$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json) Hash identifier: 8wrVfJdTyQev+i1Spm1PHOQYN/j1U64vSgzrc/5tNTQ= Subject key identifier: 6D:20:5A:A0:8D:0A:82:5D:F2:5F:C9:37:D1:4C:A1:C7:B1:09:0F:00 Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Certificate serial: 0ABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft Manifest number: 0AA5 Signing time: Tue 28 Jul 2026 19:51:47 +0000 Manifest this update: Tue 28 Jul 2026 19:51:47 +0000 Manifest next update: Tue 04 Aug 2026 19:51:47 +0000 Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: ftxGMiEtNdRokpA+IAwi5mzgR1gRFzM8j5kvyMw8AFw=) 2: 6FD03784861C11F18E80495A81A30FBC.roa (hash: +OaHRdor7FrSH8stlmfhFUun2yan7PWVuqWKNlAkwUA=) 3: D65601C8861C11F188AD997381A30FBC.roa (hash: WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4 Validity Not Before: Jul 28 19:51:47 2026 GMT Not After : Aug 4 19:51:47 2026 GMT Subject: CN=6a690853-48be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:03:b0:72:75:c0:17:39:34:77:20:f0:2f: 07:77:6f:a9:ef:70:68:ad:62:2f:49:d7:74:71:a7: f5:0c:ec:ec:61:fd:ad:83:4e:d8:64:62:18:e5:af: 47:f5:da:0b:e8:37:ce:bc:8d:a1:e0:b3:e2:b8:03: fb:37:d9:06:47:bf:3f:25:d6:eb:27:a0:49:80:36: 8b:4d:c4:f3:ee:64:df:76:9a:25:1d:4e:43:3d:ab: bc:3e:ab:d6:56:6f:0f:ff:ba:fb:35:9f:3e:4b:89: ca:dd:64:29:f7:4c:82:c7:32:82:d1:2b:a3:98:fe: 65:20:18:c4:db:fd:f1:93:47:e1:02:62:4a:15:10: e9:31:a3:ba:95:26:c6:10:ca:51:12:7c:08:c8:31: 62:b8:6a:b4:10:c2:7c:48:47:ed:7d:1f:70:1b:52: 0b:a5:15:de:5c:31:24:87:c9:e7:ea:aa:df:bb:b1: 1d:49:f2:b4:2e:1e:ce:dc:c6:85:6d:1b:9b:0a:52: 1a:0f:d3:2d:08:0b:7c:3a:d2:55:59:a3:91:ba:36: 7a:54:5f:a6:e8:bb:1f:79:e9:66:1e:88:1d:a7:3e: 78:0c:8a:89:ec:43:18:7b:cd:15:32:15:5c:84:2f: cd:13:38:dd:08:49:61:56:a3:ea:ad:32:6a:92:0b: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:20:5A:A0:8D:0A:82:5D:F2:5F:C9:37:D1:4C:A1:C7:B1:09:0F:00 X509v3 Authority Key Identifier: keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:01:95:c9:31:b6:ac:32:ef:0c:00:97:12:56:20:11:c6:c7: e5:59:6c:84:3d:f1:50:aa:39:7b:d3:5c:16:97:48:30:bf:2e: 9b:5a:93:2a:cf:cd:58:8c:4d:8a:e6:66:b3:04:13:98:9c:50: 28:ae:d8:9d:d1:53:0d:28:f7:fd:e0:f4:58:fe:ed:0c:40:69: ce:cb:2e:08:71:ab:a7:f6:e5:99:a5:d0:89:19:7c:ec:91:05: 3f:0f:8a:cd:ec:1b:ed:ea:ff:e8:af:b4:ba:c8:94:69:66:4f: be:da:b1:de:cf:da:b4:22:45:a2:f6:86:64:52:6c:be:3a:ac: e4:6e:9a:2c:19:a4:56:6c:03:1a:69:ef:10:a3:1f:8c:98:33: 1f:5a:58:27:aa:44:a9:6b:e1:cc:e7:30:fc:32:48:97:e2:d5: 6f:22:27:eb:30:ee:e3:13:29:7c:ee:fd:3b:f9:7c:63:30:b6: 66:de:7b:d4:71:b5:e5:dc:f6:77:77:b5:9e:a3:44:e2:41:70: 37:8d:b4:b6:09:4b:8b:50:1e:f4:7b:6c:e8:ab:e7:ab:d1:2c: 3a:a1:82:b2:8a:03:f2:47:65:ac:c2:19:f9:f3:e6:57:c5:c4: 72:85:80:3d:dd:07:ef:1c:fe:58:7a:5b:94:74:20:49:b3:90: f4:af:99:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzQkUxMTAvBgNVBAUTKEExMDYwMzMwMkJGRUM4MkEwN0Y4QzVENDJFNDU4Qjc2 QzVGRjkxQTQwHhcNMjYwNzI4MTk1MTQ3WhcNMjYwODA0MTk1MTQ3WjAYMRYwFAYD VQQDEw02YTY5MDg1My00OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWYDsHJ1wBc5NHcg8C8Hd2+p73BorWIvSdd0caf1DOzsYf2tg07YZGIY5a9H 9doL6DfOvI2h4LPiuAP7N9kGR78/JdbrJ6BJgDaLTcTz7mTfdpolHU5DPau8PqvW Vm8P/7r7NZ8+S4nK3WQp90yCxzKC0SujmP5lIBjE2/3xk0fhAmJKFRDpMaO6lSbG EMpREnwIyDFiuGq0EMJ8SEftfR9wG1ILpRXeXDEkh8nn6qrfu7EdSfK0Lh7O3MaF bRubClIaD9MtCAt8OtJVWaORujZ6VF+m6LsfeelmHogdpz54DIqJ7EMYe80VMhVc hC/NEzjdCElhVqPqrTJqkgueBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0gWqCN CoJd8l/JN9FMocexCQ8AMB8GA1UdIwQYMBaAFKEGAzAr/sgqB/jF1C5Fi3bF/5Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNCRS84OUI0RjY3ODg0 MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlDb0gtTVhVTGtXTGRzWF9r YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29RWURNQ3YteUNvSC1NWFVMa1dMZHNYX2thUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNCRS84OUI0RjY3ODg0MTkxMUVBOThGRjA2MzdDNEY5QUUwMi9vUVlETUN2LXlD b0gtTVhVTGtXTGRzWF9rYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvAGVyTG2rDLvDACXElYgEcbH5VlshD3xUKo5e9NcFpdIML8um1qTKs/NWIxN iuZmswQTmJxQKK7YndFTDSj3/eD0WP7tDEBpzssuCHGrp/blmaXQiRl87JEFPw+K zewb7er/6K+0usiUaWZPvtqx3s/atCJFovaGZFJsvjqs5G6aLBmkVmwDGmnvEKMf jJgzH1pYJ6pEqWvhzOcw/DJIl+LVbyIn6zDu4xMpfO79O/l8YzC2Zt571HG15dz2 d3e1nqNE4kFwN420tglLi1Ae9Hts6Kvnq9EsOqGCsooD8kdlrMIZ+fPmV8XEcoWA Pd0H7xz+WHpblHQgSbOQ9K+ZEA== -----END CERTIFICATE-----Generated at Wed Jul 29 12:31:23 2026 by rpki-client