$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: qoyjvEWnhguqKsJlbrC1NPSki2umkPL8Gyz9LbbFPdU= Subject key identifier: BF:97:2C:7A:4C:8C:01:A0:93:2E:7E:EE:7D:11:39:95:62:B0:50:A6 Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 13FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 258D Signing time: Tue 28 Jul 2026 17:00:35 +0000 Manifest this update: Tue 28 Jul 2026 17:00:34 +0000 Manifest next update: Tue 04 Aug 2026 17:00:34 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: pG1ehxaRoz5AOX8P/+lzceRYB+d4gsFsPMFIhhz7PXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5114 (0x13fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: Jul 28 17:00:34 2026 GMT Not After : Aug 4 17:00:34 2026 GMT Subject: CN=6a68e033-8595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:16:dd:05:c2:b4:49:46:b5:06:a4:79:27: 63:ac:ba:f7:9e:8b:c9:4a:d5:44:cf:a2:36:69:0e: 5d:62:fd:d1:18:86:8e:74:4b:e5:47:43:c0:2a:b5: 5e:9d:41:35:c6:4f:1f:a0:c4:08:c0:61:b3:c2:69: d8:be:0a:a4:56:32:cd:db:2e:fa:82:ab:bb:18:16: 46:0d:6b:a1:dc:cd:4b:33:a2:ff:c4:68:33:1a:d0: 04:63:a3:6a:a1:4c:03:31:cc:bc:d8:9f:ab:c6:07: ad:5c:e9:4a:22:88:cf:17:6b:bf:8e:4c:4f:c7:90: 5b:c9:c1:cc:45:31:3c:ec:ac:4d:3f:f6:8d:ca:41: fe:30:41:b2:ef:56:d9:3b:72:30:23:39:29:11:df: 9b:53:1c:c8:16:5d:59:8d:cd:92:cb:ba:8b:bd:a3: 92:c4:0b:da:a1:86:69:44:9b:d7:a9:42:2a:96:73: 41:0f:f7:df:e0:20:b9:f3:d6:d9:09:16:b3:75:f3: 97:5c:3f:65:84:dc:ac:63:f7:13:c7:7e:19:09:7f: 66:36:b6:6f:e6:00:70:db:fe:ea:be:7d:8f:23:40: 8b:d1:b0:ff:52:dc:5e:eb:63:5f:81:3b:fd:d6:89: d5:8d:58:cc:bb:ce:61:c3:e8:4e:fb:0c:e2:d3:d4: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:97:2C:7A:4C:8C:01:A0:93:2E:7E:EE:7D:11:39:95:62:B0:50:A6 X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:93:0c:19:69:8a:b9:77:a1:81:6d:f4:2a:53:24:4d:48:b2: 45:16:8f:07:58:cf:ee:7a:29:8a:5f:4e:de:1f:61:63:e4:0b: 51:0f:19:d6:45:f7:b2:f3:51:ae:a6:57:ef:f0:9a:56:5b:9d: 9d:84:b9:71:e1:64:02:54:54:19:0f:67:f5:91:1d:05:07:15: 8a:a7:51:8e:41:cb:96:61:4f:4e:ab:0e:e5:5b:77:05:31:06: bc:9d:5c:99:ee:0a:2c:24:b1:d7:a0:a4:b9:5c:e6:d5:83:52: 78:a3:f1:24:3c:0a:71:36:72:3d:a2:ef:80:73:78:37:75:fc: e3:9b:a5:85:17:fd:6d:ea:38:a4:49:59:e1:36:38:b7:ad:62: 3c:22:9f:0a:89:38:01:fe:de:3d:b5:75:71:61:5d:0c:1d:ae: 30:cd:1c:9e:53:bb:a9:2b:54:5e:b9:b7:53:07:3e:c2:01:ef: d2:80:7b:c0:8f:84:bc:75:6c:67:9e:36:dd:2e:1b:e6:1c:6f: 49:a8:42:86:67:3b:d2:0d:dd:bb:ba:f9:a7:f4:65:50:8b:81: 17:49:4a:ab:76:84:32:b1:cd:a2:47:14:69:71:9b:e3:f4:ca: b2:a5:40:43:8c:7d:05:23:cb:2c:a2:db:57:b2:2b:e8:43:d2: 68:59:40:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjYwNzI4MTcwMDM0WhcNMjYwODA0MTcwMDM0WjAYMRYwFAYD VQQDEw02YTY4ZTAzMy04NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/IW3QXCtElGtQakeSdjrLr3novJStVEz6I2aQ5dYv3RGIaOdEvlR0PAKrVe nUE1xk8foMQIwGGzwmnYvgqkVjLN2y76gqu7GBZGDWuh3M1LM6L/xGgzGtAEY6Nq oUwDMcy82J+rxgetXOlKIojPF2u/jkxPx5BbycHMRTE87KxNP/aNykH+MEGy71bZ O3IwIzkpEd+bUxzIFl1Zjc2Sy7qLvaOSxAvaoYZpRJvXqUIqlnNBD/ff4CC589bZ CRazdfOXXD9lhNysY/cTx34ZCX9mNrZv5gBw2/7qvn2PI0CL0bD/Utxe62NfgTv9 1onVjVjMu85hw+hO+wzi09TtKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+XLHpM jAGgky5+7n0ROZVisFCmMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpMMGWmKuXehgW30KlMkTUiyRRaPB1jP7nopil9O3h9hY+QLUQ8Z1kX3svNR rqZX7/CaVludnYS5ceFkAlRUGQ9n9ZEdBQcViqdRjkHLlmFPTqsO5Vt3BTEGvJ1c me4KLCSx16CkuVzm1YNSeKPxJDwKcTZyPaLvgHN4N3X845ulhRf9beo4pElZ4TY4 t61iPCKfCok4Af7ePbV1cWFdDB2uMM0cnlO7qStUXrm3Uwc+wgHv0oB7wI+EvHVs Z5423S4b5hxvSahChmc70g3du7r5p/RlUIuBF0lKq3aEMrHNokcUaXGb4/TKsqVA Q4x9BSPLLKLbV7Ir6EPSaFlAcw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:58:26 2026 by rpki-client