$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: SqojPs7j9muVoFjdpeLj0owHQo8n3Kqht/9iEQ7EUeg= Subject key identifier: A7:60:D0:DB:17:11:0E:D6:D8:06:C2:89:D0:4A:DF:08:C5:98:09:EC Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 314A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 30EF Signing time: Fri 12 Jun 2026 15:25:39 +0000 Manifest this update: Fri 12 Jun 2026 15:25:39 +0000 Manifest next update: Fri 19 Jun 2026 15:25:39 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: YYrGtw5WNcSpW9WC7VhrNPfmbhB90mSmL/r2MNTpe20=) 2: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: jY72D9kM4ZreV4v43viz3/fEA3o/FMiAaeH7fUiUeSs=) 3: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: ot76bD4Fe2eGS+QL+OB7ESET88ZeiKoIEOY/MT5QHrY=) 4: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: M6QpwrrsCEg6uS0XBq+MJGbdVX3IkfmFKf0zFhM8Oec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12618 (0x314a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Jun 12 15:25:39 2026 GMT Not After : Jun 19 15:25:39 2026 GMT Subject: CN=6a2c24f3-0d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:cc:a3:1e:3f:1c:0a:f6:b8:a6:96:dd:67: 23:c8:fe:32:74:6c:56:15:ed:8b:2e:25:41:d9:26: 82:db:e9:e4:bb:6c:28:a9:f7:e3:01:eb:25:f3:11: 7c:13:e9:09:df:da:fb:9b:b3:a3:54:f3:68:ce:01: 89:5b:c1:bf:d2:d6:f7:1b:08:fb:27:37:80:c3:52: 4a:f7:15:06:ce:30:9b:0d:5b:65:af:a0:1f:d0:2f: 54:07:88:a4:0d:0c:3b:b9:3f:bd:b9:af:76:9f:b3: 2f:2b:9a:39:c5:c0:d3:93:1e:42:05:09:f5:c0:c9: ed:c4:f0:60:46:d7:ef:e5:6f:03:f2:f2:0b:e3:79: cf:da:c1:aa:7f:49:87:b7:dd:e5:69:26:d9:72:98: f9:15:5e:57:0a:16:fd:2f:7b:fd:31:d9:b4:4c:79: ed:09:0d:78:ff:b2:69:58:b3:db:3f:90:a3:b4:ba: db:0d:f5:3f:ea:e9:ee:a5:c2:0b:ea:98:53:ea:db: 3c:52:16:19:2e:d3:23:06:d5:b3:c1:7e:c4:66:28: 5a:8b:59:80:f9:73:7a:28:d3:bd:a3:85:34:c5:58: f2:b9:18:e2:1c:d8:fd:60:6b:a6:8a:80:cd:ab:8a: 6a:51:10:7d:a5:31:02:0f:d1:76:df:8a:93:4e:f7: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:D0:DB:17:11:0E:D6:D8:06:C2:89:D0:4A:DF:08:C5:98:09:EC X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7b:10:ee:c0:16:40:c6:29:cb:45:74:37:72:9f:e4:4d:f7: 6f:ae:43:99:b8:55:93:e8:70:ec:a2:5a:0c:4f:80:5c:61:91: c8:6b:ad:f6:b7:de:2c:77:39:6f:03:95:69:0d:ee:cb:0d:f1: 25:53:18:52:c8:6f:cc:c5:61:9b:45:15:3f:b8:c2:54:0b:85: 2d:78:ed:ab:92:8c:c4:9d:d6:66:bf:14:39:82:50:86:16:ff: 1e:f9:58:ea:8b:22:5e:89:ca:74:af:af:4c:f3:fd:fb:94:76: 16:50:4a:52:75:4f:22:c1:ef:9f:fd:4d:78:44:31:95:30:ed: a6:9d:88:3a:c3:d0:a4:d3:96:3e:07:ed:b2:ae:bd:3c:e5:d4: 17:ff:89:35:29:7a:43:37:48:9a:fd:66:e7:d0:04:58:72:6d: 75:5e:aa:06:b9:63:3c:d9:a0:43:44:21:4b:a2:b3:fc:fb:3f: e6:8c:e7:22:75:3c:ec:09:d6:0b:d0:be:8c:d0:96:8e:bb:94: 51:dd:41:d7:f1:f0:42:68:22:95:93:6a:b5:c1:70:6b:af:d3: fa:a2:29:ae:d7:8e:5b:9d:8d:07:79:9b:9c:09:f5:07:a8:f2: 6e:6f:57:96:96:c0:ef:ea:fc:93:0d:45:9f:ff:7b:13:c3:9a: 3a:87:84:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYwNjEyMTUyNTM5WhcNMjYwNjE5MTUyNTM5WjAYMRYwFAYD VQQDEw02YTJjMjRmMy0wZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0DMox4/HAr2uKaW3WcjyP4ydGxWFe2LLiVB2SaC2+nku2woqffjAesl8xF8 E+kJ39r7m7OjVPNozgGJW8G/0tb3Gwj7JzeAw1JK9xUGzjCbDVtlr6Af0C9UB4ik DQw7uT+9ua92n7MvK5o5xcDTkx5CBQn1wMntxPBgRtfv5W8D8vIL43nP2sGqf0mH t93laSbZcpj5FV5XChb9L3v9Mdm0THntCQ14/7JpWLPbP5CjtLrbDfU/6unupcIL 6phT6ts8UhYZLtMjBtWzwX7EZihai1mA+XN6KNO9o4U0xVjyuRjiHNj9YGumioDN q4pqURB9pTECD9F234qTTvetWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdg0NsX EQ7W2AbCidBK3wjFmAnsMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbXsQ7sAWQMYpy0V0N3Kf5E33b65DmbhVk+hw7KJaDE+AXGGRyGut9rfeLHc5 bwOVaQ3uyw3xJVMYUshvzMVhm0UVP7jCVAuFLXjtq5KMxJ3WZr8UOYJQhhb/HvlY 6osiXonKdK+vTPP9+5R2FlBKUnVPIsHvn/1NeEQxlTDtpp2IOsPQpNOWPgftsq69 POXUF/+JNSl6QzdImv1m59AEWHJtdV6qBrljPNmgQ0QhS6Kz/Ps/5oznInU87AnW C9C+jNCWjruUUd1B1/HwQmgilZNqtcFwa6/T+qIprteOW52NB3mbnAn1B6jybm9X lpbA7+r8kw1Fn/97E8OaOoeEsA== -----END CERTIFICATE-----Generated at Sun Jun 14 01:35:27 2026 by rpki-client