$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: Wcwj0Qvc199ucbMtGIN+PKqRl/lu1G/g/teYTa2wBd4= Subject key identifier: C3:C4:6B:EF:41:96:9B:0C:AF:E6:39:76:D4:E2:79:24:18:5E:58:CA Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 0414 Signing time: Wed 19 Aug 2026 00:43:47 +0000 Manifest this update: Wed 19 Aug 2026 00:43:46 +0000 Manifest next update: Wed 26 Aug 2026 00:43:46 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: OgcBH7JvXu3V2f5yu8vkl75nODoY16V54V1r5eoVlqU=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: KAxFLc+FLLZOJvFJVgYgukA8YPHsfP0aBf1XAimFPsM=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: 67X+V4SbIsN8VDgrAgyzL2jNTp6iwkJqm5Q8Ye8FUJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Aug 19 00:43:46 2026 GMT Not After : Aug 26 00:43:46 2026 GMT Subject: CN=6a84fc43-e63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:39:b2:fd:15:57:f5:b8:f6:7f:05:d8:13: 2e:62:c9:da:cd:4e:0a:a1:85:bd:69:03:3d:85:d6: 17:ab:eb:f9:76:58:ed:76:f6:3b:96:90:67:af:4f: 4f:62:97:e2:be:db:e5:bb:03:0f:81:89:88:77:97: 39:ad:34:f4:9d:67:4f:1f:43:84:5f:62:52:79:70: d7:e3:4a:55:24:f5:c2:99:93:1a:1d:37:f8:3e:38: bc:42:54:5e:b8:39:05:a9:0d:ee:c9:df:95:bc:72: 9a:a2:82:61:89:0a:3c:ef:32:48:d4:53:5d:6d:35: 74:84:4f:13:f2:c1:9c:b9:08:70:a0:aa:60:13:a3: c6:45:99:8b:6b:37:95:8f:41:10:f1:0c:a8:4d:a3: b4:9c:33:16:67:90:88:60:62:02:57:0c:a2:49:5e: 08:50:ab:f4:95:e4:fa:1d:95:cd:37:47:75:37:12: 39:62:bf:ff:5d:57:0f:ac:b4:8f:64:9b:3d:ac:2e: 1f:a8:77:02:61:13:d7:81:57:7c:43:4e:5d:67:e7: c2:4a:a5:7e:20:3c:6a:ce:3f:45:bc:42:28:ea:56: 4a:ac:cd:c1:3d:04:d8:5d:b5:9e:6f:02:9e:3d:f6: c4:1b:77:ee:64:57:d6:00:62:28:e5:45:fc:a0:db: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:6B:EF:41:96:9B:0C:AF:E6:39:76:D4:E2:79:24:18:5E:58:CA X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:71:d5:20:cd:f4:d9:2f:02:b3:b0:cf:c9:6d:60:d0:c9:1f: bb:ed:cc:2c:5f:44:3c:d3:64:1f:80:a8:dd:0a:cf:24:bb:d5: c9:af:94:29:e4:38:e8:93:08:46:47:68:96:78:6b:8b:a8:49: 24:9c:07:f8:57:46:73:1b:d0:19:ea:0f:75:e3:b5:71:1c:8b: ad:5a:a6:af:0a:68:bc:53:13:6a:b5:2b:06:b0:5b:b3:5b:00: 03:0c:92:39:03:ab:0f:18:92:08:ec:e8:22:eb:2d:b5:d1:96: 24:f0:0e:f8:10:01:35:60:eb:21:bc:4b:e2:f8:45:2b:9f:ee: 34:24:91:b9:7d:2a:a0:3a:22:fc:8a:8d:0d:02:66:a0:fb:dd: 20:54:3a:d8:21:29:cd:f8:a1:bf:c7:05:32:19:41:dd:ab:cc: d8:a9:42:8a:fb:6c:39:78:8a:8e:6a:02:81:27:e2:b1:44:42: 0e:68:a9:e7:56:b4:30:48:79:ad:78:4b:76:13:ba:42:a2:ee: 9e:07:14:20:f8:95:ea:9f:b6:32:b7:a0:9d:45:cd:0d:bb:9c: f4:a3:25:ad:4e:02:fd:c1:de:60:a9:59:4c:a0:52:f2:8e:56: e3:4d:18:11:81:80:11:27:cd:4d:0e:4b:71:f6:b9:da:94:48: c6:6e:74:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjYwODE5MDA0MzQ2WhcNMjYwODI2MDA0MzQ2WjAYMRYwFAYD VQQDEw02YTg0ZmM0My1lNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2s5sv0VV/W49n8F2BMuYsnazU4KoYW9aQM9hdYXq+v5dljtdvY7lpBnr09P YpfivtvluwMPgYmId5c5rTT0nWdPH0OEX2JSeXDX40pVJPXCmZMaHTf4Pji8QlRe uDkFqQ3uyd+VvHKaooJhiQo87zJI1FNdbTV0hE8T8sGcuQhwoKpgE6PGRZmLazeV j0EQ8QyoTaO0nDMWZ5CIYGICVwyiSV4IUKv0leT6HZXNN0d1NxI5Yr//XVcPrLSP ZJs9rC4fqHcCYRPXgVd8Q05dZ+fCSqV+IDxqzj9FvEIo6lZKrM3BPQTYXbWebwKe PfbEG3fuZFfWAGIo5UX8oNu49wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPEa+9B lpsMr+Y5dtTieSQYXljKMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlHHVIM302S8Cs7DPyW1g0Mkfu+3MLF9EPNNkH4Co3QrPJLvVya+UKeQ46JMI Rkdolnhri6hJJJwH+FdGcxvQGeoPdeO1cRyLrVqmrwpovFMTarUrBrBbs1sAAwyS OQOrDxiSCOzoIusttdGWJPAO+BABNWDrIbxL4vhFK5/uNCSRuX0qoDoi/IqNDQJm oPvdIFQ62CEpzfihv8cFMhlB3avM2KlCivtsOXiKjmoCgSfisURCDmip51a0MEh5 rXhLdhO6QqLungcUIPiV6p+2MregnUXNDbuc9KMlrU4C/cHeYKlZTKBS8o5W400Y EYGAESfNTQ5Lcfa52pRIxm50Gw== -----END CERTIFICATE-----Generated at Wed Aug 19 15:15:04 2026 by rpki-client