$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: Wfbbl48+yCe6MlSfYTUNOBUIrp5ANJQRQvBdP+rMZ3E= Subject key identifier: C8:4F:D7:C3:AA:E5:74:8C:11:83:6D:47:9D:20:6E:DE:60:BE:35:F6 Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 1478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 146B Signing time: Tue 18 Aug 2026 17:02:17 +0000 Manifest this update: Tue 18 Aug 2026 17:02:16 +0000 Manifest next update: Tue 25 Aug 2026 17:02:16 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: 6Ew8bmn7LhnMVqOmTpZLSCKz80I/DIyKCY22XitPUr8=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: ejmgdYeuM6vja8yeymu+bvz8ubQIFSHH83aK9capx78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5240 (0x1478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: Aug 18 17:02:16 2026 GMT Not After : Aug 25 17:02:16 2026 GMT Subject: CN=6a849019-13eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:42:b0:40:b1:8f:f0:7f:55:7e:30:f7:6a: 69:fd:f4:a7:21:49:18:05:ca:a7:b5:b3:44:00:87: 7c:38:82:35:a8:f6:a5:5e:a8:ed:40:3d:42:80:a0: 6b:71:7e:a9:95:08:d8:19:88:ee:b2:03:c9:58:3f: 01:cc:1a:93:30:da:76:0d:f6:65:75:04:b0:36:b5: fb:ef:8f:45:03:41:03:59:ee:f3:73:40:b9:25:f8: a9:90:ea:1a:77:89:bf:aa:aa:c4:64:5e:fb:53:11: 23:c8:a1:23:9b:28:84:d3:b1:ad:b0:db:b8:73:96: 41:c4:f6:7c:33:a6:77:6b:65:42:bd:f7:66:c5:7c: eb:41:04:52:8d:7a:4b:38:7c:6c:6a:18:d5:30:c4: bc:0f:51:a4:43:15:98:ec:86:f4:58:9b:08:cb:85: aa:0a:02:d2:dd:fa:5e:20:da:5d:c0:a3:25:67:95: ee:4f:64:6a:c8:34:e4:78:39:7e:24:da:94:c8:30: 0c:c3:55:0b:4a:71:82:02:8f:4e:ed:92:d7:53:93: 4b:e5:38:75:ff:2b:7e:a7:ed:b1:c7:17:a0:30:f5: ab:ad:d5:79:d7:6b:db:6a:28:20:0a:e9:cc:54:ef: 88:f4:60:fc:ce:e8:04:57:9c:6c:e2:94:ce:57:89: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4F:D7:C3:AA:E5:74:8C:11:83:6D:47:9D:20:6E:DE:60:BE:35:F6 X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f7:72:63:83:3a:3d:b3:b8:a6:9a:f5:47:e6:d2:6d:93:36: f6:62:8a:ec:e4:9f:b9:c9:0d:ef:9a:a7:74:bc:1d:e6:4a:03: 4e:a2:46:3f:a4:55:66:80:e2:56:34:c2:f7:b5:d8:dd:91:8c: 02:db:79:20:23:0a:03:a8:2a:59:7a:07:df:d0:22:87:ed:6a: fb:46:72:23:a5:3b:b8:b3:1a:27:2f:9f:ba:cf:1b:90:0b:b2: a9:7d:3c:34:bf:1f:fd:73:20:3b:85:7b:53:82:2a:f2:7d:5b: 9f:b9:ec:ce:f6:47:2d:a5:4a:c8:69:47:d5:6d:cb:27:a5:07: 0c:b4:a3:7f:c8:13:61:8d:51:4d:5c:98:5d:6f:af:50:0d:4f: be:7d:d3:bd:6a:e8:21:7b:6f:ad:8c:77:93:5d:85:c3:fe:6c: bc:f9:ee:f0:fb:78:0c:9f:8a:ac:85:d8:97:03:9f:ac:43:c8: 38:d9:8c:d5:e4:87:9a:cb:98:4d:98:86:3e:df:91:99:6f:ce: 80:06:0a:7a:26:41:2e:6c:d4:70:4c:50:80:99:c4:bd:59:3c: 62:08:42:b3:86:b6:d4:ca:cb:d7:e7:77:82:a5:c7:0e:44:83: 4a:2c:c3:4d:73:56:1d:97:47:b5:c5:7e:11:98:72:5f:5c:dd: 1f:c0:11:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjYwODE4MTcwMjE2WhcNMjYwODI1MTcwMjE2WjAYMRYwFAYD VQQDEw02YTg0OTAxOS0xM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNlCsECxj/B/VX4w92pp/fSnIUkYBcqntbNEAId8OII1qPalXqjtQD1CgKBr cX6plQjYGYjusgPJWD8BzBqTMNp2DfZldQSwNrX7749FA0EDWe7zc0C5JfipkOoa d4m/qqrEZF77UxEjyKEjmyiE07GtsNu4c5ZBxPZ8M6Z3a2VCvfdmxXzrQQRSjXpL OHxsahjVMMS8D1GkQxWY7Ib0WJsIy4WqCgLS3fpeINpdwKMlZ5XuT2RqyDTkeDl+ JNqUyDAMw1ULSnGCAo9O7ZLXU5NL5Th1/yt+p+2xxxegMPWrrdV512vbaiggCunM VO+I9GD8zugEV5xs4pTOV4knCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhP18Oq 5XSMEYNtR50gbt5gvjX2MB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADPdyY4M6PbO4ppr1R+bSbZM29mKK7OSfuckN75qndLwd5koDTqJGP6RVZoDi VjTC97XY3ZGMAtt5ICMKA6gqWXoH39Aih+1q+0ZyI6U7uLMaJy+fus8bkAuyqX08 NL8f/XMgO4V7U4Iq8n1bn7nszvZHLaVKyGlH1W3LJ6UHDLSjf8gTYY1RTVyYXW+v UA1Pvn3TvWroIXtvrYx3k12Fw/5svPnu8Pt4DJ+KrIXYlwOfrEPIONmM1eSHmsuY TZiGPt+RmW/OgAYKeiZBLmzUcExQgJnEvVk8YghCs4a21MrL1+d3gqXHDkSDSizD TXNWHZdHtcV+EZhyX1zdH8AR/w== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:43 2026 by rpki-client