$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft File: oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft (raw, json) Hash identifier: WQrnfcAde/IIyEwBdAiAdNfz8SORguZtRbT0nv3XDXo= Subject key identifier: 52:1D:2F:32:10:A4:36:5B:1F:5D:2F:F7:B8:78:66:7A:B6:87:7A:3F Authority key identifier: A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15 Certificate issuer: /CN=A91AB26A/serialNumber=A22F176C763B4DDED92655F1763C11763C62C215 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft Manifest number: 42 Signing time: Thu 23 Jul 2026 10:28:30 +0000 Manifest this update: Thu 23 Jul 2026 10:28:29 +0000 Manifest next update: Thu 30 Jul 2026 10:28:29 +0000 Files and hashes: 1: oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl (hash: 5rjA/2/9rb7o3G5pIL+CtyCwcWPVQNKVD5xNci54bz4=) 2: 138DFCCA233B11F1B97BCD11A8833773.roa (hash: m0UKXn0kIhDGQtzGm8h525ANZur9fKF0yfVFZjn0f38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB26A, serialNumber=A22F176C763B4DDED92655F1763C11763C62C215 Validity Not Before: Jul 23 10:28:29 2026 GMT Not After : Jul 30 10:28:29 2026 GMT Subject: CN=6a61eccd-5c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:76:f8:eb:6e:c3:8a:03:8a:4a:3f:28:d3: ae:eb:8b:cf:4d:4b:1f:a3:a2:b5:6a:25:f5:48:e5: f5:40:4a:6b:0d:d2:9f:16:bc:d2:7f:4a:03:5b:91: 31:67:96:b3:01:22:47:60:07:1c:ce:ab:7a:6f:11: c6:5c:9d:71:31:88:3e:b8:44:2b:57:14:51:02:ea: 59:70:16:2c:c3:4a:26:12:c7:db:82:1a:4f:83:de: 3c:54:91:fb:64:4a:0d:67:1a:5e:52:7e:b8:0a:6d: 8d:70:f0:31:6d:fe:f2:c0:2b:a4:6a:1a:73:18:01: 0a:7e:cf:1c:df:db:96:04:2d:fb:e7:15:c8:e7:8a: 5c:a1:ee:e2:b2:d4:b2:1e:fc:62:39:80:e3:8a:da: 04:35:77:bb:39:92:8f:ef:31:e8:db:56:71:f9:93: 5d:ca:2f:16:d0:dc:a0:2f:d8:d3:d2:e3:cb:d7:4f: 0d:9b:b8:6b:d1:be:45:22:da:58:bd:5b:89:60:e7: 3d:96:70:1e:82:ae:c2:7a:eb:aa:d6:0d:df:99:23: 58:f9:24:14:ba:6c:88:1c:81:29:f6:e4:3a:23:b3: 57:43:e3:34:7e:13:bd:08:fd:74:6e:c5:6e:8f:42: d8:27:e3:10:bb:c7:d5:be:6b:a3:0e:91:07:31:2f: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1D:2F:32:10:A4:36:5B:1F:5D:2F:F7:B8:78:66:7A:B6:87:7A:3F X509v3 Authority Key Identifier: keyid:A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:00:3c:ca:d4:af:c7:9a:07:62:33:dc:b6:7e:5c:b7:0e:3a: ec:a6:1e:26:eb:9e:a0:d3:7d:ab:bb:4f:5a:52:53:65:ee:b4: e9:f1:91:86:35:8c:8a:27:9c:5e:46:df:bc:9a:e0:3a:94:a1: d1:12:8b:93:ef:7a:07:97:65:6a:dd:2e:fd:7c:f9:2c:4d:b2: 6b:d6:42:54:5c:97:08:5a:62:87:51:f9:40:5c:61:34:76:f4: 2f:e1:c6:74:75:bc:89:34:68:da:26:91:5f:d1:99:7e:e1:25: 1d:d8:93:e7:1c:cc:66:c3:e1:57:80:31:40:95:1d:a7:25:db: a2:7d:9c:bd:96:54:a9:8d:44:62:66:06:ec:8e:1c:fa:bf:b8: 44:f7:91:80:8b:c7:a3:6f:0c:44:fb:f8:4f:e6:d2:7c:14:29: b4:a1:80:12:90:83:f1:4d:fb:4a:bd:42:35:77:10:2f:59:54: e2:3b:6a:9a:70:ff:50:fd:c3:0c:e3:ec:f0:c5:72:5d:5e:2e: ac:66:ab:fa:24:53:6b:85:0a:57:f8:7b:2c:a5:24:23:34:c4: 9d:4f:2a:a0:38:cf:86:dc:39:d2:55:7a:36:07:2e:13:9f:6d: 23:e0:f9:64:5c:40:e8:ea:fd:75:49:b3:42:55:52:8c:58:4d: e4:0b:32:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjI2QTExMC8GA1UEBRMoQTIyRjE3NkM3NjNCNERERUQ5MjY1NUYxNzYzQzExNzYz QzYyQzIxNTAeFw0yNjA3MjMxMDI4MjlaFw0yNjA3MzAxMDI4MjlaMBgxFjAUBgNV BAMTDTZhNjFlY2NkLTVjMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Xnb4627DigOKSj8o067ri89NSx+jorVqJfVI5fVASmsN0p8WvNJ/SgNbkTFn lrMBIkdgBxzOq3pvEcZcnXExiD64RCtXFFEC6llwFizDSiYSx9uCGk+D3jxUkftk Sg1nGl5SfrgKbY1w8DFt/vLAK6RqGnMYAQp+zxzf25YELfvnFcjnilyh7uKy1LIe /GI5gOOK2gQ1d7s5ko/vMejbVnH5k13KLxbQ3KAv2NPS48vXTw2buGvRvkUi2li9 W4lg5z2WcB6CrsJ666rWDd+ZI1j5JBS6bIgcgSn25Dojs1dD4zR+E70I/XRuxW6P Qtgn4xC7x9W+a6MOkQcxL/GdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUh0vMhCk NlsfXS/3uHhmeraHej8wHwYDVR0jBBgwFoAUoi8XbHY7Td7ZJlXxdjwRdjxiwhUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMjZBLzY0MTczRERBMjMy RTExRjE4NTM3QTc4MEEzODMzNzczL29pOFhiSFk3VGQ3WkpsWHhkandSZGp4aXdo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2k4WGJIWTdUZDdaSmxYeGRqd1Jkanhpd2hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MjZBLzY0MTczRERBMjMyRTExRjE4NTM3QTc4MEEzODMzNzczL29pOFhiSFk3VGQ3 WkpsWHhkandSZGp4aXdoVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDPADzK1K/HmgdiM9y2fly3Djrsph4m656g032ru09aUlNl7rTp8ZGGNYyKJ5xe Rt+8muA6lKHREouT73oHl2Vq3S79fPksTbJr1kJUXJcIWmKHUflAXGE0dvQv4cZ0 dbyJNGjaJpFf0Zl+4SUd2JPnHMxmw+FXgDFAlR2nJduifZy9llSpjURiZgbsjhz6 v7hE95GAi8ejbwxE+/hP5tJ8FCm0oYASkIPxTftKvUI1dxAvWVTiO2qacP9Q/cMM 4+zwxXJdXi6sZqv6JFNrhQpX+HsspSQjNMSdTyqgOM+G3DnSVXo2By4Tn20j4Plk XEDo6v11SbNCVVKMWE3kCzKp -----END CERTIFICATE-----Generated at Fri Jul 24 19:52:32 2026 by rpki-client