$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: KvpItuNkoHuWy/DjWYClbu/4xJoK3+p17MrNarQiCKM= Subject key identifier: 95:47:1D:5B:D4:8A:49:72:2C:AF:2A:42:E8:7D:98:F3:D8:9B:A0:EC Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0AA8 Signing time: Wed 22 Jul 2026 21:56:41 +0000 Manifest this update: Wed 22 Jul 2026 21:56:40 +0000 Manifest next update: Wed 29 Jul 2026 21:56:40 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: NnHgvRZzQ4CQAaYiOEbaELe7vcO07NkDOyYnOO53CrY=) 2: 61EE2500936E11F091943583C4F9AE02.roa (hash: RZu+N0UMDFqrq/+u2/U/cWdhhSreA6LNQ4Hgg8v41p0=) 3: 1E01B6A0543D11F186DD736CA5833773.roa (hash: LUPw4QKMp6U0UApan6G60nuVThud2l0m1JhxBVhMRTY=) 4: 18E343FA3A3411F195AC72659C833773.roa (hash: C8YKOWTAFs4AuK1LSCOncUMIINtZQxLs2TqjAQ20XR0=) 5: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: naDflN2ZDqvNuyRMH9yg7NShqSkBOGk1R7/XQG5WRuw=) 6: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw=) 7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: 85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=) 8: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: EqLAuXxAZeKAYnuPs5OW1nY6ViQmlIY+p5+TLBkooss=) 9: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: f/BC8ivG3s+/7SWxACHpcrIi5d6K+hPjENNTc6WbrhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Jul 22 21:56:40 2026 GMT Not After : Jul 29 21:56:40 2026 GMT Subject: CN=6a613c98-81f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:95:76:fb:93:c0:54:2b:48:58:58:52:aa: 20:7a:41:2c:3f:25:c1:da:62:48:41:18:40:6f:9c: 3d:8c:02:01:38:b5:b1:57:14:68:b4:3f:a6:44:e5: a6:7a:d7:7b:8d:18:d2:97:17:45:82:bd:57:44:8d: 11:6c:69:86:43:38:cb:14:22:0d:8c:26:80:2e:53: ce:0e:1d:3c:58:a8:bb:5f:38:ba:3c:eb:47:c4:d9: 27:52:55:8c:d8:2a:7c:77:01:68:15:b2:45:08:ac: 8a:0c:5c:1b:51:a4:67:7d:f3:46:42:42:cf:40:42: be:68:db:5d:94:66:fb:b5:cb:d5:30:7c:77:d5:6c: d0:2e:d3:c6:cf:34:37:98:d4:fb:bc:30:a2:2d:0e: 2c:5c:d3:26:dc:be:4a:5a:2d:b2:69:c0:f0:96:7f: 73:57:fb:9d:80:7e:3c:b9:46:9b:d9:95:c8:43:3f: 20:c2:e7:76:fe:87:cd:bb:5c:0e:c4:6b:0a:a6:df: 79:ec:ce:14:de:f6:24:c6:54:9e:bc:d3:5e:18:65: c7:02:82:1c:ed:f6:34:8a:c4:b5:ff:d5:76:41:8e: 13:6f:b1:08:6d:fe:37:57:1c:4e:ea:20:01:db:5d: dc:60:97:09:aa:75:5d:94:9a:77:78:a2:6d:e9:de: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:47:1D:5B:D4:8A:49:72:2C:AF:2A:42:E8:7D:98:F3:D8:9B:A0:EC X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:83:9c:7d:62:c7:41:22:13:99:b1:f8:29:15:3b:f1:fd:43: c1:6a:7c:13:3c:36:c8:74:a9:52:34:66:1f:15:16:5b:3b:c1: 84:c6:86:6a:47:a3:8f:5c:00:22:77:ae:e7:54:8d:c6:48:80: 65:b1:d5:d7:49:30:8c:08:75:8e:30:3f:c8:fa:fb:1f:0c:a8: 60:5a:50:b9:15:1a:54:6a:97:a4:6e:4d:dd:01:01:a3:4c:66: 18:89:45:4c:92:dc:a5:a3:00:72:3b:81:b0:65:8a:38:84:44: 24:10:da:dc:8d:c7:79:0e:55:af:2f:8d:54:5b:77:53:4e:82: b2:df:32:9f:69:84:54:db:20:04:b9:58:99:fb:6d:dc:29:6b: 9e:fd:5d:90:fc:83:72:38:8a:2b:99:9d:5d:3d:de:6a:72:dc: c8:a5:54:de:50:5d:31:f1:8c:fb:f4:7f:96:70:6c:44:dd:59: 7f:0e:c7:f1:40:f0:f3:50:f4:32:2d:fc:58:02:4a:e6:1a:21: 94:b5:51:5e:35:68:f0:66:34:e1:31:7c:5f:36:77:b9:73:d3: 1b:ad:ab:34:5a:db:af:10:30:4f:bc:c4:17:9b:6e:ec:47:7a: c7:c2:c3:20:25:84:25:af:ae:9a:a1:0d:00:94:4c:3f:0f:2b: a9:c6:6c:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwNzIyMjE1NjQwWhcNMjYwNzI5MjE1NjQwWjAYMRYwFAYD VQQDEw02YTYxM2M5OC04MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJGVdvuTwFQrSFhYUqogekEsPyXB2mJIQRhAb5w9jAIBOLWxVxRotD+mROWm etd7jRjSlxdFgr1XRI0RbGmGQzjLFCINjCaALlPODh08WKi7Xzi6POtHxNknUlWM 2Cp8dwFoFbJFCKyKDFwbUaRnffNGQkLPQEK+aNtdlGb7tcvVMHx31WzQLtPGzzQ3 mNT7vDCiLQ4sXNMm3L5KWi2yacDwln9zV/udgH48uUab2ZXIQz8gwud2/ofNu1wO xGsKpt957M4U3vYkxlSevNNeGGXHAoIc7fY0isS1/9V2QY4Tb7EIbf43VxxO6iAB 213cYJcJqnVdlJp3eKJt6d4bpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVHHVvU iklyLK8qQuh9mPPYm6DsMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4OcfWLHQSITmbH4KRU78f1DwWp8Ezw2yHSpUjRmHxUWWzvBhMaGakejj1wA Ineu51SNxkiAZbHV10kwjAh1jjA/yPr7HwyoYFpQuRUaVGqXpG5N3QEBo0xmGIlF TJLcpaMAcjuBsGWKOIREJBDa3I3HeQ5Vry+NVFt3U06Cst8yn2mEVNsgBLlYmftt 3Clrnv1dkPyDcjiKK5mdXT3eanLcyKVU3lBdMfGM+/R/lnBsRN1Zfw7H8UDw81D0 Mi38WAJK5hohlLVRXjVo8GY04TF8XzZ3uXPTG62rNFrbrxAwT7zEF5tu7Ed6x8LD ICWEJa+umqENAJRMPw8rqcZsqA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:02 2026 by rpki-client