$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: jbUbegZxRQzy08e632L/hU1TMsHd02dR0OlEggUrC+M= Subject key identifier: DA:C9:9B:B1:AA:F2:1A:CC:BC:40:DD:EB:C7:92:62:BE:47:32:AE:17 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0261 Signing time: Tue 23 Jun 2026 02:42:20 +0000 Manifest this update: Tue 23 Jun 2026 02:42:19 +0000 Manifest next update: Tue 30 Jun 2026 02:42:19 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: V5mq7Fqobt3loax1gV2KM0QqCkeyV7cRGfTgZJCRS1M=) 2: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) 3: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 02:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Jun 23 02:42:19 2026 GMT Not After : Jun 30 02:42:19 2026 GMT Subject: CN=6a39f28c-e569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:44:a0:24:4b:b4:90:8b:aa:f0:e6:65:ee: 5c:f2:40:2b:4a:d9:24:fe:19:dc:cd:23:0e:ce:df: 09:be:04:a3:f7:2a:9e:5a:fd:e5:a3:63:bf:2f:cb: 39:b5:01:ee:3f:b0:ac:5c:20:8b:2c:d1:e8:8e:52: bd:9d:04:36:b0:58:5f:4d:92:02:81:26:21:07:6b: ea:54:d9:ce:ef:a2:1e:40:e2:3a:1f:d8:24:de:2c: 84:7e:06:f3:df:a8:ff:fd:f6:bf:fc:8d:ca:c9:ec: fb:b8:62:47:7a:67:69:79:c0:55:16:92:7b:2f:43: 89:8b:4a:0d:6c:f6:dc:d5:b9:5a:30:d8:9e:1f:e0: 0e:b7:9c:e9:c8:f8:de:6f:48:ea:b0:0c:6c:64:b0: 51:01:26:ec:c8:16:eb:42:60:ac:fa:e7:52:44:a9: 88:7a:bc:c7:74:ed:0f:12:37:40:21:71:2e:1b:a7: 97:4b:a0:1c:39:bf:c8:33:56:89:96:a7:bb:77:09: d4:22:4a:17:38:19:35:4b:bc:e0:01:59:9f:7f:79: 4d:1c:1f:48:86:31:1b:92:77:36:1b:75:7d:65:7f: 87:5a:6e:49:50:71:1d:6f:ae:e5:75:b3:18:c7:56: f7:20:db:fd:9e:63:44:1e:3c:bd:ea:5e:c6:a9:5c: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C9:9B:B1:AA:F2:1A:CC:BC:40:DD:EB:C7:92:62:BE:47:32:AE:17 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4f:da:7a:8e:53:f6:b9:d1:34:36:32:52:6a:d0:b0:7d:c5: 99:6a:21:e9:b5:3b:54:b7:08:c2:75:08:88:44:ae:ab:68:8a: df:17:64:b3:7d:ef:e8:d7:13:5b:a8:11:68:c9:e7:8e:cc:48: 9b:3a:24:b2:9d:58:88:b8:a7:40:41:3e:41:f1:bd:3a:d6:f0: f6:04:83:0b:b6:06:49:03:b4:3a:de:e1:f7:a1:13:13:00:83: 95:41:ee:c1:61:0e:b2:a3:04:75:c2:88:94:5e:01:25:d8:83: b3:a9:e4:ab:5f:fd:0d:19:ab:0a:1e:c5:a2:42:7e:19:d0:31: c8:2f:8a:41:b6:fa:d4:17:75:35:45:b0:27:63:b9:37:8f:85: 72:a5:97:75:65:03:5e:3a:74:62:d7:43:46:9e:de:c0:d7:6e: ae:58:dc:32:19:7e:dc:52:04:b7:b5:57:f9:2b:ec:87:e1:48: 07:b0:dd:a4:b0:7b:06:2d:be:db:bb:9a:21:19:cc:70:41:bd: f0:4c:52:0b:67:5f:7b:55:96:f7:0c:08:d6:fb:3b:4c:e0:8a: 57:b5:c2:f1:16:03:dc:2b:a4:23:99:4b:7f:ac:b7:33:25:3e: d8:3d:73:0b:60:f2:26:49:3e:72:c1:64:2a:fb:84:2e:92:ad: e5:d0:70:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwNjIzMDI0MjE5WhcNMjYwNjMwMDI0MjE5WjAYMRYwFAYD VQQDEw02YTM5ZjI4Yy1lNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDJEoCRLtJCLqvDmZe5c8kArStkk/hnczSMOzt8JvgSj9yqeWv3lo2O/L8s5 tQHuP7CsXCCLLNHojlK9nQQ2sFhfTZICgSYhB2vqVNnO76IeQOI6H9gk3iyEfgbz 36j//fa//I3Kyez7uGJHemdpecBVFpJ7L0OJi0oNbPbc1blaMNieH+AOt5zpyPje b0jqsAxsZLBRASbsyBbrQmCs+udSRKmIerzHdO0PEjdAIXEuG6eXS6AcOb/IM1aJ lqe7dwnUIkoXOBk1S7zgAVmff3lNHB9IhjEbknc2G3V9ZX+HWm5JUHEdb67ldbMY x1b3INv9nmNEHjy96l7GqVzXzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrJm7Gq 8hrMvEDd68eSYr5HMq4XMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr0/aeo5T9rnRNDYyUmrQsH3FmWoh6bU7VLcIwnUIiESuq2iK3xdks33v6NcT W6gRaMnnjsxImzoksp1YiLinQEE+QfG9Otbw9gSDC7YGSQO0Ot7h96ETEwCDlUHu wWEOsqMEdcKIlF4BJdiDs6nkq1/9DRmrCh7FokJ+GdAxyC+KQbb61Bd1NUWwJ2O5 N4+FcqWXdWUDXjp0YtdDRp7ewNdurljcMhl+3FIEt7VX+Svsh+FIB7DdpLB7Bi2+ 27uaIRnMcEG98ExSC2dfe1WW9wwI1vs7TOCKV7XC8RYD3CukI5lLf6y3MyU+2D1z C2DyJkk+csFkKvuELpKt5dBwFw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:24:59 2026 by rpki-client