$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft File: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json) Hash identifier: bmIU7V8BhuIviQW2cUycgGojxt4exO/SUYhBiP1lWZk= Subject key identifier: 67:3C:4F:B1:AC:5B:7C:31:02:73:78:62:CB:86:8C:2D:3F:60:25:C3 Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F Certificate issuer: /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft Manifest number: 28 Signing time: Sat 25 Jul 2026 10:41:31 +0000 Manifest this update: Sat 25 Jul 2026 10:41:31 +0000 Manifest next update: Sat 01 Aug 2026 10:41:31 +0000 Files and hashes: 1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: rYFznFq7wY7weIDmXDQ2vYIoMwFjE5VX0FtjqAra0WI=) 2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: f7QabRTI7sk2IZG0kdDs+LNBsIzZTK1/4WtgGby64wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Validity Not Before: Jul 25 10:41:31 2026 GMT Not After : Aug 1 10:41:31 2026 GMT Subject: CN=6a6492db-a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:2f:d6:c2:6d:d4:f9:79:16:f7:44:a6:48: d9:cd:14:d8:63:5c:e2:48:94:50:a1:2b:cc:b8:13: b6:8a:60:c8:5c:0c:1b:e3:78:bf:02:26:ef:c9:14: 27:c7:99:09:e2:d8:f6:56:c5:fb:b6:be:9c:0a:a3: 62:15:ad:00:b5:72:0b:77:c4:11:74:80:12:b7:1c: f8:9c:b6:0a:1e:50:fe:8a:c1:4f:24:e7:05:1c:d2: 87:b0:95:65:15:ba:6d:a3:22:0c:0d:3f:a6:fd:41: ee:1b:4f:58:b6:02:fe:bf:77:fc:f5:b7:3f:0b:f2: 70:d8:73:1f:1f:ae:22:87:fb:96:e3:ee:5d:a6:c2: 57:79:eb:61:89:ef:d7:c5:a6:8d:c1:ca:fb:b5:a6: ea:ae:94:d5:79:f2:d2:69:82:98:e7:a8:84:a1:71: 1d:1a:20:a9:df:6c:d0:9b:b1:c6:67:96:bb:a1:49: cd:79:a5:82:c5:6e:24:c4:83:5e:8c:75:ca:ff:8e: 29:9f:d9:07:af:aa:30:cd:bb:83:76:18:cb:0f:08: f7:77:15:06:8f:13:a6:20:dd:be:f3:9a:80:39:e0: eb:d5:ba:1c:ea:4c:40:a5:5e:7e:2f:6e:09:7b:6c: 85:d8:ab:a1:6b:1e:06:6d:d9:24:0d:5e:2b:d0:61: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:4F:B1:AC:5B:7C:31:02:73:78:62:CB:86:8C:2D:3F:60:25:C3 X509v3 Authority Key Identifier: keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:e4:a6:ff:5f:6d:26:f0:5f:bf:f3:85:71:57:a4:f5:ee: c2:b8:74:95:78:40:9b:56:10:35:47:63:04:8b:33:4c:40:02: 36:5a:bb:18:dc:e2:ca:4b:3f:6e:ea:6e:08:f3:9c:e7:45:89: 48:e8:70:af:b9:9f:38:c8:e4:bf:d7:a6:79:10:c4:01:f4:fa: 8e:39:f7:dd:36:9c:1e:cb:39:18:64:cd:2f:fc:f1:4e:4e:6f: c8:78:c0:52:32:b4:dd:07:b9:42:5c:4b:1c:67:23:e4:82:ed: 31:c5:d5:10:5b:77:bd:48:f9:95:f2:3b:ad:3d:3c:70:85:bf: 10:f4:fc:8d:4d:35:d5:08:00:11:24:d9:35:91:3e:d0:83:bf: 52:0b:e1:f3:60:d3:da:90:bd:9c:f1:77:10:9e:05:40:d0:0f: 2a:23:e3:0c:84:e7:0b:69:78:39:59:da:c3:92:09:de:7e:83: 64:98:1b:a9:74:38:24:a6:1c:dc:32:47:b4:c3:5e:93:a0:02: 5f:e7:d0:52:21:70:52:18:6f:f5:0f:7c:35:ee:64:d4:f3:df: 20:b4:0b:cd:99:89:36:b7:1f:ca:16:bc:8b:93:e0:f4:31:8e: 12:64:44:59:ac:8e:d6:9f:fe:c4:dd:ef:1a:ae:b9:0d:31:c3: 11:43:4a:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx Qzk4RTY4RjAeFw0yNjA3MjUxMDQxMzFaFw0yNjA4MDExMDQxMzFaMBgxFjAUBgNV BAMTDTZhNjQ5MmRiLWE3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbSC/Wwm3U+XkW90SmSNnNFNhjXOJIlFChK8y4E7aKYMhcDBvjeL8CJu/JFCfH mQni2PZWxfu2vpwKo2IVrQC1cgt3xBF0gBK3HPictgoeUP6KwU8k5wUc0oewlWUV um2jIgwNP6b9Qe4bT1i2Av6/d/z1tz8L8nDYcx8friKH+5bj7l2mwld562GJ79fF po3Byvu1puqulNV58tJpgpjnqIShcR0aIKnfbNCbscZnlruhSc15pYLFbiTEg16M dcr/jimf2QevqjDNu4N2GMsPCPd3FQaPE6Yg3b7zmoA54OvVuhzqTEClXn4vbgl7 bIXYq6FrHgZt2SQNXivQYQWdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZzxPsaxb fDECc3hiy4aMLT9gJcMwHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCmC+Sm/19tJvBfv/OFcVek9e7CuHSVeECbVhA1R2MEizNMQAI2WrsY3OLKSz9u 6m4I85znRYlI6HCvuZ84yOS/16Z5EMQB9PqOOffdNpweyzkYZM0v/PFOTm/IeMBS MrTdB7lCXEscZyPkgu0xxdUQW3e9SPmV8jutPTxwhb8Q9PyNTTXVCAARJNk1kT7Q g79SC+HzYNPakL2c8XcQngVA0A8qI+MMhOcLaXg5WdrDkgnefoNkmBupdDgkphzc Mke0w16ToAJf59BSIXBSGG/1D3w17mTU898gtAvNmYk2tx/KFryLk+D0MY4SZERZ rI7Wn/7E3e8arrkNMcMRQ0pN -----END CERTIFICATE-----Generated at Mon Jul 27 09:23:37 2026 by rpki-client