$ rpki-client -vvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft File: OhbEBL_tNHJEowpa__ZuSZKqKCE.mft (raw, json) Hash identifier: M27YkQ4xjvHYfYEUuFDGQiPYL5EDO0WDPUAtI02wfcY= Subject key identifier: 66:3C:2E:48:9C:A2:4A:95:D9:A2:D8:D0:9A:1E:C0:66:C0:8A:D1:D6 Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21 Certificate issuer: /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft Manifest number: 052B Signing time: Tue 18 Aug 2026 23:55:07 +0000 Manifest this update: Tue 18 Aug 2026 23:55:07 +0000 Manifest next update: Tue 25 Aug 2026 23:55:07 +0000 Files and hashes: 1: OhbEBL_tNHJEowpa__ZuSZKqKCE.crl (hash: zAbGY7aioQEDL4aAw265errz6cogsZZW0yc66Fi4vP0=) 2: 9D77DCA4599A11ECA574BF52C4F9AE02.roa (hash: +QpDQgaKDgA4jgwCETbDA10J+dE7YQ9N+DpzerwOFaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A65C4, serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821 Validity Not Before: Aug 18 23:55:07 2026 GMT Not After : Aug 25 23:55:07 2026 GMT Subject: CN=6a84f0db-dc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:60:c9:37:2b:e3:f2:1e:9b:e9:d9:9a:1a: b2:06:26:b5:d2:ba:3d:14:0e:c5:a5:5f:1b:48:b7: ff:6e:6c:79:11:cf:ae:d2:9c:7f:91:f3:96:51:61: 56:4a:e3:06:bb:e2:f1:23:b6:ed:fb:3b:ec:6d:ed: 4a:fe:cf:47:34:44:f9:89:0e:64:34:38:9c:e0:b7: 07:40:cf:41:f3:6e:ac:26:68:41:25:0b:4c:f8:6e: 84:24:ec:d9:0c:59:8b:33:44:b1:91:dc:15:3d:be: 81:16:70:c6:91:1b:bb:ed:f0:03:35:48:cd:ce:86: f0:75:9f:a4:14:a6:88:41:5b:fd:b4:79:16:09:a0: 2b:a7:08:aa:53:33:2d:5e:de:74:52:31:8a:94:ce: e5:10:a9:ba:45:61:5c:7b:1a:9b:b9:a5:3b:f2:e5: 28:e0:9c:a2:e0:b4:20:ab:5b:7b:90:82:6b:a4:e5: 28:6f:58:de:c8:33:83:f9:15:2f:8a:2e:01:6f:8e: 57:1f:49:8a:38:a2:da:fe:96:90:d2:bd:96:1e:a0: 84:91:7e:c0:17:80:68:62:c6:d2:1b:41:23:59:bb: 10:08:03:73:2d:8e:d7:99:ea:8b:c6:75:77:78:c5: b4:d6:cd:2e:04:a5:4e:fe:6e:a1:86:90:d8:1c:7c: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3C:2E:48:9C:A2:4A:95:D9:A2:D8:D0:9A:1E:C0:66:C0:8A:D1:D6 X509v3 Authority Key Identifier: keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:74:a5:06:d3:6a:42:56:1b:dc:a2:05:59:ce:80:20:bb:b4: 40:30:d4:dc:30:1f:84:22:b2:e6:87:3e:3b:1b:17:6f:df:88: 1b:7d:44:35:bd:9b:01:a9:e3:c6:5b:2a:24:d2:ed:eb:8a:41: 1f:0e:b3:2a:14:ef:51:a8:df:48:d1:2b:e6:47:83:06:95:1c: ef:59:84:0f:7b:a1:18:48:86:95:e3:2b:d4:20:c3:38:e5:8b: 38:42:15:26:97:55:ca:a1:ae:d8:5f:28:f2:4f:c3:c5:71:da: 72:13:a2:2b:b9:9f:7d:ed:48:5d:c3:c5:7c:26:7d:a6:af:27: 6f:48:23:b2:60:1f:90:76:5e:ff:4d:c4:fb:82:2f:47:92:65: e9:01:c4:c2:bf:d2:53:26:91:e8:ce:2c:b7:2b:8d:1f:23:4f: 28:2f:0e:78:d6:5d:f0:4b:7a:24:7e:68:d3:46:94:f0:32:fd: 56:02:a3:f2:74:1a:37:0f:4e:24:f0:0a:58:d9:5b:9d:58:18: 2e:04:b3:02:ef:88:5b:dc:b2:20:c3:e1:d9:b5:0c:83:8f:1a: c7:df:53:c2:d0:4c:41:78:15:00:e5:d6:22:67:cf:75:0c:ea: 2e:f2:5d:66:04:30:e0:0d:9a:88:9a:be:c9:7f:84:7d:c5:3f: 3c:7f:92:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1QzQxMTAvBgNVBAUTKDNBMTZDNDA0QkZFRDM0NzI0NEEzMEE1QUZGRjY2RTQ5 OTJBQTI4MjEwHhcNMjYwODE4MjM1NTA3WhcNMjYwODI1MjM1NTA3WjAYMRYwFAYD VQQDEw02YTg0ZjBkYi1kYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvFgyTcr4/Iem+nZmhqyBia10ro9FA7FpV8bSLf/bmx5Ec+u0px/kfOWUWFW SuMGu+LxI7bt+zvsbe1K/s9HNET5iQ5kNDic4LcHQM9B826sJmhBJQtM+G6EJOzZ DFmLM0SxkdwVPb6BFnDGkRu77fADNUjNzobwdZ+kFKaIQVv9tHkWCaArpwiqUzMt Xt50UjGKlM7lEKm6RWFcexqbuaU78uUo4Jyi4LQgq1t7kIJrpOUob1jeyDOD+RUv ii4Bb45XH0mKOKLa/paQ0r2WHqCEkX7AF4BoYsbSG0EjWbsQCANzLY7XmeqLxnV3 eMW01s0uBKVO/m6hhpDYHHzaswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGY8Lkic okqV2aLY0JoewGbAitHWMB8GA1UdIwQYMBaAFDoWxAS/7TRyRKMKWv/2bkmSqigh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjVDNC8zRTNBNTUwMjU5 OTgxMUVDOTM5MUQ1NTBDNEY5QUUwMi9PaGJFQkxfdE5ISkVvd3BhX19adVNaS3FL Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oYkVCTF90TkhKRW93cGFfX1p1U1pLcUtDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjVDNC8zRTNBNTUwMjU5OTgxMUVDOTM5MUQ1NTBDNEY5QUUwMi9PaGJFQkxfdE5I SkVvd3BhX19adVNaS3FLQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXnSlBtNqQlYb3KIFWc6AILu0QDDU3DAfhCKy5oc+OxsXb9+IG31ENb2bAanj xlsqJNLt64pBHw6zKhTvUajfSNEr5keDBpUc71mED3uhGEiGleMr1CDDOOWLOEIV JpdVyqGu2F8o8k/DxXHachOiK7mffe1IXcPFfCZ9pq8nb0gjsmAfkHZe/03E+4Iv R5Jl6QHEwr/SUyaR6M4styuNHyNPKC8OeNZd8Et6JH5o00aU8DL9VgKj8nQaNw9O JPAKWNlbnVgYLgSzAu+IW9yyIMPh2bUMg48ax99TwtBMQXgVAOXWImfPdQzqLvJd ZgQw4A2aiJq+yX+EfcU/PH+SDQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:41 2026 by rpki-client