$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft File: o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft (raw, json) Hash identifier: zMy1Fv9CHJCN/EW9qe9GnxeQCLhuy4M4l6mQfaNPFzQ= Subject key identifier: ED:EA:DE:1F:A3:1C:71:0D:BC:2A:E7:CB:58:07:2A:31:1F:A1:90:82 Authority key identifier: A3:A4:3B:14:E3:14:C2:22:19:85:8B:F1:7B:EF:76:31:E7:8C:40:0E Certificate issuer: /CN=A918B2BC/serialNumber=A3A43B14E314C22219858BF17BEF7631E78C400E Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o6Q7FOMUwiIZhYvxe-92MeeMQA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft Manifest number: 2F Signing time: Sat 03 Oct 2026 09:27:08 +0000 Manifest this update: Sat 03 Oct 2026 09:27:08 +0000 Manifest next update: Sat 10 Oct 2026 09:27:08 +0000 Files and hashes: 1: o6Q7FOMUwiIZhYvxe-92MeeMQA4.crl (hash: RQzDC+5ZZHRIu8cPVm+qpJ2XbeSXtlagt6dzhEShnrw=) 2: 0C739F2C97F211F1B68E29C06D11F970.roa (hash: dZjmzWubY0kat6SXuVm1HDIUTE6Fb+vARrC/qKYUlZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.crl rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o6Q7FOMUwiIZhYvxe-92MeeMQA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2BC, serialNumber=A3A43B14E314C22219858BF17BEF7631E78C400E Validity Not Before: Oct 3 09:27:08 2026 GMT Not After : Oct 10 09:27:08 2026 GMT Subject: CN=6ac0ca6c-2a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:23:8f:84:97:cb:09:5d:ae:ce:34:b0:29: 8f:62:66:f4:fe:47:d7:7f:6e:cc:ff:74:1b:ff:bd: 8d:d9:4b:05:23:e1:2d:16:a0:d4:71:c7:b4:8f:74: d4:9a:d4:c4:21:21:c8:32:25:b2:02:b7:cf:9f:1e: 64:35:37:d3:8c:f6:aa:8d:48:05:9c:0a:53:09:58: 84:92:fa:d7:50:61:42:fc:6a:4a:bf:ba:43:6c:ff: 7c:3e:84:d9:fc:67:a1:73:62:6a:58:b0:71:99:eb: 04:f4:59:f1:de:7f:fe:d4:8f:29:7b:a3:7c:b2:5e: 2d:ab:af:b0:33:f3:19:b2:4d:c9:9d:f9:7c:4c:41: f4:3d:63:03:c4:d1:2d:32:33:32:4c:9c:07:1c:95: e8:27:d5:42:80:be:ae:43:18:4d:68:27:a0:5a:6f: 8c:5d:82:f8:e1:28:3e:5d:a8:c3:89:5f:b2:19:1e: b6:75:67:79:64:a4:c6:b7:91:5b:3a:49:6f:3a:0a: 15:52:3f:c9:32:32:3c:05:dc:14:58:7f:d1:9e:1f: e2:ef:58:67:7b:9f:6a:3d:08:6c:b9:85:b5:00:01: 52:28:a1:e0:c4:32:f2:6e:d0:d9:d5:9c:41:20:ef: 23:d8:3f:1a:be:7f:88:26:3d:25:6e:12:cd:af:e4: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EA:DE:1F:A3:1C:71:0D:BC:2A:E7:CB:58:07:2A:31:1F:A1:90:82 X509v3 Authority Key Identifier: keyid:A3:A4:3B:14:E3:14:C2:22:19:85:8B:F1:7B:EF:76:31:E7:8C:40:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o6Q7FOMUwiIZhYvxe-92MeeMQA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:92:9d:7a:94:33:28:ff:df:d9:82:01:de:4a:b0:a6:e3:74: 