:6F:0E Authority key identifier: A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F Certificate issuer: /CN=A9159558/serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft Manifest number: 3B Signing time: Wed 19 Aug 2026 09:17:17 +0000 Manifest this update: Wed 19 Aug 2026 09:17:16 +0000 Manifest next update: Wed 26 Aug 2026 09:17:16 +0000 Files and hashes: 1: oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl (hash: qZiIvHloGrNMnHC9iD1yHvKWT6l9J7mP1L4msXSwUNk=) 2: C8482E4C435C11F18454B6E5B6833773.roa (hash: kpOLgyl4KEGTvF971USy71Gh3dYWWDj9RJbZtYOEjJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159558, serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F Validity Not Before: Aug 19 09:17:16 2026 GMT Not After : Aug 26 09:17:16 2026 GMT Subject: CN=6a85749d-d460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:f7:1c:8c:ae:c6:f4:e8:2d:93:8a:7a:25: 93:81:3d:a5:4a:d8:48:c2:fd:cc:78:96:00:42:12: 22:79:f0:34:46:57:ee:b0:af:49:a9:1e:52:b8:b1: 23:78:62:e4:39:a0:4f:eb:55:15:fc:3b:bd:3c:da: 78:f2:a1:8c:31:b7:57:51:04:c6:33:9b:77:c6:6b: b6:0a:45:59:32:86:0d:85:c0:c0:70:a8:ca:a9:f0: 2b:b4:c8:f6:40:1b:b4:a9:4e:6f:df:22:37:06:34: 78:bf:cd:ea:49:ff:34:c0:5c:d4:cf:61:a2:39:e8: 73:c2:6d:78:56:e1:fc:a6:f9:55:31:7d:0f:69:26: 29:df:3b:b7:c6:d7:3b:07:81:2a:c7:2d:3c:2e:60: 77:01:e9:18:2a:d4:7d:2d:f4:bf:f1:43:a3:33:41: 12:36:76:30:77:f3:6b:99:a4:bf:e6:76:d9:da:5f: cf:8f:fa:8a:c1:d3:97:ae:4e:0e:7f:d0:45:4e:89: ff:ea:81:ac:29:a0:e0:f4:eb:43:ab:71:e1:bd:90: fd:97:8a:1c:49:3d:29:39:74:79:b7:10:c7:66:27: e2:90:54:87:df:f3:b9:8a:2d:39:9b:90:ba:24:48: 10:d6:9d:b9:25:c3:c2:80:32:a0:62:f1:80:d4:83: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:02:8B:6F:EB:93:2B:83:31:09:F7:94:53:4D:7E:E0:D6:B2:6F:0E X509v3 Authority Key Identifier: keyid:A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f1:bc:85:0c:08:19:d4:a3:f9:98:05:0f:43:e5:ac:39:5f: 86:3b:ce:ce:3d:a4:33:28:f4:16:8d:c4:8e:7a:42:7a:14:09: a0:3c:d6:f1:9a:02:1f:0c:ba:80:32:54:62:85:40:bf:6e:66: b7:27:cc:7d:6d:68:6e:5d:a1:dd:0e:f7:90:c3:16:22:04:d4: 3d:84:9d:60:71:2f:80:7e:a6:c4:ba:4e:9d:b4:6f:99:e4:f7: e6:ad:15:5c:b3:f4:0a:32:78:7d:03:87:91:6f:7c:b7:f5:8d: 32:34:0f:e4:71:40:6a:5b:01:31:c4:7e:62:55:d2:ef:61:af: 65:9a:90:eb:09:c1:e4:b3:0c:4e:16:cf:1c:15:56:c1:df:70: e4:e7:4b:a3:95:4f:5e:fc:55:1a:7b:f4:32:19:35:8c:8d:cd: f2:6a:5a:b5:c9:65:76:47:f5:b3:f4:b5:64:6a:8a:5e:94:e1: 5b:7a:32:03:13:1c:ea:57:f5:ac:56:36:68:1f:3a:65:01:02: 66:27:22:5f:e6:d8:dd:3c:76:e2:26:40:be:56:18:4d:05:db: 4f:00:a4:16:34:ca:af:a4:fe:d2:65:46:a8:02:36:99:d6:df: fe:2c:84:d2:01:47:e5:23:d2:75:b0:73:c7:7f:de:6f:fb:42: 85:f0:27:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTU1ODExMC8GA1UEBRMoQTA5NzY1NUNDMTNEN0M5RDhEQUIxRjIxN0YxRkU0ODM4 RDFDMjg1RjAeFw0yNjA4MTkwOTE3MTZaFw0yNjA4MjYwOTE3MTZaMBgxFjAUBgNV BAMTDTZhODU3NDlkLWQ0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCG5PccjK7G9Ogtk4p6JZOBPaVK2EjC/cx4lgBCEiJ58DRGV+6wr0mpHlK4sSN4 YuQ5oE/rVRX8O7082njyoYwxt1dRBMYzm3fGa7YKRVkyhg2FwMBwqMqp8Cu0yPZA G7SpTm/fIjcGNHi/zepJ/zTAXNTPYaI56HPCbXhW4fym+VUxfQ9pJinfO7fG1zsH gSrHLTwuYHcB6Rgq1H0t9L/xQ6MzQRI2djB382uZpL/mdtnaX8+P+orB05euTg5/ 0EVOif/qgawpoOD060OrceG9kP2XihxJPSk5dHm3EMdmJ+KQVIff87mKLTmbkLok SBDWnbklw8KAMqBi8YDUg2u/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQgKLb+uT K4MxCfeUU01+4Naybw4wHwYDVR0jBBgwFoAUoJdlXME9fJ2Nqx8hfx/kg40cKF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5NTU4LzJEODZDQkU2NDJE MjExRjFCNkYxMEM3NEM3ODMzNzczL29KZGxYTUU5ZkoyTnF4OGhmeF9rZzQwY0tG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0pkbFhNRTlmSjJOcXg4aGZ4X2tnNDBjS0Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 NTU4LzJEODZDQkU2NDJEMjExRjFCNkYxMEM3NEM3ODMzNzczL29KZGxYTUU5Zkoy TnF4OGhmeF9rZzQwY0tGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBc8byFDAgZ1KP5mAUPQ+WsOV+GO87OPaQzKPQWjcSOekJ6FAmgPNbxmgIfDLqA MlRihUC/bma3J8x9bWhuXaHdDveQwxYiBNQ9hJ1gcS+AfqbEuk6dtG+Z5PfmrRVc s/QKMnh9A4eRb3y39Y0yNA/kcUBqWwExxH5iVdLvYa9lmpDrCcHkswxOFs8cFVbB 33Dk50ujlU9e/FUae/QyGTWMjc3yalq1yWV2R/Wz9LVkaopelOFbejIDExzqV/Ws VjZoHzplAQJmJyJf5tjdPHbiJkC+VhhNBdtPAKQWNMqvpP7SZUaoAjaZ1t/+LITS AUflI9J1sHPHf95v+0KF8Cf1 -----END CERTIFICATE-----Generated at Fri Aug 21 02:50:06 2026 by rpki-client