$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft File: oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json) Hash identifier: wue/bK++ucgceEt0CfNpaiRaDoNjCkojdrly461IFsI= Subject key identifier: 27:28:90:B6:A6:82:78:7B:CA:67:5D:21:93:36:24:34:21:A8:7C:36 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft Manifest number: 0280 Signing time: Wed 19 Aug 2026 02:49:55 +0000 Manifest this update: Wed 19 Aug 2026 02:49:54 +0000 Manifest next update: Wed 26 Aug 2026 02:49:54 +0000 Files and hashes: 1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: ipoCgWoZ2qaRtwfc5Ygi/9jZ5Dnoi2mON1+zjvBXvgA=) 2: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=) 3: A78C8AB896E511F195E2E0D45C11F970.roa (hash: y6k5gAl70xPgm1PdqA0djO2XSJUwhklLEIGZFO4hIJc=) 4: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Aug 19 02:49:54 2026 GMT Not After : Aug 26 02:49:54 2026 GMT Subject: CN=6a8519d3-c4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:ea:ea:a4:66:b0:73:ef:63:4c:68:b5:92: f5:fe:d6:95:31:d5:c2:94:be:63:71:f9:cf:76:97: 5d:5b:0a:54:7d:25:b1:44:72:25:7e:0b:6d:47:bf: c4:56:a5:e2:84:28:66:21:7c:82:53:6f:4c:fe:aa: 93:59:a1:06:ba:42:ce:91:99:e9:99:6b:79:0b:b4: 76:57:96:ec:84:4f:b9:07:2f:99:5c:cb:22:d4:99: f6:82:d3:9e:9d:5e:be:87:61:ef:3b:9b:d8:71:0c: b3:99:16:0a:60:30:94:21:db:94:d3:22:5b:b6:b0: da:2b:fe:92:06:fc:72:8e:76:96:59:df:9c:95:a6: da:b0:4a:1b:1a:ff:80:5c:0b:7f:40:45:02:14:19: c5:5b:87:83:91:44:85:38:bc:7d:c1:8a:c4:39:e4: 4e:33:93:1d:8b:1b:43:67:6d:84:29:9f:5d:e0:aa: c0:2f:ea:be:fa:cf:d4:01:e2:53:e3:b5:9f:64:dd: a1:5a:67:e5:f5:67:24:c5:54:7a:bd:d4:83:f4:42: 01:51:5f:72:40:4a:52:d2:cd:29:28:5f:32:3f:fc: 7a:1a:2d:df:6e:54:96:f5:a2:52:78:15:93:48:28: 4d:44:95:1e:40:36:65:86:8e:92:72:e0:91:9f:d4: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:28:90:B6:A6:82:78:7B:CA:67:5D:21:93:36:24:34:21:A8:7C:36 X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:1b:52:bb:e6:71:04:7c:79:cf:10:34:b3:64:15:07:05: 2b:b6:11:00:e3:cc:73:8d:4b:05:94:e0:57:f6:c1:11:88:18: 2c:2f:2b:a1:1e:dc:36:13:a8:29:09:f6:3c:0b:b4:11:21:67: b7:d0:9f:a3:7f:8f:e1:2d:42:30:4c:87:8f:c5:79:2c:16:eb: 9f:d7:40:e5:d6:94:c3:39:21:00:e2:c3:cd:b8:b3:7b:08:1e: 29:db:84:34:5f:e1:a0:4e:38:d6:f0:1a:27:07:a9:e5:40:99: 11:3e:ac:fd:e5:83:40:b2:06:44:8b:6b:57:9f:f2:67:4a:cc: 48:62:d6:98:01:1c:b5:2e:4c:7e:c4:a7:8d:f4:96:11:58:75: f3:c7:92:33:5f:cc:0b:71:58:99:41:c8:26:89:c1:20:3c:6f: 29:69:c2:3a:f6:a3:df:ee:25:1c:82:c1:b3:39:45:a6:a7:83: db:ea:e2:ad:8f:a0:bd:15:8a:b7:80:3b:b0:a4:d0:59:57:a6: 92:16:6e:cc:2b:91:8e:7f:ad:31:ce:a4:e2:1a:52:2f:b2:bf: 39:f9:25:66:68:4d:27:47:bc:a4:60:75:1b:57:dc:af:f2:33: f2:8b:ee:4d:18:e8:39:b5:79:64:ea:ad:b7:81:86:b2:b4:79: 50:7e:b2:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwODE5MDI0OTU0WhcNMjYwODI2MDI0OTU0WjAYMRYwFAYD VQQDEw02YTg1MTlkMy1jNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48vq6qRmsHPvY0xotZL1/taVMdXClL5jcfnPdpddWwpUfSWxRHIlfgttR7/E VqXihChmIXyCU29M/qqTWaEGukLOkZnpmWt5C7R2V5bshE+5By+ZXMsi1Jn2gtOe nV6+h2HvO5vYcQyzmRYKYDCUIduU0yJbtrDaK/6SBvxyjnaWWd+clabasEobGv+A XAt/QEUCFBnFW4eDkUSFOLx9wYrEOeROM5MdixtDZ22EKZ9d4KrAL+q++s/UAeJT 47WfZN2hWmfl9WckxVR6vdSD9EIBUV9yQEpS0s0pKF8yP/x6Gi3fblSW9aJSeBWT SChNRJUeQDZlho6ScuCRn9TQxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcokLam gnh7ymddIZM2JDQhqHw2MB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVCcbUrvmcQR8ec8QNLNkFQcFK7YRAOPMc41LBZTgV/bBEYgYLC8roR7cNhOo KQn2PAu0ESFnt9Cfo3+P4S1CMEyHj8V5LBbrn9dA5daUwzkhAOLDzbizewgeKduE NF/hoE441vAaJwep5UCZET6s/eWDQLIGRItrV5/yZ0rMSGLWmAEctS5MfsSnjfSW EVh188eSM1/MC3FYmUHIJonBIDxvKWnCOvaj3+4lHILBszlFpqeD2+rirY+gvRWK t4A7sKTQWVemkhZuzCuRjn+tMc6k4hpSL7K/OfklZmhNJ0e8pGB1G1fcr/Iz8ovu TRjoObV5ZOqtt4GGsrR5UH6ydQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:52:28 2026 by rpki-client