$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json) Hash identifier: Dh+OLTT1QufGqrogoZIHoI0cPfhzzwRw9w0cAKtj1UI= Subject key identifier: 51:10:83:73:44:5D:43:1D:B8:14:36:49:55:3E:6A:6F:CD:FF:7E:D7 Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft Manifest number: 0289 Signing time: Thu 23 Jul 2026 02:57:54 +0000 Manifest this update: Thu 23 Jul 2026 02:57:54 +0000 Manifest next update: Thu 30 Jul 2026 02:57:54 +0000 Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: 7iIpRmuntQlTdatADL+3xhG4CAfk6qGQqyzl5CXfemE=) 2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=) 3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0 Validity Not Before: Jul 23 02:57:54 2026 GMT Not After : Jul 30 02:57:54 2026 GMT Subject: CN=6a618332-dafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:48:ea:57:9c:5c:8d:a2:7d:87:22:71:4b: 9e:e1:21:f6:ff:2d:23:e5:ae:6c:76:ef:17:f9:31: a0:da:ac:bf:f9:30:37:25:d1:6a:a0:e6:ff:15:9f: de:90:48:09:06:98:38:1f:1d:11:20:4e:9a:92:33: 80:ea:07:47:1f:6c:bf:93:f8:a9:0b:dc:45:0e:6a: 74:84:60:82:9b:96:2a:19:09:69:a1:3c:d8:8d:e1: be:49:ca:8b:4b:ba:5a:e0:33:70:24:d9:ac:b6:04: 4d:52:20:d3:af:a4:ec:84:4e:1e:e6:6a:74:5b:b3: 08:de:d4:25:36:c8:cd:42:b1:c3:1c:04:32:7a:9c: b0:7b:80:d2:2f:ac:6c:32:0f:bc:ee:f7:d8:37:16: 85:58:f8:14:db:88:f9:0d:37:c2:4e:76:70:7f:15: 8c:44:45:9a:88:14:5c:dd:20:65:b0:1e:69:79:6a: 5b:a4:a8:07:ec:51:60:99:c2:9b:08:d2:0a:d3:8a: d8:76:27:8c:ca:ec:ec:07:86:f0:77:cc:7e:01:98: 09:82:0a:77:de:ec:a0:c9:3b:fd:9d:1a:67:f7:1a: 4c:4b:39:05:50:99:ec:09:4f:50:42:c2:08:b7:4a: 1d:18:7e:98:37:3c:ad:2a:26:09:5f:df:d4:e1:34: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:10:83:73:44:5D:43:1D:B8:14:36:49:55:3E:6A:6F:CD:FF:7E:D7 X509v3 Authority Key Identifier: keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4d:14:da:5e:f6:cb:b6:b7:10:24:b5:59:c8:03:66:7e:0d: 00:4a:29:45:34:dc:90:40:aa:a8:e7:b7:4a:00:6a:88:b9:f1: 9d:99:e0:ea:a8:78:de:8b:ae:a2:01:3f:6a:77:f9:c4:28:9a: 3a:cb:e1:36:c5:51:66:ef:52:95:3b:d1:74:cf:cb:83:64:39: 30:2f:54:b6:35:2e:18:41:22:b5:7a:25:4f:02:69:b5:93:a3: ca:1e:1e:88:22:ed:e8:1a:d4:4d:3b:23:86:a2:04:cd:55:91: 03:5d:90:d1:27:09:d3:be:dc:1c:ce:1b:8b:42:18:77:ba:a2: 4d:4f:49:bc:3d:5f:8f:67:06:f8:be:dd:34:9c:d0:aa:13:15: be:1c:47:8f:4c:9d:00:8a:00:0d:3c:33:4d:59:31:b1:17:b6: 3d:82:fd:c1:37:76:1b:c6:fc:4a:0e:ad:b6:6a:d6:43:6c:83: 9a:44:9c:39:57:ad:e2:20:90:b7:bd:cd:84:15:ad:b4:3b:87: 0e:66:0c:b3:9e:b5:65:74:be:40:97:59:cc:5f:57:db:71:02: 3d:2a:33:04:c5:36:5f:d3:59:ab:9d:bd:49:e2:a5:cf:f3:1d: fc:44:d5:df:49:0d:a6:65:ad:bf:b3:22:44:32:8c:4e:e6:3c: e0:10:1c:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE N0E4MzI5RDAwHhcNMjYwNzIzMDI1NzU0WhcNMjYwNzMwMDI1NzU0WjAYMRYwFAYD VQQDEw02YTYxODMzMi1kYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKVI6lecXI2ifYcicUue4SH2/y0j5a5sdu8X+TGg2qy/+TA3JdFqoOb/FZ/e kEgJBpg4Hx0RIE6akjOA6gdHH2y/k/ipC9xFDmp0hGCCm5YqGQlpoTzYjeG+ScqL S7pa4DNwJNmstgRNUiDTr6TshE4e5mp0W7MI3tQlNsjNQrHDHAQyepywe4DSL6xs Mg+87vfYNxaFWPgU24j5DTfCTnZwfxWMREWaiBRc3SBlsB5peWpbpKgH7FFgmcKb CNIK04rYdieMyuzsB4bwd8x+AZgJggp33uygyTv9nRpn9xpMSzkFUJnsCU9QQsII t0odGH6YNzytKiYJX9/U4TRvswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEQg3NE XUMduBQ2SVU+am/N/37XMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS STBXZDRCdTBBUFRYcURLZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV00U2l72y7a3ECS1WcgDZn4NAEopRTTckECqqOe3SgBqiLnxnZng6qh43ouu ogE/anf5xCiaOsvhNsVRZu9SlTvRdM/Lg2Q5MC9UtjUuGEEitXolTwJptZOjyh4e iCLt6BrUTTsjhqIEzVWRA12Q0ScJ077cHM4bi0IYd7qiTU9JvD1fj2cG+L7dNJzQ qhMVvhxHj0ydAIoADTwzTVkxsRe2PYL9wTd2G8b8Sg6ttmrWQ2yDmkScOVet4iCQ t73NhBWttDuHDmYMs561ZXS+QJdZzF9X23ECPSozBMU2X9NZq529SeKlz/Md/ETV 30kNpmWtv7MiRDKMTuY84BAc2A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:25:54 2026 by rpki-client