$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: K8qlZ2/JxXNaOVRtPTWHfQNq5kltRMNObZ9ccLFUCf0= Subject key identifier: 0B:6F:5B:BE:E1:B7:E7:12:F3:DF:7B:6C:75:6A:30:BB:40:43:88:1E Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: 0148 Signing time: Thu 23 Jul 2026 07:32:29 +0000 Manifest this update: Thu 23 Jul 2026 07:32:28 +0000 Manifest next update: Thu 30 Jul 2026 07:32:28 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: Vm1CNNavFYNzJsMYIaqlI4SC+vN40YGFahwBE3f0+y8=) 2: 03FFD61EEF8A11F09F678C04616F56BC.roa (hash: A7HwJDVNxwJYLBDJd9TfXMdwuNFGxBemZdYTybMyqFE=) 3: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: XI4mL6mEa2M+1NS8PfnGuvRQBxr1+O78oNJurqURZgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jul 23 07:32:28 2026 GMT Not After : Jul 30 07:32:28 2026 GMT Subject: CN=6a61c38d-9c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:fd:e0:b5:05:22:7e:c7:5b:da:68:33:58: 33:0d:fd:de:d9:e8:77:e8:d3:55:95:88:7b:f9:f8: a5:44:2b:9e:f5:f0:71:27:62:3b:d0:29:bb:35:16: db:d9:e7:65:89:11:81:a4:3e:78:66:89:b7:ae:73: 90:4f:b8:c0:c2:a9:df:c4:52:f4:f4:e7:de:ac:46: a6:3a:06:09:2c:83:13:6e:e7:7f:bb:fd:46:92:c8: 23:39:6e:fa:f5:26:54:83:53:5e:93:83:f4:61:20: 3b:1f:60:fd:42:72:92:eb:71:26:8c:df:73:d8:ac: e4:31:65:c0:e8:97:07:63:68:69:af:d8:77:80:59: fd:d5:79:80:e4:b9:a4:88:e0:7f:e3:86:59:40:f8: a9:bc:05:9a:38:aa:87:fc:00:1f:ac:e3:64:f3:13: 4c:0f:72:93:1b:a9:6b:b9:79:74:64:66:64:1b:06: 0e:6d:40:dd:0f:ca:cf:c4:b8:7e:f8:08:36:a3:a3: cc:5f:ad:9f:58:7f:eb:1e:69:c8:86:c1:59:b5:57: cc:fa:ad:02:34:1d:aa:51:91:38:91:a9:62:4a:78: 14:9a:90:7e:54:b3:45:12:c7:35:8e:18:60:29:38: 65:57:29:1f:19:22:2d:75:8d:c7:77:fb:70:c6:00: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6F:5B:BE:E1:B7:E7:12:F3:DF:7B:6C:75:6A:30:BB:40:43:88:1E X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:66:84:20:d9:28:a9:0c:c8:33:21:4c:e9:4c:4c:fe:d6:12: 97:9d:25:bc:16:be:24:2a:a3:fb:5f:dc:b1:29:69:8c:8f:58: 2f:c6:94:16:82:47:fe:eb:1a:02:a1:33:8c:57:1f:0b:2a:d0: a1:63:7c:82:cc:e2:67:51:4d:f7:fc:de:3d:2d:2b:1f:0d:73: bf:69:4e:44:92:40:4e:59:8f:50:38:e3:66:91:6d:d5:68:03: 91:63:2b:51:0d:a7:91:ce:58:68:c7:ca:c2:31:de:b8:dc:7d: 40:e3:58:6d:85:75:e2:90:43:32:05:09:e5:54:50:0a:f1:c9: 9f:7f:4f:a0:ed:98:73:85:50:96:00:60:03:1f:3a:71:9e:5d: f3:04:fc:36:06:25:35:37:72:90:04:c8:c7:51:8a:da:f5:4d: c5:e5:69:a7:2b:e9:93:d4:c3:bf:3e:ab:d7:02:88:63:44:ef: 13:c0:db:1f:05:ca:26:12:bb:59:34:17:6c:34:62:5e:72:66: 7f:02:18:03:87:c6:4f:08:9a:75:33:09:07:48:95:4b:22:cd: 75:a6:b2:2c:41:b6:5f:d0:2f:40:57:05:a4:a6:35:74:0e:d4: a2:dc:b0:60:26:76:da:b7:2d:88:a7:4d:dc:b4:22:3c:72:a5: 63:b7:6c:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwNzIzMDczMjI4WhcNMjYwNzMwMDczMjI4WjAYMRYwFAYD VQQDEw02YTYxYzM4ZC05YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfj94LUFIn7HW9poM1gzDf3e2eh36NNVlYh7+filRCue9fBxJ2I70Cm7NRbb 2edliRGBpD54Zom3rnOQT7jAwqnfxFL09OferEamOgYJLIMTbud/u/1GksgjOW76 9SZUg1Nek4P0YSA7H2D9QnKS63EmjN9z2KzkMWXA6JcHY2hpr9h3gFn91XmA5Lmk iOB/44ZZQPipvAWaOKqH/AAfrONk8xNMD3KTG6lruXl0ZGZkGwYObUDdD8rPxLh+ +Ag2o6PMX62fWH/rHmnIhsFZtVfM+q0CNB2qUZE4kaliSngUmpB+VLNFEsc1jhhg KThlVykfGSItdY3Hd/twxgCfQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtvW77h t+cS8997bHVqMLtAQ4geMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAmaEINkoqQzIMyFM6UxM/tYSl50lvBa+JCqj+1/csSlpjI9YL8aUFoJH/usa AqEzjFcfCyrQoWN8gsziZ1FN9/zePS0rHw1zv2lORJJATlmPUDjjZpFt1WgDkWMr UQ2nkc5YaMfKwjHeuNx9QONYbYV14pBDMgUJ5VRQCvHJn39PoO2Yc4VQlgBgAx86 cZ5d8wT8NgYlNTdykATIx1GK2vVNxeVppyvpk9TDvz6r1wKIY0TvE8DbHwXKJhK7 WTQXbDRiXnJmfwIYA4fGTwiadTMJB0iVSyLNdaayLEG2X9AvQFcFpKY1dA7Uotyw YCZ22rctiKdN3LQiPHKlY7dsxA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:29:42 2026 by rpki-client