$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft File: O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft (raw, json) Hash identifier: Iec/oYFctsWsUD+5o3hyLnn3uluD4D8MDKPx0UW+vY4= Subject key identifier: 79:A9:A7:D3:1A:F1:B4:00:35:FA:CB:E9:B6:E0:55:F6:6E:1D:7C:78 Authority key identifier: 3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 Certificate issuer: /CN=A91A3ED9/serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft Manifest number: 0E Signing time: Mon 27 Jul 2026 11:30:37 +0000 Manifest this update: Mon 27 Jul 2026 11:30:37 +0000 Manifest next update: Mon 03 Aug 2026 11:30:37 +0000 Files and hashes: 1: O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl (hash: Emg0Vox53FOI8Jnlp5bfaFaqTv67fQwgFVyVTZZkDHw=) 2: BFA8061876AB11F1AAE01A3C6EA30FBC.roa (hash: 9EIg/lWcSvk9v2gRzJROOuHZdpxkm+Aa8Ro0+T1ph54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3ED9, serialNumber=3B63E1E4F11F0F9795836101EA66E62A59FC6EF8 Validity Not Before: Jul 27 11:30:37 2026 GMT Not After : Aug 3 11:30:37 2026 GMT Subject: CN=6a67415d-1b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:b1:a0:34:60:85:e2:a5:ae:63:3f:d2:ef: 0b:7b:63:2d:f0:ea:d2:a6:9d:86:27:25:2b:1f:c7: 3b:61:c6:f8:be:ab:71:3d:3d:76:66:ee:f9:56:1b: dc:27:a0:98:25:3a:39:4f:29:0a:fd:70:89:98:0b: 7a:f1:ce:ed:7f:bc:ce:39:c7:d2:c6:96:0b:4f:2c: 6b:c9:b8:26:b2:6d:e1:ff:dd:69:a2:87:bb:ce:5f: 36:cf:10:0d:04:5b:9e:d7:ef:57:18:da:e6:af:d9: d6:78:ec:ae:5b:9b:78:08:d4:e9:47:0a:de:55:96: 43:fa:51:fe:83:eb:1d:23:5a:0c:c7:aa:8f:fe:70: 20:10:53:58:fc:ee:fe:36:b3:e8:2b:22:72:45:ea: 03:dc:4c:7c:cf:39:2f:a9:55:f7:26:8b:12:ac:6b: 58:e7:32:00:ad:b5:20:16:e4:48:e7:77:2b:1d:c5: 08:da:da:69:61:5a:34:e5:9a:9d:6b:b9:17:8a:10: f6:a6:b2:bf:3b:66:bd:88:b4:f1:ed:55:9d:97:54: 5d:c2:fa:41:a4:53:62:37:3c:fc:17:48:92:ef:14: c3:f7:97:35:3f:58:82:64:0d:3c:2e:4e:67:a8:e0: 14:58:75:ee:76:e5:9e:07:04:58:7b:82:b6:59:99: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:A7:D3:1A:F1:B4:00:35:FA:CB:E9:B6:E0:55:F6:6E:1D:7C:78 X509v3 Authority Key Identifier: keyid:3B:63:E1:E4:F1:1F:0F:97:95:83:61:01:EA:66:E6:2A:59:FC:6E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O2Ph5PEfD5eVg2EB6mbmKln8bvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3ED9/1926CA7C76A611F18F634DB76BA30FBC/O2Ph5PEfD5eVg2EB6mbmKln8bvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:1e:d9:28:1c:05:bd:26:c1:0e:6d:d1:4f:28:13:77:b4: 