$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: PL/2r6xeG0lcN1NUjOUTLtX8s1nDWpQ7mAGHGmXQjkE= Subject key identifier: EC:99:62:C2:A2:07:88:0B:3D:80:BD:FC:C5:A4:07:E7:10:A3:E0:14 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 08EA Signing time: Tue 04 Aug 2026 20:40:55 +0000 Manifest this update: Tue 04 Aug 2026 20:40:55 +0000 Manifest next update: Tue 11 Aug 2026 20:40:55 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: o5cNRWOd5ArTCZcIGtgGhlQipMrgfHVIIEwHaHw2BTI=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 20:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Aug 4 20:40:55 2026 GMT Not After : Aug 11 20:40:55 2026 GMT Subject: CN=6a724e57-5c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:76:1a:b9:b6:50:43:6c:c0:40:de:42:63: bc:96:5a:46:3d:77:a9:c8:21:a5:46:53:27:5c:49: 69:09:0c:19:3e:17:7f:77:30:c0:4f:d6:bc:76:dc: 17:78:3f:96:9f:cc:77:a6:42:77:ba:b5:0d:49:ed: 05:5f:38:3e:87:e8:6c:53:cb:35:76:2f:4c:e3:7d: c1:f0:14:5a:77:f4:b2:0c:c3:af:2f:2c:0d:94:ec: b8:67:ab:ee:df:70:e8:08:d2:52:63:3b:ae:2e:6f: 12:ac:85:c4:6e:b1:c0:29:e6:d9:61:ab:5e:8c:e1: 8b:5b:56:e8:0f:c0:78:58:5d:72:d6:ed:22:57:f2: 1a:2a:b2:ed:24:a8:de:00:af:5d:fc:39:3a:c4:e7: c4:2d:9a:01:ea:4e:61:ff:60:3f:87:3d:95:66:8d: 0d:30:cc:11:51:46:b0:bf:2c:1b:ef:34:7e:ef:4b: ea:0e:1c:5e:4a:51:6d:13:b2:82:05:ed:53:df:a9: 61:9c:38:ba:78:27:95:e9:6d:6e:86:c2:27:e0:36: b6:17:26:dc:78:56:4e:37:9e:b4:d2:75:2c:27:21: 91:cd:df:84:cb:ce:6e:dd:47:60:d2:7e:38:3b:84: 6f:a8:75:2b:92:24:ed:50:af:0d:08:62:71:04:ac: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:99:62:C2:A2:07:88:0B:3D:80:BD:FC:C5:A4:07:E7:10:A3:E0:14 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:15:4a:22:98:64:d3:3a:f5:90:fa:10:cc:83:9b:72:27: 29:eb:a3:a8:77:72:67:12:f5:8a:0b:4a:a5:98:d3:8d:ea:69: 1c:39:12:17:aa:96:ec:2b:9b:a2:b5:94:da:23:9e:2c:67:70: 6b:7e:31:ba:11:8c:a1:88:57:e4:02:c9:6c:3c:9a:e6:0c:58: 87:17:d1:a6:6e:56:01:73:15:8d:bb:b3:e2:97:a9:f0:14:c3: 80:22:f3:bb:48:e4:77:c6:ec:cb:c1:ee:1e:90:e5:76:fa:36: 13:26:81:7d:de:d2:21:25:a2:8e:31:ed:39:5e:d1:57:77:eb: 78:7f:c7:0e:a7:3b:c1:6c:80:bf:45:3f:71:97:6f:ea:c7:23: 76:b4:bc:a7:72:95:85:f0:fe:dd:80:65:5c:78:48:cb:fb:15: b0:ff:10:60:0c:09:0b:14:26:69:eb:21:c0:a1:f9:96:73:34: 41:66:ca:27:0e:67:6c:ea:61:1d:d1:11:7a:f1:85:cc:ab:cb: 62:0c:02:a6:7d:c6:c4:de:a7:e2:d5:3c:9d:8f:99:ae:b9:60: ae:95:9e:8c:e6:40:0d:7d:a2:6e:01:ac:dd:6a:5e:bd:d0:93: fd:87:62:fc:f6:3e:49:6e:56:c6:61:36:0a:c7:d2:a7:3f:d6: 1e:b5:1e:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYwODA0MjA0MDU1WhcNMjYwODExMjA0MDU1WjAYMRYwFAYD VQQDEw02YTcyNGU1Ny01YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwop2Grm2UENswEDeQmO8llpGPXepyCGlRlMnXElpCQwZPhd/dzDAT9a8dtwX eD+Wn8x3pkJ3urUNSe0FXzg+h+hsU8s1di9M433B8BRad/SyDMOvLywNlOy4Z6vu 33DoCNJSYzuuLm8SrIXEbrHAKebZYatejOGLW1boD8B4WF1y1u0iV/IaKrLtJKje AK9d/Dk6xOfELZoB6k5h/2A/hz2VZo0NMMwRUUawvywb7zR+70vqDhxeSlFtE7KC Be1T36lhnDi6eCeV6W1uhsIn4Da2FybceFZON5600nUsJyGRzd+Ey85u3Udg0n44 O4RvqHUrkiTtUK8NCGJxBKz8vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyZYsKi B4gLPYC9/MWkB+cQo+AUMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtUVSiKYZNM69ZD6EMyDm3InKeujqHdyZxL1igtKpZjTjeppHDkSF6qW7Cub orWU2iOeLGdwa34xuhGMoYhX5ALJbDya5gxYhxfRpm5WAXMVjbuz4pep8BTDgCLz u0jkd8bsy8HuHpDldvo2EyaBfd7SISWijjHtOV7RV3freH/HDqc7wWyAv0U/cZdv 6scjdrS8p3KVhfD+3YBlXHhIy/sVsP8QYAwJCxQmaeshwKH5lnM0QWbKJw5nbOph HdERevGFzKvLYgwCpn3GxN6n4tU8nY+ZrrlgrpWejOZADX2ibgGs3WpevdCT/Ydi /PY+SW5WxmE2CsfSpz/WHrUexw== -----END CERTIFICATE-----Generated at Thu Aug 6 18:54:53 2026 by rpki-client