$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json) Hash identifier: FlwBct6rtp8/pdyyT2f0uY3GvmMMV8e1aJyfpnvuwyE= Subject key identifier: 66:FF:4D:B1:02:CD:29:C8:E4:F1:6E:DB:1D:3E:33:54:FA:D4:94:C7 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0B14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft Manifest number: 0AF2 Signing time: Wed 22 Jul 2026 19:45:50 +0000 Manifest this update: Wed 22 Jul 2026 19:45:50 +0000 Manifest next update: Wed 29 Jul 2026 19:45:50 +0000 Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: sXkLnBPrDBpAX5Ce4VixVqgYPMSSZWipn36NQuNBaBA=) 2: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: gy8HkzaIVkMxQWo5W1rlovO0xcxrRwNFB9e9LFzD4L4=) 3: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: mOy9DmAYzZsYbEQhE2U9Un7tfVf8mtaB1bU3ox64k7k=) 4: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: V0PmmwgVntdjWwqgOyfzApLR6YpbY/HvQB4HeE20/PU=) 5: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: 69Hh0J+L+6D5El7B0qbhyv5Br90p9YiCbQw2deQTNhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Validity Not Before: Jul 22 19:45:50 2026 GMT Not After : Jul 29 19:45:50 2026 GMT Subject: CN=6a611dee-140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:ec:98:62:af:bc:e5:ae:9e:5a:a3:27:8e: f1:f0:f3:7b:f5:32:a3:0b:f4:8f:86:33:da:f2:25: fb:6a:45:ae:8d:06:7b:4d:63:66:8b:ec:ec:3b:96: ac:a6:12:45:f5:43:87:af:2e:53:ec:fd:b5:3f:e7: 7a:b1:fd:cc:da:a0:ea:c6:f6:81:8c:d5:e9:0d:da: fc:65:90:7c:7a:44:c4:03:4a:32:54:30:d7:6b:e7: 1c:b0:13:2f:dd:c0:0e:0a:84:96:78:64:8c:78:eb: 05:d2:f9:51:2d:b8:36:fe:1d:8e:17:e1:ac:ae:89: 94:62:c0:79:55:80:8a:92:ee:7a:cc:68:aa:e7:15: a5:51:f7:82:6c:6a:4b:d2:8c:77:c2:27:62:53:9c: 57:37:1f:de:7c:a7:51:cd:a4:02:08:85:10:af:98: 2b:72:e5:76:a4:54:5a:ac:f3:7b:a2:90:20:df:99: 8c:d0:bf:d2:2f:97:96:55:29:ae:ff:3a:46:75:d9: 11:22:ca:57:70:cb:c1:55:58:0d:64:12:83:cc:e2: 40:49:60:f7:e4:41:70:aa:ab:14:ad:10:61:e4:91: db:7d:a3:e9:69:e5:78:23:db:e1:b6:7f:31:e2:50: 64:04:bd:0a:7e:46:a7:1f:ac:60:a9:53:24:ed:84: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FF:4D:B1:02:CD:29:C8:E4:F1:6E:DB:1D:3E:33:54:FA:D4:94:C7 X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ca:c0:57:96:76:8e:7c:2c:26:06:79:06:51:f1:5f:88:4b: 08:c5:25:66:7b:17:1b:60:51:73:89:93:30:72:be:31:c4:01: 7a:ed:25:a9:4d:37:5c:fa:2b:08:3e:93:2d:3e:52:2b:92:18: b6:b2:8f:d3:84:83:5c:51:b4:16:b2:21:b8:2e:1b:f8:1e:7a: d3:8a:e5:d3:09:17:47:ab:67:c8:72:86:6d:07:d6:08:f2:84: 7d:08:01:9e:e7:6f:41:66:62:32:e7:fe:09:7c:49:71:fc:f5: ee:a8:5c:37:62:3f:2c:68:91:b0:9e:e3:81:05:d5:e7:2b:ca: c4:a3:47:29:04:c6:6b:2c:56:54:71:9c:6e:5c:e3:c5:1e:04: da:fa:86:9c:12:38:80:39:2e:58:27:43:0c:10:db:2b:de:92: 45:e0:1e:61:d0:90:ef:99:d4:71:4d:66:0f:2f:13:cf:9e:b8: 7c:7a:87:cf:76:a5:28:0a:49:e5:f4:3c:ba:c1:e1:84:f2:f9: 83:18:b6:96:26:a3:b3:9d:1f:bb:35:85:30:bd:3a:33:78:2b: 53:53:ca:11:33:00:bb:af:fc:b4:3b:1e:12:04:71:bb:8c:98: 48:4c:3c:9c:86:ba:49:29:b4:1d:7b:fa:ed:85:eb:e2:38:9c: e2:f9:e0:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjYwNzIyMTk0NTUwWhcNMjYwNzI5MTk0NTUwWjAYMRYwFAYD VQQDEw02YTYxMWRlZS0xNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArejsmGKvvOWunlqjJ47x8PN79TKjC/SPhjPa8iX7akWujQZ7TWNmi+zsO5as phJF9UOHry5T7P21P+d6sf3M2qDqxvaBjNXpDdr8ZZB8ekTEA0oyVDDXa+ccsBMv 3cAOCoSWeGSMeOsF0vlRLbg2/h2OF+GsromUYsB5VYCKku56zGiq5xWlUfeCbGpL 0ox3widiU5xXNx/efKdRzaQCCIUQr5grcuV2pFRarPN7opAg35mM0L/SL5eWVSmu /zpGddkRIspXcMvBVVgNZBKDzOJASWD35EFwqqsUrRBh5JHbfaPpaeV4I9vhtn8x 4lBkBL0KfkanH6xgqVMk7YQeFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGb/TbEC zSnI5PFu2x0+M1T61JTHMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht cG5teHRnbHR0blJUb0RxNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVsrAV5Z2jnwsJgZ5BlHxX4hLCMUlZnsXG2BRc4mTMHK+McQBeu0lqU03XPor CD6TLT5SK5IYtrKP04SDXFG0FrIhuC4b+B5604rl0wkXR6tnyHKGbQfWCPKEfQgB nudvQWZiMuf+CXxJcfz17qhcN2I/LGiRsJ7jgQXV5yvKxKNHKQTGayxWVHGcblzj xR4E2vqGnBI4gDkuWCdDDBDbK96SReAeYdCQ75nUcU1mDy8Tz564fHqHz3alKApJ 5fQ8usHhhPL5gxi2liajs50fuzWFML06M3grU1PKETMAu6/8tDseEgRxu4yYSEw8 nIa6SSm0HXv67YXr4jic4vng0Q== -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:26 2026 by rpki-client