$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json) Hash identifier: oqo39MrDtBEE8P6h6X57j2+H65Q2xD4L9a/H49+ZIaw= Subject key identifier: 72:B0:FE:00:D8:5C:B5:F6:98:AF:F6:0B:7D:D8:C3:82:FB:64:4E:C6 Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft Manifest number: 4A Signing time: Thu 23 Jul 2026 10:22:08 +0000 Manifest this update: Thu 23 Jul 2026 10:22:07 +0000 Manifest next update: Thu 30 Jul 2026 10:22:07 +0000 Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: bKTdGtt9HWZtf2O4o1uyAp4oZmmSm0IcSuShO8y3FuM=) 2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Validity Not Before: Jul 23 10:22:07 2026 GMT Not After : Jul 30 10:22:07 2026 GMT Subject: CN=6a61eb50-67fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:47:0f:22:0c:e3:ca:e3:84:75:5c:2f:7d: 17:3d:74:61:cc:65:57:df:d9:4e:f8:0b:bd:f5:d3: 9e:27:59:6c:b5:ba:69:8d:b3:26:58:d9:bb:51:79: 22:06:6a:cd:c4:13:79:50:88:a5:58:96:fb:d3:29: c3:a1:17:78:2c:34:1f:9d:9f:4e:fe:43:62:95:f5: 60:54:7b:6b:b7:c0:e7:e3:89:c0:fc:3f:e6:52:fc: c3:ae:35:bd:b5:3c:fc:23:24:e5:79:37:ff:5b:83: 44:9c:7e:39:e6:e2:fe:76:96:cb:d9:cd:99:0b:f4: 29:06:65:bc:98:89:f1:9c:d8:71:71:ae:af:07:05: ff:4c:ac:a3:f0:de:8a:2b:07:79:aa:e1:24:02:24: 8b:f3:fa:0e:31:a8:85:5f:1f:05:c1:a0:e6:ea:c3: 92:90:59:be:51:9a:e5:56:9b:ba:45:e4:86:c4:c2: 9c:36:ae:58:74:27:1c:dc:12:7a:94:f0:07:5e:69: e5:68:bf:68:b1:e3:10:fe:66:75:3f:d0:bb:3e:29: df:47:d8:3b:03:d0:f8:c6:78:28:ec:19:48:99:c6: 4a:c2:eb:02:77:39:e3:40:d3:f1:b2:cc:46:9d:66: fe:62:cf:17:d9:1b:11:19:8a:f0:41:86:1d:5f:2e: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B0:FE:00:D8:5C:B5:F6:98:AF:F6:0B:7D:D8:C3:82:FB:64:4E:C6 X509v3 Authority Key Identifier: keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:27:64:b1:1f:97:3f:e2:54:1b:8b:44:5c:b7:ad:fc:c1:8e: e8:6a:94:73:88:8d:b6:f3:d2:06:61:00:a1:91:c2:f6:bd:4b: c9:a4:5a:35:e1:a9:5a:ef:06:f0:30:65:ba:92:82:93:ac:1c: 1e:20:56:cf:b1:be:e6:f2:22:f5:1d:35:16:86:18:08:e5:90: 31:1f:9e:c1:d9:14:35:f7:ad:96:8b:4f:30:b3:fa:0f:18:33: b1:30:e1:53:fd:13:67:2a:f7:02:25:0d:47:c0:d0:5d:59:b8: 82:9f:4f:b3:05:8e:48:d5:b2:cf:43:d6:cf:54:fd:73:9a:d7: 67:31:b8:37:83:71:92:e9:2b:06:45:32:fc:71:25:be:b6:d5: b0:1c:76:f3:a5:eb:56:48:1d:60:78:cc:1c:54:0e:8b:5e:5e: 13:e0:87:f9:b2:99:30:ae:f2:18:94:ab:09:3b:09:dd:86:2f: 79:c9:b0:9b:7b:c8:a1:26:9f:63:67:4b:b3:de:bf:2e:b0:48: f3:fd:5f:44:22:6d:b9:e0:dd:dd:33:97:97:15:12:2f:aa:89: b8:4f:d0:95:2d:dc:e7:db:87:09:30:6d:ba:77:9f:3a:99:a2: 31:54:d7:26:0f:d9:43:22:1d:fc:87:d3:6e:f5:3b:68:81:0c: 61:7e:06:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjVDNjExMC8GA1UEBRMoQTE2RjE4REMwMTQ0RjI1NjQwNTg4NUY0MEQ4RDkyMjdF QzFCN0IzNjAeFw0yNjA3MjMxMDIyMDdaFw0yNjA3MzAxMDIyMDdaMBgxFjAUBgNV BAMTDTZhNjFlYjUwLTY3ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZYUcPIgzjyuOEdVwvfRc9dGHMZVff2U74C731054nWWy1ummNsyZY2btReSIG as3EE3lQiKVYlvvTKcOhF3gsNB+dn07+Q2KV9WBUe2u3wOfjicD8P+ZS/MOuNb21 PPwjJOV5N/9bg0Scfjnm4v52lsvZzZkL9CkGZbyYifGc2HFxrq8HBf9MrKPw3oor B3mq4SQCJIvz+g4xqIVfHwXBoObqw5KQWb5RmuVWm7pF5IbEwpw2rlh0JxzcEnqU 8AdeaeVov2ix4xD+ZnU/0Ls+Kd9H2DsD0PjGeCjsGUiZxkrC6wJ3OeNA0/GyzEad Zv5izxfZGxEZivBBhh1fLqeTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcrD+ANhc tfaYr/YLfdjDgvtkTsYwHwYDVR0jBBgwFoAUoW8Y3AFE8lZAWIX0DY2SJ+wbezYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NUM2LzEyOTM1MEM2MTc4 RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxaQVdJWDBEWTJTSi13YmV6 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1c4WTNBRkU4bFpBV0lYMERZMlNKLXdiZXpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NUM2LzEyOTM1MEM2MTc4RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxa QVdJWDBEWTJTSi13YmV6WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHJ2SxH5c/4lQbi0Rct638wY7oapRziI2289IGYQChkcL2vUvJpFo14ala7wbw MGW6koKTrBweIFbPsb7m8iL1HTUWhhgI5ZAxH57B2RQ1962Wi08ws/oPGDOxMOFT /RNnKvcCJQ1HwNBdWbiCn0+zBY5I1bLPQ9bPVP1zmtdnMbg3g3GS6SsGRTL8cSW+ ttWwHHbzpetWSB1geMwcVA6LXl4T4If5spkwrvIYlKsJOwndhi95ybCbe8ihJp9j Z0uz3r8usEjz/V9EIm254N3dM5eXFRIvqom4T9CVLdzn24cJMG26d586maIxVNcm D9lDIh38h9Nu9TtogQxhfgbL -----END CERTIFICATE-----Generated at Fri Jul 24 00:15:31 2026 by rpki-client