$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft File: orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json) Hash identifier: rTcKevijNmkfk4bxs9ZioUUOZSd3QjHPstxG+pRCD6s= Subject key identifier: 11:76:3D:75:81:06:53:7B:F4:71:54:5D:90:26:2F:D0:34:2A:CC:3F Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 Certificate issuer: /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft Manifest number: CA Signing time: Thu 23 Jul 2026 08:38:42 +0000 Manifest this update: Thu 23 Jul 2026 08:38:42 +0000 Manifest next update: Thu 30 Jul 2026 08:38:42 +0000 Files and hashes: 1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: 0P8J3Xd+ZBfH1uCBzhnxifEbQUBoJjXLZLiU/nfuF9Y=) 2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: g6Egk/b7vNf0MzgI//DoeOCEJm43M/fSUDub5ucoMAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3 Validity Not Before: Jul 23 08:38:42 2026 GMT Not After : Jul 30 08:38:42 2026 GMT Subject: CN=6a61d312-8fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:f1:ac:e8:c7:50:35:af:8a:2e:bb:13:df: c0:3d:4e:89:64:bf:93:28:c7:2e:31:d3:38:51:69: e7:4e:bf:5d:84:f6:95:67:4f:0c:cb:29:4b:13:2c: c4:af:13:4e:2e:41:9e:78:98:b7:23:bb:35:45:88: e4:5e:b5:61:44:07:8d:1e:da:7e:90:51:2d:69:6e: 19:da:96:75:69:3c:ef:cf:3f:5d:16:43:61:09:9e: 46:b0:7d:26:05:f1:cd:92:00:38:72:32:c8:31:6b: 52:36:e8:23:13:2a:f5:5c:fb:c4:c7:c2:a8:56:33: 76:ee:fe:d5:32:1f:d8:6a:7d:05:61:a5:52:38:2c: 38:ce:32:53:69:55:b5:e3:8a:cc:90:ba:04:ff:71: 82:9f:bd:45:3f:ef:d8:cf:ef:ac:11:66:ab:c6:47: 76:15:af:a6:be:bc:04:f1:0d:89:b5:41:14:85:6f: 36:50:8d:08:8c:38:b6:1a:bc:c4:56:ac:05:71:d3: 6b:fa:06:71:d6:a6:62:3e:3f:dd:a7:41:fc:80:13: ad:da:62:56:24:4b:34:cb:4b:84:91:2b:d4:c4:09: eb:ab:24:af:f6:7d:66:21:ba:1b:72:c2:d1:cd:5b: e4:b1:f6:1d:22:35:76:ec:a4:28:c5:6d:e8:aa:98: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:76:3D:75:81:06:53:7B:F4:71:54:5D:90:26:2F:D0:34:2A:CC:3F X509v3 Authority Key Identifier: keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:49:3c:20:e4:6c:1d:f8:fb:3b:6b:96:01:d1:44:b8:40:21: 30:e7:aa:b6:b7:4f:9b:6b:de:2e:54:49:49:2c:b6:07:00:9d: ee:f2:65:d6:08:8c:5d:fd:82:5a:1a:13:79:41:3e:b2:34:eb: 3e:1f:a9:ed:87:46:d2:fb:76:a4:1f:1b:62:a4:4a:f5:bc:21: ec:12:a4:2d:84:2d:50:5f:e4:94:29:49:0c:52:c9:83:80:79: ab:1f:85:6d:00:4c:6d:a8:8f:14:1f:63:0b:50:09:2f:63:61: 4d:54:6e:da:78:26:81:6d:96:19:b9:94:0d:3a:89:79:34:6a: 58:b6:ee:64:90:2f:82:01:22:ec:7c:39:2d:5c:40:ee:e3:30: 80:fc:c5:2b:6d:bd:00:f8:3b:28:a5:47:ad:52:f8:0b:d1:f4: 22:65:70:da:77:3f:75:14:71:f0:cd:99:09:18:6b:b1:1a:c5: 5c:27:25:73:cc:f4:61:df:83:c1:3d:af:8a:e2:de:de:81:47: 04:21:ff:a6:00:a8:66:d4:f4:9e:1e:3e:f0:9d:1c:50:db:d1: b2:7b:c3:e3:ae:88:aa:e0:9c:71:93:42:fa:80:f3:25:a0:51: e6:45:58:70:b0:6d:07:cf:5c:14:78:1f:72:36:df:cf:68:4e: 5b:35:2e:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3QzExMTAvBgNVBAUTKEEyQjlGRkVENDcwQzVCNzFDNTJGM0I2NEIzQjZFREE0 MTlCRTEzQjMwHhcNMjYwNzIzMDgzODQyWhcNMjYwNzMwMDgzODQyWjAYMRYwFAYD VQQDEw02YTYxZDMxMi04ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13/xrOjHUDWvii67E9/APU6JZL+TKMcuMdM4UWnnTr9dhPaVZ08MyylLEyzE rxNOLkGeeJi3I7s1RYjkXrVhRAeNHtp+kFEtaW4Z2pZ1aTzvzz9dFkNhCZ5GsH0m BfHNkgA4cjLIMWtSNugjEyr1XPvEx8KoVjN27v7VMh/Yan0FYaVSOCw4zjJTaVW1 44rMkLoE/3GCn71FP+/Yz++sEWarxkd2Fa+mvrwE8Q2JtUEUhW82UI0IjDi2GrzE VqwFcdNr+gZx1qZiPj/dp0H8gBOt2mJWJEs0y0uEkSvUxAnrqySv9n1mIbobcsLR zVvksfYdIjV27KQoxW3oqphpVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBF2PXWB BlN79HFUXZAmL9A0Ksw/MB8GA1UdIwQYMBaAFKK5/+1HDFtxxS87ZLO27aQZvhOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdDMS8yNjMxQzhCNDU3 MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVczSEZMenRrczdidHBCbS1F N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29ybl83VWNNVzNIRkx6dGtzN2J0cEJtLUU3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdDMS8yNjMxQzhCNDU3MEExMUYwQjUzOENGNjVDNEY5QUUwMi9vcm5fN1VjTVcz SEZMenRrczdidHBCbS1FN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa0k8IORsHfj7O2uWAdFEuEAhMOeqtrdPm2veLlRJSSy2BwCd7vJl1giMXf2C WhoTeUE+sjTrPh+p7YdG0vt2pB8bYqRK9bwh7BKkLYQtUF/klClJDFLJg4B5qx+F bQBMbaiPFB9jC1AJL2NhTVRu2ngmgW2WGbmUDTqJeTRqWLbuZJAvggEi7Hw5LVxA 7uMwgPzFK229APg7KKVHrVL4C9H0ImVw2nc/dRRx8M2ZCRhrsRrFXCclc8z0Yd+D wT2viuLe3oFHBCH/pgCoZtT0nh4+8J0cUNvRsnvD466IquCccZNC+oDzJaBR5kVY cLBtB89cFHgfcjbfz2hOWzUucg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:28:19 2026 by rpki-client