$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: bd3TsfzUIQs9UKTDrVAgC0+ndR0Vu3TvlLLVPuG94AQ= Subject key identifier: 49:E7:A9:63:F3:D7:BB:CA:89:45:DE:07:F9:82:EE:C1:60:30:CC:EC Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0ABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 0AA2 Signing time: Wed 22 Jul 2026 22:35:30 +0000 Manifest this update: Wed 22 Jul 2026 22:35:30 +0000 Manifest next update: Wed 29 Jul 2026 22:35:30 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: KWkLI6ZZuAgOFQwaTkq3wVo8rHXuoz+9/w8LdRBBqzU=) 2: D65601C8861C11F188AD997381A30FBC.roa (hash: WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=) 3: 6FD03784861C11F18E80495A81A30FBC.roa (hash: +OaHRdor7FrSH8stlmfhFUun2yan7PWVuqWKNlAkwUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Jul 22 22:35:30 2026 GMT Not After : Jul 29 22:35:30 2026 GMT Subject: CN=6a6145b2-c27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:57:f1:52:28:24:c3:69:42:d7:f0:b8:16: 13:b9:34:9f:d6:b8:36:43:fc:02:56:79:44:b5:b5: 1a:b0:c0:24:ed:73:a4:c8:93:7c:ff:17:3c:dc:a0: a6:93:3b:4c:52:84:bc:ac:fd:57:e4:ef:8c:27:26: 15:29:4d:78:21:36:c9:11:99:ab:09:da:db:c3:9c: 36:73:06:de:34:b7:81:e9:66:a7:74:6a:62:6a:ef: 56:43:54:25:51:b5:c7:35:f1:c2:d3:08:4d:68:90: b8:41:ed:a4:91:d2:ba:0d:c7:7e:46:5a:4a:6b:2f: f9:08:3d:63:f3:f5:2e:1b:14:a7:09:7f:62:e7:c3: bb:2a:96:7d:b4:30:9c:ca:fd:06:5f:62:7c:0f:26: aa:67:a6:52:4b:3b:04:85:93:72:c1:86:89:22:21: 61:42:bb:ae:b4:5f:79:ec:c8:08:d9:be:fb:93:70: c4:44:2a:78:67:64:b7:65:f0:80:d8:7f:3d:54:38: b9:a4:d3:9a:7b:48:7b:16:12:fe:d7:be:e3:63:d6: 73:38:63:7f:dd:a1:be:44:57:6f:f3:7d:7a:91:a3: 44:0c:6b:43:6b:07:c6:46:72:e5:b8:da:7c:4c:ee: 31:de:a8:a3:88:4a:48:3a:5d:52:c6:d9:3d:ad:82: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E7:A9:63:F3:D7:BB:CA:89:45:DE:07:F9:82:EE:C1:60:30:CC:EC X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:83:95:aa:d4:5e:44:ba:06:6f:64:aa:d1:4c:d5:8f:d0:87: e7:e6:f2:1e:0b:e6:18:f1:2e:41:05:cb:49:10:82:ec:cc:1f: af:c7:72:58:e5:f3:68:6e:8a:a8:92:8c:0b:85:2a:97:1d:3d: ac:67:c7:e3:ab:d8:46:6c:85:12:60:8c:6b:b5:b1:40:2c:59: 15:9a:8a:f6:d6:fb:62:54:a8:d4:f0:a0:50:b8:f7:89:f6:c3: 49:ca:c2:10:43:d8:9e:25:56:80:35:a5:7f:4a:c9:42:74:1c: 9d:54:ee:46:76:71:fb:21:59:6a:53:7b:a6:cb:fb:a9:9c:71: c7:a0:df:c1:32:e2:09:8b:6b:26:5d:5b:86:15:22:91:83:9e: ca:ec:ed:6e:9b:6a:d2:36:d2:8d:a2:0a:39:a4:14:57:7f:95: 5d:bd:84:f5:ed:36:71:6e:4e:e8:bc:ba:10:93:da:40:06:09: 8d:ef:c8:49:00:e0:44:0a:ef:c4:42:de:06:a3:8f:2e:a0:61: e2:d2:6e:73:11:d5:4a:95:ef:ca:c3:91:7f:3b:96:a3:e3:f8: 01:b0:d7:0f:28:c7:0a:71:fc:5b:93:d3:13:12:b6:82:19:73: be:4a:ad:74:04:3b:de:bb:4e:db:be:83:3a:b5:5d:4c:04:15: 86:d4:ee:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjYwNzIyMjIzNTMwWhcNMjYwNzI5MjIzNTMwWjAYMRYwFAYD VQQDEw02YTYxNDViMi1jMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApypX8VIoJMNpQtfwuBYTuTSf1rg2Q/wCVnlEtbUasMAk7XOkyJN8/xc83KCm kztMUoS8rP1X5O+MJyYVKU14ITbJEZmrCdrbw5w2cwbeNLeB6WandGpiau9WQ1Ql UbXHNfHC0whNaJC4Qe2kkdK6Dcd+RlpKay/5CD1j8/UuGxSnCX9i58O7KpZ9tDCc yv0GX2J8DyaqZ6ZSSzsEhZNywYaJIiFhQruutF957MgI2b77k3DERCp4Z2S3ZfCA 2H89VDi5pNOae0h7FhL+177jY9ZzOGN/3aG+RFdv8316kaNEDGtDawfGRnLluNp8 TO4x3qijiEpIOl1Sxtk9rYKypQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnnqWPz 17vKiUXeB/mC7sFgMMzsMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfIOVqtReRLoGb2Sq0UzVj9CH5+byHgvmGPEuQQXLSRCC7Mwfr8dyWOXzaG6K qJKMC4Uqlx09rGfH46vYRmyFEmCMa7WxQCxZFZqK9tb7YlSo1PCgULj3ifbDScrC EEPYniVWgDWlf0rJQnQcnVTuRnZx+yFZalN7psv7qZxxx6DfwTLiCYtrJl1bhhUi kYOeyuztbptq0jbSjaIKOaQUV3+VXb2E9e02cW5O6Ly6EJPaQAYJje/ISQDgRArv xELeBqOPLqBh4tJucxHVSpXvysORfzuWo+P4AbDXDyjHCnH8W5PTExK2ghlzvkqt dAQ73rtO276DOrVdTAQVhtTufg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:06:46 2026 by rpki-client