$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: h33sk9FuXRMqxtwKrSWKe377Qg3dAVXtVEDCwQQeVHE= Subject key identifier: 0A:A5:B4:70:33:9C:EF:6B:03:F3:FC:2A:A8:ED:66:6C:EA:03:EB:38 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: D2 Signing time: Thu 23 Jul 2026 08:39:35 +0000 Manifest this update: Thu 23 Jul 2026 08:39:34 +0000 Manifest next update: Thu 30 Jul 2026 08:39:34 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: OOnReIdUZvtvgQlF0tUCNFeM7NoQHJNbJ4aaSCHQLf0=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=) 3: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=) 4: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Jul 23 08:39:34 2026 GMT Not After : Jul 30 08:39:34 2026 GMT Subject: CN=6a61d347-c760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:3e:0d:33:3e:4d:10:9b:c6:73:e1:a2:25: b9:65:dd:ca:20:4c:b7:62:82:63:37:dc:d7:96:94: a4:c8:cb:e5:c7:3b:ca:82:aa:1c:76:58:18:c0:c2: 7b:3b:68:8f:b9:e3:d2:80:fa:df:c7:60:cd:fe:2b: 75:54:ce:ed:f6:25:cf:67:2c:d2:a8:34:d6:4c:14: e3:f0:d9:6d:5b:d0:c6:4c:37:b7:6a:cd:c0:d5:c0: ec:5a:ed:e9:5d:dc:b2:98:d0:41:bd:ff:12:12:4f: b8:03:e3:f4:fe:c0:8d:69:e7:02:5f:e8:f3:5f:97: 8f:57:4b:c9:46:56:94:43:e8:16:f7:1a:16:c7:c2: a5:89:24:4c:2c:0f:d6:be:87:42:b0:c0:ce:d6:93: c7:d9:ec:f7:db:a6:b2:c9:62:57:96:c8:7a:c6:65: 01:af:03:76:c3:c4:49:25:39:75:dc:d5:f1:64:bf: cc:68:3d:51:c2:c9:40:fd:82:3b:d3:86:8b:74:e6: ed:59:ff:de:84:da:84:8d:c7:dc:49:32:d4:2d:35: 9d:31:5f:a7:d9:2a:37:4d:8c:0d:40:25:02:be:3c: b3:8f:67:5c:00:e1:9f:27:d0:ff:49:69:30:1f:bf: ff:8c:dd:20:8c:61:9f:4b:ff:e8:a8:c9:0f:d0:a7: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A5:B4:70:33:9C:EF:6B:03:F3:FC:2A:A8:ED:66:6C:EA:03:EB:38 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:71:ad:77:3a:be:34:ce:0c:fb:2b:1e:41:08:e7:04:09:4c: 61:23:be:d3:d5:8a:e8:ec:01:29:5b:27:2d:9c:89:03:f9:3d: f5:b4:0b:4f:f5:f2:3d:47:52:c5:a7:03:d5:f4:09:72:aa:b8: 8e:a7:be:d9:54:8b:ff:54:6d:ff:84:90:5d:cd:d0:c6:40:33: 46:e0:fe:e8:72:7f:61:23:24:42:0c:79:85:07:4e:60:4d:76: 5c:98:f5:40:0d:de:9d:50:e7:bc:9c:c4:9c:52:f4:d0:64:4e: ec:05:f1:1a:06:cb:6e:9e:ed:ee:2d:3f:0d:9b:22:fc:46:f4: 72:ef:2b:72:a0:f9:aa:29:39:a2:f2:63:e5:fd:bb:63:82:c6: 3b:bd:82:97:51:41:a2:52:f8:36:db:17:cf:44:21:e0:5d:7f: ab:57:09:79:53:55:d0:55:25:a6:01:09:90:1f:d4:08:63:92: 25:2f:d6:81:da:ac:68:58:60:cf:c3:0a:06:d8:a7:75:1d:05: 62:32:3b:76:ff:3c:96:fa:78:bc:10:9f:90:e2:14:15:85:ec: b5:5e:01:c1:7d:7a:04:b8:c1:5c:f6:c8:0d:a8:d6:42:ab:f5: f1:32:15:73:22:c8:78:55:6e:ba:33:1b:49:0b:c0:4b:5f:8b: da:40:de:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZBMDExMTAvBgNVBAUTKEEwNUVDMjY2QjNDMEJGRDZDRUI1MTcxMDBCRTA1QzUw NUI5NDM2MjQwHhcNMjYwNzIzMDgzOTM0WhcNMjYwNzMwMDgzOTM0WjAYMRYwFAYD VQQDEw02YTYxZDM0Ny1jNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIk+DTM+TRCbxnPhoiW5Zd3KIEy3YoJjN9zXlpSkyMvlxzvKgqocdlgYwMJ7 O2iPuePSgPrfx2DN/it1VM7t9iXPZyzSqDTWTBTj8NltW9DGTDe3as3A1cDsWu3p XdyymNBBvf8SEk+4A+P0/sCNaecCX+jzX5ePV0vJRlaUQ+gW9xoWx8KliSRMLA/W vodCsMDO1pPH2ez326ayyWJXlsh6xmUBrwN2w8RJJTl13NXxZL/MaD1RwslA/YI7 04aLdObtWf/ehNqEjcfcSTLULTWdMV+n2So3TYwNQCUCvjyzj2dcAOGfJ9D/SWkw H7//jN0gjGGfS//oqMkP0KfJRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqltHAz nO9rA/P8KqjtZmzqA+s4MB8GA1UdIwQYMBaAFKBewmazwL/WzrUXEAvgXFBblDYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkEwMS9GNjREM0IyNDU3 QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5Yk90UmNRQy1CY1VGdVVO aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkEwMS9GNjREM0IyNDU3QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5 Yk90UmNRQy1CY1VGdVVOaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmXGtdzq+NM4M+yseQQjnBAlMYSO+09WK6OwBKVsnLZyJA/k99bQLT/XyPUdS xacD1fQJcqq4jqe+2VSL/1Rt/4SQXc3QxkAzRuD+6HJ/YSMkQgx5hQdOYE12XJj1 QA3enVDnvJzEnFL00GRO7AXxGgbLbp7t7i0/DZsi/Eb0cu8rcqD5qik5ovJj5f27 Y4LGO72Cl1FBolL4NtsXz0Qh4F1/q1cJeVNV0FUlpgEJkB/UCGOSJS/WgdqsaFhg z8MKBtindR0FYjI7dv88lvp4vBCfkOIUFYXstV4BwX16BLjBXPbIDajWQqv18TIV cyLIeFVuujMbSQvAS1+L2kDegw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:04:32 2026 by rpki-client