$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: LFqhS/D2suIExfbVK2f8gatK4Fcx2afGoyOfK09/a8s= Subject key identifier: AF:56:0E:0B:9F:8B:85:DC:DC:72:7E:B7:4C:13:CF:28:28:FF:CE:B7 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 02A3 Signing time: Wed 19 Aug 2026 02:08:46 +0000 Manifest this update: Wed 19 Aug 2026 02:08:45 +0000 Manifest next update: Wed 26 Aug 2026 02:08:45 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: Ra5YPZgpHNAVSbIzqsFQvRu/rNmyVh+XO9GadE+0Ha8=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: iNoqSRT8zGT4sQQ17Q3E6C4knP5LZOO3EPDDr7aFmYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Aug 19 02:08:45 2026 GMT Not After : Aug 26 02:08:45 2026 GMT Subject: CN=6a85102e-2a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:a9:0b:0a:5d:66:1a:c8:b7:6c:06:ae:47: b7:89:d4:1f:89:b2:ad:50:05:a4:44:6c:c3:bf:95: 67:df:e2:fe:82:f0:ee:a7:41:6c:02:5f:70:b9:44: e2:e3:3d:de:3e:6f:6b:16:60:a5:f7:59:57:11:19: f9:93:05:58:a3:02:8b:79:53:14:12:51:cf:80:34: 47:1a:b1:fc:cc:05:90:13:ae:00:27:68:78:9f:d1: 57:7b:4d:60:6e:2e:ab:02:24:b4:4c:35:ae:5a:cc: 79:0c:a3:be:88:9e:06:b8:05:ac:46:4e:87:61:c3: ea:0b:f6:ba:f0:0a:7e:37:d9:6f:32:68:f9:00:07: 2a:9b:f5:88:ec:79:eb:ab:0b:83:40:e4:44:a4:a3: a4:f1:82:dd:90:97:05:a2:00:05:d3:0d:ea:b9:4c: d5:ee:64:5c:4c:bf:44:34:69:96:65:29:e6:6c:bf: 08:28:e8:46:a8:f6:9f:fc:0f:ca:41:bd:b0:72:12: 6e:3c:ee:b5:03:52:03:59:a8:30:cf:c0:89:dc:fa: c8:2b:dc:f9:2e:d8:6f:7e:67:45:fa:6e:e2:91:2b: bf:77:b1:5f:97:cb:d2:6b:6a:f8:25:43:2c:41:94: 6c:64:4c:89:0c:60:c9:62:5d:e4:91:03:44:67:f3: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:0E:0B:9F:8B:85:DC:DC:72:7E:B7:4C:13:CF:28:28:FF:CE:B7 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a5:af:7f:e2:ec:d1:16:25:68:a7:ca:71:94:87:0d:d8:46: df:1b:0c:87:27:2b:ca:c4:4d:89:e4:c1:d8:8f:98:82:0c:d2: 1f:59:32:82:48:3b:fc:81:9a:e1:06:aa:62:37:a8:1d:56:67: a9:08:c9:c3:26:90:9c:0a:5a:9d:9c:01:68:56:e4:fb:6f:6d: 7b:1a:ea:43:8a:37:56:30:d0:c2:85:83:9e:31:e4:c2:d9:cb: d0:41:63:d3:3a:bc:71:44:9d:99:74:34:1c:1c:aa:86:cc:d5: d8:d6:43:52:66:8e:f8:c6:dd:4a:7d:a0:0c:c2:4c:2d:f4:da: 3d:7f:85:0c:df:1b:e3:90:97:56:90:35:5e:e2:63:50:df:37: 2e:41:26:d5:da:f1:09:b8:5b:8c:c5:f6:2e:af:e4:61:f8:1b: 81:31:eb:85:50:84:45:b0:8a:6a:99:be:93:69:7a:b4:6e:8a: 97:30:21:d5:ec:62:7f:17:16:f0:ab:3e:76:4c:2f:9c:e5:72: 3b:3b:28:39:5f:c9:ee:fa:4c:05:ee:ce:b4:db:04:7d:8a:f7: ab:ba:79:a8:93:f0:e3:89:6c:1e:7f:5e:d8:88:99:c5:02:b8: ea:5a:e4:5f:9c:c8:c3:60:66:80:fc:fe:3d:5f:55:50:5c:2f: 89:40:56:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwODE5MDIwODQ1WhcNMjYwODI2MDIwODQ1WjAYMRYwFAYD VQQDEw02YTg1MTAyZS0yYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAGpCwpdZhrIt2wGrke3idQfibKtUAWkRGzDv5Vn3+L+gvDup0FsAl9wuUTi 4z3ePm9rFmCl91lXERn5kwVYowKLeVMUElHPgDRHGrH8zAWQE64AJ2h4n9FXe01g bi6rAiS0TDWuWsx5DKO+iJ4GuAWsRk6HYcPqC/a68Ap+N9lvMmj5AAcqm/WI7Hnr qwuDQOREpKOk8YLdkJcFogAF0w3quUzV7mRcTL9ENGmWZSnmbL8IKOhGqPaf/A/K Qb2wchJuPO61A1IDWagwz8CJ3PrIK9z5LthvfmdF+m7ikSu/d7Ffl8vSa2r4JUMs QZRsZEyJDGDJYl3kkQNEZ/OkMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9WDguf i4Xc3HJ+t0wTzygo/863MB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAaWvf+Ls0RYlaKfKcZSHDdhG3xsMhycrysRNieTB2I+YggzSH1kygkg7/IGa 4QaqYjeoHVZnqQjJwyaQnApanZwBaFbk+29texrqQ4o3VjDQwoWDnjHkwtnL0EFj 0zq8cUSdmXQ0HByqhszV2NZDUmaO+MbdSn2gDMJMLfTaPX+FDN8b45CXVpA1XuJj UN83LkEm1drxCbhbjMX2Lq/kYfgbgTHrhVCERbCKapm+k2l6tG6KlzAh1exifxcW 8Ks+dkwvnOVyOzsoOV/J7vpMBe7OtNsEfYr3q7p5qJPw44lsHn9e2IiZxQK46lrk X5zIw2BmgPz+PV9VUFwviUBWJA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:54 2026 by rpki-client