$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: VL4zCsbXgnA0Pf1vkLBlBWoKREfsssVmjTgIfkMBNDU= Subject key identifier: 57:73:BB:9C:9C:E9:77:E6:19:A6:95:07:90:C0:1D:DC:27:6E:02:15 Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 09D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 09C1 Signing time: Wed 22 Jul 2026 20:21:28 +0000 Manifest this update: Wed 22 Jul 2026 20:21:28 +0000 Manifest next update: Wed 29 Jul 2026 20:21:28 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: cILnGLcucLmBKtroYhS4Mv+BusiS2/Bpzf0x8GQr7XY=) 2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: JxvxI6LJ6TE3o05TEr7Y6rv7xRaFRfn8yJoeJorzJAM=) 3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2514 (0x9d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Jul 22 20:21:28 2026 GMT Not After : Jul 29 20:21:28 2026 GMT Subject: CN=6a612648-c952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:e1:34:74:c6:ba:46:31:7f:77:3a:ec:a7: c5:4a:fa:51:f3:56:03:33:bf:d4:70:de:aa:b5:e6: b4:d6:fe:ea:3b:55:c1:94:1f:95:74:ce:6e:10:8a: 29:5c:f6:bd:9e:86:f4:1e:e4:9f:8e:7d:e6:40:56: 64:b1:5d:68:68:65:35:39:fa:02:92:ab:31:85:a2: 26:53:c8:5b:5c:b4:3a:51:f6:27:c3:4f:38:62:7a: f9:a3:9a:41:ed:95:95:94:4a:a9:6f:fe:a9:81:99: 7a:6f:57:d4:b3:ec:0f:3b:f8:74:f4:ac:50:de:d9: 33:e6:70:93:37:d9:ee:25:bf:63:92:de:19:94:2b: fd:9f:28:a7:ea:5b:51:b7:7a:67:63:e8:ab:5b:e8: ef:2c:1c:3d:86:1b:39:62:fe:48:47:d2:7a:6a:f3: 75:93:67:d2:21:bc:d8:96:83:11:23:ea:1e:93:1d: d2:dd:15:2f:b0:14:94:90:1f:ff:7e:34:4b:d2:0e: 9e:8b:9d:47:fe:18:42:71:67:93:ec:ca:45:ad:97: 0f:42:c0:23:74:92:cc:a0:98:6f:d5:f7:72:2a:9c: a7:3b:74:06:ba:9e:06:86:53:b7:08:bd:20:9f:ea: 05:2d:74:18:71:73:b5:98:0e:2c:b9:58:e5:a1:16: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:73:BB:9C:9C:E9:77:E6:19:A6:95:07:90:C0:1D:DC:27:6E:02:15 X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2c:d7:9e:b6:90:03:e5:a5:02:5b:e4:52:cd:27:ff:95:c1: 61:1c:aa:08:45:89:fe:43:f9:0f:b9:0b:e7:fb:55:97:cf:14: c1:15:c7:7d:ec:4b:f4:5d:4b:19:81:7c:0b:13:ea:ff:8c:9e: 69:b9:09:8d:05:8c:85:6f:47:0f:13:58:da:c0:a7:42:25:ae: df:4a:b0:1d:bf:d0:61:80:fe:79:a6:8e:a1:f6:32:97:90:f8: b6:d4:11:6f:49:2d:63:a1:dc:13:63:42:5e:3d:d9:6a:9e:af: 45:e0:75:e5:db:2d:c2:ac:f9:37:f3:ab:12:09:dd:be:ba:11: 24:df:59:de:1a:c9:25:e1:e9:51:08:a5:ac:26:95:cc:a7:5a: a2:ef:8e:3a:37:bb:6c:f8:2e:1c:e7:e1:24:8c:ae:83:b2:a7: 1c:d3:7f:a8:c7:0e:bf:20:d3:01:ca:ea:b0:dd:0b:3c:45:f9: 65:3e:c6:c8:da:7d:b7:e8:a8:9c:ba:21:30:ed:cc:d4:79:98: 41:db:88:41:6a:d8:a4:34:f3:96:6d:c5:e9:a9:bd:88:44:09: 7c:21:e4:b9:24:17:df:d9:2d:73:22:4f:cc:ef:b8:67:94:f3: 6c:ee:fd:ba:48:a9:d0:ab:c0:61:e5:a6:70:74:88:bf:c8:d8: 39:9d:7d:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjYwNzIyMjAyMTI4WhcNMjYwNzI5MjAyMTI4WjAYMRYwFAYD VQQDEw02YTYxMjY0OC1jOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud3hNHTGukYxf3c67KfFSvpR81YDM7/UcN6qtea01v7qO1XBlB+VdM5uEIop XPa9nob0HuSfjn3mQFZksV1oaGU1OfoCkqsxhaImU8hbXLQ6UfYnw084Ynr5o5pB 7ZWVlEqpb/6pgZl6b1fUs+wPO/h09KxQ3tkz5nCTN9nuJb9jkt4ZlCv9nyin6ltR t3pnY+irW+jvLBw9hhs5Yv5IR9J6avN1k2fSIbzYloMRI+oekx3S3RUvsBSUkB// fjRL0g6ei51H/hhCcWeT7MpFrZcPQsAjdJLMoJhv1fdyKpynO3QGup4GhlO3CL0g n+oFLXQYcXO1mA4suVjloRZ9sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdzu5yc 6XfmGaaVB5DAHdwnbgIVMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbizXnraQA+WlAlvkUs0n/5XBYRyqCEWJ/kP5D7kL5/tVl88UwRXHfexL9F1L GYF8CxPq/4yeabkJjQWMhW9HDxNY2sCnQiWu30qwHb/QYYD+eaaOofYyl5D4ttQR b0ktY6HcE2NCXj3Zap6vReB15dstwqz5N/OrEgndvroRJN9Z3hrJJeHpUQilrCaV zKdaou+OOje7bPguHOfhJIyug7KnHNN/qMcOvyDTAcrqsN0LPEX5ZT7GyNp9t+io nLohMO3M1HmYQduIQWrYpDTzlm3F6am9iEQJfCHkuSQX39ktcyJPzO+4Z5TzbO79 ukip0KvAYeWmcHSIv8jYOZ19hw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:07:27 2026 by rpki-client