$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: bny0MB2z5UHWVJuDGbmcjidjnYJ3nlOiWds9GCO7I5g= Subject key identifier: 38:E7:99:6A:88:69:0E:53:AA:E8:BA:17:7F:00:22:67:FC:9B:41:E0 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 054C Signing time: Tue 18 Aug 2026 23:48:38 +0000 Manifest this update: Tue 18 Aug 2026 23:48:37 +0000 Manifest next update: Tue 25 Aug 2026 23:48:37 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: h03FciplioLcoWzBSwUOHFqTXPUsPETL2SleGDkqFtc=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Aug 18 23:48:37 2026 GMT Not After : Aug 25 23:48:37 2026 GMT Subject: CN=6a84ef56-3a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6c:ad:03:e0:22:3d:d3:2f:e3:f6:21:12:13: 59:2f:b7:62:5f:62:3f:5d:80:5b:a7:a2:8c:d1:91: c9:df:ef:88:9e:80:cf:ff:40:7a:fb:05:7c:b6:c5: 62:d3:ba:92:eb:93:67:26:f6:c6:4d:0b:e9:4f:f1: b6:61:cc:21:6c:12:7b:35:78:f9:07:93:23:e2:33: 16:6a:98:86:5f:af:88:0a:56:29:7e:f6:4f:e5:a5: 0b:7e:9e:f0:65:9b:0a:5f:57:6f:e6:36:c4:d7:be: 22:c7:23:6c:38:cc:27:29:a8:30:f9:f7:23:3b:8f: eb:2a:49:f8:42:33:3b:31:f9:39:29:b2:03:86:e7: f8:b5:bc:00:66:8f:1a:9c:6d:4b:ba:ef:3b:78:b5: 1c:ef:6d:e1:c6:d6:45:99:b4:2a:4a:01:13:5b:a1: 8e:a6:9f:bf:64:d4:14:b5:3a:dd:c0:a2:cc:39:f1: 25:f7:c8:54:ce:6f:b4:84:31:ef:03:5e:a2:0d:3e: 00:a3:70:6d:e3:7b:d6:76:b7:61:58:3e:44:44:fa: 3b:ce:be:2d:39:19:44:5b:68:1c:84:7c:c8:9d:35: 07:3e:44:fb:c4:6c:8b:b0:c8:83:d6:3b:5e:98:3e: 9c:d2:db:2c:36:9c:59:0b:ec:84:48:66:a7:47:b5: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:99:6A:88:69:0E:53:AA:E8:BA:17:7F:00:22:67:FC:9B:41:E0 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:9f:39:23:d3:f5:8f:a4:3a:21:40:d9:76:52:5d:a6:56:5d: 08:99:5b:af:77:92:c7:6d:f3:8f:c7:96:59:81:8b:81:ce:24: 67:a4:d1:77:16:b3:ef:91:d3:0b:14:8b:41:fc:71:22:ba:8b: 4e:0e:37:8a:18:03:17:7b:25:29:ab:b3:d2:01:ad:ac:fc:1b: dd:bf:26:1a:5f:41:76:5e:a0:c2:06:bd:5c:84:b5:78:70:e0: 15:4c:e8:42:ad:a8:2b:b2:fd:ff:e7:e8:e0:0f:23:64:41:e9: 1c:6f:8a:52:7e:d4:53:b4:ce:88:9e:02:50:4d:8e:f7:4e:16: e2:09:62:5f:b1:2d:2d:27:d5:b1:82:93:96:ee:62:1e:b4:7e: ac:83:14:85:da:45:f8:81:2a:69:98:75:1d:05:ee:89:ca:de: 22:5d:93:63:0c:42:4a:b8:f3:9e:78:83:b8:0b:ab:22:a2:55: f7:0e:ff:ed:43:a6:8b:d2:b1:23:53:5f:06:20:93:c9:9b:ef: f8:f0:bc:6f:21:6c:50:87:c5:3f:2e:00:ae:69:4b:61:28:aa: 8d:c7:d7:8a:72:d0:3a:17:de:ef:00:5b:e4:46:b7:ef:85:fe: ce:23:33:df:92:7f:9f:8c:0a:64:1e:99:6e:f0:40:ec:ad:af: 10:6b:c3:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjYwODE4MjM0ODM3WhcNMjYwODI1MjM0ODM3WjAYMRYwFAYD VQQDEw02YTg0ZWY1Ni0zYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32ytA+AiPdMv4/YhEhNZL7diX2I/XYBbp6KM0ZHJ3++InoDP/0B6+wV8tsVi 07qS65NnJvbGTQvpT/G2YcwhbBJ7NXj5B5Mj4jMWapiGX6+IClYpfvZP5aULfp7w ZZsKX1dv5jbE174ixyNsOMwnKagw+fcjO4/rKkn4QjM7Mfk5KbIDhuf4tbwAZo8a nG1Luu87eLUc723hxtZFmbQqSgETW6GOpp+/ZNQUtTrdwKLMOfEl98hUzm+0hDHv A16iDT4Ao3Bt43vWdrdhWD5ERPo7zr4tORlEW2gchHzInTUHPkT7xGyLsMiD1jte mD6c0tssNpxZC+yESGanR7W0iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjnmWqI aQ5Tqui6F38AImf8m0HgMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp585I9P1j6Q6IUDZdlJdplZdCJlbr3eSx23zj8eWWYGLgc4kZ6TRdxaz75HT CxSLQfxxIrqLTg43ihgDF3slKauz0gGtrPwb3b8mGl9Bdl6gwga9XIS1eHDgFUzo Qq2oK7L9/+fo4A8jZEHpHG+KUn7UU7TOiJ4CUE2O904W4gliX7EtLSfVsYKTlu5i HrR+rIMUhdpF+IEqaZh1HQXuicreIl2TYwxCSrjznniDuAurIqJV9w7/7UOmi9Kx I1NfBiCTyZvv+PC8byFsUIfFPy4ArmlLYSiqjcfXinLQOhfe7wBb5Ea374X+ziMz 35J/n4wKZB6ZbvBA7K2vEGvD8w== -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:02 2026 by rpki-client