$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: b+6tq910JbZQe2o9zXDsrWZU857WrGVb1imPNeYKcbo= Subject key identifier: 5B:AF:B6:70:17:60:38:E5:A5:EA:7A:0C:86:00:F4:B1:8C:E1:1D:CD Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D5D Signing time: Wed 22 Jul 2026 18:19:26 +0000 Manifest this update: Wed 22 Jul 2026 18:19:26 +0000 Manifest next update: Wed 29 Jul 2026 18:19:26 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: dbZbLVve3Im9g5yEGcy3p49bzi8mJBztHN+Csz6pHnc=) 2: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=) 3: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Jul 22 18:19:26 2026 GMT Not After : Jul 29 18:19:26 2026 GMT Subject: CN=6a6109ae-eb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:da:d4:d4:98:4f:b4:bf:f0:e5:76:8e:89: 08:56:e3:45:2e:61:ca:d2:07:cd:df:61:45:41:0e: 5d:31:d9:2f:f3:19:af:6a:fd:c9:6c:ca:6f:d5:ef: 80:66:3f:db:93:c5:2e:97:68:7f:45:9f:5d:e2:ec: 31:61:4b:1d:67:f4:0d:14:20:51:9e:ac:eb:6c:68: a9:10:4a:8c:38:bd:8f:b1:75:0d:39:68:a4:99:02: 13:5d:70:fa:6d:a2:11:a1:33:48:b4:92:aa:17:5b: 95:b3:7f:20:1d:19:c1:55:a2:f1:11:8c:db:e4:d6: 39:98:29:59:a8:80:ee:0a:4f:f9:f5:ff:d4:d7:07: 2d:6b:85:be:a8:da:4d:72:ac:f9:3e:d3:41:48:e7: d9:6b:71:82:d6:3e:21:df:db:b9:c2:96:1f:6c:77: 86:2f:29:01:7f:28:c4:01:8d:70:23:81:f2:1b:ab: c7:b5:02:29:3c:fe:b0:86:96:6f:5b:9a:cd:1b:db: d9:4f:5e:5e:03:0b:b4:56:71:df:3e:60:5c:b6:d0: 29:67:65:b6:0c:09:fa:68:fb:e0:e4:6b:bc:ff:0c: 21:3c:7e:0c:f9:e8:c8:dc:0d:12:a9:29:eb:19:d9: ad:00:a2:57:79:08:a6:24:11:66:f8:b5:76:e6:e7: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AF:B6:70:17:60:38:E5:A5:EA:7A:0C:86:00:F4:B1:8C:E1:1D:CD X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b0:b3:9e:b6:33:75:55:1f:a7:d6:87:79:28:ea:01:c6:ee: c6:25:5a:31:25:85:a1:e5:5d:a1:e7:32:45:a3:62:c0:2d:c6: 93:7b:b7:1e:70:80:75:ee:da:c9:05:d1:2b:44:12:08:9b:6b: d8:be:2c:85:49:0e:e5:9a:44:27:56:3d:eb:82:7f:72:30:f2: 28:d9:cc:91:80:33:62:33:66:e8:70:91:d9:87:47:6e:3d:7f: 49:de:dc:62:d3:7c:51:a0:61:8a:d6:58:e2:2c:1f:51:79:54: 08:77:16:99:c0:13:4b:9c:92:0e:a5:4d:a8:07:a6:e8:ed:d2: 4e:35:92:ad:7a:db:12:c8:00:ec:b0:20:74:2a:54:ce:a6:ad: c2:42:08:fc:5f:4f:17:68:6f:44:ec:d8:28:1f:9f:54:54:a9: 28:f0:07:a3:f2:73:65:8c:4c:be:11:12:1b:74:1c:29:c9:e6: 94:90:a4:9b:dc:a3:5b:d9:8f:f6:3c:f8:12:d9:58:72:8d:91: b9:23:55:fb:07:f7:9c:1e:f2:a7:22:2f:d3:4f:cb:55:e0:b2: ec:db:a5:a2:f6:8b:6b:77:87:8f:91:33:8d:18:ab:30:32:86: 0c:68:2b:58:48:fb:5f:1d:e0:5f:a6:fe:d9:09:b1:44:44:a7: 78:9e:b9:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwNzIyMTgxOTI2WhcNMjYwNzI5MTgxOTI2WjAYMRYwFAYD VQQDEw02YTYxMDlhZS1lYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXPa1NSYT7S/8OV2jokIVuNFLmHK0gfN32FFQQ5dMdkv8xmvav3JbMpv1e+A Zj/bk8Uul2h/RZ9d4uwxYUsdZ/QNFCBRnqzrbGipEEqMOL2PsXUNOWikmQITXXD6 baIRoTNItJKqF1uVs38gHRnBVaLxEYzb5NY5mClZqIDuCk/59f/U1wcta4W+qNpN cqz5PtNBSOfZa3GC1j4h39u5wpYfbHeGLykBfyjEAY1wI4HyG6vHtQIpPP6whpZv W5rNG9vZT15eAwu0VnHfPmBcttApZ2W2DAn6aPvg5Gu8/wwhPH4M+ejI3A0SqSnr GdmtAKJXeQimJBFm+LV25ufz0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuvtnAX YDjlpep6DIYA9LGM4R3NMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbCznrYzdVUfp9aHeSjqAcbuxiVaMSWFoeVdoecyRaNiwC3Gk3u3HnCAde7a yQXRK0QSCJtr2L4shUkO5ZpEJ1Y964J/cjDyKNnMkYAzYjNm6HCR2YdHbj1/Sd7c YtN8UaBhitZY4iwfUXlUCHcWmcATS5ySDqVNqAem6O3STjWSrXrbEsgA7LAgdCpU zqatwkII/F9PF2hvROzYKB+fVFSpKPAHo/JzZYxMvhESG3QcKcnmlJCkm9yjW9mP 9jz4EtlYco2RuSNV+wf3nB7ypyIv00/LVeCy7NulovaLa3eHj5EzjRirMDKGDGgr WEj7Xx3gX6b+2QmxRESneJ65uw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:05:05 2026 by rpki-client