$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json) Hash identifier: gspWL5T1jRrRll2540flTDya/SvBcV0ObzlOUBxruao= Subject key identifier: 49:45:1E:18:40:69:2B:12:FF:9E:3C:32:60:19:7A:A2:91:8F:25:56 Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft Manifest number: 01DD Signing time: Tue 13 Oct 2026 02:16:55 +0000 Manifest this update: Tue 13 Oct 2026 02:16:54 +0000 Manifest next update: Tue 20 Oct 2026 02:16:54 +0000 Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: NkHYWFbWYW5DUkXLMvUbNxppHVCs247a3yhpNAAa1x4=) 2: 35BF2AEEB59E11F194E7428B3311F970.roa (hash: R/CLrk+ss+xAqg707krYyYSBez8f9zY5TlrmSiSHgjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 02:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Validity Not Before: Oct 13 02:16:54 2026 GMT Not After : Oct 20 02:16:54 2026 GMT Subject: CN=6acd9497-b760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:ca:16:17:49:32:4d:49:a7:a6:fd:31:97: eb:fc:e0:93:0e:2b:2c:39:30:c7:9a:e5:2f:bd:45: 54:3f:3e:55:28:d3:2c:1d:52:14:32:c2:4f:b4:5a: 5e:4d:10:f3:cf:25:07:eb:ec:08:3d:4e:fc:41:ba: 70:2c:91:94:f5:7b:e8:77:66:8a:90:d5:70:30:fe: 4a:13:52:18:95:59:eb:fe:a5:9e:84:92:aa:ec:d1: 8c:46:f8:75:d6:c5:44:40:ea:c1:31:3a:3d:72:47: 85:f4:6c:6b:a5:82:aa:e0:8f:c3:08:8c:52:73:a4: 09:4f:1e:a4:55:9d:e5:50:58:b3:0f:8a:d7:fc:ac: 21:9a:ac:4c:aa:95:9d:3c:33:29:96:3c:7e:92:b5: 7c:af:b3:ab:ab:1b:2e:ae:dc:7b:ee:ef:3c:21:9a: db:76:8b:b4:02:e8:04:9a:1d:2b:0d:18:4b:2f:8b: ea:36:b5:38:84:90:28:ed:c1:ec:e4:5d:95:d9:06: a1:65:e8:23:dc:54:65:b2:a7:2c:b4:39:66:c4:71: 64:b3:c8:f5:d3:ae:8a:fa:86:c5:09:8a:0b:18:a8: 4f:a4:6f:77:39:ec:77:43:76:bb:17:4e:1d:2e:e5: ce:62:19:2a:8c:16:a9:a6:4a:c6:d6:57:b9:85:d1: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:45:1E:18:40:69:2B:12:FF:9E:3C:32:60:19:7A:A2:91:8F:25:56 X509v3 Authority Key Identifier: keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e9:84:d7:fc:18:ef:69:87:d7:1c:bd:b3:d3:a7:2e:ee:2a: 2a:6f:c2:e9:a7:8a:6b:65:82:69:cf:7d:6a:d8:a8:80:4b:c1: ac:4c:51:e3:21:b4:f4:4a:43:59:71:4f:49:7c:1b:40:28:49: da:ea:b2:09:fc:54:a7:13:10:75:c2:f6:92:5b:6f:d5:2b:9e: 37:ee:d4:03:1f:35:3f:f6:51:3a:4a:2c:7c:cf:d8:1b:92:8b: 62:d5:de:ed:6f:a9:82:14:1f:d5:57:0b:60:1a:b8:dd:d3:8e: d1:93:44:b1:56:90:86:ea:5c:32:ae:ca:19:ad:da:2d:4e:88: 68:b0:e6:99:7a:b9:f5:b5:3e:03:45:5d:84:91:4f:fa:11:04: 39:8b:57:ea:e2:df:0e:7d:09:c6:87:23:b0:2f:86:96:68:cb: 75:48:e6:9c:07:c4:db:ba:46:ff:73:a5:49:26:25:c8:b6:05: b1:0d:d9:83:74:89:b4:1b:8f:cc:ed:14:d6:71:ae:08:75:9a: 89:0c:c3:1f:8c:a3:8a:4d:52:e5:90:fb:a5:4d:66:24:4c:bf: b2:ec:92:16:c7:6c:4a:61:29:26:47:08:95:24:c6:0e:33:4e: bd:de:02:0c:f8:04:7e:5c:0e:0e:c9:b7:83:54:5c:ad:59:90: 2d:47:34:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE QURCNTIxMkEwHhcNMjYxMDEzMDIxNjU0WhcNMjYxMDIwMDIxNjU0WjAYMRYwFAYD VQQDEw02YWNkOTQ5Ny1iNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSfKFhdJMk1Jp6b9MZfr/OCTDissOTDHmuUvvUVUPz5VKNMsHVIUMsJPtFpe TRDzzyUH6+wIPU78QbpwLJGU9Xvod2aKkNVwMP5KE1IYlVnr/qWehJKq7NGMRvh1 1sVEQOrBMTo9ckeF9GxrpYKq4I/DCIxSc6QJTx6kVZ3lUFizD4rX/KwhmqxMqpWd PDMpljx+krV8r7Orqxsurtx77u88IZrbdou0AugEmh0rDRhLL4vqNrU4hJAo7cHs 5F2V2QahZegj3FRlsqcstDlmxHFks8j1066K+obFCYoLGKhPpG93Oex3Q3a7F04d LuXOYhkqjBappkrG1le5hdHcqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElFHhhA aSsS/548MmAZeqKRjyVWMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsOmE1/wY72mH1xy9s9OnLu4qKm/C6aeKa2WCac99atiogEvBrExR4yG09EpD WXFPSXwbQChJ2uqyCfxUpxMQdcL2kltv1SueN+7UAx81P/ZROkosfM/YG5KLYtXe 7W+pghQf1VcLYBq43dOO0ZNEsVaQhupcMq7KGa3aLU6IaLDmmXq59bU+A0VdhJFP +hEEOYtX6uLfDn0JxocjsC+GlmjLdUjmnAfE27pG/3OlSSYlyLYFsQ3Zg3SJtBuP zO0U1nGuCHWaiQzDH4yjik1S5ZD7pU1mJEy/suySFsdsSmEpJkcIlSTGDjNOvd4C DPgEflwODsm3g1RcrVmQLUc0pQ== -----END CERTIFICATE-----Generated at Tue Oct 13 19:28:29 2026 by rpki-client