31:de:2b:33:7d:91:1e:f8:e2:f0:04:c0:51:f2:a5:9e:b5:bf: 21:b2:18:84:6e:5d:fb:c6:c4:7b:9c:fe:d7:0b:dc:b3:fc:6d: b5:62:48:f8:5d:7b:bb:f2:ee:a1:c5:85:ab:60:b7:74:f2:d0: db:1b:6f:b4:d0:95:94:08:d3:73:9f:47:86:3c:17:73:55:23: 04:ba:32:17:d7:53:df:d6:14:de:06:c5:42:f4:f5:8d:cb:67: 66:f5:5b:4c:8d:7d:06:d7:96:74:40:35:46:e8:89:5d:76:64: fa:73:b4:83:5a:57:a4:b1:7b:e9:d6:f8:7d:d1:8e:5c:a0:1e: 98:28:41:f1:97:e8:9e:d7:70:32:eb:d5:34:80:c7:a3:19:d7: c2:25:bc:7d:b3:50:c7:e5:fa:80:c0:22:ae:cc:41:69:72:1a: 88:54:fc:a7:be:8d:1c:7b:3f:c7:c9:b1:a7:e8:1d:74:79:28: ef:77:14:a1:24:aa:b7:e6:6e:e0:cc:c1:bc:9e:34:1b:35:cd: 85:6e:33:55:cf:ca:62:b6:d5:6c:73:6a:fd:af:63:88:49:e2: db:3b:5f:d2:1a:43:fd:a1:82:a2:31:16:82:e7:28:07:d2:16: a0:05:f2:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0VEOTExMC8GA1UEBRMoM0I2M0UxRTRGMTFGMEY5Nzk1ODM2MTAxRUE2NkU2MkE1 OUZDNkVGODAeFw0yNjA3MjcxMTMwMzdaFw0yNjA4MDMxMTMwMzdaMBgxFjAUBgNV BAMTDTZhNjc0MTVkLTFiMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfJ7GgNGCF4qWuYz/S7wt7Yy3w6tKmnYYnJSsfxzthxvi+q3E9PXZm7vlWG9wn oJglOjlPKQr9cImYC3rxzu1/vM45x9LGlgtPLGvJuCaybeH/3Wmih7vOXzbPEA0E W57X71cY2uav2dZ47K5bm3gI1OlHCt5VlkP6Uf6D6x0jWgzHqo/+cCAQU1j87v42 s+grInJF6gPcTHzPOS+pVfcmixKsa1jnMgCttSAW5EjndysdxQja2mlhWjTlmp1r uReKEPamsr87Zr2ItPHtVZ2XVF3C+kGkU2I3PPwXSJLvFMP3lzU/WIJkDTwuTmeo 4BRYde525Z4HBFh7grZZmQHVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeamn0xrx tAA1+svptuBV9m4dfHgwHwYDVR0jBBgwFoAUO2Ph5PEfD5eVg2EB6mbmKln8bvgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzRUQ5LzE5MjZDQTdDNzZB NjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVlVmcyRUI2bWJtS2xuOGJ2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzJQaDVQRWZENWVWZzJFQjZtYm1LbG44YnZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz RUQ5LzE5MjZDQTdDNzZBNjExRjE4RjYzNERCNzZCQTMwRkJDL08yUGg1UEVmRDVl VmcyRUI2bWJtS2xuOGJ2Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWWh7ZKBwFvSbBDm3RTygTd7Qx3iszfZEe+OLwBMBR8qWetb8hshiEbl37xsR7 nP7XC9yz/G21Ykj4XXu78u6hxYWrYLd08tDbG2+00JWUCNNzn0eGPBdzVSMEujIX 11Pf1hTeBsVC9PWNy2dm9VtMjX0G15Z0QDVG6IlddmT6c7SDWleksXvp1vh90Y5c oB6YKEHxl+ie13Ay69U0gMejGdfCJbx9s1DH5fqAwCKuzEFpchqIVPynvo0cez/H ybGn6B10eSjvdxShJKq35m7gzMG8njQbNc2FbjNVz8pittVsc2r9r2OISeLbO1/S GkP9oYKiMRaC5ygH0hagBfJi -----END CERTIFICATE-----Generated at Tue Jul 28 16:38:51 2026 by rpki-client