$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: GUwzBEHSXJuwNmtyhPHyi4rXsZb2Xtlahu9nmBUpKFU= Subject key identifier: EB:72:5D:E7:2D:AB:83:03:AD:64:D4:C2:99:D5:00:E1:35:9A:AE:23 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 083C Signing time: Sun 26 Jul 2026 21:42:24 +0000 Manifest this update: Sun 26 Jul 2026 21:42:23 +0000 Manifest next update: Sun 02 Aug 2026 21:42:23 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: b6T4jNoal6efwA6wlf48NbYLx5Hf4mSw4qfTyRevPAo=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: eZnBeGRp/XjPgjBo8RzoLFHJq1ASGdJfGhbtwCwrNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Jul 26 21:42:23 2026 GMT Not After : Aug 2 21:42:23 2026 GMT Subject: CN=6a667f40-674f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:ae:97:91:7e:12:6a:f3:cc:63:a8:23:eb: 1e:df:bf:22:35:68:a5:cf:98:68:c9:3d:75:8a:cc: da:46:aa:cb:61:19:94:68:70:82:92:93:3b:37:f2: 80:e8:5e:94:23:6a:4f:84:f5:3e:9b:42:9e:62:b8: 56:32:1c:5d:e1:10:2a:54:9d:94:ef:b8:7f:f3:19: ac:a8:23:4b:e3:0f:78:f8:09:f1:7e:78:70:e1:a8: 26:ec:0c:2d:28:4d:32:df:c6:4c:58:11:30:c1:40: 11:f3:e8:21:dc:73:df:1c:66:40:2a:70:95:9c:90: ef:b4:69:77:88:b3:36:9b:d6:c4:1a:ee:8c:2d:49: d7:ce:df:47:69:5a:00:ad:e6:fc:40:f2:9b:f4:a6: 70:f4:47:58:61:55:55:c3:87:8f:ab:89:4a:9c:36: 4d:a0:76:ee:58:e0:34:0c:ac:a2:2b:0a:45:31:8f: 59:87:1e:68:f9:f1:f2:bb:5f:ab:a1:ca:8e:2e:29: 54:e4:db:10:24:b1:16:a9:6f:24:ee:89:23:f1:fe: 71:00:f5:b8:8e:ef:f5:3d:8a:1e:a2:91:96:f6:32: ae:6f:d6:b3:41:67:86:10:93:f7:28:71:09:5c:01: 18:3e:1f:db:4a:65:49:ad:54:a7:82:c4:ad:8c:f8: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:72:5D:E7:2D:AB:83:03:AD:64:D4:C2:99:D5:00:E1:35:9A:AE:23 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b2:dc:23:ef:41:6d:8e:b2:7f:c0:6a:3a:0d:8f:38:98:44: 36:fb:26:19:b0:7d:16:57:4c:d7:49:91:93:14:db:1a:94:6f: 73:a6:b1:07:c6:58:aa:d5:e9:ed:9b:8f:65:e1:b3:59:54:d9: 65:0a:ff:8d:17:71:84:9c:16:cf:1b:9e:51:5d:78:24:8e:66: 60:db:9d:fe:81:4a:89:c5:19:6a:98:74:a3:ef:0c:87:d8:12: fe:a6:fd:60:e0:12:94:3f:58:95:19:a1:15:f3:18:e5:e0:75: e0:33:d9:1a:ee:f9:39:b1:67:2e:6a:3c:6b:54:ef:98:d9:ef: e1:d1:62:ee:b8:c0:9f:27:9d:fc:48:f5:0e:88:35:ab:6f:e1: ee:e1:79:7b:53:a6:00:ad:45:ed:4f:71:92:a0:a0:9c:2a:62: 32:f4:56:7b:74:2d:48:80:78:71:10:80:b7:64:47:5d:18:a3: 92:24:7e:ee:26:b5:03:2b:b0:c1:92:01:1a:32:e6:73:ad:ca: 27:d8:98:a3:6d:33:d7:8b:5b:9d:36:3a:bb:1b:c5:b5:18:b0: c2:ba:03:ad:88:c0:d7:83:37:dd:f4:2d:25:9c:53:1a:b1:7a: 46:0b:4a:fe:37:29:f9:77:23:0d:0c:61:55:95:f0:43:07:9a: 87:2f:7e:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjYwNzI2MjE0MjIzWhcNMjYwODAyMjE0MjIzWjAYMRYwFAYD VQQDEw02YTY2N2Y0MC02NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/Gul5F+EmrzzGOoI+se378iNWilz5hoyT11iszaRqrLYRmUaHCCkpM7N/KA 6F6UI2pPhPU+m0KeYrhWMhxd4RAqVJ2U77h/8xmsqCNL4w94+Anxfnhw4agm7Awt KE0y38ZMWBEwwUAR8+gh3HPfHGZAKnCVnJDvtGl3iLM2m9bEGu6MLUnXzt9HaVoA reb8QPKb9KZw9EdYYVVVw4ePq4lKnDZNoHbuWOA0DKyiKwpFMY9Zhx5o+fHyu1+r ocqOLilU5NsQJLEWqW8k7okj8f5xAPW4ju/1PYoeopGW9jKub9azQWeGEJP3KHEJ XAEYPh/bSmVJrVSngsStjPho8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtyXect q4MDrWTUwpnVAOE1mq4jMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt7LcI+9BbY6yf8BqOg2POJhENvsmGbB9FldM10mRkxTbGpRvc6axB8ZYqtXp 7ZuPZeGzWVTZZQr/jRdxhJwWzxueUV14JI5mYNud/oFKicUZaph0o+8Mh9gS/qb9 YOASlD9YlRmhFfMY5eB14DPZGu75ObFnLmo8a1TvmNnv4dFi7rjAnyed/Ej1Dog1 q2/h7uF5e1OmAK1F7U9xkqCgnCpiMvRWe3QtSIB4cRCAt2RHXRijkiR+7ia1Ayuw wZIBGjLmc63KJ9iYo20z14tbnTY6uxvFtRiwwroDrYjA14M33fQtJZxTGrF6RgtK /jcp+XcjDQxhVZXwQweahy9+BA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:01:57 2026 by rpki-client