$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: 3X6xDlojuydE/8jFwkqX8mvYSBWdGvgJFB+jUBI6cVc= Subject key identifier: FB:06:96:02:62:EA:C0:B6:9D:E9:23:6A:84:A8:D3:43:F7:A8:BA:A4 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1E06 Signing time: Mon 06 Jul 2026 16:09:19 +0000 Manifest this update: Mon 06 Jul 2026 16:09:18 +0000 Manifest next update: Mon 13 Jul 2026 16:09:18 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: /k90AV0Iqxp2/eCv3lsXJ2B9/cRF/KiRs7bbdpDoaeQ=) 2: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: rDG/L5XYbFUKmiozI9qRsyFdyitUC4I0rBe0q3fISXU=) 3: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: Lykd4Rg3mqkn+7qbmbCuDzvDxGivrg96Zb3jE+3hd+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 16:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7705 (0x1e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jul 6 16:09:18 2026 GMT Not After : Jul 13 16:09:18 2026 GMT Subject: CN=6a4bd32f-33ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2e:c0:b4:44:91:9e:73:7b:cc:bc:0e:95:32: 1e:06:05:34:2a:57:d9:4e:80:34:3f:60:50:61:b5: 0c:54:1a:d1:a3:f1:03:2b:5b:18:7a:fd:c8:a0:2c: 6f:9d:9c:a7:ee:48:2d:75:b0:48:b2:7c:3c:52:cf: f6:2f:37:80:20:21:e9:e9:27:2f:5f:2e:56:0e:b5: eb:a8:41:06:2a:dd:34:e0:73:cf:46:20:e9:5d:6b: 28:8a:68:e1:b3:57:bd:03:d8:bc:7e:50:fb:55:6f: f4:ea:10:cb:a0:b5:88:97:4d:8a:6c:fc:50:f9:e8: 29:92:be:fc:a5:fa:de:d9:bc:41:ce:04:7e:fa:02: ba:9f:00:a9:40:f8:23:d1:37:63:fe:34:bf:fe:0b: dc:e0:31:a2:43:86:5d:32:33:40:f5:ff:f2:e6:8a: 33:df:3c:9d:8e:24:9c:f3:b0:c7:7c:dd:b5:66:15: 35:61:2c:48:1b:8a:eb:82:d9:0e:ef:aa:0d:34:d3: 0d:5a:bc:9d:dc:c6:1f:e9:1b:57:0d:81:46:b7:7b: 82:cb:fc:f6:73:7f:7d:cf:99:83:fd:23:03:e0:d1: 50:49:44:b4:0a:9a:bf:65:f8:e7:10:53:bd:28:d6: 48:26:24:e9:10:fc:f0:bc:61:e3:5c:83:26:b1:0f: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:96:02:62:EA:C0:B6:9D:E9:23:6A:84:A8:D3:43:F7:A8:BA:A4 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7b:50:db:ef:9f:90:0d:f5:70:25:f4:8f:77:f6:f4:cf:3a: 03:22:dd:17:4b:98:64:c5:b5:32:0a:c9:82:ea:bf:ec:fd:6e: 7e:c7:03:7c:e2:1b:df:61:2b:4f:51:b9:d8:7e:1c:69:c3:fc: 09:e7:6a:5f:4d:bd:4b:43:92:fe:94:19:45:28:4d:35:cb:39: 14:77:5c:8e:98:13:1a:22:b2:c0:fc:0e:8c:54:a9:00:c9:58: 18:09:76:f6:a0:67:5c:7b:49:25:40:42:14:97:c4:c6:aa:d5: c6:1e:19:aa:2e:a2:be:2f:9a:88:b3:33:b6:1b:43:a7:87:3e: 86:6d:1f:cf:b5:52:8a:5a:0c:b5:1d:d0:a0:73:78:fa:4f:06: f1:fc:dc:d6:02:86:a0:16:54:76:f6:7b:1e:d9:04:cc:3c:9b: 43:1b:54:83:75:dd:95:cb:71:f2:b8:29:bd:e8:29:b7:fb:06: 64:21:16:24:c9:3c:60:2e:6a:7c:ea:a3:1e:0d:d5:d4:5c:1d: 89:2a:61:fe:ed:79:ae:b1:0c:38:b9:65:61:9d:80:d3:8c:22: 98:04:ed:6b:9d:65:04:af:e1:c2:cb:61:b0:37:db:76:b4:1a: 53:83:6e:ad:86:39:a3:40:b6:2d:54:3f:66:b3:43:94:9a:75: 88:61:ec:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwNzA2MTYwOTE4WhcNMjYwNzEzMTYwOTE4WjAYMRYwFAYD VQQDEw02YTRiZDMyZi0zM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9S7AtESRnnN7zLwOlTIeBgU0KlfZToA0P2BQYbUMVBrRo/EDK1sYev3IoCxv nZyn7kgtdbBIsnw8Us/2LzeAICHp6ScvXy5WDrXrqEEGKt004HPPRiDpXWsoimjh s1e9A9i8flD7VW/06hDLoLWIl02KbPxQ+egpkr78pfre2bxBzgR++gK6nwCpQPgj 0Tdj/jS//gvc4DGiQ4ZdMjNA9f/y5ooz3zydjiSc87DHfN21ZhU1YSxIG4rrgtkO 76oNNNMNWryd3MYf6RtXDYFGt3uCy/z2c399z5mD/SMD4NFQSUS0Cpq/ZfjnEFO9 KNZIJiTpEPzwvGHjXIMmsQ/aHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsGlgJi 6sC2nekjaoSo00P3qLqkMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcntQ2++fkA31cCX0j3f29M86AyLdF0uYZMW1MgrJguq/7P1ufscDfOIb32Er T1G52H4cacP8CedqX029S0OS/pQZRShNNcs5FHdcjpgTGiKywPwOjFSpAMlYGAl2 9qBnXHtJJUBCFJfExqrVxh4Zqi6ivi+aiLMzthtDp4c+hm0fz7VSiloMtR3QoHN4 +k8G8fzc1gKGoBZUdvZ7HtkEzDybQxtUg3Xdlctx8rgpvegpt/sGZCEWJMk8YC5q fOqjHg3V1FwdiSph/u15rrEMOLllYZ2A04wimATta51lBK/hwsthsDfbdrQaU4Nu rYY5o0C2LVQ/ZrNDlJp1iGHs9g== -----END CERTIFICATE-----Generated at Tue Jul 7 04:38:52 2026 by rpki-client