$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: wk1I1IhMl7cAUFs1q78l1hTKjUVl6Dustv8j1IdZJwM= Subject key identifier: A3:DE:50:E3:B7:EB:03:1D:18:7C:32:FE:DA:95:9A:E4:A1:BE:9C:84 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: E0 Signing time: Wed 19 Aug 2026 07:21:20 +0000 Manifest this update: Wed 19 Aug 2026 07:21:19 +0000 Manifest next update: Wed 26 Aug 2026 07:21:19 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: /+2UwiOxl3SwyLuUSMDfCtNWz7x+kKIvNUJEVsqTgj0=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Aug 19 07:21:19 2026 GMT Not After : Aug 26 07:21:19 2026 GMT Subject: CN=6a855970-7a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:3d:9b:e1:90:99:0b:12:38:52:d5:a3:db: 4a:54:99:b2:ea:b7:0b:86:d8:b0:4f:2a:50:23:05: 9a:8a:53:a6:f7:45:19:e4:0f:33:0c:be:86:41:43: 7d:b2:80:dc:7d:8e:c3:5a:dd:fa:ee:ea:08:62:fc: 7d:5a:47:be:1a:ec:45:9a:2d:d2:53:36:99:31:e5: 5c:25:23:01:0b:15:56:de:2e:ad:b8:da:17:81:10: d8:c7:98:10:34:e8:d6:d2:b7:be:ac:5f:a1:db:d9: 74:d9:d9:5f:1b:57:06:a7:ef:ee:b1:37:e3:bd:b2: 5a:90:e5:7b:27:58:83:37:96:3c:8c:68:b3:1a:1f: 4b:ea:33:ee:01:de:f3:75:a1:79:fa:5e:50:80:ea: 33:40:88:99:cb:ae:ea:14:a3:ec:e7:fd:86:19:8f: 12:cf:94:bd:0e:18:38:bd:97:64:b1:02:48:4a:17: dc:bf:cb:9f:68:a6:ca:52:13:45:65:da:69:0a:e7: 08:dd:bd:e1:85:1e:81:37:37:de:e5:95:2a:a2:80: 53:ca:1e:9b:6a:d2:0e:13:cf:99:ef:af:b6:34:98: e6:4f:5e:c8:7c:08:65:be:7a:dc:40:ce:0c:31:7c: 68:09:b1:17:62:a3:b5:1b:58:29:09:4e:56:b9:54: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DE:50:E3:B7:EB:03:1D:18:7C:32:FE:DA:95:9A:E4:A1:BE:9C:84 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e4:3b:f7:00:dd:df:36:bb:1e:a5:65:70:92:09:54:2f:52: 48:a6:98:c6:5a:29:e5:34:09:f2:68:eb:d3:56:6a:c2:23:8b: 39:ca:da:ae:96:9d:15:58:0a:d1:a2:43:ef:27:df:cd:f9:e1: a1:93:b0:14:c5:55:ba:65:a1:92:f9:d4:05:cd:73:ca:b9:f3: e8:72:4c:c9:b9:b1:8f:ba:2c:fe:5d:4e:2a:26:38:1d:68:ec: 7f:07:8a:4c:3b:21:84:cd:e1:a7:53:fa:bf:24:8a:56:37:2e: a1:1f:05:9c:32:3c:93:73:06:c4:24:10:5d:76:22:4b:9a:ce: 86:77:12:f8:75:53:60:70:96:44:33:5a:70:97:e2:c1:c6:28: e9:ea:57:69:91:50:7e:2b:30:d3:92:11:4f:b7:61:6b:1d:ab: d2:16:b0:1e:42:47:25:e4:a3:b0:28:01:a2:0b:bf:12:00:43: a1:31:95:15:cb:c4:49:e7:7f:f5:dc:de:e4:27:44:05:69:27: 9d:c9:bf:e7:c7:b6:48:4e:35:2c:92:a5:2b:6c:f9:ab:44:01: 8f:39:3c:0a:f6:9f:3d:f1:49:97:64:f7:40:bf:03:d1:19:be: 22:4f:64:10:d2:e7:bd:ab:29:cc:b5:02:c8:48:91:5c:ca:97: c4:04:a0:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZBMDExMTAvBgNVBAUTKEEwNUVDMjY2QjNDMEJGRDZDRUI1MTcxMDBCRTA1QzUw NUI5NDM2MjQwHhcNMjYwODE5MDcyMTE5WhcNMjYwODI2MDcyMTE5WjAYMRYwFAYD VQQDEw02YTg1NTk3MC03YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaE9m+GQmQsSOFLVo9tKVJmy6rcLhtiwTypQIwWailOm90UZ5A8zDL6GQUN9 soDcfY7DWt367uoIYvx9Wke+GuxFmi3SUzaZMeVcJSMBCxVW3i6tuNoXgRDYx5gQ NOjW0re+rF+h29l02dlfG1cGp+/usTfjvbJakOV7J1iDN5Y8jGizGh9L6jPuAd7z daF5+l5QgOozQIiZy67qFKPs5/2GGY8Sz5S9Dhg4vZdksQJIShfcv8ufaKbKUhNF ZdppCucI3b3hhR6BNzfe5ZUqooBTyh6batIOE8+Z76+2NJjmT17IfAhlvnrcQM4M MXxoCbEXYqO1G1gpCU5WuVSGgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPeUOO3 6wMdGHwy/tqVmuShvpyEMB8GA1UdIwQYMBaAFKBewmazwL/WzrUXEAvgXFBblDYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkEwMS9GNjREM0IyNDU3 QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5Yk90UmNRQy1CY1VGdVVO aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkEwMS9GNjREM0IyNDU3QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5 Yk90UmNRQy1CY1VGdVVOaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOQ79wDd3za7HqVlcJIJVC9SSKaYxlop5TQJ8mjr01ZqwiOLOcrarpadFVgK 0aJD7yffzfnhoZOwFMVVumWhkvnUBc1zyrnz6HJMybmxj7os/l1OKiY4HWjsfweK TDshhM3hp1P6vySKVjcuoR8FnDI8k3MGxCQQXXYiS5rOhncS+HVTYHCWRDNacJfi wcYo6epXaZFQfisw05IRT7dhax2r0hawHkJHJeSjsCgBogu/EgBDoTGVFcvESed/ 9dze5CdEBWknncm/58e2SE41LJKlK2z5q0QBjzk8CvafPfFJl2T3QL8D0Rm+Ik9k ENLnvaspzLUCyEiRXMqXxASgjg== -----END CERTIFICATE-----Generated at Thu Aug 20 22:56:07 2026 by rpki-client