$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: Ac3FkLulJpclgsYlJ66iQzIwYpn2Xx3pFchZfdtZGUM= Subject key identifier: B8:BA:2B:F9:7A:6E:CB:37:A4:1A:3D:EB:B8:DC:68:21:75:9E:88:1C Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 3805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 36D7 Signing time: Thu 10 Sep 2026 14:24:38 +0000 Manifest this update: Thu 10 Sep 2026 14:24:38 +0000 Manifest next update: Thu 17 Sep 2026 14:24:38 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: venf2S5+qfV92Iwh61FgEnYZqR1TQ3JL7Lc5Ru667EQ=) 2: rQSAPyGUXtGkb8Ui1URzc0kbX3M.asa (hash: e5gGUoXTbgO3Bqx/dg2NaRASCiNn+/PB5Y+WJNAkgGg=) 3: DDBF75E8AC0F11F18FA02B357011F970.roa (hash: XkgCJ50UlAocEgPti+/VSXFYIwUrWzt3O9MV4EIAwHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14341 (0x3805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Sep 10 14:24:38 2026 GMT Not After : Sep 17 14:24:38 2026 GMT Subject: CN=6aa2bda6-aeab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:66:c1:d7:b1:76:bf:68:a9:33:b5:40:23: f5:7b:c8:5e:da:79:e4:df:cd:99:62:44:ab:32:61: b7:44:42:de:77:6a:17:f0:9a:9f:6b:f8:2d:1a:f8: 7a:f8:90:d2:96:fd:2f:44:ef:9e:46:04:44:93:73: cf:1f:fc:89:ed:eb:d8:b4:05:a1:78:84:df:b5:ed: 35:34:2f:08:68:43:0b:56:25:9a:a1:c0:60:37:89: a4:e9:f8:a0:34:9d:81:c8:47:b7:14:6c:eb:24:ec: 5d:86:d7:9a:aa:fc:e2:72:27:8e:75:6d:9f:7a:2d: 5d:f2:c5:5e:a4:0a:c0:4d:9a:0e:68:0c:5f:ab:d1: 3d:36:a4:1e:8a:92:91:fb:18:50:60:5f:ae:72:4d: 1c:12:9e:bd:a7:b2:e9:d5:c4:d0:ee:e4:bc:cd:40: 18:37:5b:f6:73:c1:6e:f2:9c:ac:aa:57:b1:c6:5e: da:84:ee:cf:be:b4:55:88:d7:54:24:12:16:dd:77: 3d:92:9b:e8:25:aa:8d:4a:a1:91:e3:76:b8:a0:5b: 42:11:30:65:39:08:19:64:cc:8d:67:fd:d1:14:16: ff:27:d8:c2:a3:2b:ba:66:44:0f:91:40:3e:ee:c8: 7b:15:14:b2:f1:f2:38:1c:ac:a7:7f:c0:7c:ec:90: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:2B:F9:7A:6E:CB:37:A4:1A:3D:EB:B8:DC:68:21:75:9E:88:1C X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:41:8b:25:cf:de:50:b1:a2:33:cc:62:e5:b8:85:83:dc: 45:08:f3:49:61:72:87:1f:6d:8c:6f:52:c0:e4:9e:f0:c5:5a: 59:14:6d:db:5f:45:a5:d0:17:ea:f6:06:b5:78:69:f4:0a:36: 73:31:6e:77:99:33:00:e7:46:cd:06:17:4e:04:8d:97:03:91: 90:84:50:47:1a:6b:f7:6b:f6:19:b4:d6:20:11:c5:96:8e:1f: 74:a0:df:1e:2e:10:9d:ea:17:f6:41:17:a5:f6:4f:ac:43:0b: ac:58:68:51:57:c9:e2:e8:af:8d:42:98:5e:bc:2d:da:55:18: c4:f2:cf:4e:eb:2d:d9:b3:38:44:bb:36:68:21:83:64:5b:2e: 3b:b8:61:20:f8:4d:5b:57:71:a1:1e:35:4a:9f:41:95:44:18: 6d:fb:bf:22:39:d7:3f:51:63:ce:90:cb:61:ff:bd:04:f8:63: bf:b7:ef:61:6c:2e:5d:c2:c7:1a:4b:0a:b0:31:46:7c:77:5c: 98:77:10:03:25:f8:91:3a:25:46:b0:4d:63:88:eb:fa:7a:14: 0a:5b:72:27:6d:f2:d6:8b:08:46:c9:10:88:c3:48:a8:0d:9b: 43:54:83:5a:47:8a:28:96:7d:b7:ce:f2:7c:c3:da:bb:4e:c3: 4e:bd:c0:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjYwOTEwMTQyNDM4WhcNMjYwOTE3MTQyNDM4WjAYMRYwFAYD VQQDEw02YWEyYmRhNi1hZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPtmwdexdr9oqTO1QCP1e8he2nnk382ZYkSrMmG3RELed2oX8Jqfa/gtGvh6 +JDSlv0vRO+eRgREk3PPH/yJ7evYtAWheITfte01NC8IaEMLViWaocBgN4mk6fig NJ2ByEe3FGzrJOxdhteaqvzicieOdW2fei1d8sVepArATZoOaAxfq9E9NqQeipKR +xhQYF+uck0cEp69p7Lp1cTQ7uS8zUAYN1v2c8Fu8pysqlexxl7ahO7PvrRViNdU JBIW3Xc9kpvoJaqNSqGR43a4oFtCETBlOQgZZMyNZ/3RFBb/J9jCoyu6ZkQPkUA+ 7sh7FRSy8fI4HKynf8B87JBjUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLi6K/l6 bss3pBo967jcaCF1nogcMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnXBBiyXP3lCxojPMYuW4hYPcRQjzSWFyhx9tjG9SwOSe8MVaWRRt219FpdAX 6vYGtXhp9Ao2czFud5kzAOdGzQYXTgSNlwORkIRQRxpr92v2GbTWIBHFlo4fdKDf Hi4QneoX9kEXpfZPrEMLrFhoUVfJ4uivjUKYXrwt2lUYxPLPTust2bM4RLs2aCGD ZFsuO7hhIPhNW1dxoR41Sp9BlUQYbfu/IjnXP1FjzpDLYf+9BPhjv7fvYWwuXcLH GksKsDFGfHdcmHcQAyX4kTolRrBNY4jr+noUCltyJ23y1osIRskQiMNIqA2bQ1SD WkeKKJZ9t87yfMPau07DTr3AhA== -----END CERTIFICATE-----Generated at Fri Sep 11 17:46:14 2026 by rpki-client