$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: 7LfKxJ6u4IcHwQME4ypU+82BCYc7vk6g0375Dvxxv9Q= Subject key identifier: A2:FD:3D:E8:CA:F5:27:CE:48:1B:0B:7A:82:35:9E:45:5C:8C:CA:9D Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 0197 Signing time: Tue 21 Jul 2026 05:50:14 +0000 Manifest this update: Tue 21 Jul 2026 05:50:13 +0000 Manifest next update: Tue 28 Jul 2026 05:50:13 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: lCDcTCABvsX5MhH52roDn9jiwxMj+S/2tWYDakesccI=) 2: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=) 3: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=) 4: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=) 5: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=) 6: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Jul 21 05:50:13 2026 GMT Not After : Jul 28 05:50:13 2026 GMT Subject: CN=6a5f0895-4972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:81:82:96:47:f1:c9:1f:9b:ce:b4:b9:b6: 6f:3b:ef:e3:71:a7:fa:2a:1e:fc:f4:ea:8e:76:41: f4:de:f6:27:4e:31:c5:44:aa:d9:82:66:93:8f:0d: fd:c2:4c:0e:30:55:71:e7:9d:31:c0:fa:d0:a9:54: a4:88:ce:a8:be:a1:71:80:3c:58:ee:00:50:ef:8f: 9a:03:c3:cf:28:09:53:22:6d:ff:1a:c1:89:3a:18: 7d:ce:88:85:25:4f:73:cf:74:8c:ce:27:63:7b:51: d5:b7:23:7b:b9:5c:27:00:ae:e4:67:d8:12:5d:d4: 05:ba:fb:f1:f6:7a:f9:46:b4:31:c1:50:39:20:41: 73:1b:fa:5a:b5:f6:36:d7:51:fb:52:17:4b:2d:da: de:9b:6e:4b:72:47:9a:38:30:c7:e2:cf:d1:32:70: 4e:09:61:09:65:7a:3f:99:12:f1:26:8f:4e:25:d4: 4e:c5:b2:0d:67:65:6c:43:20:af:9f:e0:9b:c0:c3: cf:e3:d9:69:8e:7e:bb:23:15:0f:18:11:aa:f2:30: 0d:d5:17:36:f4:7d:ca:a5:16:02:37:1d:24:b7:75: 9b:00:08:03:6b:b7:b7:f9:e9:ed:e6:3d:f9:4d:06: 54:50:52:a8:a1:a3:31:c7:b1:ae:cf:1c:0a:f7:09: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FD:3D:E8:CA:F5:27:CE:48:1B:0B:7A:82:35:9E:45:5C:8C:CA:9D X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:1f:d5:59:d9:85:9b:9c:4b:d2:18:38:5b:a9:e6:cc:06: f2:cc:7e:1c:30:7e:4e:8c:f8:5b:1e:18:e2:4a:c7:bd:89:4d: 56:8a:23:54:32:70:fa:36:97:f2:c7:da:28:07:3d:d4:af:e6: 61:27:33:1d:ee:2c:86:b7:5b:f9:5a:ea:7a:0e:e8:f2:7c:a2: 04:16:d5:39:80:84:60:69:8a:fe:16:34:24:b9:ff:a4:6e:22: c1:c0:5c:42:9a:e5:d7:4d:09:9c:f1:e9:76:32:89:39:25:95: 74:24:d0:af:8b:c1:e2:3e:a5:11:06:6e:31:b1:af:9d:09:1e: bb:2e:0b:8f:78:50:6d:08:ff:d5:fe:9f:e5:43:29:21:db:32: e2:e4:da:1d:6b:c6:4c:2d:71:f5:b4:de:4e:76:f4:16:28:64: 0b:d9:ef:6c:20:04:83:1f:ce:76:23:dc:49:31:e9:ae:6a:3e: 23:ce:b5:bd:a8:7f:b6:85:18:b6:6a:5f:a2:b9:68:f1:a0:f3: ac:78:19:b7:d7:fd:94:b1:c3:3b:13:8b:a7:7e:cf:aa:04:36: 14:84:61:20:54:38:ad:46:6a:27:25:f0:41:ee:35:a1:dc:ae: d0:6d:5f:83:c9:21:28:91:cd:9f:cc:0f:bf:34:e1:7f:0e:73: c2:cc:17:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjYwNzIxMDU1MDEzWhcNMjYwNzI4MDU1MDEzWjAYMRYwFAYD VQQDEw02YTVmMDg5NS00OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0mBgpZH8ckfm860ubZvO+/jcaf6Kh789OqOdkH03vYnTjHFRKrZgmaTjw39 wkwOMFVx550xwPrQqVSkiM6ovqFxgDxY7gBQ74+aA8PPKAlTIm3/GsGJOhh9zoiF JU9zz3SMzidje1HVtyN7uVwnAK7kZ9gSXdQFuvvx9nr5RrQxwVA5IEFzG/patfY2 11H7UhdLLdrem25LckeaODDH4s/RMnBOCWEJZXo/mRLxJo9OJdROxbINZ2VsQyCv n+CbwMPP49lpjn67IxUPGBGq8jAN1Rc29H3KpRYCNx0kt3WbAAgDa7e3+ent5j35 TQZUUFKooaMxx7GuzxwK9wl+EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKL9PejK 9SfOSBsLeoI1nkVcjMqdMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP8If1VnZhZucS9IYOFup5swG8sx+HDB+Toz4Wx4Y4krHvYlNVoojVDJw+jaX 8sfaKAc91K/mYSczHe4shrdb+Vrqeg7o8nyiBBbVOYCEYGmK/hY0JLn/pG4iwcBc Qprl100JnPHpdjKJOSWVdCTQr4vB4j6lEQZuMbGvnQkeuy4Lj3hQbQj/1f6f5UMp Idsy4uTaHWvGTC1x9bTeTnb0FihkC9nvbCAEgx/OdiPcSTHprmo+I861vah/toUY tmpforlo8aDzrHgZt9f9lLHDOxOLp37PqgQ2FIRhIFQ4rUZqJyXwQe41odyu0G1f g8khKJHNn8wPvzThfw5zwswXCA== -----END CERTIFICATE-----Generated at Wed Jul 22 01:45:52 2026 by rpki-client