$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: pmJQZbjW+7x1r2gwUh4jlUV+mZqIONewUI+GMVbPcro= Subject key identifier: 99:72:90:A6:61:B3:2F:2E:73:97:0D:93:78:28:8A:F5:43:DD:3A:09 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: C1 Signing time: Mon 27 Jul 2026 09:09:30 +0000 Manifest this update: Mon 27 Jul 2026 09:09:29 +0000 Manifest next update: Mon 03 Aug 2026 09:09:29 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: QVm+WUQcyikyiTsNqDAWEo1aQRBhtqEW925peIPCE7s=) 2: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=) 4: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: olGZFQsn1mlcpcKpwtwVsB6rEXop7OsizwPFcv+yNqQ=) 5: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Jul 27 09:09:29 2026 GMT Not After : Aug 3 09:09:29 2026 GMT Subject: CN=6a67204a-1dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:eb:33:3d:ae:ca:85:62:b7:fd:ea:67:b1: 4a:85:70:20:2b:e3:f0:86:94:b3:40:a0:33:b8:32: 99:93:87:05:98:a1:fb:f8:5b:d0:e4:52:80:e7:cd: c5:3c:b1:68:b1:1e:8a:03:da:9f:76:cd:75:8d:ee: fe:e3:28:0e:38:31:26:ba:16:a5:ca:07:23:c1:6d: 40:f5:17:6a:78:dd:4e:e2:59:72:26:cf:7d:d1:95: 19:6b:c9:63:23:86:15:4b:f3:28:ce:a3:ab:4b:8d: cc:90:bb:ad:3b:5a:86:5d:37:d2:5a:95:09:84:f7: 15:33:5d:98:f4:0e:38:5a:6c:a5:d9:7f:39:a4:8e: 00:b4:ec:d1:f9:e1:ed:25:37:1b:36:26:09:6b:7f: ed:48:87:a7:3b:05:64:5a:6c:99:03:60:52:16:78: f6:7b:45:02:a1:6c:fc:60:02:13:65:99:ca:53:ee: c6:15:af:f2:d3:41:b2:ad:a1:5a:44:c3:6a:4e:e0: 39:8f:ca:62:df:f8:80:e1:c2:c8:b3:07:88:5e:c9: d8:4c:c7:80:08:ee:4f:95:6d:69:03:04:b5:47:38: 01:b6:0a:89:96:72:2d:2b:33:81:a1:bc:81:7a:32: b4:5a:74:56:7d:86:0e:0a:41:d6:62:87:92:ef:90: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:90:A6:61:B3:2F:2E:73:97:0D:93:78:28:8A:F5:43:DD:3A:09 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:94:68:2e:4f:0a:34:af:99:7d:36:19:b4:bd:2a:d7:a0:23: aa:01:f7:4f:69:3d:65:a2:d9:f6:d9:51:f4:88:a9:42:dc:a3: 7c:b1:f8:c0:15:56:de:61:6a:b2:41:f2:9c:ab:1b:1e:9a:99: 92:93:d0:1e:40:74:4a:19:c8:58:b7:5f:f2:95:73:ba:6a:d3: 2b:f5:eb:90:05:bf:53:81:f5:e1:62:0b:8a:ac:f8:fc:04:8b: b7:16:30:3d:9b:c5:2b:83:0d:94:de:0b:c0:ee:6b:de:6a:07: 0c:5a:c8:8b:88:a7:f6:51:8e:f2:39:87:30:07:b7:ea:9d:b8: 1a:07:bb:a0:a8:4d:29:78:ab:8a:4a:71:f4:57:d7:84:02:62: bd:23:c6:30:ea:0b:22:82:98:ca:25:8d:18:c2:44:d7:26:24: d7:73:f9:1f:9e:da:e0:d9:a9:fd:ce:98:c1:b1:0f:80:12:4e: 0f:a3:86:3e:01:d2:48:92:63:43:17:2e:3d:8b:2b:24:fb:6f: 70:3c:20:7c:89:a7:ea:8c:d8:dd:19:29:87:f5:99:e5:68:84: 08:1d:b4:06:8a:b6:f4:17:7d:82:cf:72:1a:c3:e2:c9:07:11: 1f:f7:13:1a:f6:96:bd:cc:6c:fe:21:c3:2b:a3:17:f3:e6:b5: e1:6b:fc:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwNzI3MDkwOTI5WhcNMjYwODAzMDkwOTI5WjAYMRYwFAYD VQQDEw02YTY3MjA0YS0xZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltTrMz2uyoVit/3qZ7FKhXAgK+PwhpSzQKAzuDKZk4cFmKH7+FvQ5FKA583F PLFosR6KA9qfds11je7+4ygOODEmuhalygcjwW1A9RdqeN1O4llyJs990ZUZa8lj I4YVS/MozqOrS43MkLutO1qGXTfSWpUJhPcVM12Y9A44Wmyl2X85pI4AtOzR+eHt JTcbNiYJa3/tSIenOwVkWmyZA2BSFnj2e0UCoWz8YAITZZnKU+7GFa/y00GyraFa RMNqTuA5j8pi3/iA4cLIsweIXsnYTMeACO5PlW1pAwS1RzgBtgqJlnItKzOBobyB ejK0WnRWfYYOCkHWYoeS75DGSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlykKZh sy8uc5cNk3goivVD3ToJMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArJRoLk8KNK+ZfTYZtL0q16AjqgH3T2k9ZaLZ9tlR9IipQtyjfLH4wBVW3mFq skHynKsbHpqZkpPQHkB0ShnIWLdf8pVzumrTK/XrkAW/U4H14WILiqz4/ASLtxYw PZvFK4MNlN4LwO5r3moHDFrIi4in9lGO8jmHMAe36p24Gge7oKhNKXirikpx9FfX hAJivSPGMOoLIoKYyiWNGMJE1yYk13P5H57a4Nmp/c6YwbEPgBJOD6OGPgHSSJJj QxcuPYsrJPtvcDwgfImn6ozY3Rkph/WZ5WiECB20Boq29Bd9gs9yGsPiyQcRH/cT GvaWvcxs/iHDK6MX8+a14Wv8PA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:32:32 2026 by rpki-client