$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft File: OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json) Hash identifier: sKeWBvkne2/xM8gK2lATLAKxxaoC4je8hj1IBSGeCk0= Subject key identifier: E0:C1:5B:46:6A:65:B8:53:B6:5F:35:36:9D:81:CF:5B:B4:5A:DD:16 Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5 Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft Manifest number: 0145 Signing time: Wed 19 Aug 2026 06:14:56 +0000 Manifest this update: Wed 19 Aug 2026 06:14:55 +0000 Manifest next update: Wed 26 Aug 2026 06:14:55 +0000 Files and hashes: 1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: zCSlEM4smUJggl37CVlPKxRIoegetgv+vmWHUmABE+4=) 2: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=) 3: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: 8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5 Validity Not Before: Aug 19 06:14:55 2026 GMT Not After : Aug 26 06:14:55 2026 GMT Subject: CN=6a8549df-aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:fb:cd:06:37:03:ea:ca:e3:20:2b:94:65: 41:18:5f:7a:1d:c2:f1:e7:42:9a:20:56:aa:92:52: 08:20:f9:4f:7a:93:dc:32:4e:b6:9c:48:f0:62:23: 2a:43:44:2b:98:ab:9f:2d:2f:5c:e8:18:f9:98:f2: 2c:58:d6:0e:2e:61:1d:65:6b:93:d1:44:47:f8:77: b7:83:f4:de:f7:72:01:7f:64:ec:52:c1:cb:43:48: 52:3c:68:3d:59:fd:d7:d4:b5:5a:69:ee:e3:da:30: e4:b7:67:2c:0c:4d:68:62:29:3f:86:4e:02:06:fe: c3:0c:af:ed:b3:3a:97:81:65:16:e0:b3:2b:8b:6f: a8:8f:63:9c:e6:59:58:4a:3b:e7:a5:d0:c8:ea:47: 1e:6b:8d:45:b5:f9:92:0a:a9:d2:4b:96:20:bb:40: 48:1d:30:45:12:60:c6:03:33:46:c4:40:93:90:3e: 22:2e:03:24:40:01:ad:68:6f:e7:e4:09:df:d8:bb: da:78:c1:e4:ce:a8:6a:2d:74:83:7b:87:91:ac:2c: ee:fc:9a:c2:04:b6:5d:b9:29:ba:23:f7:1a:a2:11: ee:b0:d4:7a:71:66:c5:cf:1b:1a:4d:95:84:d0:3c: 98:d7:a0:72:f1:a0:24:bb:e0:ea:99:a9:97:05:7c: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C1:5B:46:6A:65:B8:53:B6:5F:35:36:9D:81:CF:5B:B4:5A:DD:16 X509v3 Authority Key Identifier: keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7c:79:92:ab:4e:33:19:f9:2c:a6:42:34:00:38:a4:d5:0c: 68:fd:0b:40:7c:f1:e9:b8:ee:b4:6f:da:90:04:f7:42:2a:82: 89:f5:f8:51:1a:79:69:c7:51:9b:a8:8e:eb:38:0d:db:51:34: 8b:90:b4:05:05:b9:e9:be:dd:27:d2:5e:8a:5e:23:b7:1e:e8: 7c:33:08:78:73:2e:c0:6e:d2:a7:a3:15:14:27:15:d8:e2:ae: c6:59:1b:48:e2:2a:7f:c9:2a:35:3d:21:75:f2:5d:64:3e:41: 51:16:ed:1c:f6:07:12:21:e1:3b:59:35:c0:61:e0:d6:ea:b0: 66:13:4d:e2:ae:34:fb:09:1e:8a:87:e3:86:23:1e:4f:5b:a3: 1b:79:ef:a3:77:81:3a:1a:82:e3:d3:97:8d:cd:2f:dc:90:e8: 66:49:64:39:10:ac:42:92:90:75:c9:b0:62:13:1e:db:d1:c3: 97:78:a2:a6:46:5d:f7:16:fa:2f:46:fa:86:50:8f:08:d1:a8: dd:c7:f5:ef:48:2c:4a:92:76:2b:54:3c:84:ec:cc:15:09:26: 54:a1:c9:eb:dc:00:b0:41:6c:d0:28:bd:e8:e8:f6:24:50:f9: c1:45:ef:1e:e5:f5:32:df:94:b0:9c:a3:54:f0:78:a6:52:b0: a9:41:2b:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyQjYxMTAvBgNVBAUTKDM5MEEzODM3QUJBNjkxMkEyQ0YyOUU2MTBEQTQ5NTU1 REYyQzZGQTUwHhcNMjYwODE5MDYxNDU1WhcNMjYwODI2MDYxNDU1WjAYMRYwFAYD VQQDEw02YTg1NDlkZi1hYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0977zQY3A+rK4yArlGVBGF96HcLx50KaIFaqklIIIPlPepPcMk62nEjwYiMq Q0QrmKufLS9c6Bj5mPIsWNYOLmEdZWuT0URH+He3g/Te93IBf2TsUsHLQ0hSPGg9 Wf3X1LVaae7j2jDkt2csDE1oYik/hk4CBv7DDK/tszqXgWUW4LMri2+oj2Oc5llY SjvnpdDI6kcea41FtfmSCqnSS5Ygu0BIHTBFEmDGAzNGxECTkD4iLgMkQAGtaG/n 5Anf2LvaeMHkzqhqLXSDe4eRrCzu/JrCBLZduSm6I/caohHusNR6cWbFzxsaTZWE 0DyY16By8aAku+DqmamXBXwVywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODBW0Zq ZbhTtl81Np2Bz1u0Wt0WMB8GA1UdIwQYMBaAFDkKODerppEqLPKeYQ2klVXfLG+l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9ERTdFMzIxRUNC NTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtTb3M4cDVoRGFTVlZkOHNi NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09RbzRONnVta1NvczhwNWhEYVNWVmQ4c2I2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJCNi9ERTdFMzIxRUNCNTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtT b3M4cDVoRGFTVlZkOHNiNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAknx5kqtOMxn5LKZCNAA4pNUMaP0LQHzx6bjutG/akAT3QiqCifX4URp5acdR m6iO6zgN21E0i5C0BQW56b7dJ9Jeil4jtx7ofDMIeHMuwG7Sp6MVFCcV2OKuxlkb SOIqf8kqNT0hdfJdZD5BURbtHPYHEiHhO1k1wGHg1uqwZhNN4q40+wkeiofjhiMe T1ujG3nvo3eBOhqC49OXjc0v3JDoZklkORCsQpKQdcmwYhMe29HDl3iipkZd9xb6 L0b6hlCPCNGo3cf170gsSpJ2K1Q8hOzMFQkmVKHJ69wAsEFs0Ci96Oj2JFD5wUXv HuX1Mt+UsJyjVPB4plKwqUEr0A== -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:19 2026 by rpki-client