$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft File: oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft (raw, json) Hash identifier: crTP3xjAnieMoM+CBY73HaWnA0LFe6RnnlwSWZk2DnY= Subject key identifier: 75:19:3B:A7:E6:E1:73:4E:33:EA:18:1D:F8:7C:55:98:F3:AD:42:3F Authority key identifier: A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24 Certificate issuer: /CN=A917F429/serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft Manifest number: 59 Signing time: Sat 03 Oct 2026 08:53:54 +0000 Manifest this update: Sat 03 Oct 2026 08:53:53 +0000 Manifest next update: Sat 10 Oct 2026 08:53:53 +0000 Files and hashes: 1: oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl (hash: Dla9CQRGXoUanrNjsl+bfiPtei8tOGvJxxZiC0adwUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F429, serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24 Validity Not Before: Oct 3 08:53:53 2026 GMT Not After : Oct 10 08:53:53 2026 GMT Subject: CN=6ac0c2a2-ac24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:0e:44:9a:fa:f6:5b:26:50:50:ce:bc:0a: d7:2c:e9:fd:c0:00:d3:50:9c:48:c3:66:48:e0:8c: 7a:f9:9f:3e:9d:fe:b2:3d:87:3a:2b:37:81:29:37: 46:99:67:ab:5e:03:36:95:18:38:31:eb:00:23:86: 90:d8:15:bf:7d:0b:fd:6b:a6:1e:b2:07:da:cd:50: 6b:b5:aa:75:e7:0e:8b:9b:e0:6a:2e:44:fa:77:8a: a2:3e:a0:46:a7:a2:95:80:03:9f:62:65:54:7f:30: 76:67:d7:05:25:5f:a3:0a:e9:cf:17:10:ec:d8:3f: 7c:28:31:2a:d4:38:9e:a4:eb:f1:1a:a3:6d:35:8b: d6:20:aa:ad:e9:a4:a2:71:03:fd:66:eb:16:37:9c: ad:68:44:a8:e8:60:d2:25:77:5f:dc:13:ce:62:93: 73:b1:60:1a:76:bc:b0:44:56:39:d0:5f:3f:16:b1: 09:4c:46:3e:55:ce:8d:f4:73:98:a1:ea:31:07:8e: 4b:4a:f3:8e:89:fb:53:ed:51:11:d3:9a:fd:7b:dd: 19:07:19:63:3d:f6:b8:02:d2:55:17:c1:09:52:77: 17:b7:58:7d:74:c4:86:3f:9e:91:66:f4:40:d3:d4: 7a:ad:5a:5c:25:69:34:6c:5f:fc:2e:62:d3:3c:53: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:19:3B:A7:E6:E1:73:4E:33:EA:18:1D:F8:7C:55:98:F3:AD:42:3F X509v3 Authority Key Identifier: keyid:A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:48:5c:5b:4e:8c:e9:f4:23:68:94:d8:e2:ba:88:0f:ec:4a: 24:83:8e:3a:ea:71:d8:6f:a6:eb:41:92:ee:c7:e5:f5:a8:91: d3:63:e4:00:42:d0:97:86:3f:f0:22:9e:aa:98:db:37:08:d2: 2c:02:64:5f:eb:56:c6:27:5f:3e:4a:0b:4e:76:ca:ee:6e:f1: d4:ba:fc:a4:3b:ca:21:a8:b3:ed:a8:12:0c:c4:c0:94:fc:63: 3b:ca:66:63:f8:09:70:5e:2b:e2:30:b0:cb:cf:19:47:94:fa: 6e:a6:d8:51:fe:8b:2d:64:72:9c:18:d1:fe:b6:b7:e0:79:f5: b3:b8:2a:c8:1a:7f:9e:aa:fa:37:99:2c:fd:13:30:da:9c:83: e9:c9:f4:51:27:9a:70:fd:eb:24:68:41:7a:49:4a:d7:84:e1: a3:d2:de:4d:b2:72:59:8f:88:40:56:cc:e8:9c:79:b4:db:65: e9:0a:ee:fe:4a:09:d5:66:88:60:32:09:29:58:09:6d:33:a2: b5:a4:37:ef:40:55:30:86:c3:e4:fe:5d:e8:24:69:0d:bd:fb: e9:f8:02:42:aa:f7:60:36:a5:84:3a:cf:31:6b:62:36:d0:1b: aa:66:3d:db:59:cc:13:55:6b:93:19:ea:2b:37:dd:c0:28:22: f5:c0:ef:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjQyOTExMC8GA1UEBRMoQTE2MjM3QjE4MzBDRDI0MDI5ODhBQTBCMzBBQTY3NjQz MEY2NUMyNDAeFw0yNjEwMDMwODUzNTNaFw0yNjEwMTAwODUzNTNaMBgxFjAUBgNV BAMTDTZhYzBjMmEyLWFjMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1MA5Emvr2WyZQUM68Ctcs6f3AANNQnEjDZkjgjHr5nz6d/rI9hzorN4EpN0aZ Z6teAzaVGDgx6wAjhpDYFb99C/1rph6yB9rNUGu1qnXnDoub4GouRPp3iqI+oEan opWAA59iZVR/MHZn1wUlX6MK6c8XEOzYP3woMSrUOJ6k6/Eao201i9Ygqq3ppKJx A/1m6xY3nK1oRKjoYNIld1/cE85ik3OxYBp2vLBEVjnQXz8WsQlMRj5Vzo30c5ih 6jEHjktK846J+1PtURHTmv173RkHGWM99rgC0lUXwQlSdxe3WH10xIY/npFm9EDT 1HqtWlwlaTRsX/wuYtM8U88DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdRk7p+bh c04z6hgd+HxVmPOtQj8wHwYDVR0jBBgwFoAUoWI3sYMM0kApiKoLMKpnZDD2XCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzBCMDAxMUU2Mzcx OTExRjFBNjZCRDlGOEM2ODMzNzczL29XSTNzWU1NMGtBcGlLb0xNS3BuWkREMlhD US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1dJM3NZTU0wa0FwaUtvTE1LcG5aREQyWENRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NDI5LzBCMDAxMUU2MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL29XSTNzWU1NMGtB cGlLb0xNS3BuWkREMlhDUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBmSFxbTozp9CNolNjiuogP7Eokg4466nHYb6brQZLux+X1qJHTY+QAQtCXhj/w Ip6qmNs3CNIsAmRf61bGJ18+SgtOdsrubvHUuvykO8ohqLPtqBIMxMCU/GM7ymZj +AlwXiviMLDLzxlHlPpupthR/ostZHKcGNH+trfgefWzuCrIGn+eqvo3mSz9EzDa nIPpyfRRJ5pw/eskaEF6SUrXhOGj0t5NsnJZj4hAVszonHm022XpCu7+SgnVZohg MgkpWAltM6K1pDfvQFUwhsPk/l3oJGkNvfvp+AJCqvdgNqWEOs8xa2I20BuqZj3b WcwTVWuTGeorN93AKCL1wO/+ -----END CERTIFICATE-----Generated at Sun Oct 4 13:39:19 2026 by rpki-client