$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft File: oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json) Hash identifier: HwTzRBiqx14uvfx40ugxBSrrEIxzCaIPewF/NPOvEPc= Subject key identifier: FB:0F:02:56:7F:6D:00:7F:66:88:94:7C:E8:45:DB:36:2E:55:FF:1D Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2 Certificate issuer: /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft Manifest number: 1D Signing time: Thu 23 Jul 2026 11:03:43 +0000 Manifest this update: Thu 23 Jul 2026 11:03:43 +0000 Manifest next update: Thu 30 Jul 2026 11:03:43 +0000 Files and hashes: 1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: rCN1bKmYP84oxSLTS8JGYDPQz3Ed1jU1O2/MKHPHoJU=) 2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2 Validity Not Before: Jul 23 11:03:43 2026 GMT Not After : Jul 30 11:03:43 2026 GMT Subject: CN=6a61f50f-b95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:bf:dc:7c:7e:01:40:e1:eb:e9:22:dd:95: b9:24:6f:85:d3:d2:e9:85:f6:4e:4c:dc:71:47:81: 6a:2a:37:17:99:4f:1e:a8:35:da:9a:d1:ff:c6:42: eb:2a:df:1a:eb:e7:9e:04:90:ca:ca:5c:4d:b2:1f: 70:2f:7c:74:1f:ec:cc:bd:e0:ac:16:41:9f:34:98: d0:0a:93:36:ec:99:9c:1a:6d:6d:8b:7b:a9:84:d9: 21:b0:1d:4a:14:c2:c7:d0:13:bf:6c:6a:64:b3:fb: 50:51:6d:d5:ae:1e:01:b1:2b:47:8f:53:7a:47:10: 3e:aa:3c:5c:ec:71:b8:84:16:4e:5a:96:87:c3:1c: 33:30:f7:2b:5c:0e:9f:20:ef:07:9b:d2:48:ce:6b: a5:5e:1c:fc:9c:66:c2:ba:88:15:0a:4e:bf:80:24: 25:b6:21:a5:56:f2:88:cb:b3:66:56:fd:e7:43:09: 18:cb:98:e0:74:a3:50:73:f6:03:ef:6c:cb:ac:02: 5f:93:4d:1c:77:90:2e:40:f1:3c:5b:2f:3c:d0:d5: a8:ca:d1:ed:c6:db:1a:a3:4c:4a:0a:ff:c2:b6:41: db:d8:05:5a:ec:11:6d:61:ab:8e:78:5f:f7:f4:25: f1:1d:78:03:89:1a:54:30:ba:d1:29:6b:b5:24:ef: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:02:56:7F:6D:00:7F:66:88:94:7C:E8:45:DB:36:2E:55:FF:1D X509v3 Authority Key Identifier: keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:70:fe:11:fd:a9:4f:20:f7:17:85:9d:37:67:bd:51:ad:b7: fa:d4:84:b8:23:e4:8d:26:85:89:90:b9:ea:85:3e:aa:78:2a: f3:e7:8c:ad:9d:b2:8d:2f:1e:15:a8:43:51:1a:05:c4:ae:ab: 6c:46:44:6f:53:7f:c6:ef:e6:b1:ac:93:fc:44:41:c8:a9:1f: 44:08:5b:45:e4:fe:1a:6f:43:2c:3b:de:13:cf:b5:44:4b:ed: 63:ed:7e:ac:46:bb:8c:77:be:95:4f:a3:1b:68:e5:12:94:23: 74:96:45:e5:91:78:b1:07:d6:a4:38:94:b5:e6:2b:cd:4f:8a: 31:6c:79:d2:63:d5:08:8d:4e:38:18:66:7c:66:e4:a6:45:1f: 56:9a:0f:39:2a:79:26:56:0b:a6:52:1f:4e:71:67:09:05:75: 63:26:a1:92:91:eb:22:f6:b1:d2:94:00:64:da:05:57:92:0f: e3:13:0b:cc:b9:db:b6:e3:94:c3:63:0b:ac:4d:c6:39:e3:bf: e1:16:a1:29:98:5f:2d:a1:76:5d:0b:e3:36:6f:91:7b:ab:83: b7:10:c0:89:35:e3:92:ce:78:3b:cf:d2:dd:28:18:8b:ff:b3: 36:a8:d6:a0:3a:6d:88:1b:bf:d4:c3:72:d9:a4:6e:ff:f3:ff: a2:8b:75:63 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzZGMjExMC8GA1UEBRMoQTA5OUQwMkNEMEI3Rjk2ODg5NjQ2NTYzOUYxQUYwNkIz M0U0NkFBMjAeFw0yNjA3MjMxMTAzNDNaFw0yNjA3MzAxMTAzNDNaMBgxFjAUBgNV BAMTDTZhNjFmNTBmLWI5NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC48L/cfH4BQOHr6SLdlbkkb4XT0umF9k5M3HFHgWoqNxeZTx6oNdqa0f/GQusq 3xrr554EkMrKXE2yH3AvfHQf7My94KwWQZ80mNAKkzbsmZwabW2Le6mE2SGwHUoU wsfQE79samSz+1BRbdWuHgGxK0ePU3pHED6qPFzscbiEFk5alofDHDMw9ytcDp8g 7web0kjOa6VeHPycZsK6iBUKTr+AJCW2IaVW8ojLs2ZW/edDCRjLmOB0o1Bz9gPv bMusAl+TTRx3kC5A8TxbLzzQ1ajK0e3G2xqjTEoK/8K2QdvYBVrsEW1hq454X/f0 JfEdeAOJGlQwutEpa7Uk796lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+w8CVn9t AH9miJR86EXbNi5V/x0wHwYDVR0jBBgwFoAUoJnQLNC3+WiJZGVjnxrwazPkaqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNkYyLzVFMEY3QjNDNjNC NjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdpSlpHVmpueHJ3YXpQa2Fx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb0puUUxOQzMtV2lKWkdWam54cndhelBrYXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NkYyLzVFMEY3QjNDNjNCNjExRjE5OUNENTBFMDc4NDdBODg4L29KblFMTkMzLVdp SlpHVmpueHJ3YXpQa2FxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGcP4R/alPIPcXhZ03Z71Rrbf61IS4I+SNJoWJkLnqhT6qeCrz54ytnbKNLx4V qENRGgXErqtsRkRvU3/G7+axrJP8REHIqR9ECFtF5P4ab0MsO94Tz7VES+1j7X6s RruMd76VT6MbaOUSlCN0lkXlkXixB9akOJS15ivNT4oxbHnSY9UIjU44GGZ8ZuSm RR9Wmg85KnkmVgumUh9OcWcJBXVjJqGSkesi9rHSlABk2gVXkg/jEwvMudu245TD YwusTcY547/hFqEpmF8toXZdC+M2b5F7q4O3EMCJNeOSzng7z9LdKBiL/7M2qNag Om2IG7/Uw3LZpG7/8/+ii3Vj -----END CERTIFICATE-----Generated at Fri Jul 24 16:09:17 2026 by rpki-client