$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: 4CRsQT0LxMiio+vw8jvNBko8L5MIcZKsEok0OlGvLRE= Subject key identifier: D5:05:D1:EB:00:DB:B0:0A:AD:09:B4:17:F3:C3:C0:78:76:AA:2A:6E Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0CB1 Signing time: Tue 28 Jul 2026 18:41:49 +0000 Manifest this update: Tue 28 Jul 2026 18:41:49 +0000 Manifest next update: Tue 04 Aug 2026 18:41:49 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: IXcHHuxGC3z47LXMeoqqLrxzAWr8bODD9/ZbafGyq9A=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: gdFcJrPQtvbCIqeSBLzpbCtAXnKIWEBcSmlGfLFP1iM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: Jul 28 18:41:49 2026 GMT Not After : Aug 4 18:41:49 2026 GMT Subject: CN=6a68f7ed-6694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e5:b2:78:84:01:64:75:26:18:99:26:54:07: a4:3e:da:d9:7a:2e:a0:d9:30:7e:3a:cc:53:ac:c4: 05:e9:b3:76:54:c6:8e:8d:3e:93:9f:ed:3e:f5:96: 03:0e:db:7a:31:c8:97:bb:97:a8:8f:a6:1b:b2:65: 32:c7:0c:e8:d4:0c:8b:6f:61:6d:cf:0e:18:49:ac: 2a:29:57:05:1c:bc:b1:3c:15:5d:6e:95:45:7f:3e: 5e:d4:a3:5d:64:85:ca:8a:14:16:01:27:cc:96:92: 9e:5a:41:73:d9:36:fe:0b:0d:fe:3e:c1:06:23:e9: 92:0e:58:92:49:0c:4b:37:ed:9a:ac:81:67:3e:37: 45:09:17:31:c6:e6:bd:98:e7:ab:39:a5:a2:4c:36: 47:be:83:40:e6:f6:6b:61:23:bd:57:63:3b:49:34: f2:ac:31:8e:79:65:eb:89:45:72:58:7f:c6:ba:3f: 25:4f:68:20:8d:3f:00:ef:84:73:77:6f:3d:3c:cb: 24:8b:ff:27:ba:e6:c0:84:50:9e:62:33:66:d4:dc: 31:0e:81:f2:58:fd:14:c9:5f:c1:f5:34:c6:ce:0e: 17:74:70:18:25:5e:4c:50:39:36:b8:6c:32:0f:a0: f3:87:bb:1b:5a:e6:8a:72:1d:2a:62:0a:25:69:b8: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:D1:EB:00:DB:B0:0A:AD:09:B4:17:F3:C3:C0:78:76:AA:2A:6E X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:fe:b7:36:15:0f:3d:0c:f3:1c:4b:54:10:13:83:47:18: ea:84:a3:9f:9b:4e:50:c0:c7:17:2f:05:f8:74:40:3c:ec:af: 0f:be:b0:83:4c:24:d5:e8:c9:51:a2:71:a5:24:b8:64:0c:fd: 09:02:f5:38:b7:df:d2:b9:d8:5d:04:5d:fb:df:7d:15:e8:b0: 2f:05:a0:f2:65:1d:74:c1:16:b0:13:e0:2d:80:ea:5f:f5:ef: a0:b6:d9:4d:73:91:e3:11:e5:98:42:49:a5:d1:1c:93:ce:e8: 1a:7f:79:9e:c6:c3:4d:d4:02:7a:c3:b5:7c:27:30:51:6b:5a: 96:b1:c3:b1:8f:fc:a1:71:de:f0:2a:00:5b:bc:d5:7c:6a:d4: af:a1:3c:9b:93:d5:6d:54:a5:50:37:15:23:c6:b7:99:8a:4a: f0:6f:b5:b4:a8:37:79:d9:37:2d:12:82:7f:f7:ac:f0:79:18: 32:65:11:c8:8b:c7:15:70:c5:44:ac:19:12:a2:d0:cc:4a:81: 10:4e:60:0e:02:f9:ee:78:70:f6:ef:90:37:d5:cf:21:72:4a: 65:68:7d:ba:62:5e:cc:8c:cf:36:63:fa:3a:1f:bd:ef:f3:79: a8:c8:9d:5f:56:59:16:2f:07:04:e6:29:47:51:cf:4c:b8:f9: 0a:33:24:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjYwNzI4MTg0MTQ5WhcNMjYwODA0MTg0MTQ5WjAYMRYwFAYD VQQDEw02YTY4ZjdlZC02Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+eWyeIQBZHUmGJkmVAekPtrZei6g2TB+OsxTrMQF6bN2VMaOjT6Tn+0+9ZYD Dtt6MciXu5eoj6YbsmUyxwzo1AyLb2Ftzw4YSawqKVcFHLyxPBVdbpVFfz5e1KNd ZIXKihQWASfMlpKeWkFz2Tb+Cw3+PsEGI+mSDliSSQxLN+2arIFnPjdFCRcxxua9 mOerOaWiTDZHvoNA5vZrYSO9V2M7STTyrDGOeWXriUVyWH/Guj8lT2ggjT8A74Rz d289PMski/8nuubAhFCeYjNm1NwxDoHyWP0UyV/B9TTGzg4XdHAYJV5MUDk2uGwy D6Dzh7sbWuaKch0qYgolabjAJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUF0esA 27AKrQm0F/PDwHh2qipuMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAovT+tzYVDz0M8xxLVBATg0cY6oSjn5tOUMDHFy8F+HRAPOyvD76wg0wk1ejJ UaJxpSS4ZAz9CQL1OLff0rnYXQRd+999FeiwLwWg8mUddMEWsBPgLYDqX/XvoLbZ TXOR4xHlmEJJpdEck87oGn95nsbDTdQCesO1fCcwUWtalrHDsY/8oXHe8CoAW7zV fGrUr6E8m5PVbVSlUDcVI8a3mYpK8G+1tKg3edk3LRKCf/es8HkYMmURyIvHFXDF RKwZEqLQzEqBEE5gDgL57nhw9u+QN9XPIXJKZWh9umJezIzPNmP6Oh+97/N5qMid X1ZZFi8HBOYpR1HPTLj5CjMksQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:44:53 2026 by rpki-client