$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json) Hash identifier: MzowzqdSAlIX6PQB1aJpf1m3d0Q8B2nu5gEhgY0Rax8= Subject key identifier: 50:F8:A2:18:C5:4E:F8:B5:65:C0:00:67:C8:F6:45:27:80:88:20:D4 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft Manifest number: 02B0 Signing time: Wed 19 Aug 2026 02:00:49 +0000 Manifest this update: Wed 19 Aug 2026 02:00:49 +0000 Manifest next update: Wed 26 Aug 2026 02:00:49 +0000 Files and hashes: 1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: 048s9yCXGEFhCsiQdLNHspxLSRsoSszIiFOFqjJoRco=) 2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: Ouit03LRtJZqOFfBSglxXn5xGezeH2cCBVrluC7GA64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Aug 19 02:00:49 2026 GMT Not After : Aug 26 02:00:49 2026 GMT Subject: CN=6a850e51-2992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:75:39:e9:a4:72:dd:f6:e1:d4:f0:1f:09: 73:0b:ce:99:5f:a8:7d:57:34:e6:55:63:90:0b:58: 1c:40:36:f0:aa:87:63:a8:4d:4d:96:5c:17:af:79: 1e:8b:0a:8f:1a:52:0b:19:1a:33:88:e7:dc:0a:27: 4f:29:3f:ec:ce:67:b3:d3:58:96:d7:e1:f8:1b:73: 7c:6b:6a:89:15:3d:07:f8:5b:87:fa:39:79:0a:47: 1e:a6:f7:c0:e6:c7:c8:70:2a:6d:8e:a3:67:d3:94: 76:c1:c9:83:67:eb:ce:61:d1:86:42:4a:3c:8e:8e: e9:90:34:f0:6a:9c:b4:88:a4:36:b1:7e:56:c7:be: 09:20:8d:ab:28:69:37:4f:ed:36:4a:d4:ee:0c:72: 8e:32:80:07:4e:ce:bb:08:bb:bc:16:2f:37:e8:a5: 32:9e:3c:84:6c:fd:2f:35:3e:d8:f5:7a:ed:66:d7: 18:21:4f:be:de:10:20:7b:ad:cf:cc:58:b6:f7:8a: bd:fc:95:29:07:2e:72:98:be:74:10:c7:db:76:3b: 54:87:d9:6e:f8:a3:fa:a8:21:bb:4c:1f:cd:ee:b4: ca:c9:8e:21:41:d0:47:cb:98:9b:c8:4f:10:42:5e: 1b:03:79:72:58:2a:ce:17:79:ed:01:a2:df:5b:b6: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F8:A2:18:C5:4E:F8:B5:65:C0:00:67:C8:F6:45:27:80:88:20:D4 X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:82:f5:e1:58:80:28:d7:40:90:6e:50:ca:6d:c3:1f:20:18: 2a:70:38:77:a5:29:f0:45:bc:11:d2:37:92:0c:6b:0b:4f:cd: c1:08:98:dd:3c:0c:95:bf:b3:d6:ec:9a:43:3f:27:62:1c:c5: 47:e0:10:31:dd:7e:ba:73:f2:67:ef:b3:4d:d5:9a:ff:ef:d3: 42:e3:54:53:3a:96:01:61:09:d5:5e:2e:f2:c4:4a:65:df:a0: 04:22:00:27:83:98:a4:7d:b9:51:14:92:61:46:66:36:ab:68: 11:9e:5f:9f:05:1d:d8:90:14:45:92:f3:d5:e2:46:21:c8:ba: cb:19:00:5c:3b:c6:bd:7d:f6:3f:03:da:8f:21:b9:28:ab:81: c5:41:17:10:c3:6c:7c:76:60:20:7d:f3:c1:92:71:6b:bb:04: e1:a6:5a:fa:cb:31:0e:7b:fc:21:3b:5b:03:ed:92:61:10:51: 64:21:e8:39:b6:aa:e2:f9:31:b5:66:de:40:b7:2a:59:a3:13: 48:fa:82:ec:ae:c0:bd:f6:d1:06:4d:a3:a8:d1:3a:24:79:2c: 69:6c:33:47:09:93:cd:ab:c3:65:e7:d9:2a:6e:d1:c2:fb:86: 44:dc:23:11:9c:f9:8e:a8:28:17:4c:d1:c6:e6:35:9e:5e:bb: f4:4a:7a:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjYwODE5MDIwMDQ5WhcNMjYwODI2MDIwMDQ5WjAYMRYwFAYD VQQDEw02YTg1MGU1MS0yOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dd1Oemkct324dTwHwlzC86ZX6h9VzTmVWOQC1gcQDbwqodjqE1NllwXr3ke iwqPGlILGRoziOfcCidPKT/szmez01iW1+H4G3N8a2qJFT0H+FuH+jl5CkcepvfA 5sfIcCptjqNn05R2wcmDZ+vOYdGGQko8jo7pkDTwapy0iKQ2sX5Wx74JII2rKGk3 T+02StTuDHKOMoAHTs67CLu8Fi836KUynjyEbP0vNT7Y9XrtZtcYIU++3hAge63P zFi294q9/JUpBy5ymL50EMfbdjtUh9lu+KP6qCG7TB/N7rTKyY4hQdBHy5ibyE8Q Ql4bA3lyWCrOF3ntAaLfW7Yj9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFD4ohjF Tvi1ZcAAZ8j2RSeAiCDUMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ4Qi81RjExRTAyQTdGNzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlL bFl1VDJ2ajBzbklCV3cyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd4L14ViAKNdAkG5Qym3DHyAYKnA4d6Up8EW8EdI3kgxrC0/NwQiY3TwMlb+z 1uyaQz8nYhzFR+AQMd1+unPyZ++zTdWa/+/TQuNUUzqWAWEJ1V4u8sRKZd+gBCIA J4OYpH25URSSYUZmNqtoEZ5fnwUd2JAURZLz1eJGIci6yxkAXDvGvX32PwPajyG5 KKuBxUEXEMNsfHZgIH3zwZJxa7sE4aZa+ssxDnv8ITtbA+2SYRBRZCHoObaq4vkx tWbeQLcqWaMTSPqC7K7AvfbRBk2jqNE6JHksaWwzRwmTzavDZefZKm7RwvuGRNwj EZz5jqgoF0zRxuY1nl679Ep6Zw== -----END CERTIFICATE-----Generated at Wed Aug 19 16:46:06 2026 by rpki-client