$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: wUuOZaj4DT1D/paU+DFh1FSJ7udD8Vsswp3/3z5ZEyg= Subject key identifier: BC:1F:98:F3:BE:98:A8:3F:0C:08:BB:83:1A:4E:CB:48:99:68:D9:89 Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 0115 Signing time: Sun 05 Jul 2026 06:48:23 +0000 Manifest this update: Sun 05 Jul 2026 06:48:22 +0000 Manifest next update: Sun 12 Jul 2026 06:48:22 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: 3Q16F77eAQBkJs3BHIEaRHHnnBDxO0uJvfHCP2bNBTs=) 2: 965254F8278811F09217002CC4F9AE02.roa (hash: 0RhsOifNGasCmCxCAJFq65+7Iqu3gbPwoj7AcEDMVxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 06:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Jul 5 06:48:22 2026 GMT Not After : Jul 12 06:48:22 2026 GMT Subject: CN=6a49fe37-bf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:b9:14:82:2a:c9:0b:e3:e3:7c:17:e6:34: 71:39:67:4e:b8:07:4b:10:6f:af:75:e2:0b:f2:af: 2b:d6:f7:d2:49:7c:48:d1:cb:c6:dd:07:3c:23:81: 73:02:f8:5f:a7:7c:bb:56:98:e8:57:47:b1:6d:61: 82:50:c0:56:75:16:f1:84:fc:05:5b:bf:cf:39:b8: c9:85:cc:4d:a5:4b:ca:75:09:db:48:1f:61:c0:41: f9:67:b9:8a:c6:a9:e9:db:82:36:5e:51:de:1b:f5: 1b:82:60:64:b1:95:e6:61:70:79:13:c9:33:4d:07: e5:86:3c:7f:8f:15:8a:0b:e6:8b:4a:42:a7:02:70: 04:16:06:a6:a8:9f:5b:ed:e4:99:05:e5:54:92:ed: f7:59:ac:4c:e4:ca:c4:b2:2a:52:d9:66:96:9c:93: b3:93:cf:d5:e2:9d:4e:55:fe:2c:f2:34:58:65:59: 7f:4c:93:29:21:31:a3:01:65:42:37:fe:0b:76:72: 22:de:9d:24:ea:e8:8c:ae:19:0e:d1:ac:f2:9c:6f: dd:e7:84:de:73:47:14:4e:f7:6d:06:c0:b7:18:eb: b9:43:5e:bb:3d:84:ae:c0:91:b5:7e:27:c6:66:f2: ea:2c:84:3a:57:44:df:3d:3e:7b:5a:0c:91:aa:1d: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1F:98:F3:BE:98:A8:3F:0C:08:BB:83:1A:4E:CB:48:99:68:D9:89 X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:15:52:04:46:98:10:f4:69:d7:b4:b1:a3:14:fb:64:f3: ac:0b:08:45:89:c7:c2:5d:72:49:6c:b5:18:51:a5:aa:a0:04: ae:ba:b6:cb:d0:26:ca:5b:ac:b4:9a:29:2d:91:bd:ff:49:cd: d3:3c:ae:61:dc:e6:f4:50:ef:6c:3c:1b:c3:23:36:d3:c7:fe: b6:db:c5:5e:e1:cd:ff:7e:05:93:6d:ca:33:9b:ea:42:7e:86: f2:42:2f:4d:7e:07:5a:13:9d:00:e4:4b:0a:ef:b4:ba:8c:08: 17:8e:24:57:e3:e4:d2:3e:71:63:df:41:f4:3e:5f:18:2b:7c: 0f:fe:34:2f:73:92:44:dd:f8:ab:50:63:0f:13:2a:f0:e6:66: 35:54:16:38:6d:e5:6f:ce:81:ff:b8:c4:66:de:da:01:b0:e5: 3a:1b:e7:a8:d7:3f:17:b6:06:94:f7:9a:45:d4:6d:8b:67:37: 7c:56:96:b5:5e:54:82:31:36:37:a8:09:14:4b:47:8f:dc:3d: 79:44:d2:30:52:2e:dd:04:44:25:5f:06:84:d2:8f:04:92:7b: ef:96:5c:d9:d5:09:d8:ed:5d:89:15:f6:d2:32:e5:d8:db:cd: 3c:38:94:06:76:fa:0e:36:bf:6a:87:7d:b5:ce:a0:54:63:b1: 2a:5e:55:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI2OEMxMTAvBgNVBAUTKEEyMjg4Rjg5NjRENjE2OUE4Nzk1RjJGNEVGMDVFMEQ1 RTZFMTNCMDkwHhcNMjYwNzA1MDY0ODIyWhcNMjYwNzEyMDY0ODIyWjAYMRYwFAYD VQQDEw02YTQ5ZmUzNy1iZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAicK5FIIqyQvj43wX5jRxOWdOuAdLEG+vdeIL8q8r1vfSSXxI0cvG3Qc8I4Fz Avhfp3y7VpjoV0exbWGCUMBWdRbxhPwFW7/PObjJhcxNpUvKdQnbSB9hwEH5Z7mK xqnp24I2XlHeG/UbgmBksZXmYXB5E8kzTQflhjx/jxWKC+aLSkKnAnAEFgamqJ9b 7eSZBeVUku33WaxM5MrEsipS2WaWnJOzk8/V4p1OVf4s8jRYZVl/TJMpITGjAWVC N/4LdnIi3p0k6uiMrhkO0azynG/d54Tec0cUTvdtBsC3GOu5Q167PYSuwJG1fifG ZvLqLIQ6V0TfPT57WgyRqh3mIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwfmPO+ mKg/DAi7gxpOy0iZaNmJMB8GA1UdIwQYMBaAFKIoj4lk1haah5Xy9O8F4NXm4TsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjY4Qy8xN0QxMDNBOEVB QjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0ZwcUhsZkwwN3dYZzFlYmhP d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY4Qy8xN0QxMDNBOEVBQjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0Zw cUhsZkwwN3dYZzFlYmhPd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOPMVUgRGmBD0ade0saMU+2TzrAsIRYnHwl1ySWy1GFGlqqAErrq2y9Amylus tJopLZG9/0nN0zyuYdzm9FDvbDwbwyM208f+ttvFXuHN/34Fk23KM5vqQn6G8kIv TX4HWhOdAORLCu+0uowIF44kV+Pk0j5xY99B9D5fGCt8D/40L3OSRN34q1BjDxMq 8OZmNVQWOG3lb86B/7jEZt7aAbDlOhvnqNc/F7YGlPeaRdRti2c3fFaWtV5UgjE2 N6gJFEtHj9w9eUTSMFIu3QREJV8GhNKPBJJ775Zc2dUJ2O1diRX20jLl2NvNPDiU Bnb6Dja/aod9tc6gVGOxKl5VVQ== -----END CERTIFICATE-----Generated at Sun Jul 5 13:57:25 2026 by rpki-client