$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft File: OxaIpfe3JKr754IKLGPZey6o5SI.mft (raw, json) Hash identifier: Rz0NuIkSHQCByg1onxd2PyQqvkgp2boiVlERu0J2/NE= Subject key identifier: D0:0B:AB:34:4C:D9:60:36:88:80:DD:B2:40:CD:3F:E3:68:F7:66:05 Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft Manifest number: 03F4 Signing time: Thu 23 Jul 2026 01:21:26 +0000 Manifest this update: Thu 23 Jul 2026 01:21:25 +0000 Manifest next update: Thu 30 Jul 2026 01:21:25 +0000 Files and hashes: 1: OxaIpfe3JKr754IKLGPZey6o5SI.crl (hash: pMmP3ZZf6e4FJV0up8HOPV8bcuWLN6/6V97UQ6NREeM=) 2: 2D613294CD7611EC83259862C4F9AE02.roa (hash: wIyzsjW5BRzmcndW2dr3tP73GPQanoCiUm2iVewXNHc=) 3: EF8CB49CD78F11EC91680D49C4F9AE02.roa (hash: hsXlGwRGvGPxUguulNF29dR42fVylbNtBhEHVdKJ8n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Validity Not Before: Jul 23 01:21:25 2026 GMT Not After : Jul 30 01:21:25 2026 GMT Subject: CN=6a616c96-4bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:c3:4b:c3:18:14:cb:7b:32:93:5f:9e:d6: 91:8f:84:43:02:f5:8c:17:45:7f:b4:e7:bc:fa:a8: 40:58:23:9f:f0:2d:83:0b:f2:7b:a7:e5:93:6c:a3: c3:85:0e:10:8b:0d:71:74:cb:e6:75:cc:a3:3a:3c: 86:28:05:09:19:7d:e5:b7:23:30:cf:ef:8a:68:91: c2:8a:06:f6:45:b2:ea:e2:bb:2a:30:74:bf:f9:13: 74:b0:0f:5f:33:d7:b4:dc:12:0f:c6:94:3d:5a:a8: 06:1f:a7:be:ac:76:ac:02:8a:fc:51:71:23:a9:dd: be:fd:c9:72:27:05:d5:c6:c8:5e:14:ca:83:41:40: 16:c5:af:ce:fc:ea:f7:88:84:76:93:b5:54:1b:79: eb:34:40:2e:69:57:1a:d0:1c:fd:fc:21:0b:81:d0: 91:01:78:46:72:c9:27:e9:ed:d9:37:97:96:72:c2: 13:39:2c:2e:10:df:8d:7d:13:d9:8c:3b:c8:eb:2b: f7:3b:67:8c:a1:5c:25:b4:90:ac:40:52:63:e6:f3: 0f:bf:96:09:0b:77:f3:96:84:60:f9:ee:fa:47:38: cb:a4:e0:88:5d:e7:95:5f:9a:06:ab:87:98:aa:10: 6f:e7:f7:73:76:0e:33:c7:43:d7:a8:91:16:e1:9a: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:AB:34:4C:D9:60:36:88:80:DD:B2:40:CD:3F:E3:68:F7:66:05 X509v3 Authority Key Identifier: keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c2:25:ce:b8:1c:18:81:81:53:05:0f:a2:28:de:e7:4e:9a: d1:4f:85:05:62:67:71:b7:85:9e:8e:3d:33:bb:10:b4:8b:b1: 96:29:d0:38:1b:34:ba:24:ec:fb:43:5d:59:b9:f3:2b:5d:71: ab:eb:c3:1b:93:93:ed:1f:7d:5c:40:cc:d2:5f:fd:3a:86:47: 4e:b5:37:94:75:da:f6:fa:cb:1e:43:43:45:c7:38:cf:8b:ed: 43:d9:af:76:6b:9b:1c:f6:ce:72:53:78:07:25:db:35:26:cb: 54:d3:46:d7:b6:aa:0d:ef:0a:d3:05:92:0c:cb:2d:91:47:0b: 92:d7:36:c6:5f:c7:15:ac:d5:73:01:6e:dd:4c:80:52:09:40: f3:bd:8c:9c:30:94:be:8a:db:4b:05:d2:c3:b8:0b:0b:e5:98: 3a:4b:c1:88:47:d0:9f:9f:a0:88:3f:78:ed:a7:bc:1f:83:11: c3:12:50:7f:04:a5:c3:ee:92:63:9d:db:d8:c1:3a:89:76:8a: 98:ab:00:5b:8b:9b:df:82:08:44:ab:89:6e:8c:c7:8c:dd:f1: d4:a5:33:ad:a0:3c:1d:21:1f:48:5e:02:b5:1b:a7:e4:f8:a5: d6:99:85:62:1b:88:d7:19:e3:9d:00:28:e4:25:22:df:d8:3d: 79:47:15:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC MkVBOEU1MjIwHhcNMjYwNzIzMDEyMTI1WhcNMjYwNzMwMDEyMTI1WjAYMRYwFAYD VQQDEw02YTYxNmM5Ni00YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5TDS8MYFMt7MpNfntaRj4RDAvWMF0V/tOe8+qhAWCOf8C2DC/J7p+WTbKPD hQ4Qiw1xdMvmdcyjOjyGKAUJGX3ltyMwz++KaJHCigb2RbLq4rsqMHS/+RN0sA9f M9e03BIPxpQ9WqgGH6e+rHasAor8UXEjqd2+/clyJwXVxsheFMqDQUAWxa/O/Or3 iIR2k7VUG3nrNEAuaVca0Bz9/CELgdCRAXhGcskn6e3ZN5eWcsITOSwuEN+NfRPZ jDvI6yv3O2eMoVwltJCsQFJj5vMPv5YJC3fzloRg+e76RzjLpOCIXeeVX5oGq4eY qhBv5/dzdg4zx0PXqJEW4ZpzDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNALqzRM 2WA2iIDdskDNP+No92YFMB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzJGQS9ENzI0NDU2MkNENzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pL cjc1NElLTEdQWmV5Nm81U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk8IlzrgcGIGBUwUPoije506a0U+FBWJncbeFno49M7sQtIuxlinQOBs0uiTs +0NdWbnzK11xq+vDG5OT7R99XEDM0l/9OoZHTrU3lHXa9vrLHkNDRcc4z4vtQ9mv dmubHPbOclN4ByXbNSbLVNNG17aqDe8K0wWSDMstkUcLktc2xl/HFazVcwFu3UyA UglA872MnDCUvorbSwXSw7gLC+WYOkvBiEfQn5+giD947ae8H4MRwxJQfwSlw+6S Y53b2ME6iXaKmKsAW4ub34IIRKuJbozHjN3x1KUzraA8HSEfSF4CtRun5Pil1pmF YhuI1xnjnQAo5CUi39g9eUcVZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:23:44 2026 by rpki-client