$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: iSVfY1Vt4QKNvf2GTbxF+Y1s4iQVNSxDEkVwp52Ut0k= Subject key identifier: BF:B1:07:2A:29:3E:6E:2A:6D:82:39:79:62:79:5F:BA:BE:0A:8B:8D Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 02BC Signing time: Wed 07 Oct 2026 01:48:16 +0000 Manifest this update: Wed 07 Oct 2026 01:48:16 +0000 Manifest next update: Wed 14 Oct 2026 01:48:16 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: Y6Yj0Uytp+Eu406rzMRNSk9wTPxeOIYqVDIc95lFNVk=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: iNoqSRT8zGT4sQQ17Q3E6C4knP5LZOO3EPDDr7aFmYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Oct 7 01:48:16 2026 GMT Not After : Oct 14 01:48:16 2026 GMT Subject: CN=6ac5a4e0-2875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:a0:58:73:df:15:61:f8:94:73:7d:15:01: 39:3e:04:af:9a:af:a8:81:8c:e5:2f:75:de:80:89: f8:84:c2:2f:29:98:46:d0:69:63:70:9a:80:51:75: cf:d8:23:88:86:76:6a:1e:c2:f6:7a:95:37:55:c4: 94:41:ba:c2:52:0b:33:e1:da:15:89:93:2a:e2:03: b4:c6:07:68:db:99:3f:b2:57:fb:3c:19:27:68:b6: e7:b7:e7:3d:b0:e8:75:bc:a1:1b:0e:81:c5:d2:8e: bf:3d:aa:8a:fe:46:1c:7e:60:5a:07:f4:7f:8d:2c: bb:d5:c3:67:a3:f5:2b:83:86:df:f4:74:e2:64:5d: eb:7b:18:a7:5c:7d:e1:25:0b:3d:9d:14:26:7e:9b: e4:fa:e7:5b:10:cb:2e:f4:49:0e:62:b7:7e:47:f8: 73:6d:39:a3:19:30:17:d8:a7:22:ac:a8:7e:31:f9: fe:dd:de:c5:6e:18:3d:4a:41:b6:ae:71:f1:53:8a: df:fd:08:c2:0f:07:8d:aa:00:7b:da:54:37:82:8e: 12:59:b6:8a:9d:4d:c5:b0:d9:5e:26:09:b7:83:28: a6:cc:f6:97:33:95:40:e4:20:37:4c:b1:da:61:32: d3:c2:ee:67:19:72:b8:07:28:8a:11:e7:f3:f7:5a: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:07:2A:29:3E:6E:2A:6D:82:39:79:62:79:5F:BA:BE:0A:8B:8D X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:31:55:ad:0e:9a:61:8d:b2:06:a7:24:d2:fa:34:d7:6e:7b: 3b:3d:cd:65:0e:c2:ac:57:50:bd:90:2c:f2:66:f6:31:30:bc: 6f:b1:72:ba:c7:ef:04:d0:6a:55:b6:d2:7d:b0:a7:50:a5:7c: fd:d8:ca:d2:d8:c0:90:b0:b8:0c:4c:c5:7b:84:97:62:42:84: d0:e2:ae:4e:66:0e:47:ee:21:65:ca:4b:20:a2:eb:56:57:35: 98:46:db:74:33:ec:f8:57:8f:06:2d:83:42:e6:c4:7c:f1:f3: 9b:91:91:cc:d0:eb:c1:4e:06:f0:37:e9:ca:87:a5:25:3a:3d: 26:bd:a7:34:c1:9a:33:2b:fd:d4:11:64:2b:1c:28:a7:fb:18: d0:be:e9:3d:20:da:e1:22:37:7c:44:f4:85:13:b8:3c:ee:98: 69:db:a8:be:95:91:ee:0f:b3:0a:bc:97:bf:20:4d:83:19:cc: f3:7d:df:3c:f6:c6:8b:13:66:d5:df:bb:08:a8:37:ff:db:3a: cf:f8:ab:60:d8:a3:45:4e:66:b1:ff:5f:e7:80:77:62:e1:6c: 24:b1:64:1f:97:af:c4:56:1f:9f:4b:b8:2b:a4:ed:99:89:83: f3:2d:39:0d:70:8f:18:47:06:7c:5a:cf:4d:21:f0:0b:f8:08: f6:85:58:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYxMDA3MDE0ODE2WhcNMjYxMDE0MDE0ODE2WjAYMRYwFAYD VQQDEw02YWM1YTRlMC0yODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVOgWHPfFWH4lHN9FQE5PgSvmq+ogYzlL3XegIn4hMIvKZhG0GljcJqAUXXP 2COIhnZqHsL2epU3VcSUQbrCUgsz4doViZMq4gO0xgdo25k/slf7PBknaLbnt+c9 sOh1vKEbDoHF0o6/PaqK/kYcfmBaB/R/jSy71cNno/Urg4bf9HTiZF3rexinXH3h JQs9nRQmfpvk+udbEMsu9EkOYrd+R/hzbTmjGTAX2KcirKh+Mfn+3d7Fbhg9SkG2 rnHxU4rf/QjCDweNqgB72lQ3go4SWbaKnU3FsNleJgm3gyimzPaXM5VA5CA3TLHa YTLTwu5nGXK4ByiKEefz91qYwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+xByop Pm4qbYI5eWJ5X7q+CouNMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAczFVrQ6aYY2yBqck0vo01257Oz3NZQ7CrFdQvZAs8mb2MTC8b7FyusfvBNBq VbbSfbCnUKV8/djK0tjAkLC4DEzFe4SXYkKE0OKuTmYOR+4hZcpLIKLrVlc1mEbb dDPs+FePBi2DQubEfPHzm5GRzNDrwU4G8DfpyoelJTo9Jr2nNMGaMyv91BFkKxwo p/sY0L7pPSDa4SI3fET0hRO4PO6YaduovpWR7g+zCryXvyBNgxnM833fPPbGixNm 1d+7CKg3/9s6z/irYNijRU5msf9f54B3YuFsJLFkH5evxFYfn0u4K6TtmYmD8y05 DXCPGEcGfFrPTSHwC/gI9oVYWg== -----END CERTIFICATE-----Generated at Thu Oct 8 20:57:22 2026 by rpki-client