$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft File: Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft (raw, json) Hash identifier: hQp4esCQWXizfsIFv7qdFxaa/CfYD9XTZ39bdZegha4= Subject key identifier: 91:E4:D3:A1:64:E7:94:D6:20:B3:4A:D5:00:89:FE:A3:3C:E0:7F:AF Authority key identifier: 3A:7A:F4:AE:1C:D1:D0:A8:7C:11:81:BC:B0:F0:2E:14:88:79:B6:BF Certificate issuer: /CN=A91FE179/serialNumber=3A7AF4AE1CD1D0A87C1181BCB0F02E148879B6BF Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft Manifest number: 0A23 Signing time: Wed 22 Jul 2026 20:12:48 +0000 Manifest this update: Wed 22 Jul 2026 20:12:47 +0000 Manifest next update: Wed 29 Jul 2026 20:12:47 +0000 Files and hashes: 1: Onr0rhzR0Kh8EYG8sPAuFIh5tr8.crl (hash: v9nBxLGgtiXomuWpjGFsU+qI5xlIiZYHyiEHrKZAqVI=) 2: FBA5FAE054CC11F1A93963017CEE528E.roa (hash: oVIGvm8C/f4Qca1OaFPc41cqAZBQEmTN9n+2jhWYbIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.crl rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE179, serialNumber=3A7AF4AE1CD1D0A87C1181BCB0F02E148879B6BF Validity Not Before: Jul 22 20:12:47 2026 GMT Not After : Jul 29 20:12:47 2026 GMT Subject: CN=6a612440-d5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:48:95:3c:6a:d6:a9:50:84:dd:28:84:35: 80:b7:b0:dd:ed:b8:a1:26:9f:5f:75:02:45:17:29: 0a:6f:10:f0:ce:bd:82:af:a8:e8:45:27:cf:71:b0: 9d:6a:1c:13:b4:d2:7c:2f:cc:e5:03:57:78:11:2d: 5a:fa:df:aa:f6:1b:da:b7:a6:d5:5d:13:03:ec:16: 8b:9e:b8:b2:2b:7d:75:50:0e:29:5c:0f:bb:9d:56: d6:88:cf:75:35:05:4e:5a:19:84:72:6c:07:4e:59: ea:bf:ee:56:f3:2b:e8:37:aa:f0:6c:57:dd:cd:11: 77:7a:12:63:90:f6:a2:26:a6:97:67:15:41:41:e4: f0:77:dd:88:32:43:95:b7:82:ad:bc:a6:6f:4f:6d: f6:19:85:b9:85:f5:7e:0a:92:77:19:a3:e1:8f:9c: d8:de:c0:d9:93:35:ba:81:f9:04:8d:97:c3:f6:64: c7:a5:1e:b5:48:be:5e:68:b6:ca:b3:b3:89:0b:94: f4:fb:33:18:f0:17:28:cf:af:42:9f:85:e3:86:65: de:d2:5a:a9:73:03:3e:15:d6:5d:3f:85:82:08:c5: 9d:4d:e5:48:6e:54:a2:90:58:03:c7:4e:8e:3e:e0: 18:65:f4:42:62:b8:d4:f4:fb:3b:ea:41:e5:48:de: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:D3:A1:64:E7:94:D6:20:B3:4A:D5:00:89:FE:A3:3C:E0:7F:AF X509v3 Authority Key Identifier: keyid:3A:7A:F4:AE:1C:D1:D0:A8:7C:11:81:BC:B0:F0:2E:14:88:79:B6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6a:81:26:e7:15:f3:7f:c8:3a:1e:a9:ae:cd:84:89:5e:b6: