$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json) Hash identifier: KFvp+APygwEDO8pGfce6Z5vQW2yq6Ja/EV82kwczsBY= Subject key identifier: F4:24:1C:CD:36:69:01:5C:8E:F2:20:D2:A8:1D:87:CC:9D:D6:AF:F0 Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft Manifest number: 08A2 Signing time: Mon 22 Jun 2026 20:35:33 +0000 Manifest this update: Mon 22 Jun 2026 20:35:33 +0000 Manifest next update: Mon 29 Jun 2026 20:35:33 +0000 Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: T0f5ayLV1ZH4r8eNpnxYuU/Qq3O0buSwLzfx8Jdwwow=) 2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 20:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Validity Not Before: Jun 22 20:35:33 2026 GMT Not After : Jun 29 20:35:33 2026 GMT Subject: CN=6a399c95-119a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:50:5a:cc:40:6c:9e:bd:50:b9:cf:a5:bb: e0:9b:65:ce:a4:e6:e1:d1:51:37:f9:6b:2b:cf:81: 14:a4:a3:69:67:9a:56:8f:ae:88:21:58:c3:cc:f0: 00:d7:0f:e0:e5:c1:1c:fd:a7:e2:4d:cb:94:9b:b5: ca:3f:28:c3:6e:b7:f6:5a:ea:d6:a9:ea:e3:ac:1a: 8d:b4:89:05:c2:1b:dc:bb:8a:f3:33:37:5c:a5:62: 94:60:16:59:4d:44:94:ef:2e:1d:91:0a:91:fc:fb: 22:58:e7:27:c2:c4:7a:bd:8e:93:72:0e:63:7f:e6: 94:50:5c:fd:db:da:22:1c:50:1a:67:af:26:e9:71: 1d:aa:fc:59:21:a4:df:8c:62:5a:1c:ee:a6:e7:30: fe:8d:13:fc:9a:6e:f3:19:17:59:59:48:68:00:15: 59:01:23:b6:a2:a3:fe:57:ef:d7:88:5c:99:73:06: 8b:a4:e9:62:5e:f3:5e:e5:bc:a3:e6:54:1d:8d:9c: 7c:5e:c1:6c:9b:df:c9:ae:95:e6:7d:16:d6:e0:b2: 6f:4d:b8:5f:c5:4e:9b:8c:ba:6d:1d:5c:23:e7:f6: dc:ba:74:ca:26:59:d6:eb:5f:6e:ca:1f:e0:20:a3: dc:b2:e9:e0:e5:c3:a4:d2:e9:6f:82:a5:f6:13:cd: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:1C:CD:36:69:01:5C:8E:F2:20:D2:A8:1D:87:CC:9D:D6:AF:F0 X509v3 Authority Key Identifier: keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f1:3b:e9:6e:5f:48:ce:76:ad:16:e4:9a:66:ba:e7:3a:b2: 42:42:85:85:cd:46:c0:e4:65:7e:6e:cf:44:7c:a8:be:85:c5: 48:c4:d6:9e:39:7d:ef:17:76:16:19:62:5b:f0:a1:fe:a3:22: 7c:23:3d:b0:1c:a0:02:19:1f:12:03:b3:db:6a:ac:3a:d9:60: 8a:f7:74:e5:c1:64:75:97:1f:2a:65:e9:e8:b5:ec:f4:dd:1d: 10:25:e8:92:97:7e:9f:d6:37:9b:fd:b9:29:aa:65:3d:1d:f9: ad:d1:22:79:20:8b:3a:38:50:66:14:4a:d4:4a:56:11:b5:1c: e7:7b:10:60:7d:85:ce:0e:0e:1b:7c:a2:bb:4a:ac:0d:ad:b9: b2:c5:f6:0f:68:13:e5:f4:35:6a:9f:84:03:13:36:05:0a:09: 77:74:8c:21:5c:d4:eb:60:0b:95:8b:ba:25:00:d0:c9:63:dc: e8:b2:1b:40:b3:63:dc:6b:50:e7:36:b1:3d:d4:7d:a0:07:80: 06:e5:07:3f:63:5b:fe:b2:a8:3b:21:c9:60:60:d9:58:e9:08: 58:cc:2c:98:f7:21:8d:92:b2:e1:ec:7e:78:0c:36:7c:c8:38: 9a:3a:47:9c:49:f0:39:f8:f8:ca:c4:72:78:53:c4:71:32:c2: 92:ca:d5:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4 NTcwMkRBQjEwHhcNMjYwNjIyMjAzNTMzWhcNMjYwNjI5MjAzNTMzWjAYMRYwFAYD VQQDEw02YTM5OWM5NS0xMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRBQWsxAbJ69ULnPpbvgm2XOpObh0VE3+Wsrz4EUpKNpZ5pWj66IIVjDzPAA 1w/g5cEc/afiTcuUm7XKPyjDbrf2WurWqerjrBqNtIkFwhvcu4rzMzdcpWKUYBZZ TUSU7y4dkQqR/PsiWOcnwsR6vY6Tcg5jf+aUUFz929oiHFAaZ68m6XEdqvxZIaTf jGJaHO6m5zD+jRP8mm7zGRdZWUhoABVZASO2oqP+V+/XiFyZcwaLpOliXvNe5byj 5lQdjZx8XsFsm9/JrpXmfRbW4LJvTbhfxU6bjLptHVwj5/bcunTKJlnW619uyh/g IKPcsung5cOk0ulvgqX2E80SvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQkHM02 aQFcjvIg0qgdh8yd1q/wMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w MENaX3AyU04wXy1GY0MyckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/E76W5fSM52rRbkmma65zqyQkKFhc1GwORlfm7PRHyovoXFSMTWnjl97xd2 FhliW/Ch/qMifCM9sBygAhkfEgOz22qsOtlgivd05cFkdZcfKmXp6LXs9N0dECXo kpd+n9Y3m/25KaplPR35rdEieSCLOjhQZhRK1EpWEbUc53sQYH2Fzg4OG3yiu0qs Da25ssX2D2gT5fQ1ap+EAxM2BQoJd3SMIVzU62ALlYu6JQDQyWPc6LIbQLNj3GtQ 5zaxPdR9oAeABuUHP2Nb/rKoOyHJYGDZWOkIWMwsmPchjZKy4ex+eAw2fMg4mjpH nEnwOfj4ysRyeFPEcTLCksrVIA== -----END CERTIFICATE-----Generated at Wed Jun 24 15:31:24 2026 by rpki-client