$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json) Hash identifier: pLCpxigbX8MnERwuawL/8kVvv+rIbGgQXYdDGlp0mSo= Subject key identifier: F1:BD:91:12:FC:B4:E4:D5:05:2B:1A:10:DE:DA:22:D6:F9:A2:E0:E0 Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 10B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft Manifest number: 1097 Signing time: Tue 04 Aug 2026 17:27:12 +0000 Manifest this update: Tue 04 Aug 2026 17:27:11 +0000 Manifest next update: Tue 11 Aug 2026 17:27:11 +0000 Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: jIUiKlS2iozp6p75rtw/UJzogg6nS+2zx1hX/xkWbaY=) 2: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=) 3: B66836E029FD11F1B53E620AA6833773.roa (hash: Zn2BlNHWXlffBqPOiTmcc/nBhDrM+O8fOCYWBgcln1k=) 4: 24528B3C076811F1A996F976023D8C67.roa (hash: bWgfDX1GE7EGRP9RARHJZONgLN/vb6Xu6Lzu2McBHoI=) 5: 6517EB7C5F7311F1B8BB43629547A888.roa (hash: e9s/phH1++I5qahFQ/2J1IQEPJuvHjVe4SztRtq433Y=) 6: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: T7iH4j+Fs0YGxwpO3ni8JBNnOoaLWOu3l74C8nsVoAc=) 7: 23D70458076811F1A996F976023D8C67.roa (hash: sgDMPCu+RI22Qc97uKPio7BRMvudU0OhoHafl4iZZpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 17:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4280 (0x10b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: Aug 4 17:27:11 2026 GMT Not After : Aug 11 17:27:11 2026 GMT Subject: CN=6a7220f0-d6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:28:c7:f0:ea:8a:e2:a6:2f:da:08:0f:ba: e4:c2:ae:93:18:4f:86:a5:0a:42:33:48:21:0a:99: 93:b2:9e:ad:9a:b0:7c:15:a7:3f:ce:5a:93:27:c3: 57:20:c0:a4:c8:93:08:b6:27:21:13:d4:34:70:34: 2c:66:d5:42:fb:17:66:19:b6:bd:de:e5:e9:8f:e8: 82:af:1d:d8:d9:bc:25:11:4f:70:17:27:49:f4:47: b4:fc:0c:ea:d2:62:a6:9f:5d:6b:82:b1:58:43:48: c2:32:61:90:d5:c6:71:35:7c:a7:7a:99:c7:a8:1f: d3:f1:ac:9c:16:66:46:dd:e6:06:79:3d:50:71:9e: 31:6d:54:bc:3e:a1:0b:27:16:9f:19:e6:b2:0e:c3: ba:21:a4:f4:d9:19:1e:d4:ea:fd:68:b4:74:0b:ef: 0b:0e:7d:56:31:83:91:fa:ec:57:08:a6:31:93:52: 05:dd:16:2b:ef:ca:e6:98:cd:41:a4:53:66:1e:c2: f2:28:e1:e9:a0:2d:b9:bc:7d:7c:55:49:42:f6:2c: 75:6c:ee:7d:13:4d:24:43:05:ce:78:8b:f9:06:fa: 51:94:1d:e6:25:a7:8a:8b:78:4d:41:bc:b4:43:7e: cc:6e:a6:16:4a:83:6f:92:6b:1c:f1:6d:f5:cd:15: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:91:12:FC:B4:E4:D5:05:2B:1A:10:DE:DA:22:D6:F9:A2:E0:E0 X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:aa:4b:25:78:27:ee:86:c8:df:3e:8e:11:ab:87:fb:7a:4d: ad:6d:a2:0a:d7:79:ad:3e:c9:b6:42:50:39:d1:e8:bb:b1:ed: 98:57:67:ae:ac:84:37:d5:56:a2:ce:48:1a:7c:bd:79:f9:37: 04:e3:11:19:62:74:c9:29:86:21:1e:c0:fb:2f:9d:61:e9:8a: 8b:00:d3:34:f0:22:0b:ba:ce:70:3c:63:d3:d8:db:e4:db:6d: d6:28:ef:9c:dc:99:a6:1a:e6:a2:a0:f6:3e:bd:b9:e4:19:6c: 84:3d:ab:ae:94:72:bf:43:e5:97:f2:5b:29:9f:f0:c4:d0:d0: 99:b1:b7:6d:82:71:f6:45:4a:9b:44:c4:c8:a4:67:87:c7:fe: 55:a9:9e:1e:e2:2b:72:2a:f3:cd:e4:52:47:eb:c0:5b:91:02: a3:0d:e7:cd:ba:5c:ff:52:22:0e:f0:f4:6d:38:2c:f7:d0:fd: 36:fe:25:6b:c8:e2:16:24:d1:4d:3e:f3:e7:4e:5d:9c:84:34: 2b:f7:33:e8:b6:12:3d:76:4e:74:c0:5b:5f:26:79:67:d1:5b: 0f:6d:61:36:cd:11:8d:62:75:cb:24:a6:85:16:00:02:29:81: c2:1b:ed:ff:d5:0b:5b:53:98:d6:cd:63:3c:91:8c:89:26:4b: 73:f3:c2:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICELgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjYwODA0MTcyNzExWhcNMjYwODExMTcyNzExWjAYMRYwFAYD VQQDEw02YTcyMjBmMC1kNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAml0ox/DqiuKmL9oID7rkwq6TGE+GpQpCM0ghCpmTsp6tmrB8Fac/zlqTJ8NX IMCkyJMItichE9Q0cDQsZtVC+xdmGba93uXpj+iCrx3Y2bwlEU9wFydJ9Ee0/Azq 0mKmn11rgrFYQ0jCMmGQ1cZxNXynepnHqB/T8aycFmZG3eYGeT1QcZ4xbVS8PqEL JxafGeayDsO6IaT02Rke1Or9aLR0C+8LDn1WMYOR+uxXCKYxk1IF3RYr78rmmM1B pFNmHsLyKOHpoC25vH18VUlC9ix1bO59E00kQwXOeIv5BvpRlB3mJaeKi3hNQby0 Q37MbqYWSoNvkmsc8W31zRVl2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPG9kRL8 tOTVBSsaEN7aItb5ouDgMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4 ZlpObFNLTWlPTGdzOTVLVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMapLJXgn7obI3z6OEauH+3pNrW2iCtd5rT7JtkJQOdHou7HtmFdnrqyEN9VW os5IGny9efk3BOMRGWJ0ySmGIR7A+y+dYemKiwDTNPAiC7rOcDxj09jb5Ntt1ijv nNyZphrmoqD2Pr255BlshD2rrpRyv0Pll/JbKZ/wxNDQmbG3bYJx9kVKm0TEyKRn h8f+VameHuIrcirzzeRSR+vAW5ECow3nzbpc/1IiDvD0bTgs99D9Nv4la8jiFiTR TT7z505dnIQ0K/cz6LYSPXZOdMBbXyZ5Z9FbD21hNs0RjWJ1yySmhRYAAimBwhvt /9ULW1OY1s1jPJGMiSZLc/PC4Q== -----END CERTIFICATE-----Generated at Thu Aug 6 18:55:19 2026 by rpki-client