$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: pLa3AktpX1sqnVfTg4neEbwNWk339o4ycQ6PqleYtew= Subject key identifier: 40:2D:A0:A9:DA:2E:A7:2E:81:41:A4:08:85:31:D7:27:53:FB:42:57 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1E1F Signing time: Thu 20 Aug 2026 16:03:28 +0000 Manifest this update: Thu 20 Aug 2026 16:03:28 +0000 Manifest next update: Thu 27 Aug 2026 16:03:28 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: 5jAJ+qTkqYXfLupIM5L3VCzlLDwgyeDCOVBBlZPHzFw=) 2: D64B0F1086EF11F19E006003A7EE528E.roa (hash: 3EGss4x0ac1o+zeKud2Kpa04Wj1gBtROV497ReGOk30=) 3: D544B54486EF11F19E006003A7EE528E.roa (hash: h826NuL9LphWVMKp0+bjOsjjWbr8Y2wIF8KmzaJ2k3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7732 (0x1e34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Aug 20 16:03:28 2026 GMT Not After : Aug 27 16:03:28 2026 GMT Subject: CN=6a872550-638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:bf:4b:88:ac:54:33:88:ee:7e:ef:fa:45: aa:9e:f6:b9:8c:5a:b7:6d:b3:ce:86:74:ec:bc:45: d2:54:75:66:90:1b:d7:40:8f:c8:bb:5b:9f:18:78: b1:92:58:5b:dc:b5:1d:a4:2b:f8:d8:c7:c2:1c:9d: 15:f0:8f:ed:4a:16:83:46:96:aa:f6:cc:cb:34:9a: 6d:d6:2f:8d:86:28:a0:fc:f8:27:fb:97:4e:91:a1: 26:2e:cf:dc:8c:19:57:a8:2a:9e:03:b8:6b:b9:9e: 57:ff:12:f8:b2:fd:e6:14:c6:08:a3:ac:6e:92:2d: 26:39:72:dc:50:84:9f:d1:65:e1:2c:50:2c:80:31: b6:dd:50:09:e4:24:e2:25:26:43:aa:bf:c5:9f:d9: 3e:04:20:6c:4b:da:51:9f:c9:36:ff:dd:b9:c6:6a: 7a:75:7c:66:0c:5b:58:23:5e:26:94:71:19:f1:d7: 46:81:4c:e6:95:c0:fe:29:46:7b:ba:3f:39:c8:d1: 52:20:b1:25:13:9c:87:1a:01:8e:c8:c0:d6:73:7a: 5e:6f:c7:ef:05:3c:fd:dd:8a:b3:9b:72:34:87:a0: ed:8f:6f:4f:5b:07:4e:e8:50:08:cd:71:4f:44:6c: 12:a0:8d:6d:2a:b3:a7:bb:4f:84:11:da:03:40:33: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2D:A0:A9:DA:2E:A7:2E:81:41:A4:08:85:31:D7:27:53:FB:42:57 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:02:2c:ba:76:cc:34:5c:d8:33:0e:f7:93:5c:48:cc:7d:52: d8:6a:fb:e0:ff:f9:81:24:55:b7:3d:b2:4b:f8:7c:2d:e3:c8: f0:c8:14:36:d0:91:cf:e9:f1:8b:36:98:3a:cc:4c:be:f1:f6: ae:68:b0:86:50:7b:66:2a:2a:04:78:fb:8a:e0:40:fd:20:38: eb:a8:d8:2c:64:63:0c:22:9e:40:88:a7:a0:13:22:9a:ec:ba: 40:b1:94:d3:41:53:6d:f7:30:b3:d8:ee:86:d8:d6:b1:fa:7a: da:59:8c:3e:e2:84:4d:b4:bf:3f:02:3a:0d:52:79:6f:2c:df: 7f:b9:61:ab:11:4c:5e:e2:34:e5:b7:2c:22:bc:cb:8c:d8:d7: d1:a4:2e:fd:8b:e5:f4:63:be:f3:b2:16:f0:d2:26:73:80:f8: 48:0b:fc:0c:12:e5:f5:15:c7:94:b5:e3:cd:8a:b5:e1:e4:0b: 77:c4:d3:63:ea:26:77:72:0e:0c:88:1b:d5:62:ed:f0:ab:ac: 99:2b:4f:66:14:44:1e:03:52:d2:89:84:97:39:8d:cc:b0:e4: 33:e3:57:ea:58:af:1d:7c:0a:a5:f3:2c:48:90:37:ca:ae:ea: 80:dc:3f:41:fb:33:88:fc:bf:34:48:ca:fc:73:8f:5e:9f:44: 14:41:ea:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwODIwMTYwMzI4WhcNMjYwODI3MTYwMzI4WjAYMRYwFAYD VQQDEw02YTg3MjU1MC02MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcG/S4isVDOI7n7v+kWqnva5jFq3bbPOhnTsvEXSVHVmkBvXQI/Iu1ufGHix klhb3LUdpCv42MfCHJ0V8I/tShaDRpaq9szLNJpt1i+Nhiig/Pgn+5dOkaEmLs/c jBlXqCqeA7hruZ5X/xL4sv3mFMYIo6xuki0mOXLcUISf0WXhLFAsgDG23VAJ5CTi JSZDqr/Fn9k+BCBsS9pRn8k2/925xmp6dXxmDFtYI14mlHEZ8ddGgUzmlcD+KUZ7 uj85yNFSILElE5yHGgGOyMDWc3peb8fvBTz93Yqzm3I0h6Dtj29PWwdO6FAIzXFP RGwSoI1tKrOnu0+EEdoDQDP09QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAtoKna LqcugUGkCIUx1ydT+0JXMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANwIsunbMNFzYMw73k1xIzH1S2Gr74P/5gSRVtz2yS/h8LePI8MgUNtCRz+nx izaYOsxMvvH2rmiwhlB7ZioqBHj7iuBA/SA466jYLGRjDCKeQIinoBMimuy6QLGU 00FTbfcws9juhtjWsfp62lmMPuKETbS/PwI6DVJ5byzff7lhqxFMXuI05bcsIrzL jNjX0aQu/Yvl9GO+87IW8NImc4D4SAv8DBLl9RXHlLXjzYq14eQLd8TTY+omd3IO DIgb1WLt8KusmStPZhREHgNS0omElzmNzLDkM+NX6livHXwKpfMsSJA3yq7qgNw/ QfsziPy/NEjK/HOPXp9EFEHqzA== -----END CERTIFICATE-----Generated at Fri Aug 21 06:05:02 2026 by rpki-client