$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json) Hash identifier: TQNVHf68n7rfGHwWF/iPxsC4zYoqSBLI5zCmoYcvbsI= Subject key identifier: CB:A8:27:1C:A5:19:61:A0:76:0D:AC:BB:CC:17:72:F3:34:13:C7:76 Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft Manifest number: 01F3 Signing time: Thu 23 Jul 2026 04:43:17 +0000 Manifest this update: Thu 23 Jul 2026 04:43:17 +0000 Manifest next update: Thu 30 Jul 2026 04:43:17 +0000 Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: 2RfN17/6aWObZYz9i3wQEPmMsGD/3lhxoo3RQNKW/SY=) 2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Jul 23 04:43:17 2026 GMT Not After : Jul 30 04:43:17 2026 GMT Subject: CN=6a619be5-bf69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:17:f4:45:97:79:52:6f:49:a5:0b:ae:37:5f: 18:ec:62:7d:6d:f7:22:3d:d1:d0:f2:18:3b:95:d8: 10:13:1f:9a:6a:2c:46:00:10:71:ca:99:91:5b:93: 45:1e:04:7a:ad:7f:1e:f0:a7:69:01:50:a7:e2:0c: f8:cf:8b:0d:b5:8e:05:a9:29:cc:9f:86:a4:30:a6: 59:a9:1b:8b:6b:06:86:0b:d8:f1:5e:ec:7a:cc:bc: 03:14:59:21:02:c0:89:04:55:35:22:ba:fd:07:4e: 64:95:42:fb:49:41:b4:d2:da:75:2c:ed:af:9b:b2: 7a:13:1e:50:59:49:03:4f:68:eb:9f:e9:49:52:38: e3:88:79:98:15:1a:a9:0e:fa:4e:d3:e3:e6:06:12: d3:f2:e6:86:90:2c:d3:7e:53:14:55:2c:f8:44:28: 17:ef:32:83:db:29:e5:d1:c3:74:9b:d1:69:b3:78: 5b:16:b0:f3:91:07:bb:17:e3:0d:a9:bd:b4:57:6d: 65:28:77:9a:67:57:37:4c:c2:72:5b:f6:38:99:a4: 22:79:10:4f:19:b1:48:f3:09:01:3e:d7:b9:8b:11: 7a:07:bf:a1:1c:9e:5a:19:e8:ea:63:4c:15:d2:b7: c4:23:bf:46:1c:04:8d:bf:55:ed:fd:15:66:ca:82: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A8:27:1C:A5:19:61:A0:76:0D:AC:BB:CC:17:72:F3:34:13:C7:76 X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:92:0d:f9:7e:bc:7e:b8:ab:1f:7b:33:82:4b:15:3d:38:a5: d8:c4:62:b3:08:00:e6:73:55:6b:ce:06:05:08:c1:b2:66:22: 09:d3:ae:05:76:0b:01:96:18:6d:4b:7e:f5:2e:7a:11:11:39: 7d:59:f2:27:b3:f3:a4:e7:b9:1b:8d:c4:ef:a8:8d:1a:1d:62: 2a:d4:97:0e:d3:21:e7:d6:d2:48:cb:fb:ef:c2:16:d4:0f:0d: 9d:27:10:c7:b5:d4:2f:ef:f3:2e:cf:76:b4:83:f7:9c:5d:6a: b4:b2:b8:d1:8c:fc:eb:38:61:ab:ca:37:95:42:49:a1:b3:d7: bc:4b:2b:06:f8:3e:16:a7:f2:b0:00:ad:f2:31:32:63:c2:50: aa:86:c7:e3:e7:4c:f8:fd:69:f8:8f:49:63:f4:1d:88:15:42: f8:1a:a7:1c:41:a0:41:8d:11:59:c2:94:ed:19:af:6a:a8:d9: 43:3c:b1:bd:3a:9d:f6:b5:93:3a:63:9f:30:16:4e:ec:0f:d1: a2:59:49:26:39:81:3a:85:c4:83:7c:e3:95:67:af:4e:02:7b: a7:40:19:2e:1e:7b:35:1d:53:c6:70:ca:24:ac:07:50:1d:a4: 98:93:6c:9a:13:6d:89:05:23:07:c8:11:a4:54:ee:2d:fc:fb: 1b:c7:e0:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjYwNzIzMDQ0MzE3WhcNMjYwNzMwMDQ0MzE3WjAYMRYwFAYD VQQDEw02YTYxOWJlNS1iZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hf0RZd5Um9JpQuuN18Y7GJ9bfciPdHQ8hg7ldgQEx+aaixGABBxypmRW5NF HgR6rX8e8KdpAVCn4gz4z4sNtY4FqSnMn4akMKZZqRuLawaGC9jxXux6zLwDFFkh AsCJBFU1Irr9B05klUL7SUG00tp1LO2vm7J6Ex5QWUkDT2jrn+lJUjjjiHmYFRqp DvpO0+PmBhLT8uaGkCzTflMUVSz4RCgX7zKD2ynl0cN0m9Fps3hbFrDzkQe7F+MN qb20V21lKHeaZ1c3TMJyW/Y4maQieRBPGbFI8wkBPte5ixF6B7+hHJ5aGejqY0wV 0rfEI79GHASNv1Xt/RVmyoKrbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuoJxyl GWGgdg2su8wXcvM0E8d2MB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IyMy83NTQ1RjAzQTk3RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4 eWhVbDhoOTk3UFdtb3FaTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn5IN+X68frirH3szgksVPTil2MRiswgA5nNVa84GBQjBsmYiCdOuBXYLAZYY bUt+9S56ERE5fVnyJ7PzpOe5G43E76iNGh1iKtSXDtMh59bSSMv778IW1A8NnScQ x7XUL+/zLs92tIP3nF1qtLK40Yz86zhhq8o3lUJJobPXvEsrBvg+FqfysACt8jEy Y8JQqobH4+dM+P1p+I9JY/QdiBVC+BqnHEGgQY0RWcKU7RmvaqjZQzyxvTqd9rWT OmOfMBZO7A/RollJJjmBOoXEg3zjlWevTgJ7p0AZLh57NR1TxnDKJKwHUB2kmJNs mhNtiQUjB8gRpFTuLfz7G8fgnA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:31:43 2026 by rpki-client