$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: +fSWwlS9sZLRCEgaS+IBPPIkAi2tD7A25cLDhYv3mGQ= Subject key identifier: 57:7C:20:1F:46:44:40:D0:3E:E5:E7:E8:36:05:7A:57:AD:7A:71:8E Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 042F Signing time: Wed 19 Aug 2026 00:37:14 +0000 Manifest this update: Wed 19 Aug 2026 00:37:13 +0000 Manifest next update: Wed 26 Aug 2026 00:37:13 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: H/xMBnBPscO7WkE7FKXSbCzlW8zvkgd/ZEFAr/SQvLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: Aug 19 00:37:13 2026 GMT Not After : Aug 26 00:37:13 2026 GMT Subject: CN=6a84faba-94bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:68:73:f6:d7:42:d4:ff:0a:91:1c:23:ff: 48:aa:9c:5f:98:04:b9:ce:14:8b:3c:07:9c:7e:4f: bd:05:03:f6:30:50:e6:f2:ec:68:ab:cb:50:ff:85: 69:e4:d2:17:88:0c:0d:49:0b:25:44:d7:d0:c4:46: b1:10:0a:4b:d2:1e:aa:46:cb:72:0b:2d:98:36:76: 63:4d:f5:3b:ee:85:3f:c9:81:29:c1:68:54:5f:b7: c1:6d:af:e1:61:b8:db:09:43:4f:ec:e2:2e:cd:8f: 31:e3:e3:de:84:c7:c0:1e:1f:a0:91:db:f6:1e:93: 42:f2:3a:5b:c9:f2:7e:61:6f:a6:41:35:0c:a2:a4: 24:04:af:42:07:a9:00:d1:10:f0:38:32:c1:02:75: 63:88:98:29:7c:05:34:98:86:55:93:e0:13:d7:c9: 6a:a6:c1:98:de:9b:7d:73:56:dd:bc:ae:e9:58:d1: aa:be:ad:4a:f8:1e:a9:19:2a:5e:6c:ba:cf:86:46: 90:f6:45:ea:03:17:54:cc:65:3c:25:67:3a:a7:50: dc:d2:75:f7:84:79:93:6b:ea:c3:e4:de:6e:33:a6: ea:86:62:8d:9f:05:9a:c7:4e:63:b0:85:17:14:c2: ce:6b:b5:a0:42:b4:99:e7:e0:1d:49:48:f9:ea:67: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7C:20:1F:46:44:40:D0:3E:E5:E7:E8:36:05:7A:57:AD:7A:71:8E X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5f:f4:79:68:31:e5:64:d5:b6:fd:63:1b:10:0f:12:0b:7a: a3:08:2d:72:a5:6f:0f:3e:d9:f4:ee:13:43:e8:60:38:00:29: 4d:a6:98:aa:c9:dd:b6:67:69:ac:75:ee:72:b1:5b:42:73:55: 0a:b2:ef:0c:c4:6b:7c:33:19:99:5b:06:ff:39:3c:88:95:0d: 1a:a6:02:b6:1c:5a:c0:b7:1f:af:ce:c4:77:aa:c9:a0:0d:9d: 3a:88:66:32:32:d7:b7:b5:31:f0:38:cb:d4:3e:1c:0d:e0:66: 8b:42:27:9d:bb:87:50:84:3e:87:a8:ea:3a:ec:67:e5:2a:9c: cc:f4:ec:11:98:0c:02:54:80:d1:b5:e0:45:69:26:dc:6d:e6: 73:be:ff:12:ac:b2:01:44:50:42:90:bf:3f:2c:d6:7e:da:96: 72:d0:dc:af:5f:c2:ce:91:22:f7:62:1c:02:ef:6b:d4:f5:f7: f1:75:cb:df:e5:71:54:62:4e:3a:88:89:93:6d:db:dc:6c:dd: a5:36:05:b0:61:9f:d2:52:21:0f:90:31:d8:8e:a0:9b:d6:18: ff:1a:95:4c:0e:4d:86:19:80:0f:df:ed:79:85:a8:9e:f0:1d: 96:d4:9d:6d:ab:10:91:9a:bb:f6:7d:7c:57:e4:42:b2:40:ff: 8e:05:fe:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjYwODE5MDAzNzEzWhcNMjYwODI2MDAzNzEzWjAYMRYwFAYD VQQDEw02YTg0ZmFiYS05NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoj1oc/bXQtT/CpEcI/9IqpxfmAS5zhSLPAecfk+9BQP2MFDm8uxoq8tQ/4Vp 5NIXiAwNSQslRNfQxEaxEApL0h6qRstyCy2YNnZjTfU77oU/yYEpwWhUX7fBba/h YbjbCUNP7OIuzY8x4+PehMfAHh+gkdv2HpNC8jpbyfJ+YW+mQTUMoqQkBK9CB6kA 0RDwODLBAnVjiJgpfAU0mIZVk+AT18lqpsGY3pt9c1bdvK7pWNGqvq1K+B6pGSpe bLrPhkaQ9kXqAxdUzGU8JWc6p1Dc0nX3hHmTa+rD5N5uM6bqhmKNnwWax05jsIUX FMLOa7WgQrSZ5+AdSUj56mcaeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFd8IB9G REDQPuXn6DYFeletenGOMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1/0eWgx5WTVtv1jGxAPEgt6owgtcqVvDz7Z9O4TQ+hgOAApTaaYqsndtmdp rHXucrFbQnNVCrLvDMRrfDMZmVsG/zk8iJUNGqYCthxawLcfr87Ed6rJoA2dOohm MjLXt7Ux8DjL1D4cDeBmi0InnbuHUIQ+h6jqOuxn5SqczPTsEZgMAlSA0bXgRWkm 3G3mc77/EqyyAURQQpC/PyzWftqWctDcr1/CzpEi92IcAu9r1PX38XXL3+VxVGJO OoiJk23b3GzdpTYFsGGf0lIhD5Ax2I6gm9YY/xqVTA5NhhmAD9/teYWonvAdltSd basQkZq79n18V+RCskD/jgX+hA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:47 2026 by rpki-client