$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json) Hash identifier: 9qIR2+fRybJyuDgO0QLGwewm9auNEVOPgoYR5wGKtqE= Subject key identifier: 4A:E0:37:C2:8F:10:23:8A:5B:91:80:D2:3F:A6:05:5E:E5:6C:87:FD Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft Manifest number: 72 Signing time: Fri 17 Jul 2026 04:36:37 +0000 Manifest this update: Fri 17 Jul 2026 04:36:36 +0000 Manifest next update: Fri 24 Jul 2026 04:36:36 +0000 Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: 8/F7Mgo+JgIh4CEFiNE5uO8trjA0YH+2qlBEjbKyHZ4=) 2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 04:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Validity Not Before: Jul 17 04:36:36 2026 GMT Not After : Jul 24 04:36:36 2026 GMT Subject: CN=6a59b155-18f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:2a:71:82:6c:97:25:a5:fa:0e:90:ce:39: 01:3b:c7:3b:c2:62:83:85:de:44:8a:62:e0:8b:72: 77:23:7a:21:12:8f:35:af:e4:cf:79:a9:b0:c7:2f: 1a:d9:d1:f8:4a:74:73:2a:66:aa:03:12:4e:d0:8d: 6e:cb:6d:ba:e8:e4:74:c8:c1:44:a7:f8:13:f5:83: 69:c6:f9:95:f3:b2:28:b9:18:d3:bd:55:0b:bc:56: c1:58:d8:03:2c:6b:ff:6e:2b:95:2c:fa:91:37:f1: 04:82:05:32:84:83:40:fa:4b:3f:4d:d0:57:fa:96: 86:8c:69:03:19:98:98:eb:1a:7d:85:94:21:62:d7: 57:18:5b:a8:99:55:d6:60:64:27:75:63:26:07:82: f1:46:e5:32:32:b3:03:09:6d:6a:72:32:2b:bf:3e: 76:2a:3e:98:f4:b2:5a:23:5d:3d:8e:b5:28:ea:d2: 32:b8:6d:3b:21:82:4b:ff:38:e3:0c:13:ac:31:c6: b0:b9:63:4e:ac:c6:79:45:ed:f6:02:08:09:7d:7b: fe:a1:4b:ec:0e:55:1f:94:da:45:6a:de:d0:ed:5b: fb:63:05:23:b3:7f:54:de:2f:05:40:c8:15:95:c2: 9b:23:95:88:d7:14:be:69:57:65:0a:18:19:10:2e: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E0:37:C2:8F:10:23:8A:5B:91:80:D2:3F:A6:05:5E:E5:6C:87:FD X509v3 Authority Key Identifier: keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:34:1f:9c:c6:c3:69:4d:1c:74:80:47:87:5c:88:44:74:b3: 70:ff:5b:70:91:66:f5:da:08:a7:5c:5c:ac:1a:5d:bf:68:2d: 33:ef:06:5a:ae:14:41:18:bb:86:e7:fb:ee:d3:d0:67:fb:92: 65:59:68:07:23:c4:a2:f6:ff:e5:a4:d2:6f:95:f2:2e:7c:87: 93:eb:85:1e:07:e6:8c:f8:b9:b6:6a:f8:86:13:88:76:f4:2c: 85:ca:45:87:cf:7a:9c:35:b4:7e:7c:c0:d8:c3:0c:7f:41:ce: 54:b5:9f:09:57:e5:25:b1:ad:39:1e:20:4d:94:0b:fd:00:7f: 57:c8:9d:43:45:10:1e:c3:56:73:d3:06:1d:12:2d:9b:e2:8f: a6:ae:cc:4c:28:7a:b7:fc:e1:7d:f9:ee:c5:1d:43:43:c1:ff: ef:e7:04:b3:ba:90:20:1f:65:13:02:30:1e:02:de:f7:89:c8: 27:25:83:37:7d:2b:78:59:ed:63:ef:27:42:53:02:a0:75:ed: e8:76:57:b2:e8:94:82:f5:60:34:0f:ff:b1:bc:11:f3:ea:83: 54:8f:aa:66:69:41:b2:7b:4f:cd:c9:6a:7c:60:ff:a5:7a:07: df:eb:57:e6:e6:a4:b4:1f:47:8d:15:0b:31:ba:d0:e9:9e:f0: b9:7a:0f:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjI5NzExMC8GA1UEBRMoQTBGQ0JFOUJDQjQzMjhBOUU4QkNDQTFGNUUxNDk2QUND MkNFMkVEOTAeFw0yNjA3MTcwNDM2MzZaFw0yNjA3MjQwNDM2MzZaMBgxFjAUBgNV BAMTDTZhNTliMTU1LTE4ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt/ypxgmyXJaX6DpDOOQE7xzvCYoOF3kSKYuCLcncjeiESjzWv5M95qbDHLxrZ 0fhKdHMqZqoDEk7QjW7Lbbro5HTIwUSn+BP1g2nG+ZXzsii5GNO9VQu8VsFY2AMs a/9uK5Us+pE38QSCBTKEg0D6Sz9N0Ff6loaMaQMZmJjrGn2FlCFi11cYW6iZVdZg ZCd1YyYHgvFG5TIyswMJbWpyMiu/PnYqPpj0slojXT2OtSjq0jK4bTshgkv/OOMM E6wxxrC5Y06sxnlF7fYCCAl9e/6hS+wOVR+U2kVq3tDtW/tjBSOzf1TeLwVAyBWV wpsjlYjXFL5pV2UKGBkQLqgbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSuA3wo8Q I4pbkYDSP6YFXuVsh/0wHwYDVR0jBBgwFoAUoPy+m8tDKKnovMofXhSWrMLOLtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3L0JCRjI4RERBRDk5 NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1B5LW04dERLS25vdk1vZlhoU1dyTUxPTHRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Mjk3L0JCRjI4RERBRDk5NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tu b3ZNb2ZYaFNXck1MT0x0ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCPNB+cxsNpTRx0gEeHXIhEdLNw/1twkWb12ginXFysGl2/aC0z7wZarhRBGLuG 5/vu09Bn+5JlWWgHI8Si9v/lpNJvlfIufIeT64UeB+aM+Lm2aviGE4h29CyFykWH z3qcNbR+fMDYwwx/Qc5UtZ8JV+Ulsa05HiBNlAv9AH9XyJ1DRRAew1Zz0wYdEi2b 4o+mrsxMKHq3/OF9+e7FHUNDwf/v5wSzupAgH2UTAjAeAt73icgnJYM3fSt4We1j 7ydCUwKgde3odley6JSC9WA0D/+xvBHz6oNUj6pmaUGye0/NyWp8YP+legff61fm 5qS0H0eNFQsxutDpnvC5eg8K -----END CERTIFICATE-----Generated at Sat Jul 18 03:27:21 2026 by rpki-client