$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json) Hash identifier: s9hcBTRaY0cqSNPYBkoqAyadGmVteV6zA9G07OFZV2o= Subject key identifier: 1E:13:65:70:5B:56:A8:C2:23:1F:C7:ED:A0:E3:F7:7C:F6:87:75:C9 Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft Manifest number: A1 Signing time: Sat 17 Oct 2026 03:44:45 +0000 Manifest this update: Sat 17 Oct 2026 03:44:44 +0000 Manifest next update: Sat 24 Oct 2026 03:44:44 +0000 Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: QEfyf5NoLhjwMxwb5nWfy27Sdu9OhtbZWWGfo2dM514=) 2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 03:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Validity Not Before: Oct 17 03:44:44 2026 GMT Not After : Oct 24 03:44:44 2026 GMT Subject: CN=6ad2ef2d-1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:ce:ac:6c:3b:87:0e:3d:9a:22:00:06:e8: 6d:0e:31:cc:c7:dd:65:d4:12:3d:4e:19:67:32:65: ac:7b:87:ac:02:c6:d0:b7:43:34:b6:e0:03:45:ed: ee:b2:fe:96:8b:87:79:a0:78:2f:9e:c2:89:a4:aa: b8:44:c8:a4:44:fb:31:a3:35:3d:fa:f4:20:cc:74: f1:81:12:eb:a3:b0:98:cc:b9:73:67:82:fa:df:40: 0a:37:93:a3:9d:97:a0:99:b9:ac:dd:cf:1e:d8:dd: 5f:ce:22:0c:65:e9:d4:fe:88:54:e8:0e:ed:4f:37: 36:25:eb:34:83:16:85:ab:f6:0c:7c:23:3b:dc:7c: 8d:99:b2:23:59:9b:cb:f9:ae:ec:3c:7f:69:a4:40: 03:9d:d7:35:1a:f4:da:29:da:cf:2f:c3:d2:e3:49: e5:ee:0e:4b:21:d5:53:59:41:f8:eb:4d:db:48:e0: 1f:91:61:f0:ca:60:e3:e6:7d:be:64:ea:41:fb:03: 4e:dc:6a:a9:58:c1:0a:dd:c2:04:7c:f0:be:23:69: a5:48:09:5d:33:9b:2d:2a:62:91:0c:04:e9:ba:b9: f9:81:9e:74:62:8b:ab:91:29:d6:a3:02:01:90:b9: 18:5f:71:7e:72:7f:92:7f:01:c8:bb:57:90:2f:bb: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:13:65:70:5B:56:A8:C2:23:1F:C7:ED:A0:E3:F7:7C:F6:87:75:C9 X509v3 Authority Key Identifier: keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6d:02:df:d3:3b:68:18:32:64:46:ff:10:99:c0:9e:8f:f6: 74:20:9f:fc:5c:e2:67:77:49:92:11:c0:c4:d9:04:a9:94:ec: 06:86:a3:e1:b9:33:91:70:92:df:cb:c3:2e:54:ec:93:1b:b0: 54:7f:fb:6d:cd:27:55:bd:4b:68:e8:79:df:14:a8:eb:7c:be: ea:c3:98:0a:5d:8b:75:b6:e4:b6:ab:42:4a:8e:d3:6c:ea:ab: 0f:e1:82:c0:db:29:6d:fb:37:bf:f5:cd:1c:cb:47:21:f4:c0: 14:94:f4:60:97:0d:96:9b:d8:99:d0:70:a5:92:03:20:2c:1e: 5c:db:21:21:30:cd:2d:c9:ff:ba:1b:84:b4:51:7c:e1:69:45: bb:8d:d4:29:98:18:b8:83:7b:6c:02:ff:f4:b3:fe:cf:58:dd: ac:35:af:00:71:37:42:e7:a6:5e:11:0a:d5:0e:17:95:51:73: 43:4f:ef:9c:45:c2:fd:3e:ad:5d:5e:6e:6b:dd:0f:a9:af:69: 00:40:33:cf:bd:b9:fc:5e:e8:50:23:e9:8d:d6:7b:37:dc:7b: ee:38:8c:31:24:68:a5:ae:30:9e:2a:69:c0:5b:58:fa:78:18: dd:a2:d8:18:12:e5:72:7b:cf:a3:ba:63:d4:c8:93:2c:60:68: d8:86:65:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEEwRkNCRTlCQ0I0MzI4QTlFOEJDQ0ExRjVFMTQ5NkFD QzJDRTJFRDkwHhcNMjYxMDE3MDM0NDQ0WhcNMjYxMDI0MDM0NDQ0WjAYMRYwFAYD VQQDEw02YWQyZWYyZC0xMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JXOrGw7hw49miIABuhtDjHMx91l1BI9ThlnMmWse4esAsbQt0M0tuADRe3u sv6Wi4d5oHgvnsKJpKq4RMikRPsxozU9+vQgzHTxgRLro7CYzLlzZ4L630AKN5Oj nZegmbms3c8e2N1fziIMZenU/ohU6A7tTzc2Jes0gxaFq/YMfCM73HyNmbIjWZvL +a7sPH9ppEADndc1GvTaKdrPL8PS40nl7g5LIdVTWUH4603bSOAfkWHwymDj5n2+ ZOpB+wNO3GqpWMEK3cIEfPC+I2mlSAldM5stKmKRDATpurn5gZ50YourkSnWowIB kLkYX3F+cn+SfwHIu1eQL7uPaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4TZXBb VqjCIx/H7aDj93z2h3XJMB8GA1UdIwQYMBaAFKD8vpvLQyip6LzKH14UlqzCzi7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny9CQkYyOEREQUQ5 OTUxMUYwOUExODYyM0I2NEQzNjQxRC9vUHktbTh0REtLbm92TW9mWGhTV3JNTE9M dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny9CQkYyOEREQUQ5OTUxMUYwOUExODYyM0I2NEQzNjQxRC9vUHktbTh0REtL bm92TW9mWGhTV3JNTE9MdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdG0C39M7aBgyZEb/EJnAno/2dCCf/FziZ3dJkhHAxNkEqZTsBoaj4bkzkXCS 38vDLlTskxuwVH/7bc0nVb1LaOh53xSo63y+6sOYCl2LdbbktqtCSo7TbOqrD+GC wNspbfs3v/XNHMtHIfTAFJT0YJcNlpvYmdBwpZIDICweXNshITDNLcn/uhuEtFF8 4WlFu43UKZgYuIN7bAL/9LP+z1jdrDWvAHE3QuemXhEK1Q4XlVFzQ0/vnEXC/T6t XV5ua90Pqa9pAEAzz725/F7oUCPpjdZ7N9x77jiMMSRopa4wnippwFtY+ngY3aLY GBLlcnvPo7pj1MiTLGBo2IZl1g== -----END CERTIFICATE-----Generated at Sat Oct 17 22:30:24 2026 by rpki-client