7c:1b:00:ec:a2:65:85:33:5b:2c:fe:6c:18:48:33:33:9d:17: 47:68:d6:44:c1:9f:e2:f3:09:b9:2c:63:7b:27:74:0e:10:c2: b0:8f:3d:6f:8c:0c:07:d8:33:11:b1:9d:03:bd:78:91:4d:5e: 02:7a:d2:8f:39:69:dd:0f:40:3e:77:34:23:de:53:a2:d5:e7: 0e:cb:5a:2b:85:e6:a8:b0:7d:95:af:57:28:ca:34:e6:45:29: bb:d3:3d:5d:0a:02:04:2d:08:33:2d:85:3b:13:d5:08:69:0f: 30:85:25:c0:1c:c5:32:ba:00:45:89:4b:0f:44:44:97:55:5e: 2f:24:b2:db:f9:59:1c:c7:c5:ea:94:14:d2:00:40:18:3f:0e: 86:6e:31:84:2d:49:3f:81:c2:98:ab:0b:5c:1b:28:67:b4:e1: 67:3e:2c:43:5c:db:3c:70:5d:3f:ea:be:19:61:a8:52:a1:2e: 83:79:a8:76:ca:0d:fe:09:eb:2d:45:01:43:92:c5:fb:51:a1: 40:79:8a:cf:02:da:47:48:cb:52:02:33:a3:8e:da:de:b5:ba: d3:06:37:f6:b1:03:09:1f:82:da:71:24:11:e4:b7:0c:e6:4d: 3d:56:5b:86 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjJCQzExMC8GA1UEBRMoQTNBNDNCMTRFMzE0QzIyMjE5ODU4QkYxN0JFRjc2MzFF NzhDNDAwRTAeFw0yNjEwMDMwOTI3MDhaFw0yNjEwMTAwOTI3MDhaMBgxFjAUBgNV BAMTDTZhYzBjYTZjLTJhMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU6iOPhJfLCV2uzjSwKY9iZvT+R9d/bsz/dBv/vY3ZSwUj4S0WoNRxx7SPdNSa 1MQhIcgyJbICt8+fHmQ1N9OM9qqNSAWcClMJWISS+tdQYUL8akq/ukNs/3w+hNn8 Z6FzYmpYsHGZ6wT0WfHef/7Ujyl7o3yyXi2rr7Az8xmyTcmd+XxMQfQ9YwPE0S0y MzJMnAcclegn1UKAvq5DGE1oJ6Bab4xdgvjhKD5dqMOJX7IZHrZ1Z3lkpMa3kVs6 SW86ChVSP8kyMjwF3BRYf9GeH+LvWGd7n2o9CGy5hbUAAVIooeDEMvJu0NnVnEEg 7yPYPxq+f4gmPSVuEs2v5AkZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7ereH6Mc cQ28KufLWAcqMR+hkIIwHwYDVR0jBBgwFoAUo6Q7FOMUwiIZhYvxe+92MeeMQA4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCMkJDL0ZBNzM4NzUyN0E4 NjExRjFBQkY2NjMwNzk4QTMwRkJDL282UTdGT01Vd2lJWmhZdnhlLTkyTWVlTVFB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzZRN0ZPTVV3aUlaaFl2eGUtOTJNZWVNUUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC MkJDL0ZBNzM4NzUyN0E4NjExRjFBQkY2NjMwNzk4QTMwRkJDL282UTdGT01Vd2lJ WmhZdnhlLTkyTWVlTVFBNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBskp16lDMo/9/ZggHeSrCm43R8GwDsomWFM1ss/mwYSDMznRdHaNZEwZ/i8wm5 LGN7J3QOEMKwjz1vjAwH2DMRsZ0DvXiRTV4CetKPOWndD0A+dzQj3lOi1ecOy1or heaosH2Vr1coyjTmRSm70z1dCgIELQgzLYU7E9UIaQ8whSXAHMUyugBFiUsPRESX VV4vJLLb+Vkcx8XqlBTSAEAYPw6GbjGELUk/gcKYqwtcGyhntOFnPixDXNs8cF0/ 6r4ZYahSoS6Deah2yg3+CestRQFDksX7UaFAeYrPAtpHSMtSAjOjjtretbrTBjf2 sQMJH4LacSQR5LcM5k09VluG -----END CERTIFICATE-----Generated at Sun Oct 4 20:11:34 2026 by rpki-client