$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: wr2t3qq9jYCnsCrDok2ArXR99wE6ve53lqNEg2cv1S0= Subject key identifier: A6:C2:D8:B1:C8:B7:41:FC:AC:83:DA:CE:BE:4D:67:E3:BE:EC:4A:52 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 06C7 Signing time: Thu 23 Jul 2026 00:27:55 +0000 Manifest this update: Thu 23 Jul 2026 00:27:55 +0000 Manifest next update: Thu 30 Jul 2026 00:27:55 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: 75td7xeEEoKmKJAEp8PURqb0eWWJjPoSXaPl1hKCjKA=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Jul 23 00:27:55 2026 GMT Not After : Jul 30 00:27:55 2026 GMT Subject: CN=6a61600b-2b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:d0:7b:d5:2f:65:61:f1:f9:77:79:f7:6e: d8:49:46:86:d3:d4:3f:a7:9c:80:d5:7e:7a:a9:77: 0a:1d:ea:ce:80:dd:23:e3:e8:77:4b:de:9f:a1:7b: f3:8a:e8:c3:16:24:d2:3b:ef:aa:2f:a2:b6:ca:a9: 83:f5:9a:eb:6b:2e:db:bc:81:29:87:d8:17:09:71: c2:31:eb:a7:09:9a:8a:14:f8:b3:cd:3d:b7:13:59: f8:91:c7:51:b9:7f:2e:a6:23:cb:36:24:aa:a1:52: 38:c1:f4:97:58:a9:84:84:bb:db:c4:db:de:1a:91: be:37:d8:ee:a1:e2:21:f9:8e:b9:04:b0:6b:5f:6a: 42:ff:1b:6d:d2:af:2d:dc:0b:b5:bd:31:74:85:34: 8d:32:d5:17:bb:2c:ec:ee:55:49:6f:4b:b9:9a:a4: 98:c9:c3:57:4a:d0:1c:f3:c6:ae:5b:d0:29:a6:a0: 82:2d:bc:92:78:fd:40:cb:6c:03:a0:e2:8b:39:e5: 0d:26:a9:53:f8:1f:29:17:2b:ed:86:f3:9b:cc:ce: 0d:42:15:6f:72:b1:f3:1b:22:6f:ee:bf:e8:93:32: 97:c1:ef:fb:28:79:dc:90:b3:b3:2c:7a:5c:1a:39: 29:78:6b:91:d4:85:44:dc:01:85:60:fd:31:f4:78: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:D8:B1:C8:B7:41:FC:AC:83:DA:CE:BE:4D:67:E3:BE:EC:4A:52 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d8:87:b3:71:f7:24:d6:64:ba:71:10:f9:3d:5b:49:ba:04: fe:8e:6d:61:8b:63:86:2f:ef:20:ca:5a:22:3e:03:47:38:a4: d6:6c:f1:c8:88:3b:33:84:b3:6d:6f:f6:8a:b6:f0:cf:55:47: 64:15:ba:22:a6:39:d1:4e:15:5d:d9:26:f7:2f:47:88:65:b3: 00:92:dd:1b:51:ad:1b:19:75:07:8b:71:37:a9:a1:a6:e6:17: 23:23:2f:4a:39:de:31:65:16:3c:06:48:54:6d:58:ac:e3:c3: 97:bd:62:22:f1:c8:f4:c9:2d:ec:d7:fc:0e:4f:d6:28:93:63: 11:f5:bb:f1:36:1f:a5:e9:bc:fc:23:6e:12:a8:a6:c4:59:c5: 43:45:11:08:3e:25:99:4b:ad:5c:98:11:33:6a:fc:4b:d8:cb: 6e:de:68:5f:22:de:62:5c:ad:ff:82:17:2f:b2:37:40:86:ae: 13:ec:5f:f0:68:76:79:b1:25:9b:0a:7c:e9:87:bc:7e:3c:e5: a5:e9:72:6b:0c:dc:94:36:c2:99:ce:ba:78:cd:9a:11:b2:e2: b2:10:8c:95:5a:91:02:1b:08:11:40:a3:53:a2:01:21:42:6e: aa:96:a8:29:4e:1a:0c:a8:1a:94:ff:2f:bb:d4:99:1f:d6:9f: 87:af:08:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjYwNzIzMDAyNzU1WhcNMjYwNzMwMDAyNzU1WjAYMRYwFAYD VQQDEw02YTYxNjAwYi0yYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTPQe9UvZWHx+Xd5927YSUaG09Q/p5yA1X56qXcKHerOgN0j4+h3S96foXvz iujDFiTSO++qL6K2yqmD9Zrray7bvIEph9gXCXHCMeunCZqKFPizzT23E1n4kcdR uX8upiPLNiSqoVI4wfSXWKmEhLvbxNveGpG+N9juoeIh+Y65BLBrX2pC/xtt0q8t 3Au1vTF0hTSNMtUXuyzs7lVJb0u5mqSYycNXStAc88auW9AppqCCLbySeP1Ay2wD oOKLOeUNJqlT+B8pFyvthvObzM4NQhVvcrHzGyJv7r/okzKXwe/7KHnckLOzLHpc GjkpeGuR1IVE3AGFYP0x9HjrSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbC2LHI t0H8rIPazr5NZ+O+7EpSMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAndiHs3H3JNZkunEQ+T1bSboE/o5tYYtjhi/vIMpaIj4DRzik1mzxyIg7M4Sz bW/2irbwz1VHZBW6IqY50U4VXdkm9y9HiGWzAJLdG1GtGxl1B4txN6mhpuYXIyMv SjneMWUWPAZIVG1YrOPDl71iIvHI9Mkt7Nf8Dk/WKJNjEfW78TYfpem8/CNuEqim xFnFQ0URCD4lmUutXJgRM2r8S9jLbt5oXyLeYlyt/4IXL7I3QIauE+xf8Gh2ebEl mwp86Ye8fjzlpelyawzclDbCmc66eM2aEbLishCMlVqRAhsIEUCjU6IBIUJuqpao KU4aDKgalP8vu9SZH9afh68IYA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:53:29 2026 by rpki-client