$ rpki-client -vvf rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft File: OhNw-SlQCbrO8HHvmlT91w_RV1o.mft (raw, json) Hash identifier: hCnmBluBCGHUU12caJzKp3EuqH5UKu4A/yYwGizOPNc= Subject key identifier: 2A:1D:DD:A4:DC:D9:3C:D8:05:1E:53:BB:24:BF:8A:F8:B6:AD:0E:71 Authority key identifier: 3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A Certificate issuer: /CN=A916B889/serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft Manifest number: 30 Signing time: Tue 23 Jun 2026 08:57:43 +0000 Manifest this update: Tue 23 Jun 2026 08:57:42 +0000 Manifest next update: Tue 30 Jun 2026 08:57:42 +0000 Files and hashes: 1: OhNw-SlQCbrO8HHvmlT91w_RV1o.crl (hash: 5zBGEG9tckfY/29NK9BQwCh9Pj7FdXiMRvFzlSJKel0=) 2: DD9D275A272A11F1AB1203E5AA833773.roa (hash: anG8mjPCe+gcYm3kp5C5iVeJAFEjW4WqpjQcSNgoVCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B889, serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Validity Not Before: Jun 23 08:57:42 2026 GMT Not After : Jun 30 08:57:42 2026 GMT Subject: CN=6a3a4a86-5cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:7a:23:a3:80:6b:1a:3c:a4:8b:5b:63:42: 59:15:e8:9c:f5:b7:3f:8e:96:00:62:46:45:e9:a3: a6:b1:1e:8c:95:80:6f:00:19:93:b3:17:28:4c:1b: fc:26:8f:b2:e9:47:0d:63:c6:4f:57:ae:fd:cf:cf: 97:81:cd:cc:85:cb:e8:54:c4:89:5f:e3:a0:1f:59: 1f:d7:ce:c2:f7:81:45:4e:8d:aa:a1:5e:4e:35:ef: 0c:8e:29:19:07:97:50:69:58:5b:23:4c:f7:96:28: 7a:bd:da:e0:c5:32:5f:89:54:6e:27:46:87:43:82: bd:3b:53:28:d8:b1:41:db:74:42:da:e9:6d:a4:ed: 26:69:eb:70:80:53:38:00:1a:f7:7c:1a:ae:4b:26: 97:f6:bc:dd:b9:b4:61:af:f1:26:5a:69:6d:e7:ba: 86:93:55:e4:1a:25:7b:1a:67:60:a4:9e:2a:53:1d: 63:d5:ac:7b:3f:14:01:6a:24:1f:48:ef:ba:d7:df: ca:ae:de:33:54:3a:c4:68:e0:05:7f:f2:75:c3:54: 2a:a4:8d:e9:0a:3f:01:ef:60:fb:17:2c:5f:53:00: f1:3a:e2:7e:f2:b7:77:f0:5e:89:a9:ff:05:bc:d6: f5:86:2f:27:14:0f:43:fd:2f:eb:ff:4f:06:05:e1: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1D:DD:A4:DC:D9:3C:D8:05:1E:53:BB:24:BF:8A:F8:B6:AD:0E:71 X509v3 Authority Key Identifier: keyid:3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:41:c7:2f:fc:f6:71:67:a2:e9:c5:bd:9d:91:f8:3e:58: 0b:3e:02:4e:e5:a1:48:36:59:d2:e2:63:43:0b:dd:ca:c8:62: 2c:5b:a6:28:38:b4:48:95:d4:54:24:33:38:50:63:24:0d:1f: 4e:d0:c3:6b:76:37:80:d3:25:1f:cd:e7:d3:b6:a9:12:f1:d9: fa:04:3b:16:72:76:18:8f:09:74:95:93:9f:79:15:49:42:cd: c0:60:47:60:27:3b:f2:f2:26:65:f0:d9:75:61:5f:f8:3d:62: 7d:e6:e0:bb:be:41:16:1a:5a:aa:0e:36:83:4b:81:c0:7d:a9: fe:eb:b0:f5:16:1e:4c:f6:f7:5e:2c:bc:46:5e:b4:18:54:26: f7:e7:a6:b4:a2:04:63:f8:4a:90:3b:41:23:b3:b3:3f:57:1a: b2:10:c0:13:9e:65:31:56:06:61:70:e1:05:76:d5:30:54:2f: 2f:3e:7b:89:4e:a2:46:08:59:d6:70:1f:65:d9:a0:3c:28:c9: ec:6a:00:bf:8e:7e:35:b0:50:9a:b2:9e:ce:37:ab:bc:fe:9b: 4e:a5:32:84:a8:2b:1c:08:cb:5f:b6:ac:75:fa:a6:a2:5f:26: 3e:46:61:5a:99:91:5a:26:56:5b:25:88:27:a3:78:ee:05:ce: ed:7c:69:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjg4OTExMC8GA1UEBRMoM0ExMzcwRjkyOTUwMDlCQUNFRjA3MUVGOUE1NEZERDcw RkQxNTc1QTAeFw0yNjA2MjMwODU3NDJaFw0yNjA2MzAwODU3NDJaMBgxFjAUBgNV BAMTDTZhM2E0YTg2LTVjYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1BXojo4BrGjyki1tjQlkV6Jz1tz+OlgBiRkXpo6axHoyVgG8AGZOzFyhMG/wm j7LpRw1jxk9Xrv3Pz5eBzcyFy+hUxIlf46AfWR/XzsL3gUVOjaqhXk417wyOKRkH l1BpWFsjTPeWKHq92uDFMl+JVG4nRodDgr07UyjYsUHbdELa6W2k7SZp63CAUzgA Gvd8Gq5LJpf2vN25tGGv8SZaaW3nuoaTVeQaJXsaZ2CknipTHWPVrHs/FAFqJB9I 77rX38qu3jNUOsRo4AV/8nXDVCqkjekKPwHvYPsXLF9TAPE64n7yt3fwXomp/wW8 1vWGLycUD0P9L+v/TwYF4QcrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKh3dpNzZ PNgFHlO7JL+K+LatDnEwHwYDVR0jBBgwFoAUOhNw+SlQCbrO8HHvmlT91w/RV1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODg5LzlBQjA3QTNBMjcy NzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2JyTzhISHZtbFQ5MXdfUlYx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hOdy1TbFFDYnJPOEhIdm1sVDkxd19SVjFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC ODg5LzlBQjA3QTNBMjcyNzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2Jy TzhISHZtbFQ5MXdfUlYxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcsEHHL/z2cWei6cW9nZH4PlgLPgJO5aFINlnS4mNDC93KyGIsW6YoOLRIldRU JDM4UGMkDR9O0MNrdjeA0yUfzefTtqkS8dn6BDsWcnYYjwl0lZOfeRVJQs3AYEdg Jzvy8iZl8Nl1YV/4PWJ95uC7vkEWGlqqDjaDS4HAfan+67D1Fh5M9vdeLLxGXrQY VCb356a0ogRj+EqQO0Ejs7M/VxqyEMATnmUxVgZhcOEFdtUwVC8vPnuJTqJGCFnW cB9l2aA8KMnsagC/jn41sFCasp7ON6u8/ptOpTKEqCscCMtftqx1+qaiXyY+RmFa mZFaJlZbJYgno3juBc7tfGmy -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:07 2026 by rpki-client