$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: JkRaKCEQGPZJZCJUEFfnzIcbTD2Qe9Geq1H7pdVwuIM= Subject key identifier: 70:D2:CC:79:F5:2D:2D:FE:37:C2:45:57:77:DA:64:36:0E:4B:17:8C Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 021D Signing time: Mon 05 Oct 2026 03:23:23 +0000 Manifest this update: Mon 05 Oct 2026 03:23:22 +0000 Manifest next update: Mon 12 Oct 2026 03:23:22 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: JNnW2oQcjcw59xhefSRSfI8LfOclk1+ToginGDRNCNk=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Oct 5 03:23:22 2026 GMT Not After : Oct 12 03:23:22 2026 GMT Subject: CN=6ac3182a-0f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:9d:07:0c:ae:46:20:16:55:8a:ff:ff:69: ed:7a:fd:9e:9e:ff:3f:e2:39:61:e8:20:77:79:97: d7:6b:cc:74:50:ed:04:cb:19:07:14:d7:8d:d5:25: b4:a4:02:a5:23:62:78:3c:4c:71:be:d8:06:1d:9c: a2:af:09:5e:af:34:9c:62:49:ba:81:d6:0a:3f:c9: a0:25:87:ad:2e:81:39:0b:ce:55:c4:43:c6:ff:48: 21:07:06:d2:0c:c5:c4:7b:1c:d5:ce:1c:4e:02:08: 7a:05:72:a7:3f:78:79:9a:5b:97:b7:2c:8d:88:64: 33:0e:2c:85:b4:44:77:09:36:52:6c:91:55:97:a2: d5:1e:57:aa:6e:c8:43:c8:9f:28:84:90:8a:1d:79: 84:32:6f:b2:91:3c:54:2d:7b:a1:99:a9:ec:22:24: c6:9d:c8:97:93:16:1b:79:62:9d:9e:7b:76:5f:49: 31:27:9a:e8:de:78:61:34:ec:89:d9:aa:25:de:83: 5b:1a:cc:38:d6:ac:ce:5f:c5:7b:0d:82:e0:cb:6a: 15:49:f7:3a:3c:78:d8:d9:cf:6e:73:24:57:48:56: a3:a1:02:e5:27:09:a2:27:72:7d:8d:0a:e1:66:84: 08:c0:6c:bb:43:ce:1b:45:41:27:35:df:71:6c:26: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D2:CC:79:F5:2D:2D:FE:37:C2:45:57:77:DA:64:36:0E:4B:17:8C X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:de:e3:a1:e9:7a:ba:4d:ce:43:c4:61:67:98:ff:fc:1b:b4: 54:0c:34:13:11:17:3d:89:96:66:1a:5d:96:58:b6:a9:22:d4: ab:a5:f7:7b:5a:b2:d1:74:fb:ff:68:68:f1:ea:e3:24:af:24: 7c:13:fe:d0:26:32:31:7b:4e:3e:6e:74:e2:45:9f:5b:14:46: 25:5d:da:a8:e0:e3:11:a4:4d:60:36:f8:81:c3:9d:e9:34:7e: 1f:89:57:44:21:05:0a:12:60:fb:56:4a:8f:03:d1:06:49:d1: f0:d2:68:c0:8c:26:f8:eb:dc:7f:a0:7e:04:d5:0c:de:c1:9a: 72:5b:80:af:8e:94:3f:98:64:a8:44:45:4a:45:31:a2:bd:16: 23:0d:b2:02:6a:1e:6c:21:fa:d6:4f:ee:9c:80:5a:1b:12:be: e4:77:37:39:23:da:75:67:e3:c8:e4:0d:09:77:58:44:c8:b1: a0:67:f8:a8:f0:ea:71:8f:bf:18:4b:d1:e7:f2:5c:30:7e:21: 7e:00:54:64:58:61:72:25:21:e9:56:be:3f:38:c6:fc:3c:be: c3:4b:10:c0:3f:dd:f6:62:2d:a5:cd:ca:28:d7:c1:4a:5b:40: 45:30:01:78:bc:64:9f:c2:8a:7b:2f:e4:02:4e:8a:db:9b:78: d5:ae:f0:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYxMDA1MDMyMzIyWhcNMjYxMDEyMDMyMzIyWjAYMRYwFAYD VQQDEw02YWMzMTgyYS0wZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iCdBwyuRiAWVYr//2ntev2env8/4jlh6CB3eZfXa8x0UO0EyxkHFNeN1SW0 pAKlI2J4PExxvtgGHZyirwlerzScYkm6gdYKP8mgJYetLoE5C85VxEPG/0ghBwbS DMXEexzVzhxOAgh6BXKnP3h5mluXtyyNiGQzDiyFtER3CTZSbJFVl6LVHleqbshD yJ8ohJCKHXmEMm+ykTxULXuhmansIiTGnciXkxYbeWKdnnt2X0kxJ5ro3nhhNOyJ 2aol3oNbGsw41qzOX8V7DYLgy2oVSfc6PHjY2c9ucyRXSFajoQLlJwmiJ3J9jQrh ZoQIwGy7Q84bRUEnNd9xbCbEWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDSzHn1 LS3+N8JFV3faZDYOSxeMMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0N7joel6uk3OQ8RhZ5j//Bu0VAw0ExEXPYmWZhpdlli2qSLUq6X3e1qy0XT7 /2ho8erjJK8kfBP+0CYyMXtOPm504kWfWxRGJV3aqODjEaRNYDb4gcOd6TR+H4lX RCEFChJg+1ZKjwPRBknR8NJowIwm+Ovcf6B+BNUM3sGacluAr46UP5hkqERFSkUx or0WIw2yAmoebCH61k/unIBaGxK+5Hc3OSPadWfjyOQNCXdYRMixoGf4qPDqcY+/ GEvR5/JcMH4hfgBUZFhhciUh6Va+PzjG/Dy+w0sQwD/d9mItpc3KKNfBSltARTAB eLxkn8KKey/kAk6K25t41a7weg== -----END CERTIFICATE-----Generated at Tue Oct 6 21:58:48 2026 by rpki-client