$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: n5ldWG/3U3J0YdmXn3CY2h8wpSsnc9rpEThhu3jJGDQ= Subject key identifier: 82:6D:9B:52:5E:BA:B5:68:85:96:A0:E0:C8:68:7A:7C:52:06:6D:C4 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 0286 Signing time: Tue 23 Jun 2026 01:59:35 +0000 Manifest this update: Tue 23 Jun 2026 01:59:34 +0000 Manifest next update: Tue 30 Jun 2026 01:59:34 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: nUu2tcnpm60s/VuRUmGEHT5F/tnU8vv88Ciy75G9N9w=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: iNoqSRT8zGT4sQQ17Q3E6C4knP5LZOO3EPDDr7aFmYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 01:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Jun 23 01:59:34 2026 GMT Not After : Jun 30 01:59:34 2026 GMT Subject: CN=6a39e887-988f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:95:21:fc:36:47:f7:11:4d:ee:e9:02:d4: a2:8b:8a:26:af:1d:59:dd:a0:26:00:61:9e:da:e0: 27:e4:e9:0e:6b:ca:45:42:c0:ba:19:0f:d5:ef:95: ad:e3:ad:50:96:17:c1:f8:c7:30:97:37:6e:6b:e8: 3c:90:73:6a:52:a3:bd:3c:25:90:f3:10:36:7f:e1: 56:ed:93:5c:66:41:e1:35:23:1e:fa:25:1a:d1:a8: b2:72:26:91:20:3d:c2:db:3f:33:08:1f:95:e0:70: 45:d6:b2:57:9f:3a:d4:d9:97:9d:7b:b2:99:cb:7a: 41:50:25:85:4b:51:a2:a6:29:40:1f:83:50:ae:7d: 6b:4a:98:ef:7f:11:71:be:26:05:d0:df:da:95:92: 8e:c8:cb:bf:de:4b:e3:94:f1:0f:09:bb:c4:8d:68: aa:a8:51:ff:00:85:51:d6:53:8a:a0:66:a2:c2:66: fb:d8:98:47:55:70:9b:f2:71:f7:db:29:37:e7:18: d5:43:30:b1:f0:84:40:42:2a:64:43:53:4a:09:92: 9f:9e:b0:3d:e7:74:fc:33:6e:53:ae:c3:03:1b:e2: 57:ba:fe:77:c7:57:4a:86:a8:99:fb:ba:dd:4f:ed: 8c:33:dc:99:5d:d1:7f:f3:c7:14:c9:2a:01:00:00: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6D:9B:52:5E:BA:B5:68:85:96:A0:E0:C8:68:7A:7C:52:06:6D:C4 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:35:1a:5a:27:eb:bb:a5:ad:89:bc:06:47:16:00:0a:97:2a: d5:6d:29:53:65:e2:fd:a1:44:ae:23:01:d4:77:5e:49:23:b9: 3d:9b:ea:1c:1b:7f:b0:00:d9:a1:71:15:8a:b1:f2:e7:f9:f2: 83:45:89:bd:7c:97:89:93:fe:70:9e:6d:cc:c3:5d:7d:52:ec: e1:c4:fa:d4:3a:ef:b5:cd:18:63:9e:bf:42:6a:a5:9e:4f:d6: 09:7c:69:02:fe:36:a7:da:de:4d:9e:b0:f5:92:68:53:63:e4: 05:a8:56:5c:fe:25:19:94:32:64:70:ef:e6:ff:49:8a:2d:34: 64:88:9d:8b:45:7f:75:fb:4f:be:fe:0f:40:64:11:9a:45:d1: 42:37:66:04:83:96:ce:98:6e:f0:de:7b:74:9c:af:fb:04:b3: db:fb:8e:01:35:39:a8:51:93:47:9e:61:97:31:f8:9f:a2:b7: 77:0d:b1:8f:4d:d1:25:01:7b:86:6e:72:06:55:83:be:42:67: 66:b2:6b:37:67:b4:c3:38:14:24:cc:c7:68:3b:ef:d6:6f:c4: bb:51:ae:2c:a8:af:8e:df:35:f2:ef:0e:19:8c:fa:e4:84:db: 0d:b8:13:b2:1c:8a:1f:ef:71:32:02:e7:d3:c5:3a:cb:62:79: cb:83:3b:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwNjIzMDE1OTM0WhcNMjYwNjMwMDE1OTM0WjAYMRYwFAYD VQQDEw02YTM5ZTg4Ny05ODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw6VIfw2R/cRTe7pAtSii4omrx1Z3aAmAGGe2uAn5OkOa8pFQsC6GQ/V75Wt 461QlhfB+Mcwlzdua+g8kHNqUqO9PCWQ8xA2f+FW7ZNcZkHhNSMe+iUa0aiyciaR ID3C2z8zCB+V4HBF1rJXnzrU2Zede7KZy3pBUCWFS1GipilAH4NQrn1rSpjvfxFx viYF0N/alZKOyMu/3kvjlPEPCbvEjWiqqFH/AIVR1lOKoGaiwmb72JhHVXCb8nH3 2yk35xjVQzCx8IRAQipkQ1NKCZKfnrA953T8M25TrsMDG+JXuv53x1dKhqiZ+7rd T+2MM9yZXdF/88cUySoBAABEmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJtm1Je urVohZag4MhoenxSBm3EMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABzUaWifru6WtibwGRxYACpcq1W0pU2Xi/aFEriMB1HdeSSO5PZvqHBt/sADZ oXEVirHy5/nyg0WJvXyXiZP+cJ5tzMNdfVLs4cT61Drvtc0YY56/Qmqlnk/WCXxp Av42p9reTZ6w9ZJoU2PkBahWXP4lGZQyZHDv5v9Jii00ZIidi0V/dftPvv4PQGQR mkXRQjdmBIOWzphu8N57dJyv+wSz2/uOATU5qFGTR55hlzH4n6K3dw2xj03RJQF7 hm5yBlWDvkJnZrJrN2e0wzgUJMzHaDvv1m/Eu1GuLKivjt818u8OGYz65ITbDbgT shyKH+9xMgLn08U6y2J5y4M7Yw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:34 2026 by rpki-client