$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: qKDDowmsVQr1JWzuzHVfSNil3buag/8SJyZZuoZTi/g= Subject key identifier: 00:C2:E9:67:D5:74:4A:31:76:01:93:ED:40:A4:6F:0B:0F:6C:79:34 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 0295 Signing time: Thu 23 Jul 2026 02:50:47 +0000 Manifest this update: Thu 23 Jul 2026 02:50:47 +0000 Manifest next update: Thu 30 Jul 2026 02:50:47 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: KUOTnZHnJ5fYaRore3lhdMn0oVPf6LY+KOx43bn1hgc=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: iNoqSRT8zGT4sQQ17Q3E6C4knP5LZOO3EPDDr7aFmYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Jul 23 02:50:47 2026 GMT Not After : Jul 30 02:50:47 2026 GMT Subject: CN=6a618187-7f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:8b:6a:fb:e1:55:3a:81:df:30:4b:2e:24: 19:e6:c3:8f:5d:bc:42:49:8d:5f:35:b1:6b:c4:12: dc:35:01:45:7d:c1:11:cb:bd:2e:80:a2:ae:85:e5: c8:b6:b8:91:54:18:26:56:2f:fe:84:3e:26:d5:b4: e3:fd:27:71:4b:39:c9:12:2f:04:a4:55:a0:50:88: 6d:d6:12:ff:f4:d8:24:e0:a2:86:40:0c:16:ab:d1: 8d:5d:9d:96:c7:e3:45:9e:58:f5:3d:89:28:64:c5: 8d:71:95:d1:12:46:95:b7:a9:e3:2c:7d:eb:7e:f4: 68:91:64:8c:fb:ab:0e:56:33:57:55:ca:71:23:9d: 61:e6:cc:3c:82:64:32:95:d3:96:63:94:49:8a:54: 7a:ce:ee:9b:cc:91:71:d9:50:b0:db:9c:3b:cc:9c: c5:77:ea:19:fb:fb:8b:74:c6:19:74:53:dd:e2:55: c5:b0:a1:4d:c7:2b:55:19:82:cc:fd:45:73:a9:fe: 88:f3:96:2f:5b:37:6b:c8:ff:42:97:39:a8:0e:e4: f3:f2:3f:cb:1f:70:5e:c2:9b:c2:33:27:da:f1:74: ed:c5:f3:c9:cf:24:c5:75:d8:c4:52:da:fe:ef:93: 2b:42:77:6a:10:fe:c0:8b:01:4b:e0:3a:47:d5:b8: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C2:E9:67:D5:74:4A:31:76:01:93:ED:40:A4:6F:0B:0F:6C:79:34 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0b:33:39:8d:ba:5f:34:f6:f6:c6:90:4e:4c:58:9a:6d:6e: 99:eb:de:ff:61:1d:ea:c6:e7:2b:a7:fe:88:63:02:d3:3e:e8: 33:0b:13:39:93:e9:75:ca:d5:dc:af:3a:88:c6:03:8b:d3:26: 1d:22:75:eb:96:60:80:0f:7a:4c:f9:28:82:7d:6c:41:91:6e: 8e:d8:72:a1:ea:6e:81:99:72:be:3e:9b:45:51:42:47:80:ef: e6:45:ff:28:fc:1c:ce:05:a0:9f:a0:1a:7f:6c:52:fa:40:15: 21:f7:6b:17:0c:d6:6a:e8:db:5f:6b:37:d8:39:35:64:96:6a: 17:10:82:9a:f3:a0:e4:f5:56:d0:24:65:66:e2:27:12:de:ad: 4e:97:53:ce:c1:9f:ae:86:d5:66:b9:dc:62:4b:68:40:0f:25: c3:da:a2:c2:97:ce:8d:6e:f6:93:80:57:68:a7:07:5f:f0:56: 0a:c2:c4:7c:73:5a:5c:bd:e3:49:df:66:4a:ba:53:14:f7:a1: 6b:41:15:aa:71:2d:c5:5a:95:bb:bd:f7:33:c9:04:89:f6:3a: 82:6d:7f:f8:44:37:d1:08:0e:b4:65:54:9d:16:58:d7:8d:5a: 07:9f:60:9c:7f:dd:37:05:51:fc:0f:72:64:f9:b7:50:6f:76: 72:39:6a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwNzIzMDI1MDQ3WhcNMjYwNzMwMDI1MDQ3WjAYMRYwFAYD VQQDEw02YTYxODE4Ny03ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4KLavvhVTqB3zBLLiQZ5sOPXbxCSY1fNbFrxBLcNQFFfcERy70ugKKuheXI triRVBgmVi/+hD4m1bTj/SdxSznJEi8EpFWgUIht1hL/9Ngk4KKGQAwWq9GNXZ2W x+NFnlj1PYkoZMWNcZXREkaVt6njLH3rfvRokWSM+6sOVjNXVcpxI51h5sw8gmQy ldOWY5RJilR6zu6bzJFx2VCw25w7zJzFd+oZ+/uLdMYZdFPd4lXFsKFNxytVGYLM /UVzqf6I85YvWzdryP9ClzmoDuTz8j/LH3BewpvCMyfa8XTtxfPJzyTFddjEUtr+ 75MrQndqEP7AiwFL4DpH1bgogQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADC6WfV dEoxdgGT7UCkbwsPbHk0MB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQszOY26XzT29saQTkxYmm1umeve/2Ed6sbnK6f+iGMC0z7oMwsTOZPpdcrV 3K86iMYDi9MmHSJ165ZggA96TPkogn1sQZFujthyoepugZlyvj6bRVFCR4Dv5kX/ KPwczgWgn6Aaf2xS+kAVIfdrFwzWaujbX2s32Dk1ZJZqFxCCmvOg5PVW0CRlZuIn Et6tTpdTzsGfrobVZrncYktoQA8lw9qiwpfOjW72k4BXaKcHX/BWCsLEfHNaXL3j Sd9mSrpTFPeha0EVqnEtxVqVu733M8kEifY6gm1/+EQ30QgOtGVUnRZY141aB59g nH/dNwVR/A9yZPm3UG92cjlqAA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:04:33 2026 by rpki-client