$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: DBzuM7pZXx6SF+VmheGD1sDYukwDDl8N/nd9aej/GQU= Subject key identifier: 70:4E:BA:1B:63:D4:6B:38:7E:E7:50:A5:29:0F:88:B2:A0:64:53:1D Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0CF1 Signing time: Wed 22 Jul 2026 18:38:08 +0000 Manifest this update: Wed 22 Jul 2026 18:38:08 +0000 Manifest next update: Wed 29 Jul 2026 18:38:08 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: L4IpUoKV2gZKvvEQMXCpEOKVwUqkApSXTmq7WiRC/20=) 2: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=) 3: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) 4: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Jul 22 18:38:08 2026 GMT Not After : Jul 29 18:38:08 2026 GMT Subject: CN=6a610e10-dc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:f2:d3:47:cf:96:5a:8d:44:a0:7f:8b:cc: a8:77:3d:68:4e:e8:3f:a8:0e:84:8f:57:b2:58:9f: fb:7d:18:23:cb:03:f6:d7:96:88:0f:57:f2:6d:38: 56:0e:a9:1d:45:ad:34:01:5e:83:66:f6:2f:3f:32: f4:2f:fd:4e:2f:00:e8:8e:4e:b4:ae:52:22:65:9f: d8:57:a1:dc:97:ac:23:03:09:25:9c:c0:ca:37:03: 5c:06:58:c3:80:81:68:df:5d:2d:01:e5:19:b6:e2: f9:87:b1:af:38:fc:67:12:09:2c:1a:a8:4e:af:05: 97:31:a3:46:39:94:b1:90:0b:7c:61:77:67:77:ca: fd:d9:9a:fd:78:58:73:46:4b:64:d7:e7:c8:9c:3e: 36:50:98:a3:a6:7b:1b:fa:ca:0c:35:30:d4:3f:6b: 4a:32:6a:84:a5:24:bd:38:5b:21:da:f3:3d:f6:41: 8d:ed:86:88:2d:10:53:3f:7e:98:ba:12:bf:29:90: 17:61:f5:b3:8e:50:cc:79:4f:61:51:8e:8f:92:23: 0c:7e:ea:c3:87:b0:9d:31:5a:ce:d6:2a:29:26:a5: 4a:6b:4f:98:f6:7d:99:62:44:e0:3d:b7:15:0b:1e: 03:e2:33:13:67:2c:60:b0:96:b5:6b:f0:90:f8:3b: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:BA:1B:63:D4:6B:38:7E:E7:50:A5:29:0F:88:B2:A0:64:53:1D X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:6a:61:44:d3:5d:0b:af:56:3d:36:39:82:f2:db:95:21:b7: 09:7c:6b:80:80:14:e0:59:44:e0:2b:18:af:16:0a:f8:26:d3: 12:b1:28:33:33:a0:ae:3b:91:a1:1b:be:49:90:ab:50:10:30: 16:42:98:fa:9c:a0:63:97:80:0f:e2:bf:70:54:c1:03:13:d4: 6d:22:c8:18:27:4f:37:be:bf:7f:93:79:8a:88:d9:03:24:c0: 7c:04:70:19:d3:a7:e5:03:d9:2e:b2:1e:8b:3c:6d:ee:ff:81: a2:4f:d5:0d:52:7f:ad:2c:f4:c4:c0:7a:83:1d:7a:15:2d:9f: 03:f6:c8:24:04:c8:68:55:8a:b8:4f:fe:73:e0:09:47:b6:29: c3:91:6f:20:12:9e:3b:15:dc:60:c4:1e:a2:06:f7:4a:aa:22: f1:8c:2b:6b:22:97:90:05:60:8b:f7:d8:9c:ad:0b:84:e7:e9: 56:52:e9:a9:5f:77:61:88:ba:8a:01:ff:26:94:40:f3:f4:9d: de:cd:d8:4e:43:77:31:cf:71:f1:d7:97:b3:fc:eb:fd:5c:38: 23:57:d5:2b:49:e4:f0:48:2b:31:65:63:fa:c3:e1:20:52:8c: fb:48:5e:dc:ec:20:be:66:91:eb:ef:94:20:7a:ae:cc:2a:09: 9c:6c:0f:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYwNzIyMTgzODA4WhcNMjYwNzI5MTgzODA4WjAYMRYwFAYD VQQDEw02YTYxMGUxMC1kYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoufy00fPllqNRKB/i8yodz1oTug/qA6Ej1eyWJ/7fRgjywP215aID1fybThW DqkdRa00AV6DZvYvPzL0L/1OLwDojk60rlIiZZ/YV6Hcl6wjAwklnMDKNwNcBljD gIFo310tAeUZtuL5h7GvOPxnEgksGqhOrwWXMaNGOZSxkAt8YXdnd8r92Zr9eFhz Rktk1+fInD42UJijpnsb+soMNTDUP2tKMmqEpSS9OFsh2vM99kGN7YaILRBTP36Y uhK/KZAXYfWzjlDMeU9hUY6PkiMMfurDh7CdMVrO1iopJqVKa0+Y9n2ZYkTgPbcV Cx4D4jMTZyxgsJa1a/CQ+DuSYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBOuhtj 1Gs4fudQpSkPiLKgZFMdMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANWphRNNdC69WPTY5gvLblSG3CXxrgIAU4FlE4CsYrxYK+CbTErEoMzOgrjuR oRu+SZCrUBAwFkKY+pygY5eAD+K/cFTBAxPUbSLIGCdPN76/f5N5iojZAyTAfARw GdOn5QPZLrIeizxt7v+Bok/VDVJ/rSz0xMB6gx16FS2fA/bIJATIaFWKuE/+c+AJ R7Ypw5FvIBKeOxXcYMQeogb3Sqoi8YwrayKXkAVgi/fYnK0LhOfpVlLpqV93YYi6 igH/JpRA8/Sd3s3YTkN3Mc9x8deXs/zr/Vw4I1fVK0nk8EgrMWVj+sPhIFKM+0he 3OwgvmaR6++UIHquzCoJnGwP8w== -----END CERTIFICATE-----Generated at Fri Jul 24 12:27:17 2026 by rpki-client