$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: Jjzrp9wiaLi+UP4oGIf2cmkVolldbiXG6G9nJGQ+mbM= Subject key identifier: 2E:EA:74:20:62:90:4B:B3:09:F5:46:8A:81:40:21:BC:1F:8B:0F:8B Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: 012B Signing time: Tue 28 Jul 2026 14:16:18 +0000 Manifest this update: Tue 28 Jul 2026 14:16:18 +0000 Manifest next update: Tue 04 Aug 2026 14:16:18 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: 5WlYQFyYWwfONFW4/0ymzVMUAWZ1nbFQ7d/JBP9SmbQ=) 2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg=) 3: 8AE793B2E9E311F0A43C19FF656F56BC.roa (hash: iLjsYldebmEc4jQ39cKvj356cAs2Ip03tkyos/Cg+/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Jul 28 14:16:18 2026 GMT Not After : Aug 4 14:16:18 2026 GMT Subject: CN=6a68b9b2-8db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:3c:3c:d8:eb:fa:c6:8d:38:e6:2b:4e:9a: 6a:bf:51:0e:bc:2d:13:77:e7:28:c4:d0:bc:4a:b3: da:64:01:d8:14:59:b9:35:f3:93:97:a4:3b:36:0f: b7:15:30:b8:87:4b:cb:a9:4d:fa:a7:a2:5d:99:05: 82:3a:a4:6e:bb:54:69:26:6a:03:f1:af:a2:f4:74: aa:9c:dc:1f:a1:c9:c1:df:20:40:f8:cf:4c:5f:76: c9:52:d1:80:bf:b7:35:d4:7f:3f:94:e0:8a:31:31: 95:15:91:68:05:3a:47:06:57:b5:da:d8:f9:79:64: 3d:82:c9:7e:c7:e1:e4:7c:18:33:1c:a6:d7:26:7c: a6:96:fc:ef:04:db:9f:1f:69:34:7a:9c:4a:cc:65: b4:bd:b6:d2:c2:b7:7d:95:9f:36:51:78:f6:26:ea: f9:85:ab:63:0b:c1:bf:e9:e6:27:aa:cd:3b:4b:ce: 57:a8:0a:f9:5e:87:49:f6:82:e5:1d:33:79:c9:53: 64:97:a7:18:dc:94:f2:dc:cc:27:d9:ae:8c:4f:61: 0e:17:79:76:c7:09:51:14:64:60:d3:35:38:af:66: 43:55:b7:f1:3e:ca:84:10:c9:cf:c4:85:6a:f6:8d: 9b:1a:06:63:81:ca:c4:77:e7:0a:76:3b:cc:a5:41: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:74:20:62:90:4B:B3:09:F5:46:8A:81:40:21:BC:1F:8B:0F:8B X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:fa:70:87:82:69:b8:92:69:42:93:62:6b:dd:1e:2e:2f:ae: 80:d3:14:50:76:51:6b:24:b1:a4:94:c0:2f:41:60:80:6b:58: 3f:e0:bb:12:04:c6:8b:94:40:eb:04:85:b4:9a:66:02:b4:1f: aa:82:2b:b1:80:9a:d9:ca:d1:c6:45:4a:e4:5b:e3:0a:7b:5d: 2c:42:c1:d3:ef:a5:15:f3:27:9a:f7:3e:ee:fc:b6:6e:5b:04: 40:5a:c0:6f:48:88:2a:f3:f6:4f:47:86:7c:1a:63:d9:88:42: c8:77:b5:21:d8:78:f6:12:c6:bb:62:d6:c9:b9:34:25:fb:fb: 2f:f4:c5:a4:58:7b:a6:f5:2d:99:fe:cb:b5:fe:6a:2b:8f:40: 46:4a:ab:4a:5a:1b:0c:5a:33:10:cb:c3:4b:d4:89:f2:38:3f: 09:ab:3c:53:04:6d:a3:a7:e3:51:0d:d5:bb:a8:d5:cf:a4:14: 69:0f:27:3d:50:27:61:54:06:44:4d:84:5d:2f:eb:63:48:4e: 6a:c1:da:af:03:ee:98:77:0e:9d:93:de:2e:b8:9b:ba:bf:7f: 1a:d8:63:52:39:e8:dd:a8:14:16:3c:ec:36:fd:64:64:15:0e: 64:f9:d8:b6:d0:6d:92:9e:28:91:69:09:87:48:8d:4d:3e:fa: 32:25:8c:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD MkExMEM5MjMwHhcNMjYwNzI4MTQxNjE4WhcNMjYwODA0MTQxNjE4WjAYMRYwFAYD VQQDEw02YTY4YjliMi04ZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuc8PNjr+saNOOYrTppqv1EOvC0Td+coxNC8SrPaZAHYFFm5NfOTl6Q7Ng+3 FTC4h0vLqU36p6JdmQWCOqRuu1RpJmoD8a+i9HSqnNwfocnB3yBA+M9MX3bJUtGA v7c11H8/lOCKMTGVFZFoBTpHBle12tj5eWQ9gsl+x+HkfBgzHKbXJnymlvzvBNuf H2k0epxKzGW0vbbSwrd9lZ82UXj2Jur5hatjC8G/6eYnqs07S85XqAr5XodJ9oLl HTN5yVNkl6cY3JTy3Mwn2a6MT2EOF3l2xwlRFGRg0zU4r2ZDVbfxPsqEEMnPxIVq 9o2bGgZjgcrEd+cKdjvMpUF4dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7qdCBi kEuzCfVGioFAIbwfiw+LMB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS8zNUVEQTkyRUNGMEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5 Y21TazFYN3BxZFRDb1F5U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkPpwh4JpuJJpQpNia90eLi+ugNMUUHZRaySxpJTAL0FggGtYP+C7EgTGi5RA 6wSFtJpmArQfqoIrsYCa2crRxkVK5FvjCntdLELB0++lFfMnmvc+7vy2blsEQFrA b0iIKvP2T0eGfBpj2YhCyHe1Idh49hLGu2LWybk0Jfv7L/TFpFh7pvUtmf7Ltf5q K49ARkqrSlobDFozEMvDS9SJ8jg/Cas8UwRto6fjUQ3Vu6jVz6QUaQ8nPVAnYVQG RE2EXS/rY0hOasHarwPumHcOnZPeLribur9/GthjUjno3agUFjzsNv1kZBUOZPnY ttBtkp4okWkJh0iNTT76MiWMKA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:27:31 2026 by rpki-client