$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: sOEty6s2w6sRae2dg78gKVDN7rGfM6p+Ae7gcT8HkJw= Subject key identifier: 9A:69:52:B1:E0:FB:BE:DF:65:85:5E:43:FB:73:E2:32:C1:5E:F4:15 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: BE Signing time: Tue 21 Jul 2026 08:46:23 +0000 Manifest this update: Tue 21 Jul 2026 08:46:23 +0000 Manifest next update: Tue 28 Jul 2026 08:46:23 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: Pw9wU/kUXjc9Es9j8oUbIeRt7cxECwTtuwqb3Ooplsw=) 2: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) 5: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Jul 21 08:46:23 2026 GMT Not After : Jul 28 08:46:23 2026 GMT Subject: CN=6a5f31df-1236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:96:5c:a6:3d:02:9d:7f:80:2f:e1:71:f8: 45:02:7b:36:92:fd:b6:2d:70:b1:dd:c2:43:3d:03: a6:fb:ed:c8:56:9c:bb:ca:9d:60:db:f1:8d:71:fb: 27:fd:c2:d1:55:a8:e8:e2:b2:36:1a:71:a2:de:96: 8b:75:a8:1a:30:3c:70:dd:82:3d:0a:62:3c:fc:1d: fb:4e:a0:d8:f9:0e:73:e3:8d:5e:ee:f0:a4:75:22: 8f:85:31:a8:11:35:76:14:8f:e4:5f:e5:ec:f8:6b: 5d:3e:1b:15:15:fd:67:ff:5b:00:72:67:49:7f:e4: ea:05:1d:f6:19:eb:85:e7:de:01:53:a3:88:74:6c: 29:0d:45:b1:19:72:62:4a:74:6c:19:61:40:73:d6: fa:c2:ba:d4:c4:7f:3f:e0:c2:46:bb:02:1c:bd:d5: 2b:96:90:19:87:d0:bd:46:5f:08:55:a8:e9:63:07: c2:4d:2f:fa:35:b6:e9:15:4d:0a:1f:b1:ea:20:38: dc:94:d2:68:26:ae:b0:ba:1e:c6:3c:a8:a2:47:a3: ca:68:fa:89:cf:2d:33:dd:9b:e2:ce:b8:b0:af:a3: c6:97:a8:00:24:13:f1:51:a5:73:53:d5:73:87:09: 0e:90:9a:ca:bd:db:9f:e6:57:1e:f4:7b:de:34:4d: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:52:B1:E0:FB:BE:DF:65:85:5E:43:FB:73:E2:32:C1:5E:F4:15 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:03:4b:24:e0:21:e9:5a:e2:82:ec:ff:a0:b6:99:52:ff:3e: bc:a5:df:d5:0f:bc:2b:c9:d6:c2:a0:5f:a0:5a:be:cc:96:52: d3:e4:d7:b2:8a:15:49:82:ac:4d:e4:b0:50:53:a9:72:3c:2e: 71:c9:1a:38:69:28:0f:b3:32:59:8b:d7:a9:4e:fd:18:08:94: 7f:8b:26:e7:5c:1c:fd:83:80:2d:ff:0d:23:d6:03:a1:11:49: 2e:e9:be:b0:f8:84:12:22:f8:2b:d7:22:51:3f:76:38:2b:ff: 12:02:55:d0:e5:a5:8a:6b:75:73:43:a4:12:7d:44:5f:a0:5d: f5:1e:94:02:5d:df:c2:5d:c4:28:51:42:ea:3c:cf:2c:c1:9e: 6a:51:e7:fd:8f:b5:e3:ed:75:62:d5:cd:66:93:b2:3c:90:25: 14:fa:e7:c7:e5:ac:aa:f7:47:44:ea:43:ae:89:7a:56:61:0b: 1a:f2:4f:6c:89:68:fc:ac:a7:1f:6b:23:f4:68:89:a2:b8:d1: 03:af:e5:12:9a:0c:bc:c1:6b:6c:92:8a:95:ad:74:2d:e2:d8: 55:27:e6:66:66:4a:40:52:d5:2b:55:89:14:18:49:51:93:56: ae:68:6f:10:b8:c5:46:0e:50:0c:35:e9:5c:32:a0:ad:d9:42: e9:94:1d:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwNzIxMDg0NjIzWhcNMjYwNzI4MDg0NjIzWjAYMRYwFAYD VQQDEw02YTVmMzFkZi0xMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRaWXKY9Ap1/gC/hcfhFAns2kv22LXCx3cJDPQOm++3IVpy7yp1g2/GNcfsn /cLRVajo4rI2GnGi3paLdagaMDxw3YI9CmI8/B37TqDY+Q5z441e7vCkdSKPhTGo ETV2FI/kX+Xs+GtdPhsVFf1n/1sAcmdJf+TqBR32GeuF594BU6OIdGwpDUWxGXJi SnRsGWFAc9b6wrrUxH8/4MJGuwIcvdUrlpAZh9C9Rl8IVajpYwfCTS/6NbbpFU0K H7HqIDjclNJoJq6wuh7GPKiiR6PKaPqJzy0z3Zvizriwr6PGl6gAJBPxUaVzU9Vz hwkOkJrKvduf5lce9HveNE0pZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJppUrHg +77fZYVeQ/tz4jLBXvQVMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIgNLJOAh6Vriguz/oLaZUv8+vKXf1Q+8K8nWwqBfoFq+zJZS0+TXsooVSYKs TeSwUFOpcjwucckaOGkoD7MyWYvXqU79GAiUf4sm51wc/YOALf8NI9YDoRFJLum+ sPiEEiL4K9ciUT92OCv/EgJV0OWlimt1c0OkEn1EX6Bd9R6UAl3fwl3EKFFC6jzP LMGealHn/Y+14+11YtXNZpOyPJAlFPrnx+WsqvdHROpDrol6VmELGvJPbIlo/Kyn H2sj9GiJorjRA6/lEpoMvMFrbJKKla10LeLYVSfmZmZKQFLVK1WJFBhJUZNWrmhv ELjFRg5QDDXpXDKgrdlC6ZQdKQ== -----END CERTIFICATE-----Generated at Tue Jul 21 21:50:38 2026 by rpki-client