$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft File: OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft (raw, json) Hash identifier: TTaBSOnhBUzSaiUS9dBRpbzYWTaKr4U0vESCOjaBTxc= Subject key identifier: 4D:3C:7A:34:F2:2B:37:90:18:CD:C3:D1:95:D7:D0:F1:FF:6B:D3:68 Authority key identifier: 39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD Certificate issuer: /CN=A919A43E/serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft Manifest number: 29 Signing time: Fri 09 Oct 2026 09:34:48 +0000 Manifest this update: Fri 09 Oct 2026 09:34:47 +0000 Manifest next update: Fri 16 Oct 2026 09:34:47 +0000 Files and hashes: 1: OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl (hash: uuIC6S3EAKK1BYjQGd5Y0L/cXevFbaul7DV0S6UdHmQ=) 2: 13470B1A8A5D11F1831FA6813B11F970.roa (hash: KTWKvrQIcAJhvdnwPkuYb68Uex7MkjqQ3SocdV59zYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A43E, serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD Validity Not Before: Oct 9 09:34:47 2026 GMT Not After : Oct 16 09:34:47 2026 GMT Subject: CN=6ac8b538-eed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:68:11:50:ca:75:54:f6:28:86:32:52:fe: 81:1a:40:fa:f4:38:9c:0b:85:11:16:26:d6:af:a8: c2:e5:ee:ed:e4:7c:c6:23:47:61:ad:ef:17:13:01: 7e:fb:1d:d9:8e:e0:b2:49:c0:a2:49:d0:4a:db:e7: 66:d5:7f:a0:22:e4:39:ce:68:aa:83:20:8f:1e:cc: 98:de:3c:6f:95:88:d7:6c:40:a7:41:42:c3:19:a0: b0:17:18:da:2b:2e:85:9f:b1:a6:87:0d:d3:a0:91: e2:7b:1d:71:4c:a5:93:0e:84:b5:32:79:3a:a0:30: 2d:1c:97:c0:fe:dd:6e:a4:99:7b:8c:a5:da:a3:f1: 1b:11:d9:0a:02:0d:e7:5c:1e:c6:49:25:6c:7b:74: 00:6d:7b:d6:19:91:9b:cc:23:ec:d1:e7:89:78:ae: 15:28:1e:67:4a:b9:ec:69:4a:bf:11:88:88:d2:d9: 28:55:a3:88:b8:b8:b4:dc:8d:18:da:e7:55:b1:5e: 12:c5:bb:09:cd:95:61:0c:22:3b:9d:74:01:32:be: 28:ac:b7:da:f5:49:25:12:11:dd:95:d7:23:4b:ef: 44:cb:55:85:aa:ef:36:bb:6f:1a:50:28:dc:b7:d5: 00:90:05:9d:7a:d4:2f:82:9e:5a:65:a9:67:e2:1b: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3C:7A:34:F2:2B:37:90:18:CD:C3:D1:95:D7:D0:F1:FF:6B:D3:68 X509v3 Authority Key Identifier: keyid:39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e1:2d:04:d3:b4:c3:d2:49:0b:0a:44:82:15:81:a3:7d:e5: 6a:bd:f4:15:59:ff:2d:67:e5:af:bd:04:e4:48:1a:7b:95:94: 27:3b:5d:48:57:f8:51:29:e0:bb:0f:ab:7b:3f:b9:62:ef:d8: fd:00:59:7f:b4:57:9f:a0:64:77:91:bb:12:c0:62:60:e5:ed: 16:61:be:0d:47:0e:c5:c2:23:0a:4b:fc:c1:6b:84:38:26:eb: df:d6:a8:1c:12:91:03:0f:6f:8f:8a:60:bb:af:9d:69:21:a2: 61:56:8b:89:c9:b3:ce:69:e8:2b:df:33:2c:87:4f:12:45:57: fb:bb:45:89:95:bc:fa:3f:75:a0:cd:91:ea:68:d7:a5:e9:36: ea:dd:f8:ec:86:50:79:3d:6e:70:46:c0:67:56:2f:fe:2e:7f: 52:8e:38:70:44:df:97:d3:89:c2:aa:87:3d:e2:69:66:08:7f: 79:0f:82:c1:a1:db:27:23:7e:d0:71:60:35:97:cb:9f:db:89: 4e:0c:a8:ab:a0:32:e6:1f:68:4b:f0:fa:73:3e:00:34:63:cc: 5e:38:00:21:b3:e8:23:d7:07:b7:85:fe:75:af:bf:eb:4b:83: 28:77:99:08:7b:61:2c:03:ec:70:d6:e4:db:78:68:76:a9:ea: 8f:ce:7d:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTQzRTExMC8GA1UEBRMoMzk5Qzg3MjUzRTU0RUQ2REUzNzcwRTU1NzQ2NDY2NjYx QUNFRDVDRDAeFw0yNjEwMDkwOTM0NDdaFw0yNjEwMTYwOTM0NDdaMBgxFjAUBgNV BAMTDTZhYzhiNTM4LWVlZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdlGgRUMp1VPYohjJS/oEaQPr0OJwLhREWJtavqMLl7u3kfMYjR2Gt7xcTAX77 HdmO4LJJwKJJ0Erb52bVf6Ai5DnOaKqDII8ezJjePG+ViNdsQKdBQsMZoLAXGNor LoWfsaaHDdOgkeJ7HXFMpZMOhLUyeTqgMC0cl8D+3W6kmXuMpdqj8RsR2QoCDedc HsZJJWx7dABte9YZkZvMI+zR54l4rhUoHmdKuexpSr8RiIjS2ShVo4i4uLTcjRja 51WxXhLFuwnNlWEMIjuddAEyviist9r1SSUSEd2V1yNL70TLVYWq7za7bxpQKNy3 1QCQBZ161C+CnlplqWfiG+3pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTTx6NPIr N5AYzcPRldfQ8f9r02gwHwYDVR0jBBgwFoAUOZyHJT5U7W3jdw5VdGRmZhrO1c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNDNFL0VFQUZFMkFBOEE1 QjExRjE5N0RCM0U2OTNBMTFGOTcwL09aeUhKVDVVN1czamR3NVZkR1JtWmhyTzFj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT1p5SEpUNVU3VzNqZHc1VmRHUm1aaHJPMWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NDNFL0VFQUZFMkFBOEE1QjExRjE5N0RCM0U2OTNBMTFGOTcwL09aeUhKVDVVN1cz amR3NVZkR1JtWmhyTzFjMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAk4S0E07TD0kkLCkSCFYGjfeVqvfQVWf8tZ+WvvQTkSBp7lZQnO11IV/hRKeC7 D6t7P7li79j9AFl/tFefoGR3kbsSwGJg5e0WYb4NRw7FwiMKS/zBa4Q4Juvf1qgc EpEDD2+PimC7r51pIaJhVouJybPOaegr3zMsh08SRVf7u0WJlbz6P3WgzZHqaNel 6Tbq3fjshlB5PW5wRsBnVi/+Ln9SjjhwRN+X04nCqoc94mlmCH95D4LBodsnI37Q cWA1l8uf24lODKiroDLmH2hL8PpzPgA0Y8xeOAAhs+gj1we3hf51r7/rS4Mod5kI e2EsA+xw1uTbeGh2qeqPzn3+ -----END CERTIFICATE-----Generated at Fri Oct 9 18:59:44 2026 by rpki-client