$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: LCaeON22BhuBGwb0GWXsNhk/dC0aZln8BNSVcKC1iIw= Subject key identifier: 8D:01:27:2F:E0:71:7C:46:68:6E:E8:80:42:75:2A:8A:E3:B8:91:63 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 06C1 Signing time: Fri 17 Jul 2026 00:14:11 +0000 Manifest this update: Fri 17 Jul 2026 00:14:10 +0000 Manifest next update: Fri 24 Jul 2026 00:14:10 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: oHenuKImBgSbNSW97FxSZWVAerTEpE64HsTVAGQX1Mw=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 00:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Jul 17 00:14:10 2026 GMT Not After : Jul 24 00:14:10 2026 GMT Subject: CN=6a5973d3-acfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:27:3f:db:3f:4e:ee:c7:a7:f0:50:8c:2d: c5:62:f6:7e:98:7d:1d:cb:d1:23:4e:10:c6:55:0e: 79:dd:61:6e:52:a7:23:0a:38:00:b5:e5:51:2e:5e: a5:40:db:0f:a4:a3:64:0c:d4:a8:07:42:a0:9c:60: c4:c2:f8:12:8b:e2:23:12:5c:5b:2f:13:ed:87:17: 8f:fb:6e:b4:7a:ea:b7:26:6c:64:59:af:73:00:a5: e1:99:e3:8b:56:77:e3:f9:5d:2f:00:41:dc:c6:49: e1:fe:99:f4:5d:dd:09:18:51:ec:f1:ad:d8:86:42: 76:c5:bc:8d:8d:c7:d2:73:cf:9d:ec:8d:21:c4:06: 61:a8:12:ea:cc:b7:d3:f6:f8:98:72:55:e9:14:f2: 81:c3:ad:46:d1:e7:d3:2c:40:89:db:0e:5d:47:69: 34:36:61:6f:39:a5:a7:18:d6:8b:aa:30:55:e3:88: 4a:d6:f0:d5:31:a1:bd:ef:4c:54:93:8e:a2:2f:61: 53:eb:ba:bd:c3:85:7b:e9:7c:22:86:81:a0:1c:c4: ca:5e:9e:32:bc:fe:09:82:55:ed:03:79:c9:65:99: 62:6c:24:25:80:a7:ca:8c:31:3c:8e:31:f4:04:50: 5e:81:ee:a6:6a:d8:df:57:e5:1c:99:6a:e7:f3:d2: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:01:27:2F:E0:71:7C:46:68:6E:E8:80:42:75:2A:8A:E3:B8:91:63 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d1:07:9c:ed:bb:9a:e4:54:50:77:94:7e:35:a6:f4:62:ed: 3f:fd:bf:3e:16:e3:23:eb:55:bf:81:64:1e:c3:a1:3a:5f:69: ae:d1:b4:ea:01:76:26:d4:b5:98:fd:2b:3a:42:dc:5a:11:cc: e1:3e:20:e1:f8:2d:7e:8c:78:2c:ce:98:d6:3c:a1:03:79:44: d4:27:e7:e2:fc:47:bc:2a:f6:5d:a2:c1:47:e7:d9:80:47:b6: 24:f9:9f:cb:0b:21:4a:08:a7:14:f4:a3:cd:0c:d5:8f:c6:8f: 66:a3:2a:76:33:90:c4:94:cc:00:9e:5f:a0:2e:00:c0:9a:d7: 1c:4a:87:3d:cd:11:9b:06:20:76:24:4c:6f:92:b1:30:d4:9f: eb:0b:13:32:f2:9c:07:0e:a0:68:10:92:70:01:78:08:69:49: ba:b7:17:78:6b:12:e3:4b:c9:7f:f6:3e:99:e0:c7:62:d5:83: aa:d1:3d:85:10:1a:d6:7d:52:3d:ae:c8:22:3b:75:8d:4f:27: 52:d1:76:9d:da:53:7d:99:e9:36:73:d5:ff:61:1f:01:33:a4: 20:29:b6:1b:71:83:73:4e:16:41:71:f4:db:26:7f:c6:5c:78: fb:32:2c:70:6c:2f:34:14:88:15:73:c6:c9:fc:6e:de:da:6d: 75:4a:35:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjYwNzE3MDAxNDEwWhcNMjYwNzI0MDAxNDEwWjAYMRYwFAYD VQQDEw02YTU5NzNkMy1hY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UInP9s/Tu7Hp/BQjC3FYvZ+mH0dy9EjThDGVQ553WFuUqcjCjgAteVRLl6l QNsPpKNkDNSoB0KgnGDEwvgSi+IjElxbLxPthxeP+260euq3JmxkWa9zAKXhmeOL Vnfj+V0vAEHcxknh/pn0Xd0JGFHs8a3YhkJ2xbyNjcfSc8+d7I0hxAZhqBLqzLfT 9viYclXpFPKBw61G0efTLECJ2w5dR2k0NmFvOaWnGNaLqjBV44hK1vDVMaG970xU k46iL2FT67q9w4V76XwihoGgHMTKXp4yvP4JglXtA3nJZZlibCQlgKfKjDE8jjH0 BFBege6matjfV+UcmWrn89K9vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0BJy/g cXxGaG7ogEJ1KorjuJFjMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtEHnO27muRUUHeUfjWm9GLtP/2/PhbjI+tVv4FkHsOhOl9prtG06gF2JtS1 mP0rOkLcWhHM4T4g4fgtfox4LM6Y1jyhA3lE1Cfn4vxHvCr2XaLBR+fZgEe2JPmf ywshSginFPSjzQzVj8aPZqMqdjOQxJTMAJ5foC4AwJrXHEqHPc0RmwYgdiRMb5Kx MNSf6wsTMvKcBw6gaBCScAF4CGlJurcXeGsS40vJf/Y+meDHYtWDqtE9hRAa1n1S Pa7IIjt1jU8nUtF2ndpTfZnpNnPV/2EfATOkICm2G3GDc04WQXH02yZ/xlx4+zIs cGwvNBSIFXPGyfxu3tptdUo1sg== -----END CERTIFICATE-----Generated at Sat Jul 18 09:27:45 2026 by rpki-client