$ rpki-client -vvf rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft File: OHvc-OlHoaBOL0OH-99wZUpE0b0.mft (raw, json) Hash identifier: aTrhGsi5BUtmimh6KzkFEKc32JxUfTgNpztrWtbc2+4= Subject key identifier: 30:C4:AB:EF:CE:0A:B2:D7:39:BF:14:FA:DC:73:DD:BD:5A:2C:F4:09 Authority key identifier: 38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD Certificate issuer: /CN=A913ACF4/serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft Manifest number: 0A33 Signing time: Tue 18 Aug 2026 20:01:42 +0000 Manifest this update: Tue 18 Aug 2026 20:01:42 +0000 Manifest next update: Tue 25 Aug 2026 20:01:42 +0000 Files and hashes: 1: OHvc-OlHoaBOL0OH-99wZUpE0b0.crl (hash: NXDVo5SKCaa96/lSWfvFRfsHwCXljpILNXdTVFqtupk=) 2: 25E6E72899FE11EAB3E30513C4F9AE02.roa (hash: vExenB8r5VLDvagQcEg/ivOJqZUrJV0ln/r+0QlZHXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ACF4, serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD Validity Not Before: Aug 18 20:01:42 2026 GMT Not After : Aug 25 20:01:42 2026 GMT Subject: CN=6a84ba26-92bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ad:f6:44:a4:42:d4:82:03:a2:c5:50:3a:8e: e7:c9:f5:d7:c6:66:1d:78:df:54:24:f6:08:19:0c: f3:28:40:ab:f1:29:fb:56:5d:0b:26:1c:67:ca:f2: 0e:63:bf:4b:44:7f:ad:d8:a2:42:cf:f9:aa:ff:cc: 22:a0:a5:83:99:a5:48:e9:5c:21:53:aa:1a:8f:0b: e8:6b:a9:2f:79:75:34:19:26:17:02:8f:fb:06:c5: e6:8c:d8:6b:7c:8f:b4:c5:69:da:8c:14:c7:d8:8a: 2c:63:a7:a8:6b:3f:40:e2:b4:d0:6a:db:3e:32:d2: 84:5b:1e:86:91:d1:18:db:6f:37:ac:26:56:38:50: 22:26:92:41:3a:23:03:b2:05:63:70:9c:58:9b:28: 47:9e:5b:7f:fc:ff:2e:f1:3e:f0:34:3d:43:96:b6: 95:74:f3:46:87:ea:e0:b2:36:ee:e5:55:6a:b8:b8: af:55:aa:1a:9b:fe:b3:75:e7:3a:b2:c7:32:93:4c: b6:14:21:50:95:47:10:26:af:cb:6f:ab:4c:5b:b8: 77:a4:a7:33:d4:fe:28:8a:45:be:a5:d0:c4:83:3f: ba:b0:e2:9a:d0:26:c1:c2:db:59:d8:a4:5d:1a:27: a6:ff:dd:7e:3d:4c:7f:df:f1:43:12:1a:bb:0c:4f: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:AB:EF:CE:0A:B2:D7:39:BF:14:FA:DC:73:DD:BD:5A:2C:F4:09 X509v3 Authority Key Identifier: keyid:38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:41:c6:28:b9:a6:5a:74:81:c5:f4:2b:38:c9:30:98:d6:21: a8:63:7a:e7:10:da:70:c8:da:c7:4d:bd:90:c9:41:31:9d:4b: 58:4f:ad:ef:ab:ba:da:ff:27:20:28:44:d6:9c:7d:53:1d:08: b3:ef:04:fb:04:1b:9a:f7:bd:2e:1a:82:9d:18:b3:23:37:52: d6:43:f4:7d:07:24:ad:fd:7c:4e:82:04:7d:e3:c5:de:7c:65: 54:b3:67:51:e4:9e:ee:77:52:b0:f4:c4:d9:c8:66:49:11:38: c1:f9:b3:6f:ad:02:c2:a9:c9:0c:d5:6f:40:54:61:90:ec:fd: d3:b3:8f:a9:35:92:e1:f6:93:58:7a:43:bd:c0:86:0a:39:37: e8:52:e6:a2:58:79:6a:05:30:4f:34:03:01:f8:c3:3e:9c:3a: 6e:f5:1b:a0:6f:d4:de:f9:a7:6f:2a:09:74:b7:90:60:43:bc: ec:40:44:b6:51:63:4f:1a:35:96:23:83:3a:e2:a7:6a:3b:6a: 10:82:ae:61:ef:39:48:98:ae:94:50:4d:1d:8e:9a:a1:a9:e9: 93:70:44:08:d3:39:46:41:38:45:e4:70:23:f2:b8:82:51:8d: bf:79:d4:b3:97:df:e3:f5:c2:a7:9f:c7:72:61:5d:a3:f4:d1: c8:2c:7f:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FDRjQxMTAvBgNVBAUTKDM4N0JEQ0Y4RTk0N0ExQTA0RTJGNDM4N0ZCREY3MDY1 NEE0NEQxQkQwHhcNMjYwODE4MjAwMTQyWhcNMjYwODI1MjAwMTQyWjAYMRYwFAYD VQQDEw02YTg0YmEyNi05MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9a32RKRC1IIDosVQOo7nyfXXxmYdeN9UJPYIGQzzKECr8Sn7Vl0LJhxnyvIO Y79LRH+t2KJCz/mq/8wioKWDmaVI6VwhU6oajwvoa6kveXU0GSYXAo/7BsXmjNhr fI+0xWnajBTH2IosY6eoaz9A4rTQats+MtKEWx6GkdEY2283rCZWOFAiJpJBOiMD sgVjcJxYmyhHnlt//P8u8T7wND1DlraVdPNGh+rgsjbu5VVquLivVaoam/6zdec6 sscyk0y2FCFQlUcQJq/Lb6tMW7h3pKcz1P4oikW+pdDEgz+6sOKa0CbBwttZ2KRd Giem/91+PUx/3/FDEhq7DE/C0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDEq+/O CrLXOb8U+txz3b1aLPQJMB8GA1UdIwQYMBaAFDh73PjpR6GgTi9Dh/vfcGVKRNG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUNGNC83MEUzMDM2Qzk5 RkMxMUVBOTY1NTQ1MTBDNEY5QUUwMi9PSHZjLU9sSG9hQk9MME9ILTk5d1pVcEUw YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09IdmMtT2xIb2FCT0wwT0gtOTl3WlVwRTBiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUNGNC83MEUzMDM2Qzk5RkMxMUVBOTY1NTQ1MTBDNEY5QUUwMi9PSHZjLU9sSG9h Qk9MME9ILTk5d1pVcEUwYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApEHGKLmmWnSBxfQrOMkwmNYhqGN65xDacMjax029kMlBMZ1LWE+t76u62v8n IChE1px9Ux0Is+8E+wQbmve9LhqCnRizIzdS1kP0fQckrf18ToIEfePF3nxlVLNn UeSe7ndSsPTE2chmSRE4wfmzb60CwqnJDNVvQFRhkOz907OPqTWS4faTWHpDvcCG Cjk36FLmolh5agUwTzQDAfjDPpw6bvUboG/U3vmnbyoJdLeQYEO87EBEtlFjTxo1 liODOuKnajtqEIKuYe85SJiulFBNHY6aoanpk3BECNM5RkE4ReRwI/K4glGNv3nU s5ff4/XCp5/HcmFdo/TRyCx/8w== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:55 2026 by rpki-client