$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: 135M7BctY6ab2YPLnjH4VwENA8XB8D0i1Qn3/BIQ3I0= Subject key identifier: B3:4E:B9:C8:89:EF:6D:56:F5:2F:0E:2D:B2:97:A8:09:96:2B:68:A5 Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B3E Signing time: Wed 22 Jul 2026 19:43:56 +0000 Manifest this update: Wed 22 Jul 2026 19:43:56 +0000 Manifest next update: Wed 29 Jul 2026 19:43:56 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: N9sCEA5YC7lhuVKw6bJ/ba6KyS6u11hfFy/vHeWlH4o=) 2: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) 3: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) 4: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Jul 22 19:43:56 2026 GMT Not After : Jul 29 19:43:56 2026 GMT Subject: CN=6a611d7c-4dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:3a:c8:b1:d6:c0:cc:1d:34:4f:0b:9e:80: 18:06:60:a1:50:6b:93:d9:9f:1c:39:bd:59:8a:36: 06:21:df:ea:5f:da:0d:38:e4:02:88:b2:e9:32:55: 94:4f:9c:b5:9d:f0:f9:85:e9:98:4f:7e:9a:bc:ce: bb:50:18:7e:97:d8:aa:56:3f:d1:fc:88:57:fb:f8: b9:95:c0:fd:68:03:92:fb:50:6b:02:dc:9c:7d:32: 6b:b4:92:c3:1e:0b:4e:d2:d9:61:6f:80:7e:00:d7: 2d:e0:12:93:28:ee:49:7a:6a:a4:ea:e4:b1:95:ae: d5:dd:c4:cd:7e:69:0e:72:e7:af:21:d8:79:c3:4d: 84:33:34:c7:f3:5f:e6:c6:cb:f2:36:65:17:12:98: a8:62:cc:b5:f8:f3:ea:87:d3:b7:25:59:8e:09:f2: 6d:51:cf:8a:a4:4c:7b:c6:8c:1d:0b:65:ee:ef:c9: ca:29:e0:78:22:ea:a2:fb:33:08:09:95:99:b1:e0: e7:5e:4d:06:b0:da:c2:99:e7:61:0c:06:34:9f:97: de:0c:50:8e:47:04:63:54:f3:e5:53:8d:be:a3:4d: eb:ed:98:19:54:0e:01:13:ca:05:e4:9b:38:81:84: 69:7b:8a:fd:f0:5b:5d:3c:67:be:ba:0b:0f:4b:9f: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4E:B9:C8:89:EF:6D:56:F5:2F:0E:2D:B2:97:A8:09:96:2B:68:A5 X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e9:4d:63:0a:d8:bf:07:cc:68:67:d3:54:fe:39:71:19:26: 70:03:fb:43:04:57:21:82:2e:be:af:57:4f:40:7d:6e:1f:50: 7f:6b:17:39:34:29:c8:c7:d7:86:d0:4e:29:fc:83:a2:70:18: ef:09:f5:18:ce:19:e0:e3:f5:af:33:9f:f4:1d:ee:4a:36:06: 13:87:7b:e9:0f:c7:c5:4e:e1:e5:96:9e:fd:8b:1e:3a:f9:0c: 0c:6a:99:7c:d9:d2:07:3e:59:6b:4a:4f:9f:0e:2e:bd:95:4d: d9:6a:0e:58:0b:1f:ff:7f:3d:d6:c7:24:41:cb:10:52:aa:ba: 41:2d:ca:32:eb:d4:41:2d:c9:39:05:18:4c:73:92:4a:9d:53: 89:65:d0:6d:9a:a8:ae:4e:d0:12:07:5a:80:ab:b4:66:fe:c7: ec:20:de:97:ef:8f:dc:e8:52:0a:c4:b5:56:2d:79:bb:82:d3: c0:af:94:a3:f4:7a:3c:d2:fb:33:5f:ff:08:40:f8:60:a1:82: 5c:ee:47:ec:cd:68:92:aa:bc:2a:0f:bc:8e:f1:ea:6c:d3:b5: 77:38:8d:c7:94:89:4f:2a:1f:41:e9:43:9f:38:be:23:a0:d9: e2:80:b6:0f:36:dc:f7:4b:a0:5b:50:25:b5:b8:b4:0b:79:16: f6:a4:aa:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYwNzIyMTk0MzU2WhcNMjYwNzI5MTk0MzU2WjAYMRYwFAYD VQQDEw02YTYxMWQ3Yy00ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcQ6yLHWwMwdNE8LnoAYBmChUGuT2Z8cOb1ZijYGId/qX9oNOOQCiLLpMlWU T5y1nfD5hemYT36avM67UBh+l9iqVj/R/IhX+/i5lcD9aAOS+1BrAtycfTJrtJLD HgtO0tlhb4B+ANct4BKTKO5Jemqk6uSxla7V3cTNfmkOcuevIdh5w02EMzTH81/m xsvyNmUXEpioYsy1+PPqh9O3JVmOCfJtUc+KpEx7xowdC2Xu78nKKeB4Iuqi+zMI CZWZseDnXk0GsNrCmedhDAY0n5feDFCORwRjVPPlU42+o03r7ZgZVA4BE8oF5Js4 gYRpe4r98FtdPGe+ugsPS58KxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNOuciJ 721W9S8OLbKXqAmWK2ilMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVelNYwrYvwfMaGfTVP45cRkmcAP7QwRXIYIuvq9XT0B9bh9Qf2sXOTQpyMfX htBOKfyDonAY7wn1GM4Z4OP1rzOf9B3uSjYGE4d76Q/HxU7h5Zae/YseOvkMDGqZ fNnSBz5Za0pPnw4uvZVN2WoOWAsf/3891sckQcsQUqq6QS3KMuvUQS3JOQUYTHOS Sp1TiWXQbZqork7QEgdagKu0Zv7H7CDel++P3OhSCsS1Vi15u4LTwK+Uo/R6PNL7 M1//CED4YKGCXO5H7M1okqq8Kg+8jvHqbNO1dziNx5SJTyofQelDnzi+I6DZ4oC2 Dzbc90ugW1Altbi0C3kW9qSqvQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:34 2026 by rpki-client