$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: H+NgWYTFGfdgpDO2c3HfbjycqKk0JV/B0A3WxYmhh9s= Subject key identifier: 41:6A:63:3F:B9:BF:58:6D:B9:DD:14:4F:17:63:2C:E8:0A:63:D3:25 Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 051A Signing time: Thu 23 Jul 2026 00:27:02 +0000 Manifest this update: Thu 23 Jul 2026 00:27:01 +0000 Manifest next update: Thu 30 Jul 2026 00:27:01 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: B/4GAcY/gJyMMIIJMF5GKgW/b0foS0+eJCgoSMRtRW0=) 2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=) 3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Jul 23 00:27:01 2026 GMT Not After : Jul 30 00:27:01 2026 GMT Subject: CN=6a615fd5-6ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:10:ac:ac:25:7c:f5:f7:cb:74:75:2b:73: 29:07:ee:06:c9:f3:4e:f8:8b:33:c3:dc:0c:17:21: 8f:ce:3c:64:f7:4b:52:62:8d:f9:9d:21:b5:1e:c5: 50:93:4c:4d:25:cb:31:4f:f9:c9:2a:b6:82:dc:92: 87:8a:0e:eb:18:de:bf:e0:5e:db:c8:5f:4f:a5:58: 1e:a4:68:27:aa:ac:f9:87:2b:11:a9:a2:c7:cd:d6: 79:a6:85:c1:a0:08:3a:7b:f5:a8:2d:2c:a5:36:d9: c7:d2:ca:f4:8a:2f:7c:64:40:cc:11:f4:06:b7:7d: 47:f0:d9:ad:17:23:05:8f:a2:f3:d5:93:dd:1f:a4: 6b:6a:e1:bf:b6:b7:c6:fc:aa:be:12:ef:6a:70:82: 10:9a:c9:27:13:78:4f:4d:75:78:fc:c0:fd:08:93: e6:aa:b0:0d:c9:ab:04:24:9d:63:7a:62:e5:ad:da: 99:3d:47:67:2a:71:76:da:b4:c9:ed:01:ab:06:f9: 8b:68:3a:a5:15:cf:73:90:01:b0:6d:18:d4:dc:81: 87:21:63:bc:c4:49:da:66:90:57:fb:5e:5b:89:f1: f2:34:d2:b3:09:ed:bb:3f:e8:99:88:66:7f:3b:04: bf:bf:1f:06:63:73:95:3c:55:48:86:51:c3:c2:34: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6A:63:3F:B9:BF:58:6D:B9:DD:14:4F:17:63:2C:E8:0A:63:D3:25 X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b7:78:a7:f7:da:7b:af:f8:78:ec:95:07:ef:03:a6:56:e2: 1c:28:07:a5:65:f1:23:bd:a9:25:ce:49:7c:4e:6d:73:40:97: 69:02:76:f7:61:af:dd:8e:41:ec:24:6d:31:26:28:af:80:5f: f8:0b:46:9c:53:1b:5c:af:ed:cf:3d:fa:d5:da:f9:46:a0:06: d5:c8:ac:5f:6e:6a:10:92:a1:b2:cd:8b:b8:26:60:32:59:a9: 2b:48:f6:c0:0e:3c:0d:b5:dd:5a:35:ca:4b:28:f8:0d:74:a9: 1d:e8:b8:82:0c:96:5a:fb:96:27:47:a2:c4:77:7d:81:2f:98: db:3c:98:24:1b:bc:5d:9c:dd:af:6b:d6:50:f9:0e:30:8d:62: 31:51:6a:69:5b:f1:5e:f4:09:24:b4:30:98:d6:a6:e1:d2:3b: 79:e0:b7:e5:14:3a:d0:97:01:e2:2f:a0:e8:76:be:76:bb:a7: ea:a6:6c:b0:f7:4f:98:8a:07:5d:fa:fe:8b:7b:76:c3:58:5c: 9a:62:55:88:71:98:53:43:a5:4a:1f:f6:87:0d:22:e1:d7:99: d4:bc:17:41:a6:2f:3b:fb:53:e8:67:68:44:66:42:fe:1d:6b: dd:a3:cb:09:49:73:a0:14:7b:8b:92:de:34:0c:6d:37:97:62: 80:d0:ab:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjYwNzIzMDAyNzAxWhcNMjYwNzMwMDAyNzAxWjAYMRYwFAYD VQQDEw02YTYxNWZkNS02ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrwQrKwlfPX3y3R1K3MpB+4GyfNO+Iszw9wMFyGPzjxk90tSYo35nSG1HsVQ k0xNJcsxT/nJKraC3JKHig7rGN6/4F7byF9PpVgepGgnqqz5hysRqaLHzdZ5poXB oAg6e/WoLSylNtnH0sr0ii98ZEDMEfQGt31H8NmtFyMFj6Lz1ZPdH6RrauG/trfG /Kq+Eu9qcIIQmsknE3hPTXV4/MD9CJPmqrANyasEJJ1jemLlrdqZPUdnKnF22rTJ 7QGrBvmLaDqlFc9zkAGwbRjU3IGHIWO8xEnaZpBX+15bifHyNNKzCe27P+iZiGZ/ OwS/vx8GY3OVPFVIhlHDwjQTnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFqYz+5 v1htud0UTxdjLOgKY9MlMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj7d4p/fae6/4eOyVB+8DplbiHCgHpWXxI72pJc5JfE5tc0CXaQJ292Gv3Y5B 7CRtMSYor4Bf+AtGnFMbXK/tzz361dr5RqAG1cisX25qEJKhss2LuCZgMlmpK0j2 wA48DbXdWjXKSyj4DXSpHei4ggyWWvuWJ0eixHd9gS+Y2zyYJBu8XZzdr2vWUPkO MI1iMVFqaVvxXvQJJLQwmNam4dI7eeC35RQ60JcB4i+g6Ha+drun6qZssPdPmIoH Xfr+i3t2w1hcmmJViHGYU0OlSh/2hw0i4deZ1LwXQaYvO/tT6GdoRGZC/h1r3aPL CUlzoBR7i5LeNAxtN5digNCrWg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:02 2026 by rpki-client