$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: PSWUH7fp9D1ZJjnTLXcw9ysZAEgl+IjZalmXpiz2W8Y= Subject key identifier: C5:ED:E8:C1:DC:90:2F:3E:F2:F5:45:0A:1F:7E:32:E9:78:C4:C8:3E Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0935 Signing time: Tue 18 Aug 2026 20:31:38 +0000 Manifest this update: Tue 18 Aug 2026 20:31:37 +0000 Manifest next update: Tue 25 Aug 2026 20:31:37 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: sz0YUj7F33dGgXU7Dntabg3brNrpeSLBFgLkd/WdJ0M=) 2: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: T90KWb99cEbWcYjxKrcTOKfx/Qq8bgV36JoCAoZr1DA=) 3: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: FHR5X9UUHIe+lbh333dtqmnv9RGCApUiICBVfwjLgCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: Aug 18 20:31:37 2026 GMT Not After : Aug 25 20:31:37 2026 GMT Subject: CN=6a84c129-c7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:97:0c:eb:f8:8a:03:54:a5:22:dc:36:6a: 25:89:9c:a4:35:25:9e:4c:c0:a5:1d:98:d2:cd:53: 77:34:b1:30:29:2a:e0:28:d6:f9:c7:47:59:37:78: 28:fa:1a:45:f3:ff:1a:d1:28:01:b3:3c:02:93:a9: 87:72:4b:b9:8c:51:a7:ff:d9:c3:42:39:1f:31:fd: b4:11:d6:1b:f4:ab:73:4a:e8:d6:04:f1:74:8e:df: bb:85:f3:bf:65:b4:a5:03:68:d5:f0:a1:e6:17:68: d0:71:42:ea:57:05:e3:23:8e:94:b2:ac:8e:20:da: ce:8e:d8:61:a7:a7:a3:17:99:2c:62:bc:e4:6d:20: 49:4f:a0:65:cb:c9:25:d0:86:bf:73:56:78:30:1e: a2:6f:e2:53:8c:12:90:7e:b7:01:22:14:58:af:88: d4:a2:f5:e7:62:23:83:ce:26:dc:3e:72:ad:e0:b5: 36:2a:51:0a:8a:9c:d4:5c:27:b2:42:f5:99:66:6f: 8d:bd:eb:b0:a2:ca:7d:8d:d6:9d:e7:cc:be:d3:9d: 24:b6:3d:aa:5b:45:ab:80:4b:e1:e0:0e:3d:23:a1: 54:09:5e:18:67:be:5c:d9:65:b2:ee:fd:cc:a1:8d: 8f:a4:b1:a6:64:43:86:27:a7:c3:37:da:b7:24:a6: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:ED:E8:C1:DC:90:2F:3E:F2:F5:45:0A:1F:7E:32:E9:78:C4:C8:3E X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b3:55:cb:4f:79:81:1e:c3:a7:3d:21:51:4e:66:88:2f:23: 3d:7d:d3:cf:78:f8:b6:56:eb:da:50:d1:bd:9e:c1:97:1d:b0: cc:77:23:01:78:46:eb:7b:18:fa:e3:f3:55:2e:6e:74:21:08: ae:c4:e4:6c:5d:c2:cf:3e:40:80:fa:aa:3f:1b:ad:37:28:b9: 8d:11:75:c7:4f:ab:a8:68:ed:d1:b7:f0:e8:3a:45:a1:7c:72: c3:e6:96:a5:7c:60:1f:69:cf:58:c3:41:01:5f:5a:f1:66:99: b8:68:60:4f:39:9f:fb:aa:6f:7c:30:93:63:8d:e7:8f:9d:82: c1:d3:bd:d7:18:c3:13:9e:71:60:e2:86:61:a4:06:4d:0d:e1: d6:3a:65:a7:ba:b3:30:f1:85:c1:2c:57:93:46:b2:a3:bf:82: 9d:e6:ad:66:ae:7c:a5:d6:12:11:bd:48:32:18:3f:72:21:4c: 6a:67:34:42:ae:e7:fd:ee:7a:f8:1b:f8:cf:6f:51:a7:11:1e: 73:45:1d:6b:50:18:a6:e8:19:d9:86:c1:77:8f:26:c8:0a:b9: 92:ac:d0:78:c7:32:e0:75:56:3e:24:68:2d:51:ad:f5:e8:cf: 81:ab:b2:8f:c8:fa:2b:ab:8a:7e:d2:91:f5:59:6b:47:ed:bb: 66:79:1a:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjYwODE4MjAzMTM3WhcNMjYwODI1MjAzMTM3WjAYMRYwFAYD VQQDEw02YTg0YzEyOS1jN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhmXDOv4igNUpSLcNmoliZykNSWeTMClHZjSzVN3NLEwKSrgKNb5x0dZN3go +hpF8/8a0SgBszwCk6mHcku5jFGn/9nDQjkfMf20EdYb9KtzSujWBPF0jt+7hfO/ ZbSlA2jV8KHmF2jQcULqVwXjI46UsqyOINrOjthhp6ejF5ksYrzkbSBJT6Bly8kl 0Ia/c1Z4MB6ib+JTjBKQfrcBIhRYr4jUovXnYiODzibcPnKt4LU2KlEKipzUXCey QvWZZm+Nveuwosp9jdad58y+050ktj2qW0WrgEvh4A49I6FUCV4YZ75c2WWy7v3M oY2PpLGmZEOGJ6fDN9q3JKYLhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXt6MHc kC8+8vVFCh9+Mul4xMg+MB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7NVy095gR7Dpz0hUU5miC8jPX3Tz3j4tlbr2lDRvZ7Blx2wzHcjAXhG63sY +uPzVS5udCEIrsTkbF3Czz5AgPqqPxutNyi5jRF1x0+rqGjt0bfw6DpFoXxyw+aW pXxgH2nPWMNBAV9a8WaZuGhgTzmf+6pvfDCTY43nj52CwdO91xjDE55xYOKGYaQG TQ3h1jplp7qzMPGFwSxXk0ayo7+CneatZq58pdYSEb1IMhg/ciFMamc0Qq7n/e56 +Bv4z29RpxEec0Uda1AYpugZ2YbBd48myAq5kqzQeMcy4HVWPiRoLVGt9ejPgauy j8j6K6uKftKR9VlrR+27ZnkaPA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:40:44 2026 by rpki-client