$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft File: O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft (raw, json) Hash identifier: nrsLSBqMUgeY7N8oXDNHwcSC5JFBITZBFsSlda7xEpg= Subject key identifier: 81:A7:B1:09:31:D6:A2:E7:06:73:D6:E8:94:B9:C2:9B:C2:12:53:C2 Authority key identifier: 3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 Certificate issuer: /CN=A91A3ED9/serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft Manifest number: 0C Signing time: Thu 23 Jul 2026 11:13:52 +0000 Manifest this update: Thu 23 Jul 2026 11:13:52 +0000 Manifest next update: Thu 30 Jul 2026 11:13:52 +0000 Files and hashes: 1: O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl (hash: 4rpZ09/1TD1j8p9pp3t42zmb+8XjWb1Byg4HNfhpxSA=) 2: BFA8061876AB11F1AAE01A3C6EA30FBC.roa (hash: 9EIg/lWcSvk9v2gRzJROOuHZdpxkm+Aa8Ro0+T1ph54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3ED9, serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Validity Not Before: Jul 23 11:13:52 2026 GMT Not After : Jul 30 11:13:52 2026 GMT Subject: CN=6a61f770-dae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:51:4f:e0:c1:c3:42:31:22:03:1f:0f:61: 1f:4d:b4:ef:83:6f:52:88:5c:8b:73:b5:35:eb:e3: 2c:ef:e9:0d:5d:41:f5:08:fb:cf:59:43:80:f3:50: 7a:4b:b0:e4:db:ff:9b:01:69:6b:bc:87:61:24:40: b5:58:97:4c:64:a2:ac:6b:cd:78:bc:37:39:77:2f: 2c:d6:17:f3:6b:70:00:3d:a3:91:ea:b3:85:0e:89: a0:9d:8a:7c:86:47:a0:5d:92:ca:26:55:cc:e7:2c: 7f:5a:18:80:34:1a:83:13:52:cc:ae:b2:44:7a:09: e3:8f:74:a2:f2:e3:7d:e1:00:5e:69:cd:5b:a0:9c: a9:7d:50:30:5c:2c:f3:95:21:23:d8:ce:68:8e:2a: 6e:cb:49:c8:04:7c:92:8a:77:ed:37:85:04:8e:78: 93:f4:34:0a:00:7c:b9:3a:59:81:f3:81:d6:81:d2: c1:2b:e7:0f:eb:0e:39:e9:20:5f:f6:de:7d:be:a5: d6:f7:7a:99:49:9c:90:ed:fb:c7:d8:9f:ad:3c:c1: 16:bb:36:8e:f3:6a:56:91:7e:ba:96:87:5d:19:1d: e7:36:f6:2f:f6:14:f5:fe:df:b9:e5:a1:17:23:94: f0:d0:c6:4e:e1:d1:c4:f7:43:de:b1:ea:16:ea:34: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A7:B1:09:31:D6:A2:E7:06:73:D6:E8:94:B9:C2:9B:C2:12:53:C2 X509v3 Authority Key Identifier: keyid:3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:98:ba:02:ea:1b:e3:c2:4c:1b:3a:db:f3:3e:e8:ed:21:c2: 4d:9d:9d:13:ba:95:27:b2:58:e0:ee:3e:c6:43:2b:57:1a:b1: 21:01:03:54:8a:b3:3f:79:39:b4:03:45:c1:0b:33:d7:b6:14: 07:ee:ad:65:1d:cc:f5:d6:cf:92:1e:6e:50:14:6e:db:75:a4: c2:38:e7:55:f9:3f:57:ce:59:43:a0:ea:0e:3f:40:e1:e1:d1: 27:e7:80:58:2b:c4:49:f6:60:27:d2:79:84:d1:f7:72:b5:c0: bc:27:e6:77:71:34:f9:5a:04:ea:f8:05:51:34:c3:f2:3b:1e: 57:73:79:eb:e2:5a:9e:6f:47:25:ef:a8:da:f9:a5:38:6f:20: 28:56:f6:a0:d7:92:9b:31:4a:c9:3d:99:07:71:fc:88:3e:0b: cc:57:ce:58:13:34:74:ee:e9:84:a4:46:51:6d:a5:1e:ce:d1: 05:6e:5d:8a:31:19:5a:21:12:5a:64:f5:84:ff:af:30:42:10: c6:f7:f7:7b:66:25:5e:a6:6a:f7:39:ab:41:a1:14:04:09:44: 15:33:f9:bb:33:b9:8b:75:c6:82:fe:62:7f:ee:8c:f2:3b:94: 86:4b:a7:dd:4c:6e:75:93:4a:96:a7:4e:08:d8:e6:e3:55:3a: 40:74:f0:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0VEOTExMC8GA1UEBRMoM0I2M0UxRTRGMTFGMEY5Nzk1ODM2MTAxRUE2NkU2MkE1 OUZDNkVGODAeFw0yNjA3MjMxMTEzNTJaFw0yNjA3MzAxMTEzNTJaMBgxFjAUBgNV BAMTDTZhNjFmNzcwLWRhZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXCVFP4MHDQjEiAx8PYR9NtO+Db1KIXItztTXr4yzv6Q1dQfUI+89ZQ4DzUHpL sOTb/5sBaWu8h2EkQLVYl0xkoqxrzXi8Nzl3LyzWF/NrcAA9o5Hqs4UOiaCdinyG R6BdksomVcznLH9aGIA0GoMTUsyuskR6CeOPdKLy433hAF5pzVugnKl9UDBcLPOV ISPYzmiOKm7LScgEfJKKd+03hQSOeJP0NAoAfLk6WYHzgdaB0sEr5w/rDjnpIF/2 3n2+pdb3eplJnJDt+8fYn608wRa7No7zalaRfrqWh10ZHec29i/2FPX+37nloRcj lPDQxk7h0cT3Q96x6hbqNBU7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgaexCTHW oucGc9bolLnCm8ISU8IwHwYDVR0jBBgwFoAUO2Ph5PEfD5eVg2EB6mbmKln8bvgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzRUQ5LzE5MjZDQTdDNzZB NjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVlVmcyRUI2bWJtS2xuOGJ2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzJQaDVQRWZENWVWZzJFQjZtYm1LbG44YnZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz RUQ5LzE5MjZDQTdDNzZBNjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVl VmcyRUI2bWJtS2xuOGJ2Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+mLoC6hvjwkwbOtvzPujtIcJNnZ0TupUnsljg7j7GQytXGrEhAQNUirM/eTm0 A0XBCzPXthQH7q1lHcz11s+SHm5QFG7bdaTCOOdV+T9XzllDoOoOP0Dh4dEn54BY K8RJ9mAn0nmE0fdytcC8J+Z3cTT5WgTq+AVRNMPyOx5Xc3nr4lqeb0cl76ja+aU4 byAoVvag15KbMUrJPZkHcfyIPgvMV85YEzR07umEpEZRbaUeztEFbl2KMRlaIRJa ZPWE/68wQhDG9/d7ZiVepmr3OatBoRQECUQVM/m7M7mLdcaC/mJ/7ozyO5SGS6fd TG51k0qWp04I2ObjVTpAdPDy -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:58 2026 by rpki-client