$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft File: khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json) Hash identifier: h8sa9TtIo0ijk0PZFHy5YcFFCP/5e+Yzxg7C/4EcBUE= Subject key identifier: 43:EE:86:8C:FC:F5:7B:9A:61:3C:BC:A6:C9:27:7D:79:0A:F4:05:7F Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 Certificate issuer: /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft Manifest number: 0219 Signing time: Thu 23 Jul 2026 04:06:31 +0000 Manifest this update: Thu 23 Jul 2026 04:06:31 +0000 Manifest next update: Thu 30 Jul 2026 04:06:31 +0000 Files and hashes: 1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: XSkMaKnDbOTjNF0hw07KdTipeqERkE+PrvC+ZJ4hYwo=) 2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: 1TmegfXL7CHMVE3+A+CZbSuJIC3tkud4zJDxKyv9h1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Validity Not Before: Jul 23 04:06:31 2026 GMT Not After : Jul 30 04:06:31 2026 GMT Subject: CN=6a619347-27a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:21:52:24:94:b1:16:73:fe:37:77:59:ec: c9:15:d1:51:fb:f2:38:ee:94:fb:50:26:60:e6:e4: 30:6c:43:05:08:b2:ab:08:a9:97:18:6e:35:e6:2f: be:17:27:97:54:5b:52:76:05:8f:37:4e:34:82:85: 01:ea:3d:1c:30:f1:9a:5f:70:f2:c9:87:d5:cf:9d: 74:72:7e:3f:e8:9d:dc:48:db:9c:5e:57:65:ff:be: 79:bf:d7:96:82:b0:65:51:b6:0f:8d:b3:01:a4:71: a5:bd:4e:bd:9e:80:85:6d:5a:bd:36:d4:63:7d:0c: 99:0d:34:8c:06:15:98:f7:0e:d8:32:1d:b3:20:cb: 77:b2:79:58:a1:1a:4f:4c:60:67:c1:92:94:2e:f4: 4b:42:48:c1:cf:86:04:f7:05:69:03:58:89:5b:6c: 59:f9:a7:25:cc:48:dc:8f:5a:53:86:2d:b2:0e:ba: 44:96:58:5d:44:9b:95:19:9c:37:53:0e:e8:81:d7: 00:5f:2d:53:4b:a0:d0:cf:7a:fb:f9:6e:bf:e1:45: 37:4f:6b:d2:c8:e0:f4:e3:7c:b6:4e:aa:dd:c1:40: 3a:a1:18:62:26:b8:bc:d4:a1:cd:8b:f4:b1:b1:67: 9e:9b:9c:ae:b2:4b:e1:4f:3f:4a:49:16:40:1f:c8: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:86:8C:FC:F5:7B:9A:61:3C:BC:A6:C9:27:7D:79:0A:F4:05:7F X509v3 Authority Key Identifier: keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:57:f7:dd:3b:52:ac:e9:61:0b:7a:2d:c0:61:49:94:f5:71: 60:2e:89:b9:43:ed:71:80:21:35:ad:47:3e:30:b4:e7:29:c6: 48:9a:6b:06:3c:dd:71:81:e6:e6:1b:29:b1:c0:cd:3c:79:93: 7e:e9:00:fd:29:e1:66:89:75:36:d6:23:3d:c4:cd:51:4a:fa: 16:cf:18:52:45:be:85:79:61:98:c4:28:48:8d:81:87:bf:bd: 71:11:18:87:9a:e0:5f:75:17:d3:d5:1e:82:62:ff:96:49:57: 6d:3e:65:dd:fd:5f:77:c7:58:82:12:7d:7a:9c:bf:7f:f2:32: 8b:19:2a:21:6c:f4:1e:43:de:d4:cd:98:ae:a3:88:f8:f8:cd: 44:8f:7b:7b:49:2b:27:b3:67:a8:bf:4a:3d:67:11:c0:24:37: b0:da:f0:3c:ab:f5:ea:e7:d4:a4:64:b7:ef:7e:14:b9:94:62: fc:25:27:70:d6:3c:a5:5d:a3:a6:92:f9:b8:7e:fc:29:4f:bd: db:42:23:d7:a8:d4:a7:32:03:f8:85:ae:0d:9d:64:38:cb:96: 7b:b9:3a:fe:2b:fe:ec:a0:c9:77:0d:4b:ad:09:fa:50:a9:6b: 4d:60:c9:96:5c:63:1e:b7:6a:72:c2:83:a3:b8:33:df:de:fb: 8d:25:2b:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM1RjMxMTAvBgNVBAUTKDkyMTNCNTA0N0E0MEYyM0M3QzYwMDQ4MEU2REFBN0Ex Q0Y3RkEyRTgwHhcNMjYwNzIzMDQwNjMxWhcNMjYwNzMwMDQwNjMxWjAYMRYwFAYD VQQDEw02YTYxOTM0Ny0yN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFshUiSUsRZz/jd3WezJFdFR+/I47pT7UCZg5uQwbEMFCLKrCKmXGG415i++ FyeXVFtSdgWPN040goUB6j0cMPGaX3DyyYfVz510cn4/6J3cSNucXldl/755v9eW grBlUbYPjbMBpHGlvU69noCFbVq9NtRjfQyZDTSMBhWY9w7YMh2zIMt3snlYoRpP TGBnwZKULvRLQkjBz4YE9wVpA1iJW2xZ+aclzEjcj1pThi2yDrpEllhdRJuVGZw3 Uw7ogdcAXy1TS6DQz3r7+W6/4UU3T2vSyOD043y2TqrdwUA6oRhiJri81KHNi/Sx sWeem5yuskvhTz9KSRZAH8hFgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPuhoz8 9XuaYTy8psknfXkK9AV/MB8GA1UdIwQYMBaAFJITtQR6QPI8fGAEgObap6HPf6Lo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzVGMy85QjVEQjVFQTUw QTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThqeDhZQVNBNXRxbm9jOV9v dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTzFCSHBBOGp4OFlBU0E1dHFub2M5X291Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzVGMy85QjVEQjVFQTUwQTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThq eDhZQVNBNXRxbm9jOV9vdWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN1f33TtSrOlhC3otwGFJlPVxYC6JuUPtcYAhNa1HPjC05ynGSJprBjzdcYHm 5hspscDNPHmTfukA/SnhZol1NtYjPcTNUUr6Fs8YUkW+hXlhmMQoSI2Bh7+9cREY h5rgX3UX09UegmL/lklXbT5l3f1fd8dYghJ9epy/f/IyixkqIWz0HkPe1M2YrqOI +PjNRI97e0krJ7NnqL9KPWcRwCQ3sNrwPKv16ufUpGS3734UuZRi/CUncNY8pV2j ppL5uH78KU+920Ij16jUpzID+IWuDZ1kOMuWe7k6/iv+7KDJdw1LrQn6UKlrTWDJ llxjHrdqcsKDo7gz3977jSUrMg== -----END CERTIFICATE-----Generated at Fri Jul 24 18:39:41 2026 by rpki-client