$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: h/x9o4H0EN7VIGpnodFmjxbuw/ZuqgCX/JvIqg5XfCM= Subject key identifier: 62:23:79:98:1D:AE:F8:1D:50:D8:31:59:11:DD:23:B6:E2:C7:31:3C Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 3106 Signing time: Tue 28 Jul 2026 15:31:26 +0000 Manifest this update: Tue 28 Jul 2026 15:31:26 +0000 Manifest next update: Tue 04 Aug 2026 15:31:26 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: wslMHY8ePcXzBKtkDGeyzdcG6ccN+bbXPtzMdxjWDtU=) 2: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: jY72D9kM4ZreV4v43viz3/fEA3o/FMiAaeH7fUiUeSs=) 3: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: M6QpwrrsCEg6uS0XBq+MJGbdVX3IkfmFKf0zFhM8Oec=) 4: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: ot76bD4Fe2eGS+QL+OB7ESET88ZeiKoIEOY/MT5QHrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12641 (0x3161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Jul 28 15:31:26 2026 GMT Not After : Aug 4 15:31:26 2026 GMT Subject: CN=6a68cb4e-1cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:9f:98:d8:ab:bd:88:bc:7f:a5:79:f9:ef: 9c:bd:f7:82:8d:76:83:ca:03:78:ca:07:07:13:2d: d0:d8:4f:00:d0:b4:13:4d:d6:3e:84:2e:a5:1b:a2: 1e:f2:ee:23:6e:40:b3:1b:dc:f4:3d:b0:cf:95:94: f1:46:17:81:8d:db:2c:5d:a4:0b:92:3d:59:0e:b9: e7:a2:bb:ef:5b:94:19:96:04:fe:85:95:53:df:97: 56:b6:14:10:a2:19:83:9e:6b:95:4c:c6:74:44:03: c2:9b:4d:da:e7:3d:ff:b9:ee:81:74:81:0b:e0:54: 73:a6:3b:7b:57:e8:67:1a:27:0b:a6:f6:e6:ed:ab: 55:fd:1c:52:31:6d:b9:f4:e7:19:74:ff:08:1c:0c: 29:6a:05:5f:3e:d0:93:3c:a7:59:2e:ae:32:34:fc: ae:14:83:89:74:33:2e:f9:ba:94:e2:b8:12:e1:07: d5:2a:8b:db:47:15:fb:e5:81:39:66:74:f4:fa:f4: a7:6c:89:d7:87:27:23:47:84:eb:db:68:9a:dc:52: 84:4f:43:09:0d:99:4e:ce:0f:cd:74:5e:f7:b1:29: 3e:23:c3:6d:ba:cc:73:7f:da:49:a9:72:43:dc:72: 60:5a:e1:bd:0a:d2:f4:5f:18:11:6c:12:13:4e:54: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:23:79:98:1D:AE:F8:1D:50:D8:31:59:11:DD:23:B6:E2:C7:31:3C X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b9:41:df:a2:70:18:b4:1d:2e:0a:3b:66:4c:e0:de:83:72: 18:0d:ac:96:57:99:7b:fc:f8:7c:b7:27:85:d0:81:d2:d3:aa: 33:2a:76:51:cd:f3:b9:a7:e5:bb:7b:06:27:cc:08:48:c7:db: 40:3e:5b:11:56:77:0b:51:61:74:eb:f4:9d:65:a5:66:3c:b2: 0a:27:cb:32:ce:a5:2a:17:c3:88:bb:6c:ca:6f:6a:6a:d0:49: c0:5e:eb:fa:bf:67:21:63:c7:ae:62:61:7e:88:86:ad:4c:55: 72:22:cc:2e:12:7c:cb:d8:bd:56:6f:10:95:9f:e4:6c:72:8b: 5e:6d:67:7f:d5:05:2d:af:5e:32:9b:00:8c:b1:f0:31:a2:b4: f5:2e:d4:b0:6b:dc:19:90:f5:6d:cb:46:17:42:9c:41:58:e5: 26:38:4e:cb:25:40:68:c1:9d:dc:30:16:99:68:b4:14:8c:a8: 0f:ba:1c:a1:2f:91:81:5a:e8:80:bd:56:26:20:e2:c5:19:c7: f4:6b:93:f1:8a:a4:83:19:fc:37:b5:d0:61:c0:37:67:a7:42: ca:56:68:1a:9c:7e:10:98:90:2a:f5:94:1a:89:66:f6:23:f0: b4:de:d6:67:d6:6f:10:b4:c2:7b:a8:c6:3c:4b:bd:c2:72:f3: 6d:d7:fa:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYwNzI4MTUzMTI2WhcNMjYwODA0MTUzMTI2WjAYMRYwFAYD VQQDEw02YTY4Y2I0ZS0xY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FufmNirvYi8f6V5+e+cvfeCjXaDygN4ygcHEy3Q2E8A0LQTTdY+hC6lG6Ie 8u4jbkCzG9z0PbDPlZTxRheBjdssXaQLkj1ZDrnnorvvW5QZlgT+hZVT35dWthQQ ohmDnmuVTMZ0RAPCm03a5z3/ue6BdIEL4FRzpjt7V+hnGicLpvbm7atV/RxSMW25 9OcZdP8IHAwpagVfPtCTPKdZLq4yNPyuFIOJdDMu+bqU4rgS4QfVKovbRxX75YE5 ZnT0+vSnbInXhycjR4Tr22ia3FKET0MJDZlOzg/NdF73sSk+I8Ntusxzf9pJqXJD 3HJgWuG9CtL0XxgRbBITTlRTmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIjeZgd rvgdUNgxWRHdI7bixzE8MB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk7lB36JwGLQdLgo7Zkzg3oNyGA2slleZe/z4fLcnhdCB0tOqMyp2Uc3zuafl u3sGJ8wISMfbQD5bEVZ3C1FhdOv0nWWlZjyyCifLMs6lKhfDiLtsym9qatBJwF7r +r9nIWPHrmJhfoiGrUxVciLMLhJ8y9i9Vm8QlZ/kbHKLXm1nf9UFLa9eMpsAjLHw MaK09S7UsGvcGZD1bctGF0KcQVjlJjhOyyVAaMGd3DAWmWi0FIyoD7ocoS+RgVro gL1WJiDixRnH9GuT8Yqkgxn8N7XQYcA3Z6dCylZoGpx+EJiQKvWUGolm9iPwtN7W Z9ZvELTCe6jGPEu9wnLzbdf6qw== -----END CERTIFICATE-----Generated at Wed Jul 29 09:01:08 2026 by rpki-client