$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft File: OxaIpfe3JKr754IKLGPZey6o5SI.mft (raw, json) Hash identifier: 05s7L2Ihx+xVk8+0MO3Huk6wlfgAZyUQt5tcr5DS7JI= Subject key identifier: F5:B6:3C:4E:B7:9F:EF:72:48:C9:BD:4E:83:E0:74:21:71:1F:13:7A Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft Manifest number: 03F6 Signing time: Mon 27 Jul 2026 01:31:49 +0000 Manifest this update: Mon 27 Jul 2026 01:31:48 +0000 Manifest next update: Mon 03 Aug 2026 01:31:48 +0000 Files and hashes: 1: OxaIpfe3JKr754IKLGPZey6o5SI.crl (hash: Z6XY6hzHYmGkVZBxbMEmcmgV7KdvihSJT00MEIWYf7c=) 2: EF8CB49CD78F11EC91680D49C4F9AE02.roa (hash: hsXlGwRGvGPxUguulNF29dR42fVylbNtBhEHVdKJ8n0=) 3: 2D613294CD7611EC83259862C4F9AE02.roa (hash: wIyzsjW5BRzmcndW2dr3tP73GPQanoCiUm2iVewXNHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522 Validity Not Before: Jul 27 01:31:48 2026 GMT Not After : Aug 3 01:31:48 2026 GMT Subject: CN=6a66b505-afcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:55:37:cc:88:54:59:be:34:7e:0b:75:ff: 35:99:f0:51:d7:c8:a2:52:8f:89:4c:55:64:95:23: 09:64:91:db:33:4f:5d:5c:55:06:68:ac:a3:13:67: 50:32:7c:43:ca:b1:7c:c0:44:1d:15:8f:1e:cf:28: 9d:6e:7f:45:ed:06:22:22:4a:e7:68:34:8f:b4:26: 26:66:36:da:07:ae:3e:52:bc:e0:7c:bb:d0:a6:fc: c3:30:91:d0:0b:c5:38:65:11:10:93:39:38:49:ae: 9e:29:6b:9c:e8:44:25:37:05:31:1e:34:55:c3:27: ea:38:0d:85:9c:02:ea:5c:7a:ca:0c:66:61:70:12: 71:d8:6b:e4:0d:5f:bb:ef:c1:72:0e:83:61:36:47: b0:81:b9:20:4f:5e:b0:ae:88:34:86:d3:9b:19:89: 2f:ea:1e:77:03:b2:71:40:40:ab:40:a7:29:40:3c: 66:55:2c:de:cc:70:bd:9a:a0:1b:94:5e:6c:e1:35: 86:16:bf:39:6a:28:8f:0e:70:67:60:3a:c4:a7:4d: 02:f2:cb:4f:84:e4:d3:bc:b8:f9:a6:54:4c:eb:a5: 18:99:f0:24:12:99:22:35:90:44:22:dd:a8:ab:7c: d2:14:fc:ff:97:5a:cf:7c:e1:ff:98:cd:02:05:d7: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B6:3C:4E:B7:9F:EF:72:48:C9:BD:4E:83:E0:74:21:71:1F:13:7A X509v3 Authority Key Identifier: keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5d:ba:4e:15:be:50:6f:24:cc:59:fc:f7:2b:8e:00:8c:e7: f7:6b:d0:e2:02:42:5b:ec:64:bb:f3:a9:9d:da:f6:f9:e5:07: 56:07:bb:97:43:8e:67:37:80:58:ac:a7:53:b8:2e:87:96:4e: d4:f2:5b:2f:2c:cd:42:bb:cd:1a:de:13:48:94:74:e8:0c:ad: 87:01:27:12:7c:43:e4:34:a8:76:8d:0c:3d:32:1c:ed:9d:77: a7:e9:aa:20:bd:80:6f:35:d1:54:18:3a:90:e1:fc:64:84:d8: e8:7f:09:bc:e0:67:03:a1:af:ba:90:42:92:06:14:83:d5:0f: 28:a5:09:ea:1d:48:3e:06:bb:e9:c5:82:a8:56:8c:1d:9b:2d: 86:09:49:fa:42:28:6a:1f:5c:51:cc:05:96:91:37:9c:91:50: 1c:14:f1:56:6d:40:45:98:95:41:a4:e5:cb:51:f3:a7:75:bb: bf:8f:76:88:0b:90:5f:24:b7:79:df:36:23:6e:a3:7a:ac:20: 13:8a:1e:4c:31:46:39:ff:07:0d:1e:30:dc:ae:81:06:29:31: d8:31:3b:31:7c:32:59:47:c8:7d:67:42:3e:ee:f2:d7:0c:3f: d5:ab:99:6b:ba:ce:d6:fa:27:36:08:e5:33:23:39:0f:d4:17: 69:4e:95:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC MkVBOEU1MjIwHhcNMjYwNzI3MDEzMTQ4WhcNMjYwODAzMDEzMTQ4WjAYMRYwFAYD VQQDEw02YTY2YjUwNS1hZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00pVN8yIVFm+NH4Ldf81mfBR18iiUo+JTFVklSMJZJHbM09dXFUGaKyjE2dQ MnxDyrF8wEQdFY8ezyidbn9F7QYiIkrnaDSPtCYmZjbaB64+UrzgfLvQpvzDMJHQ C8U4ZREQkzk4Sa6eKWuc6EQlNwUxHjRVwyfqOA2FnALqXHrKDGZhcBJx2GvkDV+7 78FyDoNhNkewgbkgT16wrog0htObGYkv6h53A7JxQECrQKcpQDxmVSzezHC9mqAb lF5s4TWGFr85aiiPDnBnYDrEp00C8stPhOTTvLj5plRM66UYmfAkEpkiNZBEIt2o q3zSFPz/l1rPfOH/mM0CBde01wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPW2PE63 n+9ySMm9ToPgdCFxHxN6MB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzJGQS9ENzI0NDU2MkNENzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pL cjc1NElLTEdQWmV5Nm81U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB126ThW+UG8kzFn89yuOAIzn92vQ4gJCW+xku/Opndr2+eUHVge7l0OOZzeA WKynU7guh5ZO1PJbLyzNQrvNGt4TSJR06AythwEnEnxD5DSodo0MPTIc7Z13p+mq IL2AbzXRVBg6kOH8ZITY6H8JvOBnA6GvupBCkgYUg9UPKKUJ6h1IPga76cWCqFaM HZsthglJ+kIoah9cUcwFlpE3nJFQHBTxVm1ARZiVQaTly1Hzp3W7v492iAuQXyS3 ed82I26jeqwgE4oeTDFGOf8HDR4w3K6BBikx2DE7MXwyWUfIfWdCPu7y1ww/1auZ a7rO1vonNgjlMyM5D9QXaU6ViQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:44:07 2026 by rpki-client