$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: 821L0ng4P1CDbcZ3zY1jYObEv/YJw3fICmG0D95CTYo= Subject key identifier: 5B:9B:E2:C4:AD:CD:F1:CF:33:56:AA:7C:DB:09:1A:D0:C0:F6:93:BA Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1E28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1E13 Signing time: Tue 28 Jul 2026 16:10:44 +0000 Manifest this update: Tue 28 Jul 2026 16:10:43 +0000 Manifest next update: Tue 04 Aug 2026 16:10:43 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: Hu9Wx0I6fuzUnLtkXM5XIUQdQBesHeymxdi6Cjs5ci8=) 2: D544B54486EF11F19E006003A7EE528E.roa (hash: h826NuL9LphWVMKp0+bjOsjjWbr8Y2wIF8KmzaJ2k3Y=) 3: D64B0F1086EF11F19E006003A7EE528E.roa (hash: 3EGss4x0ac1o+zeKud2Kpa04Wj1gBtROV497ReGOk30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7720 (0x1e28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jul 28 16:10:43 2026 GMT Not After : Aug 4 16:10:43 2026 GMT Subject: CN=6a68d483-52bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:7c:24:9e:80:51:69:05:9e:4c:b7:c1:a9: 45:b7:8b:71:98:d5:b4:cc:ae:38:6c:62:97:2b:b6: 99:18:51:71:cd:1c:9d:82:67:2f:01:25:1d:6b:c6: d4:59:8f:28:8f:8e:6e:79:b7:ac:79:48:a8:6d:0d: 10:57:7f:dd:78:73:01:46:7b:7a:d7:5b:ac:48:9d: 9e:26:89:29:01:0d:ff:38:ee:f0:a3:a4:3b:31:7a: 79:13:de:8d:01:d8:7a:5d:f0:aa:cb:31:96:3d:44: 96:6f:f9:ec:85:15:db:16:e5:2b:76:cb:6f:7f:8b: e7:e4:05:e9:d3:d5:2d:4e:44:3b:1c:6d:2d:e7:20: ec:6a:54:d2:bd:19:91:b3:11:21:d4:ff:79:b3:80: 15:8a:80:e4:05:ea:0e:a3:12:1f:e5:44:c2:8b:a5: c2:7d:c3:ee:e5:ad:41:44:06:f0:af:ca:85:b2:d1: 2b:ea:d7:63:c6:02:a9:c4:12:f0:16:ad:19:3d:97: 79:05:9c:58:6e:bd:e7:64:2e:ae:de:db:a9:21:e3: 60:d5:49:5a:95:58:e5:c0:e8:de:03:5f:bb:60:84: 99:88:6e:7b:93:a8:70:73:2b:e9:09:9f:7c:22:44: 8c:99:d1:8f:37:fc:af:80:17:fb:81:ef:1b:5c:07: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:E2:C4:AD:CD:F1:CF:33:56:AA:7C:DB:09:1A:D0:C0:F6:93:BA X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c9:cf:cf:07:75:44:55:69:24:7b:3c:26:8d:aa:1f:67:58: b3:61:69:60:08:d3:68:8e:cf:2a:82:d5:66:f7:4b:cd:87:89: bc:4b:3c:42:99:00:54:32:b9:95:3e:8e:8f:f3:7d:3b:05:c6: c1:14:a6:f8:ee:85:0c:76:dc:ba:06:0e:05:37:46:9c:9c:50: e2:4c:5a:35:60:b1:44:dd:46:7e:36:ba:46:47:8f:b2:be:3c: 34:d4:cb:68:53:76:25:42:d2:ff:6c:33:c0:21:b1:be:c8:2f: 2d:a6:0c:ce:ca:fa:c3:4c:d9:65:43:75:76:c9:52:e4:6f:10: 17:4a:54:50:d3:0f:52:fc:5d:95:3c:5b:70:06:ea:cc:fe:ef: 03:41:49:fc:b0:18:bb:d7:29:a1:f1:ec:48:21:70:19:62:e3: 68:b0:4e:4e:c3:14:3e:c2:e9:55:82:fd:1a:b2:e6:56:fb:e1: 2c:44:36:0e:1f:77:e9:bb:28:77:d3:cb:f4:51:3c:4e:b0:4c: ef:fa:9a:3a:76:cf:7a:6e:d7:c5:33:c2:54:88:7d:ab:6d:b4: 70:37:85:d1:e1:7e:23:f1:44:f9:42:78:65:df:53:bf:d2:aa: af:8b:e8:53:34:92:24:72:c4:9e:77:5d:61:2b:42:c6:2d:b7: 22:bb:5b:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwNzI4MTYxMDQzWhcNMjYwODA0MTYxMDQzWjAYMRYwFAYD VQQDEw02YTY4ZDQ4My01MmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7N8JJ6AUWkFnky3walFt4txmNW0zK44bGKXK7aZGFFxzRydgmcvASUda8bU WY8oj45uebeseUiobQ0QV3/deHMBRnt611usSJ2eJokpAQ3/OO7wo6Q7MXp5E96N Adh6XfCqyzGWPUSWb/nshRXbFuUrdstvf4vn5AXp09UtTkQ7HG0t5yDsalTSvRmR sxEh1P95s4AVioDkBeoOoxIf5UTCi6XCfcPu5a1BRAbwr8qFstEr6tdjxgKpxBLw Fq0ZPZd5BZxYbr3nZC6u3tupIeNg1UlalVjlwOjeA1+7YISZiG57k6hwcyvpCZ98 IkSMmdGPN/yvgBf7ge8bXAeAzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFub4sSt zfHPM1aqfNsJGtDA9pO6MB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8nPzwd1RFVpJHs8Jo2qH2dYs2FpYAjTaI7PKoLVZvdLzYeJvEs8QpkAVDK5 lT6Oj/N9OwXGwRSm+O6FDHbcugYOBTdGnJxQ4kxaNWCxRN1Gfja6RkePsr48NNTL aFN2JULS/2wzwCGxvsgvLaYMzsr6w0zZZUN1dslS5G8QF0pUUNMPUvxdlTxbcAbq zP7vA0FJ/LAYu9cpofHsSCFwGWLjaLBOTsMUPsLpVYL9GrLmVvvhLEQ2Dh936bso d9PL9FE8TrBM7/qaOnbPem7XxTPCVIh9q220cDeF0eF+I/FE+UJ4Zd9Tv9Kqr4vo UzSSJHLEnnddYStCxi23IrtbCw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:02 2026 by rpki-client