$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: V9o/sO+ZZg6xaI82PeEesvmvZVKt8RPgF8vD0zZ3iwo= Subject key identifier: B9:9B:79:35:FC:E5:D7:FA:79:8C:46:49:17:2D:EA:D6:69:80:C4:73 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: D3 Signing time: Thu 23 Jul 2026 08:29:53 +0000 Manifest this update: Thu 23 Jul 2026 08:29:52 +0000 Manifest next update: Thu 30 Jul 2026 08:29:52 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: s3XpprQBJzDYx+QkedNNAphPgTPTQtiFeOFAw5e0GDk=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: HBHirPwIg8T3HMiSC7xRXD2o3Qo0xRqSAK0Lb8fw1XM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Jul 23 08:29:52 2026 GMT Not After : Jul 30 08:29:52 2026 GMT Subject: CN=6a61d101-ff9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:7d:34:54:31:9a:b5:89:94:8a:7c:7c:5b: 91:33:1f:83:d9:77:4a:c8:b4:21:70:c9:d3:ce:64: f7:c4:7e:c8:f1:83:16:a0:72:f8:c0:e8:20:92:f0: 51:eb:e8:54:fc:be:c1:96:b4:6e:06:75:fc:63:d4: db:19:16:23:ce:79:79:f7:0a:9a:9a:eb:83:ef:4f: ec:6a:9b:fb:6e:64:fe:d1:0f:00:7d:06:8a:e0:9f: 93:fa:b6:34:75:89:4a:42:1f:f6:d8:5e:ab:31:0d: ea:03:52:d0:4e:aa:7f:33:f1:cd:ea:00:4d:2f:55: 22:bc:a6:66:3a:8e:64:b4:5d:63:e0:38:eb:67:18: 95:2a:e0:5b:79:76:1a:46:46:d4:f9:b0:7d:94:32: 1f:a7:dd:16:07:4b:ae:2b:7c:21:14:27:43:17:0e: 3e:6c:c7:13:19:0e:c9:c0:c5:c8:fb:5d:5c:c3:83: 20:e3:4a:a9:d8:4e:26:86:52:fd:fc:22:1c:e9:7f: a0:11:18:32:09:11:0b:82:1b:32:a3:af:01:59:8b: 41:a6:be:c1:5f:8c:f4:f5:0c:b1:5d:00:a6:41:6e: 7d:fc:d7:3d:dc:95:a1:d0:10:de:b6:a2:c9:a3:04: 8c:49:15:92:90:44:f2:fa:79:91:bb:8c:e6:0c:8a: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9B:79:35:FC:E5:D7:FA:79:8C:46:49:17:2D:EA:D6:69:80:C4:73 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3c:a5:2d:44:e8:9b:d5:48:0b:a9:2f:29:3d:ec:e0:d3:f1: c4:2d:25:23:ee:b7:20:3f:de:f5:43:84:87:d3:92:88:e0:c9: fc:37:c4:4f:dd:25:cf:b7:ec:7b:39:07:f7:9b:ed:3a:d2:ba: b9:0a:c1:e5:0e:eb:ce:e8:c6:cb:4f:27:ab:76:85:ca:27:3d: e4:1c:c9:dd:60:fa:e5:85:b7:4c:b5:da:9b:04:df:de:fa:7e: 1f:cf:81:a7:23:73:31:4e:6e:b0:6f:54:49:55:e9:cf:22:7c: e0:42:00:89:88:61:9a:87:a2:2f:62:a5:9f:75:c7:c7:6a:e2: 9e:f0:84:5a:ff:a7:23:84:9d:f7:1a:20:2e:32:23:0f:26:33: 52:1d:0f:5f:40:16:72:16:6e:60:66:87:d2:fc:0d:30:fd:91: c0:7a:8f:0a:9a:24:b7:b8:2b:b0:22:9b:b8:23:60:43:e3:91: 7e:47:2c:0a:99:cd:d7:52:95:72:cc:8a:cf:5a:0b:33:f3:67: 12:98:4e:6d:07:5b:a9:77:e9:fa:51:05:49:fa:63:a8:22:62: e7:26:34:c8:ed:71:8e:e0:01:ee:25:e3:ca:bb:70:5d:e0:ee: 7b:04:20:31:5d:bd:d8:56:d3:28:bc:60:87:cf:a7:5f:46:d8: a1:dc:d9:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1MEIxMTAvBgNVBAUTKDNCODM1ODUzNUJDNjI4NTY0QUY1NkYzMUQ4NzU4NjQ4 RTFEMDQzMDQwHhcNMjYwNzIzMDgyOTUyWhcNMjYwNzMwMDgyOTUyWjAYMRYwFAYD VQQDEw02YTYxZDEwMS1mZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7F9NFQxmrWJlIp8fFuRMx+D2XdKyLQhcMnTzmT3xH7I8YMWoHL4wOggkvBR 6+hU/L7BlrRuBnX8Y9TbGRYjznl59wqamuuD70/sapv7bmT+0Q8AfQaK4J+T+rY0 dYlKQh/22F6rMQ3qA1LQTqp/M/HN6gBNL1UivKZmOo5ktF1j4DjrZxiVKuBbeXYa RkbU+bB9lDIfp90WB0uuK3whFCdDFw4+bMcTGQ7JwMXI+11cw4Mg40qp2E4mhlL9 /CIc6X+gERgyCRELghsyo68BWYtBpr7BX4z09QyxXQCmQW59/Nc93JWh0BDetqLJ owSMSRWSkETy+nmRu4zmDIqzFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmbeTX8 5df6eYxGSRct6tZpgMRzMB8GA1UdIwQYMBaAFDuDWFNbxihWSvVvMdh1hkjh0EME MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi82NEQwNzc0ODQ2 OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tGWks5Vzh4MkhXR1NPSFFR d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzUwQi82NEQwNzc0ODQ2OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tG Wks5Vzh4MkhXR1NPSFFRd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACDylLUTom9VIC6kvKT3s4NPxxC0lI+63ID/e9UOEh9OSiODJ/DfET90lz7fs ezkH95vtOtK6uQrB5Q7rzujGy08nq3aFyic95BzJ3WD65YW3TLXamwTf3vp+H8+B pyNzMU5usG9USVXpzyJ84EIAiYhhmoeiL2Kln3XHx2rinvCEWv+nI4Sd9xogLjIj DyYzUh0PX0AWchZuYGaH0vwNMP2RwHqPCpokt7grsCKbuCNgQ+ORfkcsCpnN11KV csyKz1oLM/NnEphObQdbqXfp+lEFSfpjqCJi5yY0yO1xjuAB7iXjyrtwXeDuewQg MV292FbTKLxgh8+nX0bYodzZig== -----END CERTIFICATE-----Generated at Fri Jul 24 16:21:56 2026 by rpki-client