$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft File: OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json) Hash identifier: FPndoAtV2sFSLFmphCbxycuIX+gNch0wvCXb6+r0o6c= Subject key identifier: 3C:3E:5C:62:61:22:73:22:E4:AB:B4:15:95:F9:CE:4B:35:3A:2E:7B Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft Manifest number: 011E Signing time: Tue 25 Aug 2026 05:54:53 +0000 Manifest this update: Tue 25 Aug 2026 05:54:53 +0000 Manifest next update: Tue 01 Sep 2026 05:54:53 +0000 Files and hashes: 1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: kOTdDXts8Vtjjma5OFOVYFKKMx27pjJ9HpP3NZMTkII=) 2: D759EECE244011F1B0BBBC37BB833773.roa (hash: 4ZLnEVH62B/fFZNl3E3aTQ7rJ1PwOzf217E+4KcGPOw=) 3: 41C8C708244111F1AF80D04DBB833773.roa (hash: P0OVA8RnrCkxwGNC5Oj/FAk/vhkA7eOmVQFaY4OMLYg=) 4: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: lVJ/wAuLoxmXnwU3EkGNm9UUsAUB6qqvPi8MZYUo1FY=) 5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: aNrWLrutR5ArzXGRsTtMLurkk5UM/Q77zEZqj2DNM6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 05:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C Validity Not Before: Aug 25 05:54:53 2026 GMT Not After : Sep 1 05:54:53 2026 GMT Subject: CN=6a8d2e2d-c735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:82:e9:c1:a7:58:cc:21:db:76:0c:f2:52: 47:7c:f8:b9:0f:3e:81:05:30:a4:6f:23:41:5c:45: 8b:28:04:d0:ba:f2:ff:1e:e7:84:22:7f:4f:bc:9b: 33:c9:5c:d1:4b:34:4c:bf:11:10:fa:02:8b:8f:c4: 4d:f6:1e:00:5d:6b:05:66:17:bf:71:a8:b5:99:5a: 22:e9:6c:e0:16:54:b0:c0:3c:30:4e:b8:ff:32:cf: aa:3c:bd:8d:fa:74:00:26:18:8d:b8:47:91:b5:af: 5a:77:85:69:c5:a8:a4:f5:26:8f:39:30:5e:ed:df: 55:bf:6a:2f:e9:af:22:64:97:92:14:47:0c:88:c7: b3:52:03:d4:0f:0b:bb:17:fc:dc:a9:72:bb:b5:a7: 72:54:59:be:82:42:0a:6f:d3:27:10:38:47:38:ce: 2b:1a:ba:57:98:3a:25:53:18:4b:35:68:af:56:43: 1e:f2:e6:38:e1:88:93:69:cb:f6:45:7e:10:3a:90: d0:ed:b2:6d:ea:18:86:89:22:ca:b6:36:e1:f8:8b: 01:ad:75:51:f8:39:ce:14:28:41:de:f5:23:21:51: 00:1f:32:44:b9:d2:32:9a:66:8c:27:b2:00:51:92: 3c:18:23:0a:00:c9:37:bb:e7:58:31:eb:7d:6a:79: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3E:5C:62:61:22:73:22:E4:AB:B4:15:95:F9:CE:4B:35:3A:2E:7B X509v3 Authority Key Identifier: keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4c:9b:ab:0d:1a:79:67:1b:16:e9:30:73:75:36:a5:be:4e: 71:7b:ad:db:b1:85:9b:03:5e:9a:c4:b8:24:23:d5:88:e5:8a: 20:e7:c1:fb:6d:56:ae:9e:02:ce:ee:85:56:d1:b4:9b:97:57: 36:88:79:d6:7a:e9:53:2d:91:1c:f5:59:fe:32:88:e5:7f:df: d4:0b:f6:19:0b:aa:48:5d:05:d4:06:8c:30:4b:79:aa:a3:9d: e6:4b:ef:70:e7:b6:07:54:39:3b:a3:a1:c1:cc:38:ef:c4:e9: 65:55:7a:17:8a:0d:e0:1f:86:95:e5:e3:62:1d:95:de:23:19: 9a:6b:94:4a:30:39:02:75:01:c6:aa:b6:2e:a2:e4:49:70:97: f2:0a:2e:03:ff:ae:c5:c5:2d:e0:9c:23:46:74:2f:37:28:bb: 96:44:9c:f3:a7:77:e9:f5:1a:1f:67:d1:a9:c1:35:06:16:94: 58:31:60:ad:52:19:70:e4:2d:7e:17:e6:7b:f4:50:e0:83:76: 95:06:96:42:ef:c7:1e:22:bd:27:77:63:0b:48:56:96:14:79: 70:39:97:78:e0:93:13:ce:d5:ac:0f:bd:6d:45:2d:f8:14:24: 6e:a8:bc:35:88:27:25:19:9c:9a:31:c6:36:da:b5:cc:e0:3b: 4d:58:c3:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDIxMTAvBgNVBAUTKDM4NkMzMDBFRDcyRjEyQjkwNTQ3OEEzM0NFRjI3Nzk5 MjU0QTY5MUMwHhcNMjYwODI1MDU1NDUzWhcNMjYwOTAxMDU1NDUzWjAYMRYwFAYD VQQDEw02YThkMmUyZC1jNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMeC6cGnWMwh23YM8lJHfPi5Dz6BBTCkbyNBXEWLKATQuvL/HueEIn9PvJsz yVzRSzRMvxEQ+gKLj8RN9h4AXWsFZhe/cai1mVoi6WzgFlSwwDwwTrj/Ms+qPL2N +nQAJhiNuEeRta9ad4Vpxaik9SaPOTBe7d9Vv2ov6a8iZJeSFEcMiMezUgPUDwu7 F/zcqXK7tadyVFm+gkIKb9MnEDhHOM4rGrpXmDolUxhLNWivVkMe8uY44YiTacv2 RX4QOpDQ7bJt6hiGiSLKtjbh+IsBrXVR+DnOFChB3vUjIVEAHzJEudIymmaMJ7IA UZI8GCMKAMk3u+dYMet9ankLkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDw+XGJh InMi5Ku0FZX5zks1Oi57MB8GA1UdIwQYMBaAFDhsMA7XLxK5BUeKM87yd5klSmkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwMi84N0MzRkQwQUZC MjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVya0ZSNG96enZKM21TVkth UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwMi84N0MzRkQwQUZCMjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVy a0ZSNG96enZKM21TVkthUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWUybqw0aeWcbFukwc3U2pb5OcXut27GFmwNemsS4JCPViOWKIOfB+21Wrp4C zu6FVtG0m5dXNoh51nrpUy2RHPVZ/jKI5X/f1Av2GQuqSF0F1AaMMEt5qqOd5kvv cOe2B1Q5O6Ohwcw478TpZVV6F4oN4B+GleXjYh2V3iMZmmuUSjA5AnUBxqq2LqLk SXCX8gouA/+uxcUt4JwjRnQvNyi7lkSc86d36fUaH2fRqcE1BhaUWDFgrVIZcOQt fhfme/RQ4IN2lQaWQu/HHiK9J3djC0hWlhR5cDmXeOCTE87VrA+9bUUt+BQkbqi8 NYgnJRmcmjHGNtq1zOA7TVjDkw== -----END CERTIFICATE-----Generated at Tue Aug 25 23:42:16 2026 by rpki-client