$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: 2P8n6GNdZsOxHfuvZA569XZTvxBj0FSf0d8noLVqqpg= Subject key identifier: 3A:77:0C:3A:F4:2A:9B:6D:AC:B5:CD:9A:7B:A0:5E:EA:EC:A6:4D:50 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 358D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 3580 Signing time: Tue 18 Aug 2026 14:33:08 +0000 Manifest this update: Tue 18 Aug 2026 14:33:07 +0000 Manifest next update: Tue 25 Aug 2026 14:33:07 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: XFTkZR5ROzoUjXn5OZQQj09W3Q1jh2AIAlB528zdYNY=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: onsBo5Bz4rkJbVswoyhTU6gtfIuIlfG0ZfPWcTezyxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Aug 18 14:33:07 2026 GMT Not After : Aug 25 14:33:07 2026 GMT Subject: CN=6a846d24-8ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:3b:38:01:48:71:8b:7f:65:5f:7b:93:6e: d3:58:1a:e7:a3:9e:4c:be:57:56:c4:13:e0:3f:f5: ae:de:18:f7:e9:ad:15:f1:ba:00:66:f2:38:d5:03: a0:83:7e:34:35:ae:4a:a7:87:fd:2c:c6:75:8e:96: d8:8a:35:21:03:d0:22:cf:42:18:53:73:5d:cb:c1: 1c:fb:33:d7:f0:27:7b:31:57:d1:84:6c:6f:00:53: 96:2d:22:a6:27:27:72:84:ec:d9:2c:cb:f9:17:d2: 35:76:ba:75:8a:a4:f5:57:ae:f6:3f:20:7b:88:22: a2:c0:eb:83:bc:74:32:8f:d1:d3:4c:e8:df:34:fc: 18:d1:7a:cc:2c:35:58:a4:68:f5:3f:7e:8e:12:29: c6:bc:5c:6e:6c:31:03:81:58:62:a7:0e:61:f9:b5: 35:3b:7d:c0:f4:5d:41:78:2a:ec:41:1b:86:38:ac: a5:87:c1:44:99:33:eb:7b:0f:cc:e8:95:91:73:e1: 97:a3:af:3d:bc:77:2c:a3:83:4a:1d:31:04:95:88: 5e:58:63:7f:63:97:50:4a:33:12:f9:f3:40:03:d8: c3:2c:f0:9d:ad:45:18:6f:82:f5:7a:c1:34:00:77: c4:af:87:30:ec:a0:64:98:cb:33:7a:87:54:4d:f4: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:77:0C:3A:F4:2A:9B:6D:AC:B5:CD:9A:7B:A0:5E:EA:EC:A6:4D:50 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:49:32:5b:45:65:40:f7:2c:9e:a1:ab:5b:75:53:83:d7: bf:bd:a4:19:f2:b6:1d:3a:20:d8:6b:c1:17:29:26:32:a3:be: 8d:f1:39:0e:f2:8f:e6:28:20:e5:f0:e4:3d:d7:b7:6f:29:70: 1f:24:c8:0a:5a:43:76:ce:f4:e7:75:da:ba:53:c6:cf:48:6f: 2c:87:20:3b:3d:ab:72:8c:a3:07:44:e1:00:ed:31:6c:5f:43: b6:d9:5e:51:4f:10:b4:ed:34:a6:19:4d:35:38:75:14:3c:ae: 6b:41:d7:28:98:14:5e:23:1a:a8:e4:c4:6d:4f:45:99:ad:bf: a4:9b:6f:17:2e:17:c1:80:76:c1:73:e9:f9:1a:9c:d4:67:d5: 1c:67:12:17:3f:4e:37:40:32:a3:86:4e:f4:a5:99:b6:a2:c7: 31:57:15:5e:4a:59:42:d3:81:7f:83:f7:c9:ee:e1:f8:49:87: 32:13:a6:4c:87:0b:b1:f4:7c:8a:ef:a6:2b:df:3a:de:ba:66: 15:c1:c7:4c:f0:0c:e9:36:e2:c3:46:54:07:0f:62:d4:ad:78: 77:d1:6c:4c:bd:c7:f3:06:58:e0:be:06:31:65:c5:19:f5:26: c1:87:ba:b5:16:31:64:41:da:fd:8a:a3:7f:12:70:50:39:20: a4:dc:3d:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjYwODE4MTQzMzA3WhcNMjYwODI1MTQzMzA3WjAYMRYwFAYD VQQDEw02YTg0NmQyNC04ZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJg7OAFIcYt/ZV97k27TWBrno55MvldWxBPgP/Wu3hj36a0V8boAZvI41QOg g340Na5Kp4f9LMZ1jpbYijUhA9Aiz0IYU3Ndy8Ec+zPX8Cd7MVfRhGxvAFOWLSKm JydyhOzZLMv5F9I1drp1iqT1V672PyB7iCKiwOuDvHQyj9HTTOjfNPwY0XrMLDVY pGj1P36OEinGvFxubDEDgVhipw5h+bU1O33A9F1BeCrsQRuGOKylh8FEmTPrew/M 6JWRc+GXo689vHcso4NKHTEElYheWGN/Y5dQSjMS+fNAA9jDLPCdrUUYb4L1esE0 AHfEr4cw7KBkmMszeodUTfQ5JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDp3DDr0 KpttrLXNmnugXurspk1QMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMiRJMltFZUD3LJ6hq1t1U4PXv72kGfK2HTog2GvBFykmMqO+jfE5DvKP5igg 5fDkPde3bylwHyTIClpDds7053XaulPGz0hvLIcgOz2rcoyjB0ThAO0xbF9Dttle UU8QtO00phlNNTh1FDyua0HXKJgUXiMaqOTEbU9Fma2/pJtvFy4XwYB2wXPp+Rqc 1GfVHGcSFz9ON0Ayo4ZO9KWZtqLHMVcVXkpZQtOBf4P3ye7h+EmHMhOmTIcLsfR8 iu+mK9863rpmFcHHTPAM6Tbiw0ZUBw9i1K14d9FsTL3H8wZY4L4GMWXFGfUmwYe6 tRYxZEHa/YqjfxJwUDkgpNw9cA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:29 2026 by rpki-client