$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: YkMjoEXN1swUR6WipyDchY9ozNvlFBEpKsq5E4DKCGk= Subject key identifier: B5:2E:46:9C:19:C2:18:61:D1:1E:2E:59:20:D5:59:51:31:54:3B:45 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 01BC Signing time: Fri 17 Jul 2026 05:08:37 +0000 Manifest this update: Fri 17 Jul 2026 05:08:37 +0000 Manifest next update: Fri 24 Jul 2026 05:08:37 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: NgmexSjYPegXf/4AxlPx9hgP2mDY1AfdrPdoSF5GnuA=) 2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=) 3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=) 4: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 05:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Jul 17 05:08:37 2026 GMT Not After : Jul 24 05:08:37 2026 GMT Subject: CN=6a59b8d5-0ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:c6:6d:f8:0d:a5:57:1e:f6:e8:2e:76:ee: 9b:ef:14:88:9a:95:bd:84:02:f6:36:94:f5:c4:a7: d7:26:c5:4c:1c:61:b8:80:42:44:22:2f:93:09:6c: e1:a2:0b:62:53:5a:35:d3:cb:91:ea:7f:7d:0f:60: 16:a2:98:29:fd:f8:7f:0c:ae:a8:2a:09:8f:a1:c5: b7:e6:2e:db:ce:e3:13:4c:2b:bf:8f:5b:b6:51:08: c2:3d:f4:2f:eb:2f:66:f3:40:b4:b4:23:a6:0e:44: 94:6f:b1:1a:ac:89:15:a4:55:a3:27:d7:5e:16:eb: 5d:cd:df:4f:6b:ca:d5:b1:87:30:a1:e6:6e:51:f4: c5:82:e3:f8:53:f9:4c:7f:69:90:de:1c:96:8f:3f: 9e:0d:db:0d:22:98:bb:e7:bc:55:91:85:9d:a3:f8: 47:21:ff:2a:7a:7b:2f:c6:19:c8:66:3b:27:f0:29: 24:ad:c1:f3:f7:9f:f9:f8:f6:b9:e2:1d:15:18:40: b7:b0:b4:f8:62:b0:b3:e0:1f:57:88:07:4b:b4:e9: 77:1c:35:d7:7f:d8:58:47:8e:95:53:d7:10:d4:22: d5:6c:91:47:63:05:21:f6:f9:f2:93:e3:73:df:bc: 1a:ed:92:9f:29:46:5c:70:3b:5b:68:a7:78:b2:b7: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:46:9C:19:C2:18:61:D1:1E:2E:59:20:D5:59:51:31:54:3B:45 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d8:2b:1a:91:0c:b5:fd:5e:45:26:80:8f:b3:b6:f6:44:b3: bb:71:73:4f:17:b9:63:c0:7d:bd:ea:31:d6:b4:be:0c:bf:d6: e7:48:11:50:c2:e4:95:b1:64:c2:c4:10:30:3d:65:dc:a0:ec: 01:6a:96:06:6c:d3:06:5e:65:e5:4c:52:68:da:f3:32:6e:7c: 51:d1:eb:55:99:ce:54:59:37:73:90:a5:a0:ca:1d:4d:e7:72: 5c:62:50:91:84:b3:bb:96:b8:d8:c4:de:ad:4d:3e:24:cf:a1: 7d:de:72:85:50:68:eb:47:ce:02:dc:6a:20:0c:2b:57:22:42: 7d:9b:f2:d7:e3:e2:d1:93:90:e2:d0:01:5a:32:ec:da:f8:74: a1:28:85:61:e6:30:6b:fd:54:9d:8c:b3:30:32:c5:d1:38:6c: b2:4b:98:62:a7:b7:1a:7b:a3:89:df:fd:cc:b3:0e:e4:fd:ea: fd:39:5e:6f:96:38:f1:23:63:5b:d7:eb:04:d4:a8:66:43:09: e6:61:2f:28:9b:32:63:50:6f:ba:e1:1b:05:cf:a0:8c:bf:36: b9:7c:bd:01:80:dc:5f:88:a1:84:0f:df:7f:03:09:f7:00:2f: 8d:e1:05:5b:fb:a9:31:d8:37:a4:d0:88:be:32:38:f6:c1:c9: 73:d8:59:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwNzE3MDUwODM3WhcNMjYwNzI0MDUwODM3WjAYMRYwFAYD VQQDEw02YTU5YjhkNS0wY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD3GbfgNpVce9ugudu6b7xSImpW9hAL2NpT1xKfXJsVMHGG4gEJEIi+TCWzh ogtiU1o108uR6n99D2AWopgp/fh/DK6oKgmPocW35i7bzuMTTCu/j1u2UQjCPfQv 6y9m80C0tCOmDkSUb7EarIkVpFWjJ9deFutdzd9Pa8rVsYcwoeZuUfTFguP4U/lM f2mQ3hyWjz+eDdsNIpi757xVkYWdo/hHIf8qensvxhnIZjsn8CkkrcHz95/5+Pa5 4h0VGEC3sLT4YrCz4B9XiAdLtOl3HDXXf9hYR46VU9cQ1CLVbJFHYwUh9vnyk+Nz 37wa7ZKfKUZccDtbaKd4srdATwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUuRpwZ whhh0R4uWSDVWVExVDtFMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF9grGpEMtf1eRSaAj7O29kSzu3FzTxe5Y8B9veox1rS+DL/W50gRUMLklbFk wsQQMD1l3KDsAWqWBmzTBl5l5UxSaNrzMm58UdHrVZnOVFk3c5CloModTedyXGJQ kYSzu5a42MTerU0+JM+hfd5yhVBo60fOAtxqIAwrVyJCfZvy1+Pi0ZOQ4tABWjLs 2vh0oSiFYeYwa/1UnYyzMDLF0ThsskuYYqe3Gnujid/9zLMO5P3q/Tleb5Y48SNj W9frBNSoZkMJ5mEvKJsyY1BvuuEbBc+gjL82uXy9AYDcX4ihhA/ffwMJ9wAvjeEF W/upMdg3pNCIvjI49sHJc9hZZw== -----END CERTIFICATE-----Generated at Sat Jul 18 07:14:16 2026 by rpki-client