$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json) Hash identifier: NoZ6h7H1h+o4ZkcFEs5P84UrVmqXFOD7nkYrOf+eWiI= Subject key identifier: 5B:EE:39:65:30:4B:42:7D:6C:F1:61:A4:BB:D1:F3:C9:29:DB:AB:36 Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft Manifest number: 01F5 Signing time: Mon 27 Jul 2026 04:59:44 +0000 Manifest this update: Mon 27 Jul 2026 04:59:44 +0000 Manifest next update: Mon 03 Aug 2026 04:59:44 +0000 Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: HbVIl6S1xS0kTA/6L34DlZy7sbyN7eF4s/Qd4il7bz8=) 2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Jul 27 04:59:44 2026 GMT Not After : Aug 3 04:59:44 2026 GMT Subject: CN=6a66e5c0-000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:f2:18:05:cb:30:21:af:c8:62:a3:6d:d6: b2:cc:0e:98:61:12:55:55:4c:6e:0a:dd:d0:8d:8b: 46:df:29:5e:7e:ca:94:5b:0e:f4:19:3c:c1:ba:d6: e6:3b:48:d3:65:ce:67:81:34:9f:52:44:d9:e4:6e: d0:4d:5f:7d:98:27:54:25:96:6e:88:44:3b:ed:5d: c2:60:bb:64:c4:4e:59:b6:70:65:d8:5b:c2:cd:0d: d9:d9:fa:a1:0e:66:e2:3e:f8:11:00:c8:7f:b5:90: 69:93:3c:dc:2a:56:43:15:1e:87:ac:85:f2:51:5a: 20:a7:63:25:71:0c:49:69:b0:61:7e:7a:55:b0:28: 45:35:83:0e:44:34:fe:5f:60:60:e4:d7:f1:9e:06: 27:8b:96:40:09:73:b8:75:b3:25:24:f6:68:25:f8: 7c:09:8c:61:8c:cb:8e:00:47:1a:20:1f:91:55:d9: 99:4e:df:ca:07:63:91:db:3b:65:3c:44:29:77:22: 08:08:04:8e:c9:b4:67:da:b7:8b:fe:e5:87:61:41: 6c:cf:38:0b:5f:c4:86:8d:aa:7e:cf:df:87:6f:30: e5:4b:38:28:0d:51:38:7c:57:c5:bc:5a:3c:86:f7: f3:69:20:2f:b3:94:1a:8a:61:c1:94:ae:35:47:64: 45:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:39:65:30:4B:42:7D:6C:F1:61:A4:BB:D1:F3:C9:29:DB:AB:36 X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:5c:d7:a6:25:7e:e3:51:a2:24:a1:e3:5e:01:84:e7:8a:ed: 10:96:1a:8a:50:44:3b:aa:9d:30:7f:d9:94:ce:ab:7d:86:cd: a1:4f:21:f3:92:b6:b3:ec:ae:53:9f:35:fe:56:f2:ad:dc:44: 1a:d5:f1:ac:9c:4f:3d:a4:d6:e5:93:77:26:b7:b4:f4:85:6e: e6:14:80:4d:48:5e:1a:ee:7d:b0:bd:94:f7:8b:06:f8:1a:ad: 2b:03:1b:d0:3e:49:9c:40:69:fd:34:a9:aa:0a:c1:10:83:ef: a3:7f:0d:a0:96:8c:68:7a:f2:41:9e:d0:75:fa:2a:8f:52:08: 14:ec:72:35:0e:d9:db:01:1c:3d:4e:a1:9f:e1:52:b9:a4:cc: 0e:aa:d1:70:a1:c2:04:f4:0a:98:1c:7f:55:46:3e:e1:66:a8: f4:5d:0f:c6:a6:1e:0f:6f:1e:a5:1c:fd:a3:17:53:0a:9d:18: e8:3d:a6:2e:d1:fe:1e:f7:64:af:98:14:72:35:ef:3a:c4:dc: 12:c2:f7:36:30:e5:53:14:05:94:5f:18:58:86:61:40:3f:73: fa:b1:9e:44:ff:21:e0:50:b8:3b:4f:8f:78:ec:bf:9e:39:7c: 59:90:5a:97:1d:05:f1:a8:d7:18:fc:eb:cc:40:f8:27:90:19: 0e:8b:16:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjYwNzI3MDQ1OTQ0WhcNMjYwODAzMDQ1OTQ0WjAYMRYwFAYD VQQDEw02YTY2ZTVjMC0wMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd7yGAXLMCGvyGKjbdayzA6YYRJVVUxuCt3QjYtG3ylefsqUWw70GTzButbm O0jTZc5ngTSfUkTZ5G7QTV99mCdUJZZuiEQ77V3CYLtkxE5ZtnBl2FvCzQ3Z2fqh DmbiPvgRAMh/tZBpkzzcKlZDFR6HrIXyUVogp2MlcQxJabBhfnpVsChFNYMORDT+ X2Bg5NfxngYni5ZACXO4dbMlJPZoJfh8CYxhjMuOAEcaIB+RVdmZTt/KB2OR2ztl PEQpdyIICASOybRn2reL/uWHYUFszzgLX8SGjap+z9+HbzDlSzgoDVE4fFfFvFo8 hvfzaSAvs5QaimHBlK41R2RFzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvuOWUw S0J9bPFhpLvR88kp26s2MB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IyMy83NTQ1RjAzQTk3RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4 eWhVbDhoOTk3UFdtb3FaTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv1zXpiV+41GiJKHjXgGE54rtEJYailBEO6qdMH/ZlM6rfYbNoU8h85K2s+yu U581/lbyrdxEGtXxrJxPPaTW5ZN3Jre09IVu5hSATUheGu59sL2U94sG+BqtKwMb 0D5JnEBp/TSpqgrBEIPvo38NoJaMaHryQZ7Qdfoqj1IIFOxyNQ7Z2wEcPU6hn+FS uaTMDqrRcKHCBPQKmBx/VUY+4Wao9F0PxqYeD28epRz9oxdTCp0Y6D2mLtH+Hvdk r5gUcjXvOsTcEsL3NjDlUxQFlF8YWIZhQD9z+rGeRP8h4FC4O0+PeOy/njl8WZBa lx0F8ajXGPzrzED4J5AZDosW4w== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:24 2026 by rpki-client