c9:63:97:83:31:f0:6d:6c:78:01:5d:95:76:48:ed:56:03:6e: 11:52:69:28:4e:70:cc:a8:89:41:17:29:48:a7:de:9d:08:dc: 53:4a:b7:23:23:34:68:1f:c1:6e:9f:31:1a:b3:3c:50:00:0c: 4c:e4:64:9e:05:62:59:a2:e2:c9:10:08:4d:c4:6d:74:e6:52: 6f:34:e3:2f:21:e3:a9:ee:63:82:40:ad:65:b0:b1:ce:8b:1b: b5:50:0d:b3:24:bd:b0:56:f1:e7:d6:ef:5a:13:1b:03:76:2d: 86:b3:fd:be:e5:37:72:d2:77:97:97:7a:13:e7:ab:f5:be:95: b2:48:40:be:f6:b7:b3:83:a0:54:03:b9:04:23:5b:3a:42:df: 70:e6:d4:3b:c7:3b:2a:be:72:26:fd:a0:27:f0:4e:d2:c5:a3: a9:3f:92:db:ab:8f:b1:60:40:62:ff:fc:c2:06:c6:23:47:3b: 09:97:95:27:da:28:c0:ea:88:d3:09:95:65:52:94:6c:1f:55: 5b:40:1d:65:5f:30:27:a1:f5:8d:b9:31:91:bf:d5:38:db:2c: e4:9d:41:73:1f:af:d9:aa:35:8e:be:b8:d1:91:74:3c:01:8a: 7c:bf:9d:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTE3OTExMC8GA1UEBRMoM0E3QUY0QUUxQ0QxRDBBODdDMTE4MUJDQjBGMDJFMTQ4 ODc5QjZCRjAeFw0yNjA3MjIyMDEyNDdaFw0yNjA3MjkyMDEyNDdaMBgxFjAUBgNV BAMTDTZhNjEyNDQwLWQ1YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOIEiVPGrWqVCE3SiENYC3sN3tuKEmn191AkUXKQpvEPDOvYKvqOhFJ89xsJ1q HBO00nwvzOUDV3gRLVr636r2G9q3ptVdEwPsFoueuLIrfXVQDilcD7udVtaIz3U1 BU5aGYRybAdOWeq/7lbzK+g3qvBsV93NEXd6EmOQ9qImppdnFUFB5PB33YgyQ5W3 gq28pm9PbfYZhbmF9X4KkncZo+GPnNjewNmTNbqB+QSNl8P2ZMelHrVIvl5otsqz s4kLlPT7MxjwFyjPr0KfheOGZd7SWqlzAz4V1l0/hYIIxZ1N5UhuVKKQWAPHTo4+ 4Bhl9EJiuNT0+zvqQeVI3pZXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkeTToWTn lNYgs0rVAIn+ozzgf68wHwYDVR0jBBgwFoAUOnr0rhzR0Kh8EYG8sPAuFIh5tr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFMTc5LzVDMjAwNEUwOUZE QjExRUE4NDYyQkQ1REM0RjlBRTAyL09ucjByaHpSMEtoOEVZRzhzUEF1RkloNXRy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT25yMHJoelIwS2g4RVlHOHNQQXVGSWg1dHI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF MTc5LzVDMjAwNEUwOUZEQjExRUE4NDYyQkQ1REM0RjlBRTAyL09ucjByaHpSMEto OEVZRzhzUEF1RkloNXRyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbaoEm5xXzf8g6HqmuzYSJXrbJY5eDMfBtbHgBXZV2SO1WA24RUmkoTnDMqIlB FylIp96dCNxTSrcjIzRoH8FunzEaszxQAAxM5GSeBWJZouLJEAhNxG105lJvNOMv IeOp7mOCQK1lsLHOixu1UA2zJL2wVvHn1u9aExsDdi2Gs/2+5Tdy0neXl3oT56v1 vpWySEC+9rezg6BUA7kEI1s6Qt9w5tQ7xzsqvnIm/aAn8E7SxaOpP5Lbq4+xYEBi //zCBsYjRzsJl5Un2ijA6ojTCZVlUpRsH1VbQB1lXzAnofWNuTGRv9U42yzknUFz H6/ZqjWOvrjRkXQ8AYp8v50y -----END CERTIFICATE-----Generated at Fri Jul 24 11:42:29 2026 by rpki-client