$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: k9+K4OsHyq0mFnNEhcU6ciL/XpyY06ZFkD9QhLxqXvQ= Subject key identifier: 73:7D:BC:51:C3:94:65:87:3D:AD:E0:FC:7F:48:A6:26:92:AF:57:BC Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0E6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0E5B Signing time: Tue 18 Aug 2026 17:58:36 +0000 Manifest this update: Tue 18 Aug 2026 17:58:36 +0000 Manifest next update: Tue 25 Aug 2026 17:58:36 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: cn4xjLXH3+aTOTpaTnOaDr1dszTZJRszCBnURk2ALks=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: SKoROXW9CuXa5cRiDNUDX/4Tb8dZn6LAdzs1mwVKND0=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: nbXF9K4to2LuEPQSJW4J/x772YkxMatEHSBdH9bhwIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Aug 18 17:58:36 2026 GMT Not After : Aug 25 17:58:36 2026 GMT Subject: CN=6a849d4c-5d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:7a:86:9e:a0:ea:30:c7:bf:4f:f7:ba:a1: 5c:37:7d:ca:64:f7:b7:95:48:fa:79:96:c6:29:87: 9a:0c:8c:6a:9d:fe:3e:16:a1:b2:47:f4:ed:2b:e2: 3f:a3:2c:3f:ce:2d:a6:e1:4b:65:23:3a:b3:9e:65: 64:ff:de:a2:60:c9:40:e0:19:54:9c:e4:e7:50:5c: 4f:46:6a:bf:84:17:c6:ac:20:16:3c:a3:38:c1:cb: 4c:b4:35:a1:27:53:e9:2e:1e:96:ce:33:80:91:81: 17:df:e8:e2:e3:e7:b2:cf:4b:0f:9e:3e:46:ee:d6: 06:34:36:9b:41:12:3d:60:44:5e:18:74:83:44:2e: 97:ac:98:f1:14:f8:09:96:5d:a0:ea:fc:83:cd:d1: 0f:ff:8d:f8:19:e1:cb:09:2a:61:5f:37:ae:8d:2e: d5:c8:a2:2f:ec:52:a7:3c:f2:3a:de:52:aa:68:27: a8:e2:4e:6e:59:0a:0c:a7:40:a7:a5:1a:ad:9b:3b: 77:b7:b6:15:53:b8:a6:d6:dc:4d:84:12:10:6f:7e: da:61:b5:ce:00:5d:88:2b:02:55:32:b2:95:d7:a6: e0:a6:42:b3:40:e6:5e:35:0f:cf:80:f7:ac:bf:00: 4b:98:56:ad:2c:8d:f1:9e:db:33:a7:f4:1c:fc:c7: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:BC:51:C3:94:65:87:3D:AD:E0:FC:7F:48:A6:26:92:AF:57:BC X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ad:91:1f:07:8b:e9:ac:ee:b1:05:ab:0d:0f:1d:e1:57:4a: 4c:af:55:73:10:e1:db:f2:b7:e2:b4:d8:e8:a9:dc:25:df:33: 0e:42:ca:ff:3e:ff:a2:8d:cc:9e:44:c3:4f:58:bf:f1:40:da: f7:52:45:f8:d4:ce:6b:eb:8a:77:a2:10:eb:0f:41:a0:54:6c: e0:bb:ab:f6:f2:4e:a5:a6:08:83:78:7a:44:ba:e1:c4:68:f7: bc:da:94:6a:10:d2:f4:f1:32:ad:7a:02:e1:a1:59:81:24:f8: 7d:89:be:46:32:e1:c8:a0:db:fb:d7:bf:50:9c:91:a6:0e:ce: 7a:e7:8e:e9:e2:27:a3:d6:56:87:5b:f2:cc:a3:1d:8c:cd:94: 8e:a9:ca:a5:81:a8:ba:f6:ab:d9:07:ce:3a:eb:fc:12:b9:38: c7:34:8c:b5:88:4a:54:d3:0a:48:02:29:15:21:b9:7c:be:6b: 36:f0:9b:a4:91:fa:9e:14:d9:d0:f0:9b:db:2e:b6:83:aa:e0: f8:d2:1a:ff:4d:14:b5:4a:b9:86:f1:52:ec:58:f1:17:52:d1: a7:e4:83:c7:15:60:6c:df:87:ca:aa:24:f2:22:42:d2:dd:85: 63:3f:93:5d:27:36:39:42:f3:61:75:4e:ed:42:a6:b9:8f:34: 7d:1f:24:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjYwODE4MTc1ODM2WhcNMjYwODI1MTc1ODM2WjAYMRYwFAYD VQQDEw02YTg0OWQ0Yy01ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHx6hp6g6jDHv0/3uqFcN33KZPe3lUj6eZbGKYeaDIxqnf4+FqGyR/TtK+I/ oyw/zi2m4UtlIzqznmVk/96iYMlA4BlUnOTnUFxPRmq/hBfGrCAWPKM4wctMtDWh J1PpLh6WzjOAkYEX3+ji4+eyz0sPnj5G7tYGNDabQRI9YEReGHSDRC6XrJjxFPgJ ll2g6vyDzdEP/434GeHLCSphXzeujS7VyKIv7FKnPPI63lKqaCeo4k5uWQoMp0Cn pRqtmzt3t7YVU7im1txNhBIQb37aYbXOAF2IKwJVMrKV16bgpkKzQOZeNQ/PgPes vwBLmFatLI3xntszp/Qc/Me96wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHN9vFHD lGWHPa3g/H9IpiaSr1e8MB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHa2RHweL6azusQWrDQ8d4VdKTK9VcxDh2/K34rTY6KncJd8zDkLK/z7/oo3M nkTDT1i/8UDa91JF+NTOa+uKd6IQ6w9BoFRs4Lur9vJOpaYIg3h6RLrhxGj3vNqU ahDS9PEyrXoC4aFZgST4fYm+RjLhyKDb+9e/UJyRpg7OeueO6eIno9ZWh1vyzKMd jM2UjqnKpYGouvar2QfOOuv8Erk4xzSMtYhKVNMKSAIpFSG5fL5rNvCbpJH6nhTZ 0PCb2y62g6rg+NIa/00UtUq5hvFS7FjxF1LRp+SDxxVgbN+Hyqok8iJC0t2FYz+T XSc2OULzYXVO7UKmuY80fR8kYw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:50 2026 by rpki-client