$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft File: OxaIpfe3JKr754IKLGPZey6o5SI.mft (raw, json) Hash identifier: wadZYIelBmMewaNCe2cPtGZE46PddiMSrp/xBNouutI= Subject key identifier: 02:D3:7C:B6:05:DF:03:53:15:74:5A:0B:79:5D:89:B3:0A:82:FD:96 Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft Manifest number: 0402 Signing time: Wed 19 Aug 2026 00:46:43 +0000 Manifest this update: Wed 19 Aug 2026 00:46:42 +0000 Manifest next update: Wed 26 Aug 2026 00:46:42 +0000 Files and hashes: 1: OxaIpfe3JKr754IKLGPZey6o5SI.crl (hash: QIAcve2Bwy7yHkFOTljHRYL0liEz6pMSh8cFuGojnaM=) 2: 2D613294CD7611EC83259862C4F9AE02.roa (hash: wIyzsjW5BRzmcndW2dr3tP73GPQanoCiUm2iVewXNHc=) 3: EF8CB49CD78F11EC91680D49C4F9AE02.roa (hash: hsXlGwRGvGPxUguulNF29dR42fVylbNtBhEHVdKJ8n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Validity Not Before: Aug 19 00:46:42 2026 GMT Not After : Aug 26 00:46:42 2026 GMT Subject: CN=6a84fcf2-9d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:ab:ed:e6:f0:3e:ce:c9:58:a4:b1:17:00: 46:24:01:64:d1:70:39:60:82:6e:c7:69:f1:7d:fc: e0:f1:a8:0f:86:05:ad:e4:26:f6:d4:8f:45:1a:26: 7f:7a:8b:5b:cc:ed:fc:2a:1d:e4:b6:cf:9f:3f:54: 33:8e:6c:27:d4:9d:bd:6d:5c:f5:20:ec:52:9b:f6: 7c:8f:0c:18:a4:aa:74:ac:0c:33:9a:d4:5e:f5:1a: 9f:7d:0f:d0:78:fb:2a:8e:e7:cb:fe:cb:c7:64:45: 9c:81:bc:5b:3e:ba:d0:16:49:23:f1:b5:4e:d7:2a: b0:e2:25:40:b7:8b:9c:f4:fe:bb:26:a5:a2:aa:a9: ca:d8:ab:39:05:02:b0:8c:5b:07:06:de:59:15:d4: c6:e1:2f:08:71:25:f3:7a:c7:72:73:29:3b:fb:5d: b0:83:2b:a0:a3:48:60:b5:0a:79:fe:fa:4f:eb:83: 4e:8e:dd:85:40:ba:50:99:68:18:64:83:83:b2:7a: 07:cc:00:81:37:93:6e:b2:35:35:03:5b:12:6e:1d: 0c:b4:ce:30:6f:c6:4c:46:44:65:49:5b:e1:1a:12: 64:4d:96:ea:43:48:ac:61:c0:33:3a:87:ec:85:ab: c8:ad:e2:af:38:94:d3:5b:91:28:2d:34:16:98:fc: 9c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:7C:B6:05:DF:03:53:15:74:5A:0B:79:5D:89:B3:0A:82:FD:96 X509v3 Authority Key Identifier: keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f3:40:20:4c:dd:3e:9c:8c:98:ec:7a:8e:fb:f5:70:f9:89: ab:5a:29:e9:6e:fd:94:23:5c:21:bb:64:22:9e:fa:02:a9:6c: e2:01:74:84:c2:cf:db:16:63:c5:12:6a:15:f0:7d:42:f5:0d: 29:53:93:20:87:6b:f2:bb:b8:b8:8b:d1:f8:48:1a:94:da:e7: c9:11:be:14:b6:c5:ee:98:4b:fe:6d:30:6a:f1:2d:8f:b3:bd: 70:5e:9f:06:60:c4:e5:0a:8f:9a:01:5a:fa:07:ba:37:3c:b3: 9a:87:85:ee:11:3f:03:8d:b9:27:1b:4b:30:98:50:ef:87:a8: 70:39:ff:57:70:2e:35:5d:34:53:5d:8a:1f:65:17:3e:8e:a8: fc:e9:99:8a:9f:29:93:6c:d1:7e:f4:39:ff:a0:79:30:e3:39: 79:b5:f5:71:3a:bc:27:ba:95:9c:4e:8e:10:ae:b3:8b:6c:11: aa:bf:a1:df:60:b6:75:37:1e:b5:2e:e7:25:70:ab:9e:1d:ef: 5d:fd:d8:70:ea:83:be:00:4f:74:60:11:11:9d:34:ac:22:14: d7:5e:7d:0c:db:2d:ec:62:9c:ed:ea:54:6c:34:86:d5:83:f8: 33:0e:2b:bd:cc:16:d7:7c:38:24:de:d0:d5:2f:9a:7c:9c:dc: ab:8e:ec:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC MkVBOEU1MjIwHhcNMjYwODE5MDA0NjQyWhcNMjYwODI2MDA0NjQyWjAYMRYwFAYD VQQDEw02YTg0ZmNmMi05ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/ar7ebwPs7JWKSxFwBGJAFk0XA5YIJux2nxffzg8agPhgWt5Cb21I9FGiZ/ eotbzO38Kh3kts+fP1Qzjmwn1J29bVz1IOxSm/Z8jwwYpKp0rAwzmtRe9RqffQ/Q ePsqjufL/svHZEWcgbxbPrrQFkkj8bVO1yqw4iVAt4uc9P67JqWiqqnK2Ks5BQKw jFsHBt5ZFdTG4S8IcSXzesdycyk7+12wgyugo0hgtQp5/vpP64NOjt2FQLpQmWgY ZIODsnoHzACBN5NusjU1A1sSbh0MtM4wb8ZMRkRlSVvhGhJkTZbqQ0isYcAzOofs havIreKvOJTTW5EoLTQWmPycBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALTfLYF 3wNTFXRaC3ldibMKgv2WMB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzJGQS9ENzI0NDU2MkNENzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pL cjc1NElLTEdQWmV5Nm81U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF/NAIEzdPpyMmOx6jvv1cPmJq1op6W79lCNcIbtkIp76Aqls4gF0hMLP2xZj xRJqFfB9QvUNKVOTIIdr8ru4uIvR+EgalNrnyRG+FLbF7phL/m0wavEtj7O9cF6f BmDE5QqPmgFa+ge6NzyzmoeF7hE/A425JxtLMJhQ74eocDn/V3AuNV00U12KH2UX Po6o/OmZip8pk2zRfvQ5/6B5MOM5ebX1cTq8J7qVnE6OEK6zi2wRqr+h32C2dTce tS7nJXCrnh3vXf3YcOqDvgBPdGAREZ00rCIU1159DNst7GKc7epUbDSG1YP4Mw4r vcwW13w4JN7Q1S+afJzcq47sTQ== -----END CERTIFICATE-----Generated at Thu Aug 20 22:55:09 2026 by rpki-client