$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json) Hash identifier: vMtG5LovR4KHnvEh3LhDwFQyiArzsa55OW1KdEOlrjY= Subject key identifier: DA:26:6B:41:36:02:51:49:19:30:1A:EF:40:3D:94:0D:FE:4D:EB:78 Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Certificate serial: 1444 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft Manifest number: 1435 Signing time: Wed 22 Jul 2026 16:59:58 +0000 Manifest this update: Wed 22 Jul 2026 16:59:58 +0000 Manifest next update: Wed 29 Jul 2026 16:59:58 +0000 Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: onvY3Uh47DhaEihZazrCIHHOnlIMxC+Dq486V+5e0xY=) 2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5188 (0x1444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Validity Not Before: Jul 22 16:59:58 2026 GMT Not After : Jul 29 16:59:58 2026 GMT Subject: CN=6a60f70e-1a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:de:06:d8:78:5f:de:a5:d6:e5:08:33:50: 1c:91:d2:d4:36:a0:f7:34:36:f4:cf:82:3a:7d:c6: 7d:79:74:30:93:0f:82:f6:8b:f5:17:bf:6c:8a:e4: 2b:06:b2:d7:03:f5:66:19:17:8f:90:b8:c5:19:4b: d8:a0:6a:c5:15:66:11:f7:e3:f6:fa:77:7b:1e:fa: 49:41:3f:ab:11:f6:44:2f:69:1b:05:e0:7a:49:44: 85:7e:06:6a:b7:f1:73:b1:27:67:2b:6c:0e:ec:5c: 1f:fc:8e:12:03:67:48:cf:16:e8:8b:e5:90:a0:eb: 1d:7d:d5:26:8c:2a:7b:b8:99:e2:d5:20:ac:b0:f4: e8:43:21:c2:73:78:fa:29:67:41:41:60:85:86:8f: 3a:9a:f4:89:92:e3:bc:07:1a:b0:27:cd:bb:43:e9: 65:b0:7a:20:42:fd:17:5e:1c:4d:6a:d1:f0:67:e4: 3b:29:ab:e1:27:dd:83:f7:88:5e:5b:4f:a9:d3:79: e0:db:28:12:a6:f9:99:85:a8:49:96:9f:55:dc:54: 4d:e0:38:2d:f0:fd:e8:d7:f5:03:f8:a4:0b:66:5e: 35:02:a8:3e:0f:19:35:ba:5a:70:eb:c3:13:ab:83: 97:13:7c:0b:26:50:12:6f:d3:ae:5f:86:69:0f:da: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:26:6B:41:36:02:51:49:19:30:1A:EF:40:3D:94:0D:FE:4D:EB:78 X509v3 Authority Key Identifier: keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:44:d3:5e:24:30:35:aa:e3:3d:d0:59:95:56:42:d7:fb:d2: b9:35:5a:ee:15:14:85:11:ae:08:0b:2b:b6:fe:4b:85:d6:69: a0:7e:02:ba:15:f1:1e:be:23:1c:c7:ba:90:c3:8d:7c:65:f9: e8:8e:21:68:77:91:aa:6d:20:5b:1c:a7:38:26:60:92:df:da: 29:0d:b1:44:a1:2a:bd:d9:6f:c2:ce:84:49:d8:a1:bd:b2:3e: 57:21:89:8e:ad:b9:d1:ef:de:3d:2d:c6:bc:cc:d2:39:bc:39: ea:5e:dc:2b:bf:f9:7c:25:70:b8:ad:b9:fc:f0:12:a4:e3:3a: 95:c3:22:3a:10:19:a9:31:7e:85:1b:ba:fc:a0:55:1c:26:42: 12:38:06:c3:07:e1:8b:58:cb:01:ee:28:7f:e4:1e:b4:b7:86: 04:f2:9a:8a:56:e7:c5:19:92:30:18:01:0f:ab:24:b4:9f:c1: 5e:4a:e1:d0:ab:92:8b:d0:92:59:2a:5b:ca:98:b0:96:4a:5b: d0:10:da:25:ad:96:70:fd:7f:78:0e:eb:cb:e3:64:d5:36:87: f9:ea:f6:a2:2e:f2:49:36:24:58:6d:24:74:38:4f:de:69:ba: cc:e2:0d:32:4a:0c:83:d7:18:ca:69:7b:b3:b9:17:f2:5f:4c: af:d5:99:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEExMTFFODFDNEIzRTI3QkRBNkUyNzEyNDk3RjZEQkJB MENGQjA4MjYwHhcNMjYwNzIyMTY1OTU4WhcNMjYwNzI5MTY1OTU4WjAYMRYwFAYD VQQDEw02YTYwZjcwZS0xYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HHeBth4X96l1uUIM1AckdLUNqD3NDb0z4I6fcZ9eXQwkw+C9ov1F79siuQr BrLXA/VmGRePkLjFGUvYoGrFFWYR9+P2+nd7HvpJQT+rEfZEL2kbBeB6SUSFfgZq t/FzsSdnK2wO7Fwf/I4SA2dIzxboi+WQoOsdfdUmjCp7uJni1SCssPToQyHCc3j6 KWdBQWCFho86mvSJkuO8BxqwJ827Q+llsHogQv0XXhxNatHwZ+Q7KavhJ92D94he W0+p03ng2ygSpvmZhahJlp9V3FRN4Dgt8P3o1/UD+KQLZl41Aqg+Dxk1ulpw68MT q4OXE3wLJlASb9OuX4ZpD9rH9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoma0E2 AlFJGTAa70A9lA3+Tet4MB8GA1UdIwQYMBaAFKER6BxLPie9puJxJJf227oM+wgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8wRDk5MzFCQUEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3Mm00bkVrbF9iYnVnejdD Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29SSG9IRXMtSjcybTRuRWtsX2JidWd6N0NDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8wRDk5MzFCQUExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3 Mm00bkVrbF9iYnVnejdDQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbETTXiQwNarjPdBZlVZC1/vSuTVa7hUUhRGuCAsrtv5LhdZpoH4CuhXxHr4j HMe6kMONfGX56I4haHeRqm0gWxynOCZgkt/aKQ2xRKEqvdlvws6ESdihvbI+VyGJ jq250e/ePS3GvMzSObw56l7cK7/5fCVwuK25/PASpOM6lcMiOhAZqTF+hRu6/KBV HCZCEjgGwwfhi1jLAe4of+QetLeGBPKailbnxRmSMBgBD6sktJ/BXkrh0KuSi9CS WSpbypiwlkpb0BDaJa2WcP1/eA7ry+Nk1TaH+er2oi7ySTYkWG0kdDhP3mm6zOIN MkoMg9cYyml7s7kX8l9Mr9WZTw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:06 2026 by rpki-client