$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: LYoQGecc67hdpl5IHgHkPaSWyzkSiP6j0nUUZl70+/s= Subject key identifier: E9:53:F1:F5:1E:44:62:A6:D2:90:7C:8C:85:F4:EA:6E:D7:21:4C:EA Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 1141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 1136 Signing time: Wed 22 Jul 2026 17:22:37 +0000 Manifest this update: Wed 22 Jul 2026 17:22:37 +0000 Manifest next update: Wed 29 Jul 2026 17:22:37 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: 6vIY27UugismGKDjMQwWNNFC7aYT0Lf1ufYLKPmBxSs=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: Qlspkhh8uor8ecMraj5PR2UqS4cARaGBWVRKRXzt500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4417 (0x1141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Jul 22 17:22:37 2026 GMT Not After : Jul 29 17:22:37 2026 GMT Subject: CN=6a60fc5d-1bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:c4:f5:19:82:d7:89:68:34:9d:df:ef:56: 80:e7:e3:28:41:37:3d:2c:e2:79:c1:cf:9f:8a:2f: a8:dd:e7:d9:78:a5:5f:f8:f3:11:d4:1d:e7:99:29: 76:cf:a2:f0:46:05:29:07:d4:ed:a3:2d:cb:ac:d8: 70:b9:16:2b:89:a4:87:e3:33:35:97:53:b7:d1:23: e3:30:5c:4b:78:85:12:d9:2d:c7:c8:d7:3b:cc:cc: 51:6f:75:7c:48:4a:05:aa:f1:d1:7d:1c:6c:7a:ee: a4:9f:03:92:9b:5d:84:09:0e:a1:a1:fb:82:b5:dc: fa:8e:94:d0:28:fe:b2:62:a8:cf:0e:6e:64:9b:67: a8:db:c4:79:92:59:c3:dc:1b:59:81:ff:6a:fb:f7: 46:ff:c9:43:ec:34:89:61:72:c4:ef:74:b1:74:b7: 2d:d2:58:bd:0e:de:d5:a4:bc:28:28:3e:23:36:55: b0:89:2a:30:e2:64:7e:26:1a:49:97:57:e3:f9:60: 1e:bd:f6:c2:e9:c9:ea:fc:ab:ba:a3:1b:12:7b:88: ad:e0:63:aa:2c:23:57:85:ba:67:2f:e1:a1:5c:28: 21:2a:fd:fc:21:6c:c5:61:69:e9:6a:bb:7d:59:58: 52:94:03:f6:41:80:50:75:83:b9:55:6b:ed:d3:5a: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:53:F1:F5:1E:44:62:A6:D2:90:7C:8C:85:F4:EA:6E:D7:21:4C:EA X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:94:8d:c4:71:e2:4d:c7:44:6e:0f:0d:6f:d6:11:ae:80:8f: f6:bd:9c:b5:f1:f7:74:0a:70:e4:d1:dc:61:6c:32:55:e7:a9: c3:1a:20:b7:89:d1:e5:1b:d6:75:ab:64:b3:e4:65:81:30:1c: 5f:0d:95:a4:8b:c3:26:46:74:a8:08:3f:0f:7c:8c:0f:7b:df: b0:82:48:1f:71:87:7d:02:16:32:c1:ce:ed:b9:bd:9e:10:49: 57:6c:6f:0a:3f:0f:5f:a4:45:70:31:4a:62:f5:72:8f:e8:aa: 87:4a:3f:7f:70:4c:01:dc:2c:a4:04:33:12:83:a2:2b:09:2b: 5b:ac:15:41:22:e6:d1:b3:79:f5:59:18:0a:39:65:38:8c:b6: 69:de:b3:96:48:7e:c6:50:1c:34:f6:39:d8:ac:55:7c:29:a5: 3f:19:0c:73:90:1e:bb:67:86:37:1e:ce:a6:16:ca:cd:05:2e: 72:fc:0d:27:ac:7e:a0:4a:b5:ff:99:39:83:80:4d:5a:92:75: 23:8c:77:e1:02:f0:e9:94:65:3c:60:ca:91:72:4b:c4:f1:06: cf:fe:67:07:8e:3d:c9:4d:e4:c0:d5:5e:2a:98:d7:82:4b:8b: fd:a0:75:27:01:c0:3f:9c:be:f7:69:f7:84:5d:77:ba:e0:1a: c6:b3:b5:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjYwNzIyMTcyMjM3WhcNMjYwNzI5MTcyMjM3WjAYMRYwFAYD VQQDEw02YTYwZmM1ZC0xYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8nE9RmC14loNJ3f71aA5+MoQTc9LOJ5wc+fii+o3efZeKVf+PMR1B3nmSl2 z6LwRgUpB9Ttoy3LrNhwuRYriaSH4zM1l1O30SPjMFxLeIUS2S3HyNc7zMxRb3V8 SEoFqvHRfRxseu6knwOSm12ECQ6hofuCtdz6jpTQKP6yYqjPDm5km2eo28R5klnD 3BtZgf9q+/dG/8lD7DSJYXLE73SxdLct0li9Dt7VpLwoKD4jNlWwiSow4mR+JhpJ l1fj+WAevfbC6cnq/Ku6oxsSe4it4GOqLCNXhbpnL+GhXCghKv38IWzFYWnpart9 WVhSlAP2QYBQdYO5VWvt01oY+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlT8fUe RGKm0pB8jIX06m7XIUzqMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaZSNxHHiTcdEbg8Nb9YRroCP9r2ctfH3dApw5NHcYWwyVeepwxogt4nR5RvW datks+RlgTAcXw2VpIvDJkZ0qAg/D3yMD3vfsIJIH3GHfQIWMsHO7bm9nhBJV2xv Cj8PX6RFcDFKYvVyj+iqh0o/f3BMAdwspAQzEoOiKwkrW6wVQSLm0bN59VkYCjll OIy2ad6zlkh+xlAcNPY52KxVfCmlPxkMc5Aeu2eGNx7OphbKzQUucvwNJ6x+oEq1 /5k5g4BNWpJ1I4x34QLw6ZRlPGDKkXJLxPEGz/5nB449yU3kwNVeKpjXgkuL/aB1 JwHAP5y+92n3hF13uuAaxrO1Kw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:06:22 2026 by rpki-client