$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft File: OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json) Hash identifier: JPhRZUqS+rCSrFyc64I8iCtEVIQmtllAS7e8q3jA/3s= Subject key identifier: 6D:7E:6D:03:64:70:81:32:59:44:9F:A5:53:49:E8:7D:3C:59:25:9C Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A Certificate issuer: /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft Manifest number: 0220 Signing time: Sun 25 Oct 2026 03:14:52 +0000 Manifest this update: Sun 25 Oct 2026 03:14:51 +0000 Manifest next update: Sun 01 Nov 2026 03:14:51 +0000 Files and hashes: 1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: KgxmAJ8syPzszI06MlsByj/+akR7G/4aS6ekdnZ76mM=) 2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A Validity Not Before: Oct 25 03:14:51 2026 GMT Not After : Nov 1 03:14:51 2026 GMT Subject: CN=6add742b-ce27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:3b:47:a9:1c:4d:fc:b8:7a:b4:04:70:c7: 50:cf:8b:58:6f:ee:18:aa:af:24:24:bf:3a:9b:bf: 41:ec:7d:b8:2a:00:37:7f:1e:8f:40:94:bd:4e:16: d9:9e:13:ed:28:25:4a:7e:64:7d:87:c7:1a:9a:f4: 24:e6:55:4a:c8:ff:da:1d:cd:94:0b:5f:11:ae:65: 6f:2e:64:a8:af:71:43:bb:a5:e9:eb:e9:08:51:7e: 68:51:0e:2a:11:d9:bf:0f:d8:a1:af:5f:39:4f:94: 1a:7e:60:18:ed:9b:db:3f:58:c4:4b:1b:4b:9a:93: fa:51:38:96:10:a0:71:2d:62:75:0b:91:ed:03:2e: ba:21:12:0c:26:27:6d:4f:e1:46:d0:32:40:1c:b3: a2:ea:00:cb:82:88:46:1b:64:31:b0:36:9e:7c:a4: d3:f0:9f:c9:9b:94:ce:31:0a:d3:b8:47:44:8a:34: 52:7f:30:7e:bb:10:68:19:a4:d3:2a:70:84:45:09: b6:2d:5b:8d:c7:c3:1a:ea:90:a3:0c:32:5b:e9:ec: ff:bf:2f:90:7e:df:c0:0a:97:43:58:97:58:51:71: 6e:87:9f:bf:a0:b6:d9:49:79:d1:f3:a6:b4:07:c5: c8:0c:ee:a1:b9:1e:89:20:65:30:a1:b5:24:e5:53: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7E:6D:03:64:70:81:32:59:44:9F:A5:53:49:E8:7D:3C:59:25:9C X509v3 Authority Key Identifier: keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4b:87:ae:a8:07:75:d7:5c:aa:c7:06:cc:2a:88:67:42:0f: e7:a6:79:49:e3:1d:20:f5:65:1c:46:4e:51:06:c5:5f:a1:92: 68:5a:2f:5b:30:bd:bc:65:b9:40:22:45:d4:e1:ba:31:23:9d: d7:f4:cd:a8:17:53:57:2c:cd:b1:a2:92:20:03:c1:ec:21:31: 22:af:bd:0e:63:29:18:15:1a:7a:07:de:e6:79:29:12:60:a6: 5c:4a:1f:2a:38:b1:cb:46:81:84:5f:c0:7d:e5:9c:7a:98:08: a4:f9:ee:b5:c3:a0:7f:de:b5:70:8f:3c:ca:0b:9f:f7:65:82: 1b:8c:dd:e6:14:82:88:90:f0:e2:ce:1b:4d:72:8b:37:a9:6b: 18:0c:8d:70:9f:ff:96:f4:b5:b1:fa:a2:8f:7f:2f:00:c5:c6: a9:1e:e1:da:0c:bf:24:eb:bc:c7:08:d9:b5:0f:42:ba:0f:a4: 25:24:ba:07:b5:0d:de:f2:46:f7:b9:b9:27:77:4b:c5:89:bc: 1b:e5:ef:fc:d3:15:87:da:4a:23:92:8c:21:7d:f5:27:2a:92: 48:e6:15:fc:97:1a:08:e2:e3:de:a4:9c:2f:4b:48:77:65:d9: 91:78:c5:7f:28:ba:09:9a:17:14:8e:a3:18:69:d8:7d:31:f3: 05:c5:ee:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2 MDlFNkIyMEEwHhcNMjYxMDI1MDMxNDUxWhcNMjYxMTAxMDMxNDUxWjAYMRYwFAYD VQQDEw02YWRkNzQyYi1jZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/Q7R6kcTfy4erQEcMdQz4tYb+4Yqq8kJL86m79B7H24KgA3fx6PQJS9ThbZ nhPtKCVKfmR9h8camvQk5lVKyP/aHc2UC18RrmVvLmSor3FDu6Xp6+kIUX5oUQ4q Edm/D9ihr185T5QafmAY7ZvbP1jESxtLmpP6UTiWEKBxLWJ1C5HtAy66IRIMJidt T+FG0DJAHLOi6gDLgohGG2QxsDaefKTT8J/Jm5TOMQrTuEdEijRSfzB+uxBoGaTT KnCERQm2LVuNx8Ma6pCjDDJb6ez/vy+Qft/ACpdDWJdYUXFuh5+/oLbZSXnR86a0 B8XIDO6huR6JIGUwobUk5VNANQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1+bQNk cIEyWUSfpVNJ6H08WSWcMB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xNTlBNEFEMDkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3Szlx WW15UmF1bGdKQnRnbm1zZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJUuHrqgHdddcqscGzCqIZ0IP56Z5SeMdIPVlHEZOUQbFX6GSaFovWzC9vGW5 QCJF1OG6MSOd1/TNqBdTVyzNsaKSIAPB7CExIq+9DmMpGBUaegfe5nkpEmCmXEof Kjixy0aBhF/AfeWcepgIpPnutcOgf961cI88yguf92WCG4zd5hSCiJDw4s4bTXKL N6lrGAyNcJ//lvS1sfqij38vAMXGqR7h2gy/JOu8xwjZtQ9Cug+kJSS6B7UN3vJG 97m5J3dLxYm8G+Xv/NMVh9pKI5KMIX31JyqSSOYV/JcaCOLj3qScL0tId2XZkXjF fyi6CZoXFI6jGGnYfTHzBcXuZg== -----END CERTIFICATE-----Generated at Sun Oct 25 07:55:55 2026 by rpki-client