$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json) Hash identifier: EkYTI5MZ7qYt8TUnFrkmhYnSiK2Sno7d8PIiev2dMdo= Subject key identifier: D4:B8:EA:83:3C:A8:A1:9E:88:C1:54:50:63:8B:B8:52:14:CA:05:A3 Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5 Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft Manifest number: 0137 Signing time: Thu 23 Jul 2026 07:25:00 +0000 Manifest this update: Thu 23 Jul 2026 07:25:00 +0000 Manifest next update: Thu 30 Jul 2026 07:25:00 +0000 Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: b7P2xbFMyCEetDTqZ9wBWPeuPH5CCCDRqSrfvViQ83g=) 2: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=) 3: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: 8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5 Validity Not Before: Jul 23 07:25:00 2026 GMT Not After : Jul 30 07:25:00 2026 GMT Subject: CN=6a61c1cc-db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:de:7b:c0:e9:3b:b7:05:9e:48:b1:c8:5a: 3e:14:c3:2a:0c:15:f9:2c:34:39:a5:8f:27:c6:11: c1:03:a9:24:af:a1:2e:27:25:4d:7a:d6:14:07:05: dc:de:26:a6:fe:9e:d6:73:86:44:6b:4b:18:d9:d0: af:19:67:76:66:7f:63:1a:85:ac:b4:cb:b5:fc:08: 35:3d:89:5c:c4:f8:59:82:b0:88:b7:27:7c:b9:26: 5f:05:78:a5:e4:68:1f:0c:4d:8b:db:07:d0:9f:4d: 7f:85:8a:b5:b9:3b:dc:fc:b2:f5:7e:6e:ea:de:46: 74:1b:a0:28:88:75:08:ee:67:c1:e7:82:5c:3d:67: b0:ec:3c:01:68:fb:3b:21:4d:f1:88:db:09:f0:67: 0d:5e:6e:dd:85:33:10:1a:75:2f:3b:02:75:bf:74: 5d:8d:46:7c:9a:a9:5f:73:68:6b:a0:34:f2:72:a0: bf:e0:a9:53:ba:30:91:cd:b5:97:12:c0:60:b7:63: 4c:b9:4a:82:fe:14:ce:21:09:38:21:e8:5a:88:b5: 22:65:ff:2f:a9:4a:ce:71:40:c7:79:92:85:81:75: 38:4b:e8:f2:70:47:6b:f3:f9:b6:05:d6:1d:d4:dd: 86:57:35:a8:b8:53:a2:71:0e:e8:e3:46:29:b4:24: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B8:EA:83:3C:A8:A1:9E:88:C1:54:50:63:8B:B8:52:14:CA:05:A3 X509v3 Authority Key Identifier: keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:95:fc:2a:b5:56:0a:12:88:ec:43:ef:82:97:4c:c8:ac:9d: 30:1a:52:67:bb:0c:40:7b:54:c2:34:14:a7:23:ce:cc:dd:29: 91:6b:69:6a:b6:11:f6:47:93:e6:15:af:45:fd:5a:76:cd:85: b2:87:2a:7b:26:19:35:77:5e:b0:ae:5d:fd:86:6a:17:84:91: b2:e7:98:5d:68:8f:2d:ed:15:1f:17:d2:3e:e4:be:69:d6:bf: 8c:db:e9:cd:a1:7f:23:f7:4c:ee:1d:3a:6a:34:78:2f:9e:c6: 8c:ba:a8:ab:ec:e3:e9:30:fa:30:43:f7:67:b8:f2:c9:2f:04: 47:13:dc:91:d6:5d:a8:46:29:5f:1b:e3:f2:ad:a3:3e:44:f9: 56:c4:a8:4c:2a:60:f5:df:48:81:68:69:36:e5:e5:8d:41:74: d8:27:72:da:43:47:20:2c:03:f1:a3:62:84:b7:28:64:3d:d2: e6:57:a2:a8:f8:7f:6d:21:43:82:ef:5b:0e:50:42:4f:5d:fc: 2c:8f:b7:fb:78:54:b2:af:2c:57:5f:18:01:a1:f7:ca:57:de: 41:0a:e2:ed:fa:b4:bc:55:61:db:5a:bd:38:47:62:f7:54:e9: 56:e5:28:3b:d7:63:c4:64:48:c6:32:a3:44:af:f7:18:01:01: 79:69:e3:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyQjYxMTAvBgNVBAUTKDM5MEEzODM3QUJBNjkxMkEyQ0YyOUU2MTBEQTQ5NTU1 REYyQzZGQTUwHhcNMjYwNzIzMDcyNTAwWhcNMjYwNzMwMDcyNTAwWjAYMRYwFAYD VQQDEw02YTYxYzFjYy1kYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02Lee8DpO7cFnkixyFo+FMMqDBX5LDQ5pY8nxhHBA6kkr6EuJyVNetYUBwXc 3iam/p7Wc4ZEa0sY2dCvGWd2Zn9jGoWstMu1/Ag1PYlcxPhZgrCItyd8uSZfBXil 5GgfDE2L2wfQn01/hYq1uTvc/LL1fm7q3kZ0G6AoiHUI7mfB54JcPWew7DwBaPs7 IU3xiNsJ8GcNXm7dhTMQGnUvOwJ1v3RdjUZ8mqlfc2hroDTycqC/4KlTujCRzbWX EsBgt2NMuUqC/hTOIQk4IehaiLUiZf8vqUrOcUDHeZKFgXU4S+jycEdr8/m2BdYd 1N2GVzWouFOicQ7o40YptCRZ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS46oM8 qKGeiMFUUGOLuFIUygWjMB8GA1UdIwQYMBaAFDkKODerppEqLPKeYQ2klVXfLG+l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9ERTdFMzIxRUNC NTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtTb3M4cDVoRGFTVlZkOHNi NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09RbzRONnVta1NvczhwNWhEYVNWVmQ4c2I2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJCNi9ERTdFMzIxRUNCNTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtT b3M4cDVoRGFTVlZkOHNiNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvZX8KrVWChKI7EPvgpdMyKydMBpSZ7sMQHtUwjQUpyPOzN0pkWtparYR9keT 5hWvRf1ads2FsocqeyYZNXdesK5d/YZqF4SRsueYXWiPLe0VHxfSPuS+ada/jNvp zaF/I/dM7h06ajR4L57GjLqoq+zj6TD6MEP3Z7jyyS8ERxPckdZdqEYpXxvj8q2j PkT5VsSoTCpg9d9IgWhpNuXljUF02Cdy2kNHICwD8aNihLcoZD3S5leiqPh/bSFD gu9bDlBCT138LI+3+3hUsq8sV18YAaH3ylfeQQri7fq0vFVh21q9OEdi91TpVuUo O9djxGRIxjKjRK/3GAEBeWnjGQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:01:59 2026 by rpki-client