$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: 7p6Yf03k+3zNOLzy9wKWFvY5Sq7jAYfAzt7pLQ99TOs= Subject key identifier: 65:17:49:F5:F5:8B:BF:5D:ED:E6:8D:20:AD:C3:09:9A:F4:90:5A:2F Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 315E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 3103 Signing time: Wed 22 Jul 2026 15:30:53 +0000 Manifest this update: Wed 22 Jul 2026 15:30:52 +0000 Manifest next update: Wed 29 Jul 2026 15:30:52 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: WDeeuidQSbvcnlDLdyp0XawVFWY4C+1FC0THcrZtPBM=) 2: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: jY72D9kM4ZreV4v43viz3/fEA3o/FMiAaeH7fUiUeSs=) 3: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: ot76bD4Fe2eGS+QL+OB7ESET88ZeiKoIEOY/MT5QHrY=) 4: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: M6QpwrrsCEg6uS0XBq+MJGbdVX3IkfmFKf0zFhM8Oec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12638 (0x315e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Jul 22 15:30:52 2026 GMT Not After : Jul 29 15:30:52 2026 GMT Subject: CN=6a60e22d-63ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:6b:65:ba:a6:fa:df:cb:db:c0:e6:64:e4: 98:3a:ea:1c:59:18:eb:d6:18:e7:fb:71:94:cf:0a: e8:04:90:c0:17:c6:10:d7:68:7f:45:04:2a:1b:69: 88:a8:21:ac:51:39:4b:ba:01:2e:fe:68:21:16:87: 8e:5a:dc:2b:02:46:9c:69:5a:4b:d2:b7:1d:9a:d3: 8f:78:64:b2:33:b6:e6:d9:97:21:f7:9b:ed:e9:1a: 3d:a0:c3:8a:d6:f5:ad:41:b9:25:03:5c:43:5a:b6: eb:fe:a1:cf:54:60:7c:48:f2:58:a8:34:0d:3f:50: 00:26:f1:3a:5b:3e:c7:d1:74:24:a2:0f:c0:d7:b4: 82:c5:0c:67:b1:f0:3b:f8:e7:24:a8:1c:86:66:26: 0a:70:59:3d:d6:81:15:15:97:bf:1b:c9:51:19:3b: ba:a4:bc:03:2a:20:88:48:e4:6d:ed:2a:fc:c3:cf: 47:c4:95:49:65:3a:6c:31:d5:84:34:b6:de:2b:d6: 80:2e:bb:81:1e:5a:f6:5e:c5:86:58:35:43:c9:72: a4:58:92:ba:e1:d0:72:4b:32:43:44:7b:c1:b1:43: f9:2d:5b:42:9d:2a:56:e9:61:61:68:87:15:a2:ef: d4:d9:34:63:17:6e:98:bd:47:bf:72:d8:36:b8:d2: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:17:49:F5:F5:8B:BF:5D:ED:E6:8D:20:AD:C3:09:9A:F4:90:5A:2F X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:38:3e:08:2b:40:1e:bf:77:0f:41:80:35:ce:68:df:62:08: 1e:17:c8:1d:71:dd:a8:b2:80:9f:96:3e:d6:dd:19:87:bb:50: e6:5a:31:50:af:e8:df:34:08:e9:06:e9:2c:37:e0:08:3f:e3: c0:8e:2a:c4:b6:2b:d8:2a:a3:ce:ec:6b:b4:be:d1:8b:ea:9c: 1c:50:df:e2:06:20:9a:e1:ce:53:13:36:54:f1:b7:29:14:64: 23:cd:5f:c7:c4:06:4d:f3:95:bb:a4:39:0a:51:17:5c:51:ee: a9:9a:d0:33:58:03:e8:c3:86:40:08:14:7d:a2:47:f3:94:6e: 5b:48:d4:7c:3f:e6:2e:4d:9d:0c:61:dc:2d:e4:44:82:67:ae: 71:0a:ae:6a:d4:4f:3d:8e:79:e3:16:67:e1:99:e4:bd:49:10: 5f:2a:ac:00:8f:02:db:5f:fc:9a:ea:49:3a:14:eb:0a:cd:b4: c1:78:17:53:b3:d1:f6:15:e8:9f:8d:da:ae:bb:8f:a9:f2:6f: 20:40:25:98:39:64:6d:11:af:e1:06:0c:70:73:6a:0b:9a:80: 1f:64:71:5e:27:a8:cd:8f:ff:e5:94:c0:5a:c8:26:05:07:5f: ab:39:90:2c:72:ab:ab:85:c7:33:61:5f:70:28:2b:0c:dc:49: a1:44:0d:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYwNzIyMTUzMDUyWhcNMjYwNzI5MTUzMDUyWjAYMRYwFAYD VQQDEw02YTYwZTIyZC02M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9ZrZbqm+t/L28DmZOSYOuocWRjr1hjn+3GUzwroBJDAF8YQ12h/RQQqG2mI qCGsUTlLugEu/mghFoeOWtwrAkacaVpL0rcdmtOPeGSyM7bm2Zch95vt6Ro9oMOK 1vWtQbklA1xDWrbr/qHPVGB8SPJYqDQNP1AAJvE6Wz7H0XQkog/A17SCxQxnsfA7 +OckqByGZiYKcFk91oEVFZe/G8lRGTu6pLwDKiCISORt7Sr8w89HxJVJZTpsMdWE NLbeK9aALruBHlr2XsWGWDVDyXKkWJK64dBySzJDRHvBsUP5LVtCnSpW6WFhaIcV ou/U2TRjF26YvUe/ctg2uNKKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUXSfX1 i79d7eaNIK3DCZr0kFovMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASjg+CCtAHr93D0GANc5o32IIHhfIHXHdqLKAn5Y+1t0Zh7tQ5loxUK/o3zQI 6QbpLDfgCD/jwI4qxLYr2CqjzuxrtL7Ri+qcHFDf4gYgmuHOUxM2VPG3KRRkI81f x8QGTfOVu6Q5ClEXXFHuqZrQM1gD6MOGQAgUfaJH85RuW0jUfD/mLk2dDGHcLeRE gmeucQquatRPPY554xZn4ZnkvUkQXyqsAI8C21/8mupJOhTrCs20wXgXU7PR9hXo n43arruPqfJvIEAlmDlkbRGv4QYMcHNqC5qAH2RxXieozY//5ZTAWsgmBQdfqzmQ LHKrq4XHM2FfcCgrDNxJoUQN7A== -----END CERTIFICATE-----Generated at Fri Jul 24 13:57:27 2026 by rpki-client