$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json) Hash identifier: fOtuv+BCDZ2bHECaPa8b4YfDN6yiqDxXIzxM0/xx9Qo= Subject key identifier: 73:78:75:CF:93:6C:47:FA:61:17:59:ED:54:BD:F6:08:43:6E:E7:EB Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft Manifest number: 01AF Signing time: Mon 27 Jul 2026 03:36:39 +0000 Manifest this update: Mon 27 Jul 2026 03:36:39 +0000 Manifest next update: Mon 03 Aug 2026 03:36:39 +0000 Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: lFtN9lg+/sdV5SMoG3+a5Hgkz1wr8TkVP58MP6hnngs=) 2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: +DCvPGD1gJzVRYp0NyLyo9qI/LocUFsJLWMxD2e8AY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Validity Not Before: Jul 27 03:36:39 2026 GMT Not After : Aug 3 03:36:39 2026 GMT Subject: CN=6a66d247-a846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:ba:75:f9:b3:74:12:cb:13:22:ff:6a:c8: 9d:79:a2:a1:03:d5:22:a4:13:38:6c:cf:1c:7a:c2: fd:e0:ce:46:60:e8:38:7b:09:dd:cf:25:bb:da:9b: 1c:df:8e:5d:45:9e:e6:ca:ca:c3:63:5f:4f:11:19: b4:ec:54:1b:92:ae:d3:13:5f:81:50:25:83:17:cc: 04:22:c5:23:e1:fa:2d:7b:47:4a:d4:49:ab:1f:6e: 2a:9b:77:6c:d2:da:dc:f7:bb:bc:bd:aa:39:21:ab: db:d5:60:33:bb:ad:98:3f:09:66:c4:6b:2c:4b:76: 4e:5c:c6:65:4d:f2:c8:a0:69:03:e2:37:c6:cb:68: f8:db:24:8b:0b:83:48:cd:5a:45:3a:4f:99:1c:36: a2:6a:94:22:ea:e3:2d:28:d1:19:d1:30:00:fc:c6: a8:dd:8d:a7:81:f5:a8:cb:b2:9c:d5:58:27:71:fb: a3:a9:1a:46:1a:fb:b6:7f:4e:4e:c6:15:f1:6e:8a: 3b:e8:7e:f7:4f:49:a1:64:f1:01:e5:0e:20:f0:cd: 23:02:99:a3:5a:a7:52:d7:68:2f:5e:36:9e:8d:8f: 3a:25:a8:86:6b:77:f4:fb:74:bd:e3:c4:dc:a5:54: 33:3f:67:7d:60:dc:c8:e8:0e:e6:0c:48:93:29:fe: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:78:75:CF:93:6C:47:FA:61:17:59:ED:54:BD:F6:08:43:6E:E7:EB X509v3 Authority Key Identifier: keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8c:e2:c6:1e:2a:d2:c4:af:b2:5e:84:52:3d:33:5b:19:10: b9:8e:4c:f5:5e:7d:f8:9b:85:b5:63:5a:41:1e:fd:12:59:c6: 43:ff:70:f4:98:78:59:fb:0c:64:54:d4:b3:0f:ef:b2:5d:68: a8:2d:c2:2d:6c:df:ef:26:87:b4:92:8f:3c:90:49:c7:60:7b: 76:94:9c:e3:d7:d9:89:8b:d4:ed:02:d0:5b:6a:71:25:15:55: a1:72:31:87:3f:da:0d:c4:70:51:f7:9a:07:d6:17:16:45:45: d9:73:23:e8:8e:54:9d:1e:69:22:c5:4a:ee:40:f3:a4:41:45: 5f:31:02:75:e0:86:fd:4c:ca:45:39:dc:b7:b8:09:f1:9b:48: c4:62:72:8a:36:3f:d5:b4:6a:e0:8f:e4:21:9e:ae:a9:ae:96: 27:42:c3:2e:fd:0c:78:12:a7:85:9c:1e:50:85:1a:28:b2:ba: 5f:fb:fc:72:38:44:29:47:d6:83:fe:e4:ec:66:ed:d1:68:0b: 3f:c8:6d:33:f2:e9:54:30:57:53:63:4a:7b:9f:5c:4a:f5:8b: 31:95:36:e4:1b:67:d7:57:7c:a0:58:5d:91:c3:9b:9c:72:84: ed:4c:58:a9:98:0d:06:13:a4:35:75:55:18:c3:05:c2:5e:b5: 96:18:e0:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE QURCNTIxMkEwHhcNMjYwNzI3MDMzNjM5WhcNMjYwODAzMDMzNjM5WjAYMRYwFAYD VQQDEw02YTY2ZDI0Ny1hODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofu6dfmzdBLLEyL/asideaKhA9UipBM4bM8cesL94M5GYOg4ewndzyW72psc 345dRZ7mysrDY19PERm07FQbkq7TE1+BUCWDF8wEIsUj4fote0dK1EmrH24qm3ds 0trc97u8vao5Iavb1WAzu62YPwlmxGssS3ZOXMZlTfLIoGkD4jfGy2j42ySLC4NI zVpFOk+ZHDaiapQi6uMtKNEZ0TAA/Mao3Y2ngfWoy7Kc1VgncfujqRpGGvu2f05O xhXxboo76H73T0mhZPEB5Q4g8M0jApmjWqdS12gvXjaejY86JaiGa3f0+3S948Tc pVQzP2d9YNzI6A7mDEiTKf7r6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHN4dc+T bEf6YRdZ7VS99ghDbufrMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFozixh4q0sSvsl6EUj0zWxkQuY5M9V59+JuFtWNaQR79ElnGQ/9w9Jh4WfsM ZFTUsw/vsl1oqC3CLWzf7yaHtJKPPJBJx2B7dpSc49fZiYvU7QLQW2pxJRVVoXIx hz/aDcRwUfeaB9YXFkVF2XMj6I5UnR5pIsVK7kDzpEFFXzECdeCG/UzKRTnct7gJ 8ZtIxGJyijY/1bRq4I/kIZ6uqa6WJ0LDLv0MeBKnhZweUIUaKLK6X/v8cjhEKUfW g/7k7Gbt0WgLP8htM/LpVDBXU2NKe59cSvWLMZU25Btn11d8oFhdkcObnHKE7UxY qZgNBhOkNXVVGMMFwl61lhjgYQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:41:33 2026 by rpki-client