$ rpki-client -vvf rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft File: OHvc-OlHoaBOL0OH-99wZUpE0b0.mft (raw, json) Hash identifier: hTWkVY2LOYJIkhdciphibA+5+nl79RDNLaSDS4jqTAI= Subject key identifier: EB:C4:46:C2:1D:5D:C3:DC:6A:56:DC:86:1A:7B:EC:53:07:9C:D8:CE Authority key identifier: 38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD Certificate issuer: /CN=A913ACF4/serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft Manifest number: 0A28 Signing time: Tue 28 Jul 2026 20:04:48 +0000 Manifest this update: Tue 28 Jul 2026 20:04:48 +0000 Manifest next update: Tue 04 Aug 2026 20:04:48 +0000 Files and hashes: 1: OHvc-OlHoaBOL0OH-99wZUpE0b0.crl (hash: 6qfNBva/YHwJrvxZGH3D17pg+wDKmthwA3JhRYDdknM=) 2: 25E6E72899FE11EAB3E30513C4F9AE02.roa (hash: vExenB8r5VLDvagQcEg/ivOJqZUrJV0ln/r+0QlZHXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ACF4, serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD Validity Not Before: Jul 28 20:04:48 2026 GMT Not After : Aug 4 20:04:48 2026 GMT Subject: CN=6a690b60-d193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:b5:1a:6c:63:31:72:70:eb:96:7e:7d:b4: b8:8e:6a:29:42:ec:80:2c:d5:eb:f4:7c:30:ee:9e: 40:2d:fa:ef:5d:c8:f4:6e:1b:02:26:67:43:5e:33: 1a:1d:08:ba:b1:32:22:12:61:e3:ad:50:97:90:ae: e8:98:bd:fd:f5:fe:73:82:fe:ad:03:f8:09:2d:7b: c7:52:1a:1f:4c:67:24:28:cb:72:fb:b2:e8:87:48: 9a:91:95:dc:db:69:1a:18:be:11:28:01:1b:8e:87: 75:8e:60:99:96:5a:1e:0e:ad:6d:2b:f7:bc:70:ec: da:ce:f0:aa:a3:80:dd:2e:3d:10:d6:50:da:02:e7: 7c:ee:a3:d1:51:05:58:cf:06:72:12:39:4b:c0:04: be:86:96:87:96:71:59:21:b9:fd:5f:8f:7e:e2:2e: a5:a5:2f:6f:20:58:25:27:a9:98:83:ae:21:ec:fd: a8:d7:f5:7b:0e:05:e3:dd:72:59:28:a7:e3:fe:6f: 38:eb:0f:d8:27:f0:0e:1b:aa:f4:71:2d:fe:00:0e: 72:70:be:19:9b:d7:81:a4:0a:6f:d6:3d:59:d3:92: d5:a6:29:bc:79:5b:45:da:55:8d:73:1a:e8:72:df: 22:16:5f:25:f1:74:20:5f:23:a4:0a:1a:24:69:1b: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C4:46:C2:1D:5D:C3:DC:6A:56:DC:86:1A:7B:EC:53:07:9C:D8:CE X509v3 Authority Key Identifier: keyid:38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:33:ca:07:8e:d6:aa:b4:db:aa:83:e5:3d:0a:d7:87:d6:1a: 84:c1:fb:ff:99:17:9d:ce:04:b5:34:ec:4d:77:fa:00:64:dd: cc:e4:3f:c5:4e:a1:a8:ae:06:14:d1:2e:ad:35:f0:f8:5f:9a: af:97:ec:d6:21:2f:56:23:ad:24:4a:4b:00:83:1c:08:4b:66: 63:3f:7f:0f:0f:cc:db:7f:91:bf:7b:d3:7f:e7:84:a1:8a:35: f2:ef:f7:e8:16:d1:8b:dd:d6:aa:33:72:11:02:b9:dd:c3:85: e2:5d:c2:ba:2a:ed:d7:ef:97:22:c9:ab:be:bb:dc:89:45:a2: b4:f5:d7:70:bb:9d:30:24:ad:eb:e7:61:13:d7:04:6f:e6:99: ad:ba:b3:71:1f:93:c4:15:e5:b5:a5:7d:61:76:4c:28:f8:15: 0e:46:21:4f:da:ab:66:6d:fd:12:68:21:86:2f:7e:29:f5:94: 02:a8:ca:5d:86:7d:8b:d5:5e:f7:1e:b3:42:44:9f:19:48:56: 80:9a:e0:78:b0:4e:4b:c0:e3:73:1a:6c:0c:f8:9d:57:0b:2a: b8:9c:dc:31:92:c1:33:ed:e4:fd:cc:a1:30:59:c0:a0:3e:cd: 82:e6:7b:ce:cc:0c:52:93:4a:3b:44:93:09:4c:f0:70:7b:d2: 07:66:88:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FDRjQxMTAvBgNVBAUTKDM4N0JEQ0Y4RTk0N0ExQTA0RTJGNDM4N0ZCREY3MDY1 NEE0NEQxQkQwHhcNMjYwNzI4MjAwNDQ4WhcNMjYwODA0MjAwNDQ4WjAYMRYwFAYD VQQDEw02YTY5MGI2MC1kMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnG1GmxjMXJw65Z+fbS4jmopQuyALNXr9Hww7p5ALfrvXcj0bhsCJmdDXjMa HQi6sTIiEmHjrVCXkK7omL399f5zgv6tA/gJLXvHUhofTGckKMty+7Loh0iakZXc 22kaGL4RKAEbjod1jmCZlloeDq1tK/e8cOzazvCqo4DdLj0Q1lDaAud87qPRUQVY zwZyEjlLwAS+hpaHlnFZIbn9X49+4i6lpS9vIFglJ6mYg64h7P2o1/V7DgXj3XJZ KKfj/m846w/YJ/AOG6r0cS3+AA5ycL4Zm9eBpApv1j1Z05LVpim8eVtF2lWNcxro ct8iFl8l8XQgXyOkChokaRt3sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvERsId XcPcalbchhp77FMHnNjOMB8GA1UdIwQYMBaAFDh73PjpR6GgTi9Dh/vfcGVKRNG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUNGNC83MEUzMDM2Qzk5 RkMxMUVBOTY1NTQ1MTBDNEY5QUUwMi9PSHZjLU9sSG9hQk9MME9ILTk5d1pVcEUw YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09IdmMtT2xIb2FCT0wwT0gtOTl3WlVwRTBiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUNGNC83MEUzMDM2Qzk5RkMxMUVBOTY1NTQ1MTBDNEY5QUUwMi9PSHZjLU9sSG9h Qk9MME9ILTk5d1pVcEUwYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbTPKB47WqrTbqoPlPQrXh9YahMH7/5kXnc4EtTTsTXf6AGTdzOQ/xU6hqK4G FNEurTXw+F+ar5fs1iEvViOtJEpLAIMcCEtmYz9/Dw/M23+Rv3vTf+eEoYo18u/3 6BbRi93WqjNyEQK53cOF4l3Cuirt1++XIsmrvrvciUWitPXXcLudMCSt6+dhE9cE b+aZrbqzcR+TxBXltaV9YXZMKPgVDkYhT9qrZm39Emghhi9+KfWUAqjKXYZ9i9Ve 9x6zQkSfGUhWgJrgeLBOS8DjcxpsDPidVwsquJzcMZLBM+3k/cyhMFnAoD7NguZ7 zswMUpNKO0STCUzwcHvSB2aIGg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:45:07 2026 by rpki-client