$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: VuS688bSR2Lwbcf0d7bp7D6SdtpExlKVgWl2pghy+40= Subject key identifier: 4B:D1:4E:D9:7F:6B:B4:89:8E:A6:0A:47:DB:35:FF:67:7E:D3:C3:AA Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 0143 Signing time: Thu 23 Jul 2026 06:59:23 +0000 Manifest this update: Thu 23 Jul 2026 06:59:23 +0000 Manifest next update: Thu 30 Jul 2026 06:59:23 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: R7ySsLDt3RjWxv35xL7cOciPFGER/QkuSriIan47MSM=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Validity Not Before: Jul 23 06:59:23 2026 GMT Not After : Jul 30 06:59:23 2026 GMT Subject: CN=6a61bbcb-eb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:a3:bf:6a:f4:9a:97:ed:5f:63:43:29:49: 0c:a7:78:93:98:3b:57:9b:66:93:84:59:0f:55:85: a1:03:65:62:2a:dc:74:f1:c7:9c:c1:9f:0f:1d:d4: 2f:3c:5d:65:b5:38:b1:71:fb:ba:67:d6:0a:53:d7: d9:01:7a:c3:6d:73:4e:7e:d1:50:bd:d1:44:8f:f6: 34:5e:45:72:1e:f5:f5:03:9d:ca:6e:88:8a:e6:07: 23:57:f9:ec:a2:58:23:ef:c4:13:2b:83:93:5e:69: 9a:7f:35:e5:00:cf:7a:b2:23:89:24:88:e7:21:d2: 86:98:1a:66:09:fe:c7:d0:8f:f5:a7:3c:32:d3:f6: f4:d0:54:08:4b:61:f1:2b:7d:88:94:2f:65:40:f8: b1:79:80:16:74:7a:13:2c:0b:bb:bf:e9:4f:d9:48: 2a:75:b5:92:94:fd:39:ce:d6:96:61:e4:03:14:2b: e3:75:77:39:74:ae:cf:24:94:ee:4d:6b:4a:1c:ca: 0d:bf:68:7d:e1:b2:81:b0:9b:5e:f1:92:52:dd:fb: 22:c0:d7:70:ce:d1:7d:6e:f6:d4:81:11:64:3e:e4: cb:a6:41:cb:ea:9d:87:ba:e5:eb:4e:1d:6f:9c:be: 58:eb:1c:15:03:cf:6c:08:71:f3:6c:be:6c:78:55: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:4E:D9:7F:6B:B4:89:8E:A6:0A:47:DB:35:FF:67:7E:D3:C3:AA X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1a:68:19:27:1c:66:55:69:16:9a:8a:4b:41:9e:1d:0f:cf: f4:dd:e0:66:01:e1:e0:1c:b2:bc:f7:bf:31:05:10:4e:19:e4: 90:16:34:bd:4a:36:5d:b9:45:86:06:3d:c7:3d:02:2d:bf:17: 7b:bc:73:56:28:6b:dd:16:63:ff:68:03:c8:6e:b1:c0:36:91: db:43:c5:45:33:a4:88:fb:3b:1a:88:89:b2:40:c2:21:0b:d8: 87:87:35:fb:f6:54:39:6f:69:05:cf:03:5c:28:d2:f1:39:14: 51:e8:52:c5:61:2a:4c:e6:58:ea:aa:91:7c:42:30:03:09:20: 5f:12:4a:76:f0:ce:e4:9b:e6:ad:3c:7a:5e:da:5d:31:93:11: d6:fa:19:41:00:ee:e8:a8:f9:6e:ef:fc:d7:4e:8c:4a:b4:cb: 2c:9c:ee:90:22:a7:c8:44:a7:84:ac:33:a1:8d:e5:a2:35:f9: 47:70:e5:2e:99:8a:b0:1b:f1:78:e0:22:11:96:06:fc:55:88: 08:f2:89:df:7e:32:5f:c2:71:88:01:8f:5e:ac:8a:3d:aa:98: 1d:6a:3e:0c:39:98:ad:dd:e5:0f:95:e9:07:6b:76:c8:c4:f5: 5f:5f:01:8b:e9:0d:ea:d5:2f:fc:73:7f:f0:92:08:91:c4:68: da:e3:89:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1ODQxMTAvBgNVBAUTKEEwRkEyMzc3NkQ1NDRDODc3OTQ2Q0FDN0M0ODc3NDY1 MTk5MzdEQjgwHhcNMjYwNzIzMDY1OTIzWhcNMjYwNzMwMDY1OTIzWjAYMRYwFAYD VQQDEw02YTYxYmJjYi1lYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2Sjv2r0mpftX2NDKUkMp3iTmDtXm2aThFkPVYWhA2ViKtx08cecwZ8PHdQv PF1ltTixcfu6Z9YKU9fZAXrDbXNOftFQvdFEj/Y0XkVyHvX1A53KboiK5gcjV/ns olgj78QTK4OTXmmafzXlAM96siOJJIjnIdKGmBpmCf7H0I/1pzwy0/b00FQIS2Hx K32IlC9lQPixeYAWdHoTLAu7v+lP2UgqdbWSlP05ztaWYeQDFCvjdXc5dK7PJJTu TWtKHMoNv2h94bKBsJte8ZJS3fsiwNdwztF9bvbUgRFkPuTLpkHL6p2HuuXrTh1v nL5Y6xwVA89sCHHzbL5seFWKrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvRTtl/ a7SJjqYKR9s1/2d+08OqMB8GA1UdIwQYMBaAFKD6I3dtVEyHeUbKx8SHdGUZk324 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU4NC8zMjcwNzM4MjlD QjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJZDVSc3JIeElkMFpSbVRm YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU4NC8zMjcwNzM4MjlDQjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJ ZDVSc3JIeElkMFpSbVRmYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdRpoGSccZlVpFpqKS0GeHQ/P9N3gZgHh4ByyvPe/MQUQThnkkBY0vUo2XblF hgY9xz0CLb8Xe7xzVihr3RZj/2gDyG6xwDaR20PFRTOkiPs7GoiJskDCIQvYh4c1 +/ZUOW9pBc8DXCjS8TkUUehSxWEqTOZY6qqRfEIwAwkgXxJKdvDO5JvmrTx6Xtpd MZMR1voZQQDu6Kj5bu/8106MSrTLLJzukCKnyESnhKwzoY3lojX5R3DlLpmKsBvx eOAiEZYG/FWICPKJ334yX8JxiAGPXqyKPaqYHWo+DDmYrd3lD5XpB2t2yMT1X18B i+kN6tUv/HN/8JIIkcRo2uOJlQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:29:05 2026 by rpki-client