$ rpki-client -vvf rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft File: OhNw-SlQCbrO8HHvmlT91w_RV1o.mft (raw, json) Hash identifier: 4fiQO3ykA5EGPfD86F9iCtlIfaqquRZnIWv9hRhHenI= Subject key identifier: 4E:6F:5E:B4:CC:83:D3:F8:E2:65:B4:7C:08:B3:9A:F8:C4:1E:96:E4 Authority key identifier: 3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A Certificate issuer: /CN=A916B889/serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft Manifest number: 3F Signing time: Thu 23 Jul 2026 10:32:28 +0000 Manifest this update: Thu 23 Jul 2026 10:32:27 +0000 Manifest next update: Thu 30 Jul 2026 10:32:27 +0000 Files and hashes: 1: OhNw-SlQCbrO8HHvmlT91w_RV1o.crl (hash: myj50VI0zj7SmI+s/ef7jeaP7YS/cLMNRtL32fPcexM=) 2: DD9D275A272A11F1AB1203E5AA833773.roa (hash: anG8mjPCe+gcYm3kp5C5iVeJAFEjW4WqpjQcSNgoVCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B889, serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Validity Not Before: Jul 23 10:32:27 2026 GMT Not After : Jul 30 10:32:27 2026 GMT Subject: CN=6a61edbc-e56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:8c:bb:31:c3:d2:1e:73:38:cc:90:40:12: 2e:51:34:52:1c:3b:e1:19:c7:ae:a4:00:23:31:9a: 2e:78:3c:f7:55:63:be:10:b4:0a:d6:22:4f:38:d5: 1a:74:ae:04:9e:30:d3:69:e5:57:18:79:2a:2b:3d: 4d:91:26:43:12:73:22:30:52:f2:23:cb:94:12:0a: ea:c8:9d:c7:e2:d1:4b:ec:95:c1:5b:77:17:81:d9: c4:97:13:24:ec:ed:e6:89:66:96:c1:0d:63:d8:61: c5:16:83:ad:5f:e1:07:f7:09:15:85:5b:af:ff:91: a7:67:51:cf:2c:03:f7:ca:12:dd:b5:52:37:53:0e: 40:9a:b9:f3:af:41:42:d6:b2:c9:58:04:b5:11:95: d2:b7:7b:0a:f5:e6:9e:b7:7c:b9:4a:5d:6e:d7:ca: a3:42:4a:bd:8c:c6:c2:63:e2:db:73:6d:64:bc:18: 04:21:49:22:b0:a6:ba:18:98:c9:5d:4b:4b:9e:d1: df:94:f0:8e:c3:b9:c4:f9:bb:81:fc:ba:f8:5e:ef: 68:38:a1:05:f3:0b:10:e6:17:35:62:1e:7d:6f:0e: 61:8e:5d:d7:14:ac:dd:03:76:87:d6:86:05:2e:36: fd:e0:66:6c:a5:24:96:22:0a:2c:ce:9e:59:37:39: 9f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:5E:B4:CC:83:D3:F8:E2:65:B4:7C:08:B3:9A:F8:C4:1E:96:E4 X509v3 Authority Key Identifier: keyid:3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:76:0e:69:99:65:a6:d3:1e:11:54:57:f5:48:dc:bb:5d:cf: f6:90:b0:2e:83:6d:cd:71:7d:09:26:d0:aa:66:6b:63:9f:84: 13:a2:be:ef:a3:1d:bd:14:4e:f5:ec:d6:28:83:5f:99:54:12: cc:87:0a:bc:12:bb:9f:dd:33:4e:96:65:a0:78:cd:b2:ca:ab: 83:52:a7:82:2f:f0:df:20:92:98:13:9f:89:33:84:69:1a:c9: 82:44:f7:d4:31:97:76:13:77:ef:1e:13:59:c8:04:7e:e0:09: b4:b6:d5:f3:ac:bb:8f:c5:e2:05:df:f5:cd:f7:95:9a:1d:e1: 8b:30:f2:30:4c:ad:a6:62:59:ca:f5:e2:33:c6:cf:6f:19:e3: b5:d6:47:f2:25:a5:e9:f9:93:a7:82:8f:8a:ce:0d:c9:ed:fc: f2:f6:ec:8f:96:0a:a0:d8:10:4c:84:04:5c:22:a0:55:67:71: 39:ad:37:07:01:d9:5b:35:a4:c9:bb:0d:f6:5c:24:3d:7d:30: cb:bc:4b:17:6a:76:88:92:5c:bf:f0:47:42:48:ce:96:89:19: bf:04:ea:56:a7:e1:ec:20:c6:ad:64:fb:14:20:5b:a0:17:87: 51:bf:c9:80:fe:7c:19:48:05:93:eb:69:2e:c2:42:c3:87:45: 01:49:07:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjg4OTExMC8GA1UEBRMoM0ExMzcwRjkyOTUwMDlCQUNFRjA3MUVGOUE1NEZERDcw RkQxNTc1QTAeFw0yNjA3MjMxMDMyMjdaFw0yNjA3MzAxMDMyMjdaMBgxFjAUBgNV BAMTDTZhNjFlZGJjLWU1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiSIy7McPSHnM4zJBAEi5RNFIcO+EZx66kACMxmi54PPdVY74QtArWIk841Rp0 rgSeMNNp5VcYeSorPU2RJkMScyIwUvIjy5QSCurIncfi0UvslcFbdxeB2cSXEyTs 7eaJZpbBDWPYYcUWg61f4Qf3CRWFW6//kadnUc8sA/fKEt21UjdTDkCaufOvQULW sslYBLURldK3ewr15p63fLlKXW7XyqNCSr2MxsJj4ttzbWS8GAQhSSKwproYmMld S0ue0d+U8I7DucT5u4H8uvhe72g4oQXzCxDmFzViHn1vDmGOXdcUrN0DdofWhgUu Nv3gZmylJJYiCizOnlk3OZ+tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTm9etMyD 0/jiZbR8CLOa+MQeluQwHwYDVR0jBBgwFoAUOhNw+SlQCbrO8HHvmlT91w/RV1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODg5LzlBQjA3QTNBMjcy NzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2JyTzhISHZtbFQ5MXdfUlYx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hOdy1TbFFDYnJPOEhIdm1sVDkxd19SVjFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC ODg5LzlBQjA3QTNBMjcyNzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2Jy TzhISHZtbFQ5MXdfUlYxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXdg5pmWWm0x4RVFf1SNy7Xc/2kLAug23NcX0JJtCqZmtjn4QTor7vox29FE71 7NYog1+ZVBLMhwq8Eruf3TNOlmWgeM2yyquDUqeCL/DfIJKYE5+JM4RpGsmCRPfU MZd2E3fvHhNZyAR+4Am0ttXzrLuPxeIF3/XN95WaHeGLMPIwTK2mYlnK9eIzxs9v GeO11kfyJaXp+ZOngo+Kzg3J7fzy9uyPlgqg2BBMhARcIqBVZ3E5rTcHAdlbNaTJ uw32XCQ9fTDLvEsXanaIkly/8EdCSM6WiRm/BOpWp+HsIMatZPsUIFugF4dRv8mA /nwZSAWT62kuwkLDh0UBSQfo -----END CERTIFICATE-----Generated at Fri Jul 24 11:52:49 2026 by rpki-client