$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft File: OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json) Hash identifier: nU7vUpHTSuItlRLe/T0yoateLlJMCNKKSRvjG+5XVcA= Subject key identifier: A1:DD:B1:F3:3B:44:93:2C:FA:A3:86:C1:B5:28:AC:56:A6:2B:A9:11 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft Manifest number: 087E Signing time: Wed 22 Jul 2026 21:16:37 +0000 Manifest this update: Wed 22 Jul 2026 21:16:37 +0000 Manifest next update: Wed 29 Jul 2026 21:16:37 +0000 Files and hashes: 1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: 4Zm1bJmtItvS/5jVlqxJncn8R0sWhmkmX1XT221pgdM=) 2: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=) 3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=) 4: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=) 5: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Jul 22 21:16:37 2026 GMT Not After : Jul 29 21:16:37 2026 GMT Subject: CN=6a613335-8033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:ed:48:ff:0c:77:e5:fb:65:ed:81:72:8d: 4e:cd:00:0f:11:af:6d:d4:26:3d:0c:c1:cb:88:73: 74:31:9a:d2:e2:94:8c:4e:6f:b2:29:6e:e3:56:6a: 55:e6:71:54:61:8f:5f:b9:64:01:5e:28:53:7f:a3: e4:6b:23:33:be:fb:ae:6b:f0:b8:e0:a6:cd:fa:6a: 23:2c:39:b1:28:a3:b9:de:0c:ca:37:26:97:5b:67: 4f:51:c6:5b:8b:8c:6b:04:03:9c:3f:e6:c7:12:cf: 6e:4a:1c:55:c7:88:7a:87:38:50:31:bd:aa:20:62: f4:21:59:9f:ca:2b:c7:64:ee:ea:81:56:da:bd:7b: e0:68:d8:d5:fd:b0:ff:18:91:fc:34:90:24:b1:f3: 0b:0c:7c:9d:cb:45:e2:ad:db:5c:4c:f0:62:12:27: c3:cb:ff:ff:0b:8e:5f:22:3e:e3:d0:c6:dc:e3:c0: e1:3e:c2:67:62:d4:4b:6e:2e:b1:4a:01:08:cc:ad: 87:6e:0c:ce:dc:e4:f9:cd:f1:f6:90:89:a8:20:ba: b3:1f:69:b7:eb:bb:ef:b1:bf:95:b9:de:7d:e2:6c: 2c:8e:59:50:16:01:8b:36:a3:22:a6:b5:34:c9:d9: 38:c3:88:99:dc:55:9b:7d:68:9f:c3:5a:ef:5d:31: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DD:B1:F3:3B:44:93:2C:FA:A3:86:C1:B5:28:AC:56:A6:2B:A9:11 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5d:3d:4f:00:5f:32:b2:98:d7:5e:27:9b:fa:3e:3e:3a:38: 0b:b7:d7:38:e6:73:06:26:f4:09:37:a2:3e:50:3c:6b:2d:0e: 17:ac:7d:b6:b4:e6:c6:4f:a7:33:1f:6f:5a:91:c2:43:3a:18: 98:f3:df:c8:23:ef:d5:e2:5a:9c:6c:7c:f9:27:f7:4e:24:bf: a3:c1:c7:f4:95:a8:a7:14:33:b8:4a:75:f4:40:33:4c:0b:21: 14:eb:ed:c7:12:09:eb:79:81:b6:b5:08:be:92:61:a6:7c:df: 54:34:c4:26:bd:ef:09:a1:47:93:cf:76:a5:7b:81:05:f9:0e: ae:26:9e:fa:e2:8b:30:ed:5c:29:a1:19:58:b7:5e:04:d8:9a: 30:ad:e5:e2:08:a6:c6:e6:eb:39:9f:f9:c3:f7:47:0c:de:98: 96:ab:ec:40:ed:fe:68:c5:9a:c0:78:3e:41:82:7d:d9:09:19: 32:7b:9b:8e:8f:ca:b4:a6:0b:72:32:41:eb:4e:05:11:45:2a: 4f:cf:df:41:e6:ca:a2:91:83:53:2a:c0:af:13:8b:f3:38:73: a1:6d:be:28:14:33:0b:b5:3d:b8:c3:f8:27:44:e0:80:b6:28: 3e:e3:9b:2d:15:d6:54:f1:83:a1:2c:44:b8:1f:34:f0:87:0e: e6:5f:42:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjYwNzIyMjExNjM3WhcNMjYwNzI5MjExNjM3WjAYMRYwFAYD VQQDEw02YTYxMzMzNS04MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdbtSP8Md+X7Ze2Bco1OzQAPEa9t1CY9DMHLiHN0MZrS4pSMTm+yKW7jVmpV 5nFUYY9fuWQBXihTf6PkayMzvvuua/C44KbN+mojLDmxKKO53gzKNyaXW2dPUcZb i4xrBAOcP+bHEs9uShxVx4h6hzhQMb2qIGL0IVmfyivHZO7qgVbavXvgaNjV/bD/ GJH8NJAksfMLDHydy0XirdtcTPBiEifDy///C45fIj7j0Mbc48DhPsJnYtRLbi6x SgEIzK2HbgzO3OT5zfH2kImoILqzH2m367vvsb+Vud594mwsjllQFgGLNqMiprU0 ydk4w4iZ3FWbfWifw1rvXTEaOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHdsfM7 RJMs+qOGwbUorFamK6kRMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX109TwBfMrKY114nm/o+Pjo4C7fXOOZzBib0CTeiPlA8ay0OF6x9trTmxk+n Mx9vWpHCQzoYmPPfyCPv1eJanGx8+Sf3TiS/o8HH9JWopxQzuEp19EAzTAshFOvt xxIJ63mBtrUIvpJhpnzfVDTEJr3vCaFHk892pXuBBfkOriae+uKLMO1cKaEZWLde BNiaMK3l4gimxubrOZ/5w/dHDN6YlqvsQO3+aMWawHg+QYJ92QkZMnubjo/KtKYL cjJB604FEUUqT8/fQebKopGDUyrArxOL8zhzoW2+KBQzC7U9uMP4J0TggLYoPuOb LRXWVPGDoSxEuB808IcO5l9CzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:49:47 2026 by rpki-client