$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: qhfm9y+32EY9obNcMSlT8YA9HT7kHE8QuCr49B38Aos= Subject key identifier: 55:2F:CE:04:BA:C4:12:BA:0C:18:9B:19:B7:67:E9:B1:19:50:89:5D Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 0224 Signing time: Wed 22 Jul 2026 17:45:18 +0000 Manifest this update: Wed 22 Jul 2026 17:45:17 +0000 Manifest next update: Wed 29 Jul 2026 17:45:17 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: XQ7KNRjWOiOSqxxkL82QgBB2zJRPiezWZ4CGF0633/M=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: oB4kxasRgRq+GKJ70NUc/sJMH3q5nYfTRjnemmCHnis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Jul 22 17:45:17 2026 GMT Not After : Jul 29 17:45:17 2026 GMT Subject: CN=6a6101ae-0362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:c3:48:50:44:d2:68:b3:a3:6c:3d:12:2e: 78:4b:35:64:79:f2:46:a1:dd:22:bb:49:cb:59:1d: 9a:0e:fa:b9:b3:bd:bb:f1:72:52:0a:69:9c:83:d2: 7c:c4:e2:68:10:63:b6:fb:78:aa:90:96:6a:78:41: 12:b8:88:80:53:1c:38:ac:75:1f:da:e1:ca:33:14: 5e:f6:2d:d9:67:ff:c3:48:f6:02:50:8d:b4:12:c8: 02:13:48:9b:6a:f3:88:81:2c:e4:20:6d:43:d7:a6: 57:73:41:91:c0:1f:41:7f:f4:70:82:d3:75:86:e3: 7b:9e:d8:74:68:0a:e4:af:34:49:7c:34:fd:95:75: 69:e6:30:1d:1b:34:3a:32:c6:6f:72:8d:24:46:52: d3:3b:93:17:90:d3:d3:8b:9c:ff:e0:fb:94:28:e2: 37:2e:dc:46:d0:fc:3d:b8:2e:8b:1a:dc:44:53:d7: 64:33:47:6e:48:c4:28:81:c1:86:6e:9b:cf:5f:d1: 6a:d4:76:aa:b1:42:aa:24:4a:0d:cc:a1:90:52:7e: 01:38:7b:6b:e9:e1:b1:66:a9:87:6b:64:81:ee:6a: ed:40:b9:39:ac:38:ea:0d:a1:37:39:09:32:8e:05: 57:e5:86:c3:40:50:a7:d4:20:6f:0b:1c:89:5a:7f: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:CE:04:BA:C4:12:BA:0C:18:9B:19:B7:67:E9:B1:19:50:89:5D X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:01:74:b3:82:23:ec:1b:77:9a:7f:6e:ad:f0:2a:f7:0b:71: 82:ae:97:b6:3e:2f:88:66:e6:5a:3f:21:e3:e3:3b:8f:f7:1a: 76:ad:88:c1:ce:01:25:5e:05:ae:70:40:72:c0:8f:8c:4a:37: 6f:a5:40:c5:80:8d:2e:9f:13:13:3b:8a:ae:fc:28:ba:e3:04: 21:c3:c4:15:3f:e5:c0:5a:2a:ac:05:9a:19:8c:88:fb:5e:e3: 20:47:d8:a8:45:7f:8e:e4:34:b4:03:a9:b8:3a:22:85:56:76: 79:18:60:f9:a0:0f:87:33:4e:ba:f5:c2:71:34:d7:ef:13:e8: 70:cb:1d:ca:66:48:0a:bf:1c:42:2e:9b:5e:f4:4b:db:66:59: b3:aa:d1:df:72:34:85:20:ec:ae:97:cf:11:e9:a2:fd:f7:c5: 47:f8:7c:4e:a9:9b:03:89:22:36:6a:58:69:98:e3:6c:ed:71: 86:16:b8:64:f8:44:25:a0:00:1e:f7:8a:3a:3b:46:f7:c1:86: 17:60:de:39:fa:2f:c3:3a:88:7a:20:e5:4e:d7:4f:ea:63:c9: eb:04:3c:a4:7d:ea:a8:a8:bd:af:30:0b:80:d4:79:6c:6b:d8: cf:95:6b:90:76:63:d5:30:4b:4e:63:c8:53:cd:56:5f:08:a7: bc:3b:bb:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwNzIyMTc0NTE3WhcNMjYwNzI5MTc0NTE3WjAYMRYwFAYD VQQDEw02YTYxMDFhZS0wMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEHDSFBE0mizo2w9Ei54SzVkefJGod0iu0nLWR2aDvq5s7278XJSCmmcg9J8 xOJoEGO2+3iqkJZqeEESuIiAUxw4rHUf2uHKMxRe9i3ZZ//DSPYCUI20EsgCE0ib avOIgSzkIG1D16ZXc0GRwB9Bf/RwgtN1huN7nth0aArkrzRJfDT9lXVp5jAdGzQ6 MsZvco0kRlLTO5MXkNPTi5z/4PuUKOI3LtxG0Pw9uC6LGtxEU9dkM0duSMQogcGG bpvPX9Fq1HaqsUKqJEoNzKGQUn4BOHtr6eGxZqmHa2SB7mrtQLk5rDjqDaE3OQky jgVX5YbDQFCn1CBvCxyJWn8g/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUvzgS6 xBK6DBibGbdn6bEZUIldMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHgF0s4Ij7Bt3mn9urfAq9wtxgq6Xtj4viGbmWj8h4+M7j/cadq2Iwc4BJV4F rnBAcsCPjEo3b6VAxYCNLp8TEzuKrvwouuMEIcPEFT/lwFoqrAWaGYyI+17jIEfY qEV/juQ0tAOpuDoihVZ2eRhg+aAPhzNOuvXCcTTX7xPocMsdymZICr8cQi6bXvRL 22ZZs6rR33I0hSDsrpfPEemi/ffFR/h8TqmbA4kiNmpYaZjjbO1xhha4ZPhEJaAA HveKOjtG98GGF2DeOfovwzqIeiDlTtdP6mPJ6wQ8pH3qqKi9rzALgNR5bGvYz5Vr kHZj1TBLTmPIU81WXwinvDu75g== -----END CERTIFICATE-----Generated at Fri Jul 24 15:17:25 2026 by rpki-client