$ rpki-client -vvf rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft File: oXIQwPgrRl5webuW88SZw_xMCog.mft (raw, json) Hash identifier: mwg7cEApF9Ljn4vZqn7a7FqHhPgB6iGy4e5eTETTuWA= Subject key identifier: 90:A8:DB:94:B8:4A:F7:9B:CA:82:D8:C2:BD:DD:84:B9:8C:53:6F:BE Authority key identifier: A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88 Certificate issuer: /CN=A91E208A/serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft Manifest number: 0E Signing time: Thu 23 Jul 2026 11:13:44 +0000 Manifest this update: Thu 23 Jul 2026 11:13:44 +0000 Manifest next update: Thu 30 Jul 2026 11:13:44 +0000 Files and hashes: 1: oXIQwPgrRl5webuW88SZw_xMCog.crl (hash: UxgbPZEXsRrHGCVFYNNk7gFO2t6DoVsoIp9yhV5HVkY=) 2: 1D13321C760911F1B67326767BA30FBC.roa (hash: gKFAP2rvC3dl4ISST8Sh3uKKIKoWICHC4vi311f7Wpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E208A, serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88 Validity Not Before: Jul 23 11:13:44 2026 GMT Not After : Jul 30 11:13:44 2026 GMT Subject: CN=6a61f768-bee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:c1:34:0b:14:6e:1f:3e:12:7d:d9:53:2f: d6:da:44:df:33:22:f0:d3:d7:d3:99:09:39:2d:27: 64:68:36:8f:1f:44:df:67:9a:58:12:23:3f:15:c1: 78:12:ce:19:fb:ee:6b:59:41:91:9f:40:43:a7:33: 74:ab:2d:4d:2a:af:ac:d9:d4:df:c9:f4:b5:be:51: 8e:20:ce:50:f1:66:d6:2c:9e:ba:b1:ab:e4:43:6a: 9d:84:48:36:cc:6c:c9:60:ad:03:03:36:53:64:2f: 62:2e:23:0f:a7:2e:35:a8:bb:50:f9:9a:3f:1c:cb: 4e:05:ab:73:ea:cb:10:7b:30:12:29:1c:6c:6f:54: 51:31:b8:e9:50:d5:6c:63:46:b8:cf:b9:a0:1c:35: 52:71:f6:0d:08:04:f7:50:3a:4a:5b:18:54:74:4b: 39:35:db:cf:42:c2:8a:4c:0f:b0:68:99:2d:1e:cd: 6f:f0:5b:4f:25:89:38:2f:18:8c:3b:5c:3c:a9:5f: 2a:50:0d:c7:99:0e:80:a0:d7:68:b2:84:c6:57:96: aa:18:6d:7c:cf:9e:17:77:c9:b9:3c:8c:8c:6a:db: 99:8a:ee:c5:36:1b:3e:ea:99:0f:ea:f2:53:6d:ba: 75:c8:5a:58:d5:ce:9d:5d:2e:f4:c5:1a:9a:5d:e7: 1a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A8:DB:94:B8:4A:F7:9B:CA:82:D8:C2:BD:DD:84:B9:8C:53:6F:BE X509v3 Authority Key Identifier: keyid:A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4c:6e:9c:c1:ae:54:cb:27:3c:d6:96:d6:14:c5:8f:f7:a1: 37:0b:2e:2f:7f:9a:6c:87:6e:cd:ea:1f:23:fd:57:b6:c9:ed: ad:e0:68:45:71:1b:62:85:6b:7a:c4:e8:92:e8:83:99:cc:e2: 63:d4:3e:83:ca:42:ae:0e:4d:2e:b5:ed:b6:8d:4a:49:cc:ea: 6b:91:5b:ba:6b:52:c8:48:8f:1f:08:b6:ec:7e:9d:42:99:12: 3c:ad:89:10:95:4e:8c:5b:3a:b3:2e:f0:ca:bd:0a:40:f7:65: c1:01:7f:0f:03:dc:ff:f5:0e:66:70:41:8c:e0:29:84:51:e5: a6:84:6e:3f:07:88:60:da:6f:c3:6c:cd:a5:45:12:16:e1:e4: 56:9a:cf:ab:27:f1:51:99:c3:11:ec:f7:d1:77:97:ee:b6:f0: ae:99:15:97:1e:59:20:ec:48:22:d3:10:cd:08:10:d3:cc:51: c4:0c:5c:d0:35:19:73:8c:64:cd:a1:85:ad:5a:7d:ef:6e:53: cc:d5:35:fb:2a:1f:50:e9:d3:eb:39:b7:5c:1b:74:ea:19:d4: c0:55:b4:b0:a3:0c:f0:8a:8d:4f:28:9b:0c:fe:56:f4:a7:d0: 73:d0:67:3d:a2:3e:e8:e3:95:aa:8c:22:f3:b6:d2:6e:06:94: ba:5c:ee:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjA4QTExMC8GA1UEBRMoQTE3MjEwQzBGODJCNDY1RTcwNzlCQjk2RjNDNDk5QzNG QzRDMEE4ODAeFw0yNjA3MjMxMTEzNDRaFw0yNjA3MzAxMTEzNDRaMBgxFjAUBgNV BAMTDTZhNjFmNzY4LWJlZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3bsE0CxRuHz4SfdlTL9baRN8zIvDT19OZCTktJ2RoNo8fRN9nmlgSIz8VwXgS zhn77mtZQZGfQEOnM3SrLU0qr6zZ1N/J9LW+UY4gzlDxZtYsnrqxq+RDap2ESDbM bMlgrQMDNlNkL2IuIw+nLjWou1D5mj8cy04Fq3PqyxB7MBIpHGxvVFExuOlQ1Wxj RrjPuaAcNVJx9g0IBPdQOkpbGFR0Szk1289CwopMD7BomS0ezW/wW08liTgvGIw7 XDypXypQDceZDoCg12iyhMZXlqoYbXzPnhd3ybk8jIxq25mK7sU2Gz7qmQ/q8lNt unXIWljVzp1dLvTFGppd5xoVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkKjblLhK 95vKgtjCvd2EuYxTb74wHwYDVR0jBBgwFoAUoXIQwPgrRl5webuW88SZw/xMCogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMDhBLzcwRTVBMjIwNzYw NTExRjFCNjMxNjZERjc5QTMwRkJDL29YSVF3UGdyUmw1d2VidVc4OFNad194TUNv Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1hJUXdQZ3JSbDV3ZWJ1Vzg4U1p3X3hNQ29nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MDhBLzcwRTVBMjIwNzYwNTExRjFCNjMxNjZERjc5QTMwRkJDL29YSVF3UGdyUmw1 d2VidVc4OFNad194TUNvZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC2TG6cwa5Uyyc81pbWFMWP96E3Cy4vf5psh27N6h8j/Ve2ye2t4GhFcRtihWt6 xOiS6IOZzOJj1D6DykKuDk0ute22jUpJzOprkVu6a1LISI8fCLbsfp1CmRI8rYkQ lU6MWzqzLvDKvQpA92XBAX8PA9z/9Q5mcEGM4CmEUeWmhG4/B4hg2m/DbM2lRRIW 4eRWms+rJ/FRmcMR7PfRd5futvCumRWXHlkg7Egi0xDNCBDTzFHEDFzQNRlzjGTN oYWtWn3vblPM1TX7Kh9Q6dPrObdcG3TqGdTAVbSwowzwio1PKJsM/lb0p9Bz0Gc9 oj7o45WqjCLzttJuBpS6XO6n -----END CERTIFICATE-----Generated at Fri Jul 24 09:09:30 2026 by rpki-client