$ rpki-client -vvf rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft File: OHvc-OlHoaBOL0OH-99wZUpE0b0.mft (raw, json) Hash identifier: PhiGUYCmJpzFizbc16LlpMXwpkk02GImnr1cQQjVf5M= Subject key identifier: 7D:62:24:2D:C6:7A:20:59:9B:9C:41:82:54:74:68:3F:C3:C8:33:72 Authority key identifier: 38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD Certificate issuer: /CN=A913ACF4/serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft Manifest number: 0A25 Signing time: Wed 22 Jul 2026 20:10:23 +0000 Manifest this update: Wed 22 Jul 2026 20:10:22 +0000 Manifest next update: Wed 29 Jul 2026 20:10:22 +0000 Files and hashes: 1: OHvc-OlHoaBOL0OH-99wZUpE0b0.crl (hash: 8tNhW617oU2f4lduBM+ZfYZXQwZRHGuCYA5Zu2NKNaI=) 2: 25E6E72899FE11EAB3E30513C4F9AE02.roa (hash: vExenB8r5VLDvagQcEg/ivOJqZUrJV0ln/r+0QlZHXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ACF4, serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD Validity Not Before: Jul 22 20:10:22 2026 GMT Not After : Jul 29 20:10:22 2026 GMT Subject: CN=6a6123af-f007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:41:73:d6:a3:b1:80:93:50:74:0e:08:80: 1c:8d:0d:b7:78:9c:fe:6c:f4:9c:26:c4:70:a5:f1: f4:db:d3:f4:80:d9:fb:1b:05:00:2c:34:20:5d:95: 00:f8:f1:75:de:39:85:18:3d:ea:54:c3:37:0d:5a: 57:71:0a:a3:e5:0a:d9:85:2f:1d:0b:93:05:8e:53: 37:7f:dc:a9:6c:6f:3c:6d:3f:f6:fd:a8:29:31:06: a2:6d:96:e3:52:4a:df:13:35:17:e6:f7:60:e3:01: 23:a7:04:0e:ff:cc:b2:31:65:01:20:41:d6:aa:af: 63:77:35:b4:52:85:9f:03:39:db:c0:2d:c3:05:85: 2d:3f:75:ab:ae:3e:4c:c4:35:1f:5e:fe:cb:cf:2a: 21:22:58:db:a1:14:01:26:13:07:2e:0a:53:02:94: 01:0f:5c:02:e2:c5:04:b9:64:73:99:ed:2d:c6:3c: 82:83:6f:42:72:a4:cd:61:23:e6:43:c3:33:b5:c6: e7:a6:b1:eb:e3:3f:a9:40:10:a8:4e:71:1b:72:91: 1f:1f:23:0d:0f:8d:eb:bd:54:51:ae:a2:94:b8:a0: 32:05:f5:3c:03:b4:9f:d0:f5:61:5b:f9:a1:85:b1: b8:b0:54:e1:1c:b4:3f:cb:e3:e7:b8:e7:17:47:7a: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:62:24:2D:C6:7A:20:59:9B:9C:41:82:54:74:68:3F:C3:C8:33:72 X509v3 Authority Key Identifier: keyid:38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d1:68:a6:96:b3:81:a9:a9:bf:fb:d8:2c:d2:0f:19:18:af: 93:f7:d4:4d:1a:1a:c3:61:ee:d3:b5:6a:3f:51:89:b4:e5:4c: 30:3f:ee:a3:0c:66:09:ae:b6:0e:3e:7f:10:84:d4:3c:3f:65: 6f:63:2f:1f:f1:3d:f3:7e:a6:08:e5:c7:14:57:8f:94:6c:73: 04:aa:f2:b1:a5:a6:37:14:9a:54:cd:59:b9:fc:29:df:d8:29: c4:86:77:25:00:6b:c4:85:d1:34:79:d5:2a:83:08:c1:42:a8: 6f:65:8e:f2:dc:6e:47:e4:0b:05:8b:d1:98:ab:fa:d5:bb:fc: 85:ec:19:ec:9c:85:d4:53:e1:e0:32:5b:a5:5d:c1:5e:d8:b0: 7f:57:8c:6e:4f:f7:f5:fe:8f:86:ed:e0:5d:cb:f9:f6:92:89: 0a:0c:e6:c3:d2:44:24:ad:d6:8d:28:23:6f:80:24:b5:69:a7: 02:1b:c7:b2:be:c9:03:d1:6c:fb:e3:cf:61:ce:1b:a1:9a:40: 00:a7:fb:19:6a:6c:33:0e:e0:69:d5:9b:6f:73:38:cc:86:9d: 5e:d2:6a:88:2b:c9:1a:3a:45:0f:22:66:3d:29:38:40:35:ec: d7:9d:ec:02:d6:84:21:c5:e6:a7:81:f4:33:c3:89:db:0a:0b: 16:76:c4:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FDRjQxMTAvBgNVBAUTKDM4N0JEQ0Y4RTk0N0ExQTA0RTJGNDM4N0ZCREY3MDY1 NEE0NEQxQkQwHhcNMjYwNzIyMjAxMDIyWhcNMjYwNzI5MjAxMDIyWjAYMRYwFAYD VQQDEw02YTYxMjNhZi1mMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tVBc9ajsYCTUHQOCIAcjQ23eJz+bPScJsRwpfH029P0gNn7GwUALDQgXZUA +PF13jmFGD3qVMM3DVpXcQqj5QrZhS8dC5MFjlM3f9ypbG88bT/2/agpMQaibZbj UkrfEzUX5vdg4wEjpwQO/8yyMWUBIEHWqq9jdzW0UoWfAznbwC3DBYUtP3Wrrj5M xDUfXv7LzyohIljboRQBJhMHLgpTApQBD1wC4sUEuWRzme0txjyCg29CcqTNYSPm Q8MztcbnprHr4z+pQBCoTnEbcpEfHyMND43rvVRRrqKUuKAyBfU8A7Sf0PVhW/mh hbG4sFThHLQ/y+PnuOcXR3rjiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1iJC3G eiBZm5xBglR0aD/DyDNyMB8GA1UdIwQYMBaAFDh73PjpR6GgTi9Dh/vfcGVKRNG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUNGNC83MEUzMDM2Qzk5 RkMxMUVBOTY1NTQ1MTBDNEY5QUUwMi9PSHZjLU9sSG9hQk9MME9ILTk5d1pVcEUw YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09IdmMtT2xIb2FCT0wwT0gtOTl3WlVwRTBiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUNGNC83MEUzMDM2Qzk5RkMxMUVBOTY1NTQ1MTBDNEY5QUUwMi9PSHZjLU9sSG9h Qk9MME9ILTk5d1pVcEUwYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAndFoppazgampv/vYLNIPGRivk/fUTRoaw2Hu07VqP1GJtOVMMD/uowxmCa62 Dj5/EITUPD9lb2MvH/E9836mCOXHFFePlGxzBKrysaWmNxSaVM1Zufwp39gpxIZ3 JQBrxIXRNHnVKoMIwUKob2WO8txuR+QLBYvRmKv61bv8hewZ7JyF1FPh4DJbpV3B Xtiwf1eMbk/39f6Phu3gXcv59pKJCgzmw9JEJK3WjSgjb4AktWmnAhvHsr7JA9Fs ++PPYc4boZpAAKf7GWpsMw7gadWbb3M4zIadXtJqiCvJGjpFDyJmPSk4QDXs153s AtaEIcXmp4H0M8OJ2woLFnbEMA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:55:48 2026 by rpki-client