$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: YDcb4KLofAZGVCQl4LBgSsgmqEB8gb0WKyPgnWm6yjo= Subject key identifier: 70:07:2E:CC:E5:9C:67:44:FD:4B:1D:09:24:3C:B6:87:C8:36:3F:67 Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B3D Signing time: Mon 20 Jul 2026 19:44:21 +0000 Manifest this update: Mon 20 Jul 2026 19:44:20 +0000 Manifest next update: Mon 27 Jul 2026 19:44:20 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: jgY9HihU+ETooN5KknLKkWjHP3PoCoNbcWVIT0hw3Hs=) 2: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) 3: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) 4: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Jul 20 19:44:20 2026 GMT Not After : Jul 27 19:44:20 2026 GMT Subject: CN=6a5e7a95-4a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:27:66:81:6f:a4:75:8b:c7:0d:a3:94:3f: c7:2b:2b:f0:4b:06:87:d9:02:d8:e4:61:8e:47:ab: b0:40:f6:53:c7:48:63:64:3f:e6:68:bf:6e:34:bb: 2a:35:ae:d9:17:ff:4e:b9:b1:5e:8b:ea:2c:9b:7a: f3:18:26:c4:98:62:f4:3f:19:97:0d:ee:d1:b1:c6: e5:82:74:fe:d9:59:88:a6:63:98:7a:58:1c:b8:a5: 20:55:78:73:32:18:d0:bc:6f:90:3b:5e:1c:46:c7: 01:b4:a9:ea:80:76:33:a8:37:73:97:f5:95:c0:94: c5:62:49:d5:92:94:71:1b:ae:d7:7b:7b:44:96:cf: e0:bd:a4:23:da:25:07:3a:09:cb:b4:21:4a:18:6f: f9:72:41:e8:ee:ab:74:b8:f9:22:88:95:cb:f6:1f: e8:a9:82:05:83:03:18:27:9f:6f:5d:90:e6:96:e3: 93:4b:b0:51:99:4e:fa:77:4d:ea:10:ba:e8:5c:d8: 61:bc:a8:98:c9:1f:9e:85:1a:0c:0c:ca:6b:77:2d: d0:3f:af:b8:b5:f2:56:07:aa:37:1c:d5:02:82:dc: a8:0e:25:39:ae:6c:cd:8d:61:0a:bb:ba:c6:10:6c: 76:49:ae:79:81:ac:6d:b0:b0:46:43:15:da:17:33: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:07:2E:CC:E5:9C:67:44:FD:4B:1D:09:24:3C:B6:87:C8:36:3F:67 X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ed:25:30:d9:ae:b3:98:d3:3c:71:75:95:31:4d:c4:1a:1b: 50:f8:fc:9f:9e:93:95:8f:05:a6:b5:f1:35:10:d3:3e:54:e6: a4:d1:b1:f8:d4:49:ea:09:da:29:2a:d1:c1:81:17:88:bc:72: 38:ba:f5:d5:85:d6:01:da:a8:42:4e:2e:c9:77:db:61:3b:c6: 35:89:74:a4:7a:a4:84:97:9c:98:86:8c:63:bc:c7:af:fe:e4: 17:c2:df:e0:69:e7:ee:fb:54:3d:fd:63:00:62:15:8d:a9:33: 44:8c:e4:4c:ed:d1:fb:93:4f:76:ea:31:49:dd:e6:42:cd:df: 3e:01:7d:8a:07:92:4c:c5:37:17:c8:3d:ff:31:3e:99:d6:e2: a2:b4:23:e6:a4:13:b4:ae:63:fd:71:e4:66:4d:a8:0d:6c:9c: 22:1d:9f:ea:15:8d:74:74:4b:9a:1e:b3:09:7e:2f:9b:01:43: db:b9:e7:f0:2d:71:1c:3c:76:f1:66:28:d3:f6:e4:71:8b:7d: d9:94:0d:e7:9b:1f:59:53:fc:46:ed:fa:ef:09:ae:6b:0b:54: 56:e6:cc:5c:aa:af:a7:0f:42:4b:35:46:77:8a:f5:f7:b1:98: 3a:cd:cc:6f:f7:dd:f1:63:b2:f7:86:55:50:75:92:24:e0:bd: 65:d1:13:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYwNzIwMTk0NDIwWhcNMjYwNzI3MTk0NDIwWjAYMRYwFAYD VQQDEw02YTVlN2E5NS00YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7MnZoFvpHWLxw2jlD/HKyvwSwaH2QLY5GGOR6uwQPZTx0hjZD/maL9uNLsq Na7ZF/9OubFei+osm3rzGCbEmGL0PxmXDe7RscblgnT+2VmIpmOYelgcuKUgVXhz MhjQvG+QO14cRscBtKnqgHYzqDdzl/WVwJTFYknVkpRxG67Xe3tEls/gvaQj2iUH OgnLtCFKGG/5ckHo7qt0uPkiiJXL9h/oqYIFgwMYJ59vXZDmluOTS7BRmU76d03q ELroXNhhvKiYyR+ehRoMDMprdy3QP6+4tfJWB6o3HNUCgtyoDiU5rmzNjWEKu7rG EGx2Sa55gaxtsLBGQxXaFzMxcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAHLszl nGdE/UsdCSQ8tofINj9nMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+0lMNmus5jTPHF1lTFNxBobUPj8n56TlY8FprXxNRDTPlTmpNGx+NRJ6gna KSrRwYEXiLxyOLr11YXWAdqoQk4uyXfbYTvGNYl0pHqkhJecmIaMY7zHr/7kF8Lf 4Gnn7vtUPf1jAGIVjakzRIzkTO3R+5NPduoxSd3mQs3fPgF9igeSTMU3F8g9/zE+ mdbiorQj5qQTtK5j/XHkZk2oDWycIh2f6hWNdHRLmh6zCX4vmwFD27nn8C1xHDx2 8WYo0/bkcYt92ZQN55sfWVP8Ru367wmuawtUVubMXKqvpw9CSzVGd4r197GYOs3M b/fd8WOy94ZVUHWSJOC9ZdETSg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:22:55 2026 by rpki-client