$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: pkpBCgorA17UTYlUvQmwLOozsbpXBVxVlkHTlaS+Ti8= Subject key identifier: 42:6A:9A:CC:0E:C9:F2:06:79:2A:A8:06:7F:64:9D:BD:2E:9B:E5:18 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 053B Signing time: Thu 23 Jul 2026 00:23:51 +0000 Manifest this update: Thu 23 Jul 2026 00:23:51 +0000 Manifest next update: Thu 30 Jul 2026 00:23:51 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: eS37Um37lyZsM0b9C6/mvaHKxprqhvB7/6XhV/p9YVw=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) 3: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Jul 23 00:23:51 2026 GMT Not After : Jul 30 00:23:51 2026 GMT Subject: CN=6a615f17-9b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:86:32:cb:eb:59:2e:2a:71:67:1a:22:a4: 21:7b:f4:cd:38:40:cb:04:f6:1a:a4:b4:7d:2a:47: 3d:e7:1c:ee:43:d4:48:c1:b4:49:cc:12:0b:14:c1: 39:d9:3e:48:64:e1:f0:0a:f9:a0:a5:08:c3:04:82: 82:0e:d1:8c:1f:3d:9e:cc:88:cc:5d:9a:1e:a5:9e: 15:51:98:f9:c5:5f:69:01:48:ae:3f:b4:43:c9:93: cc:72:8a:16:d5:ae:1c:58:11:f1:c8:16:c1:a5:85: 06:03:cf:d9:24:87:7f:a9:91:24:28:45:12:5a:4b: f7:98:cb:84:4e:ba:dc:35:91:80:e8:59:a3:31:10: 3d:48:7f:8b:63:11:e8:95:d6:30:ff:d2:8c:fe:7b: 9c:5a:5d:51:df:73:bd:f9:e1:f5:15:dc:12:3d:68: 61:b0:16:c7:9b:2f:4c:12:06:4a:ac:16:68:28:0b: 11:a2:04:6e:1b:e3:df:eb:bc:d7:25:45:34:4d:84: 52:49:a4:e3:4c:ab:ea:1f:dd:b6:6b:ae:75:11:74: 49:27:4b:1a:6d:16:63:95:ba:87:3e:39:b3:60:fa: b6:4e:1c:04:7b:d7:44:63:16:78:8b:e9:ac:a9:44: 0d:d4:1d:68:6a:39:aa:91:67:e9:e3:09:d0:d4:d9: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6A:9A:CC:0E:C9:F2:06:79:2A:A8:06:7F:64:9D:BD:2E:9B:E5:18 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:25:b4:ff:b8:63:53:48:57:19:2f:4a:43:d1:25:5b:2d:9f: 6d:2f:60:18:89:d3:dd:e4:3a:98:9c:e4:30:57:3c:72:9e:b7: 9e:57:25:4c:85:34:b6:a1:19:88:00:f1:77:01:59:bb:4a:61: 36:3f:80:7d:05:81:e2:3b:b2:53:80:1d:ed:f1:e6:b3:cf:44: f5:42:d2:fc:9c:e6:0f:c5:0c:1d:22:8f:76:ee:55:51:80:07: 4d:bb:08:c9:98:07:5a:97:f8:f8:ae:6d:62:23:7b:47:58:82: 24:c0:cc:9c:82:d1:05:92:ab:0b:30:45:61:2b:dc:94:c7:40: 44:6c:a9:b3:03:8c:2e:bf:fe:70:64:bb:f7:03:97:8a:9d:74: 3b:ba:4c:8c:05:64:84:a1:92:9e:3d:a4:ad:f7:74:fc:ab:f0: 13:17:18:63:49:60:f3:78:9a:e0:d6:bf:db:97:e4:60:ca:c6: d3:e8:e7:f1:22:c8:d0:d4:30:18:16:1e:dd:f4:5f:ee:06:f5: d8:ef:d2:4d:08:14:15:2c:0f:19:14:ed:f7:5e:3c:52:e3:fc: f6:10:21:43:65:b3:53:df:43:08:a8:e9:42:f6:6f:ea:d9:b9: 86:59:ac:ba:6a:b7:7d:6c:2f:3a:8a:a2:06:ba:c9:50:22:1f: f3:6d:2a:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYwNzIzMDAyMzUxWhcNMjYwNzMwMDAyMzUxWjAYMRYwFAYD VQQDEw02YTYxNWYxNy05YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNqGMsvrWS4qcWcaIqQhe/TNOEDLBPYapLR9Kkc95xzuQ9RIwbRJzBILFME5 2T5IZOHwCvmgpQjDBIKCDtGMHz2ezIjMXZoepZ4VUZj5xV9pAUiuP7RDyZPMcooW 1a4cWBHxyBbBpYUGA8/ZJId/qZEkKEUSWkv3mMuETrrcNZGA6FmjMRA9SH+LYxHo ldYw/9KM/nucWl1R33O9+eH1FdwSPWhhsBbHmy9MEgZKrBZoKAsRogRuG+Pf67zX JUU0TYRSSaTjTKvqH922a651EXRJJ0sabRZjlbqHPjmzYPq2ThwEe9dEYxZ4i+ms qUQN1B1oajmqkWfp4wnQ1Nl7iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJqmswO yfIGeSqoBn9knb0um+UYMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCW0/7hjU0hXGS9KQ9ElWy2fbS9gGInT3eQ6mJzkMFc8cp63nlclTIU0tqEZ iADxdwFZu0phNj+AfQWB4juyU4Ad7fHms89E9ULS/JzmD8UMHSKPdu5VUYAHTbsI yZgHWpf4+K5tYiN7R1iCJMDMnILRBZKrCzBFYSvclMdARGypswOMLr/+cGS79wOX ip10O7pMjAVkhKGSnj2krfd0/KvwExcYY0lg83ia4Na/25fkYMrG0+jn8SLI0NQw GBYe3fRf7gb12O/STQgUFSwPGRTt9148UuP89hAhQ2WzU99DCKjpQvZv6tm5hlms umq3fWwvOoqiBrrJUCIf820qdQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:24:43 2026 by rpki-client