$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: vdeUdM/IvZ4Iq26yZZNuJxKfj4wWBalGnIrqMl+999I= Subject key identifier: 8E:A6:A2:87:68:63:A7:FA:E9:0B:09:50:68:EC:E8:42:A8:58:3F:48 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0D92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0D86 Signing time: Tue 18 Aug 2026 18:11:21 +0000 Manifest this update: Tue 18 Aug 2026 18:11:21 +0000 Manifest next update: Tue 25 Aug 2026 18:11:21 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: CIcWkUhq95WHQ2tQC6Pf80kkhGUCIQks6v/Rozq5Wz4=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3474 (0xd92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Aug 18 18:11:21 2026 GMT Not After : Aug 25 18:11:21 2026 GMT Subject: CN=6a84a049-0e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:b1:35:fb:9b:c4:96:5a:74:9f:8f:e2:90: b6:82:57:cd:91:a0:1a:49:42:2a:d2:69:86:5b:98: 69:50:1d:db:ce:bb:98:9a:ce:8d:37:c9:a5:b0:0e: c6:13:3a:0e:f0:18:ef:3d:0b:10:b5:a1:5e:f3:9c: df:00:60:ab:8d:86:8f:3c:e8:86:6a:c1:ca:b3:f2: c2:18:f2:d3:19:01:57:61:fe:9d:f0:ec:29:bb:08: 60:76:42:47:8b:26:2e:82:e5:18:06:e9:a2:6a:d6: ed:63:ac:03:ec:bb:d5:3c:32:ad:b4:8e:d8:2a:ca: 4f:e3:0b:5b:fc:b0:c5:41:d7:38:7d:21:37:cc:93: 78:79:3a:8c:41:9d:32:cd:2e:86:95:40:24:22:0d: 68:b7:1c:a6:6a:66:65:ea:07:91:aa:4e:4b:c2:54: 43:a5:7e:48:64:91:f7:cd:ec:cd:b1:f7:05:14:89: e3:07:95:b0:e4:d6:d9:13:b0:90:74:10:6b:34:5a: 74:55:0e:49:5c:d9:a2:74:59:d8:01:76:0e:fc:cf: 12:f7:41:93:22:1b:48:00:b3:e4:bd:e7:77:7c:50: 3a:6b:85:4f:b0:3d:24:4e:7b:43:84:17:98:2e:c4: bd:ba:ad:77:fc:d0:e6:27:44:09:ef:a9:a6:19:90: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:A2:87:68:63:A7:FA:E9:0B:09:50:68:EC:E8:42:A8:58:3F:48 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:eb:9c:02:53:e7:b0:5f:93:00:89:a7:51:ee:6a:9d:12:8b: 7a:a7:ee:62:15:60:a3:1f:37:8d:f6:f9:61:18:a3:1e:67:a2: 36:f8:de:f5:26:0e:ae:9d:b1:e2:47:46:1a:69:af:6e:94:25: 54:70:bf:92:1c:ca:76:73:76:b7:7d:fd:89:fe:73:5f:3f:72: 20:07:08:be:2d:42:5c:be:34:82:40:12:ed:f2:1f:f8:26:18: 65:a8:6b:87:af:b3:cf:ab:1e:37:97:d9:ce:30:61:2b:b4:ad: 9d:e2:92:9e:9e:68:c9:f3:fb:b2:8b:df:79:bf:25:50:e0:c5: 53:93:0d:8e:0b:70:ef:b3:f8:44:a6:1c:df:75:33:95:e8:f9: e1:37:19:d9:48:7b:01:f3:94:a7:26:94:97:4a:67:65:d1:2b: 64:cf:10:de:79:f3:f8:b1:2c:2a:89:3a:80:38:b7:d0:a6:f8: 3a:76:2e:65:f5:9f:e5:ff:dd:dc:f5:01:03:17:41:93:68:58: d6:8c:7e:42:97:14:8a:40:b8:86:f6:e9:3b:d6:56:7b:c6:37: fb:e2:60:72:8b:ed:37:85:2c:ca:22:99:48:4c:90:28:46:68: ef:a4:5c:57:99:d7:23:2c:5a:48:30:7f:ac:19:69:95:7c:02: 11:7d:9b:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjYwODE4MTgxMTIxWhcNMjYwODI1MTgxMTIxWjAYMRYwFAYD VQQDEw02YTg0YTA0OS0wZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57CxNfubxJZadJ+P4pC2glfNkaAaSUIq0mmGW5hpUB3bzruYms6NN8mlsA7G EzoO8BjvPQsQtaFe85zfAGCrjYaPPOiGasHKs/LCGPLTGQFXYf6d8OwpuwhgdkJH iyYuguUYBumiatbtY6wD7LvVPDKttI7YKspP4wtb/LDFQdc4fSE3zJN4eTqMQZ0y zS6GlUAkIg1otxymamZl6geRqk5LwlRDpX5IZJH3zezNsfcFFInjB5Ww5NbZE7CQ dBBrNFp0VQ5JXNmidFnYAXYO/M8S90GTIhtIALPkved3fFA6a4VPsD0kTntDhBeY LsS9uq13/NDmJ0QJ76mmGZDpCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6moodo Y6f66QsJUGjs6EKoWD9IMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq+ucAlPnsF+TAImnUe5qnRKLeqfuYhVgox83jfb5YRijHmeiNvje9SYOrp2x 4kdGGmmvbpQlVHC/khzKdnN2t339if5zXz9yIAcIvi1CXL40gkAS7fIf+CYYZahr h6+zz6seN5fZzjBhK7StneKSnp5oyfP7sovfeb8lUODFU5MNjgtw77P4RKYc33Uz lej54TcZ2Uh7AfOUpyaUl0pnZdErZM8Q3nnz+LEsKok6gDi30Kb4OnYuZfWf5f/d 3PUBAxdBk2hY1ox+QpcUikC4hvbpO9ZWe8Y3++JgcovtN4UsyiKZSEyQKEZo76Rc V5nXIyxaSDB/rBlplXwCEX2brA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:17 2026 by rpki-client