$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft File: oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json) Hash identifier: g4+5xFQQdx9+JUgX81Ahmejd8NiGZajR6Yx2+7FtAjY= Subject key identifier: 23:7B:B2:42:04:6B:24:63:75:FE:FA:05:9E:BC:DE:69:A8:99:BF:BF Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Certificate serial: 1447 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft Manifest number: 1438 Signing time: Tue 28 Jul 2026 16:59:06 +0000 Manifest this update: Tue 28 Jul 2026 16:59:06 +0000 Manifest next update: Tue 04 Aug 2026 16:59:06 +0000 Files and hashes: 1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: yeH258pq/2pHIfnuFVfSMKQ6TRUV3wllm6T7J3WRPeg=) 2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5191 (0x1447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Validity Not Before: Jul 28 16:59:06 2026 GMT Not After : Aug 4 16:59:06 2026 GMT Subject: CN=6a68dfda-6073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:cb:6b:6f:43:e2:99:68:e7:08:84:2d:de: ff:55:5d:d1:88:86:bf:d9:e1:f4:ae:00:94:ac:0c: 1d:52:65:6b:28:01:8e:92:78:46:33:f1:ea:9c:86: 0a:cf:3a:7e:3c:9b:7d:4b:0b:e0:c3:79:9b:36:0a: ac:3b:91:ef:1e:da:0a:40:71:1c:c8:d2:9a:40:6c: 27:a6:3f:68:43:d8:02:5a:40:4c:77:04:9a:a3:e7: 88:28:27:2b:9d:4c:70:4d:fc:09:84:8a:81:3d:24: a9:f6:e5:5a:f4:f8:e1:c2:82:99:f8:98:1b:b8:b3: ec:44:b7:f9:1c:2f:83:bc:17:d9:1d:4a:37:1a:dd: 14:17:c3:a2:9d:06:14:1e:54:bc:b4:dc:8a:6d:1c: 95:a2:0d:df:7f:a3:1e:85:1d:6c:7c:f9:0f:18:3d: a6:f2:48:7c:4a:6b:76:25:01:9b:04:0d:9b:61:c8: 93:57:36:0f:58:fb:0b:0f:b7:ac:df:1d:c5:6b:26: f5:d6:ca:0d:dd:91:bf:7b:4c:5a:2a:cb:7c:61:4a: 00:86:a0:3c:e2:c0:6b:cc:e2:df:5a:78:bc:48:08: 32:c5:0d:e3:0e:c8:5c:a9:01:2d:9f:0e:c0:b5:6d: 11:ca:b8:d4:75:c4:99:e7:c4:ee:00:86:c1:cf:0f: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:B2:42:04:6B:24:63:75:FE:FA:05:9E:BC:DE:69:A8:99:BF:BF X509v3 Authority Key Identifier: keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:51:42:73:2f:73:50:26:af:53:53:64:1f:7b:29:c7:35:fb: a1:05:d2:eb:2d:ef:09:6d:ee:45:6d:8a:2e:e4:27:1b:23:bd: 0b:4c:ef:e5:8e:98:69:86:83:56:4a:84:51:3d:a5:34:03:f3: 21:aa:56:48:a5:f1:10:57:5a:d3:ad:9c:a3:52:02:c4:df:2b: 2f:96:8c:dc:50:0d:ba:ae:26:44:2a:df:1d:d2:f4:39:4f:8c: e0:eb:7a:ad:aa:6d:eb:da:bf:89:cb:fa:39:63:37:97:1e:fd: 61:bc:7e:ea:d4:8c:d8:5e:a2:40:28:dd:6c:0c:65:53:58:17: 8f:e7:d9:6d:5b:81:90:6f:92:7e:e6:8c:04:be:7c:f2:c1:56: 56:76:4c:12:66:e5:89:bd:74:c0:11:5f:d6:05:49:32:84:9e: 88:19:b3:c5:0d:46:59:66:22:a4:af:de:9b:ed:3c:68:02:27: 2b:aa:73:98:4b:32:14:fa:fd:9b:8e:17:69:b0:5b:b1:2f:90: 0d:bf:f9:11:1a:15:7a:e7:dd:af:87:cf:29:08:4b:0f:ce:9c: 91:fc:b9:d0:62:d4:4f:19:e1:30:06:46:bc:90:bd:5f:2a:40: 03:4e:8a:cf:62:72:86:f1:78:43:91:a0:4f:94:dc:a3:4f:e5: 20:37:58:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEExMTFFODFDNEIzRTI3QkRBNkUyNzEyNDk3RjZEQkJB MENGQjA4MjYwHhcNMjYwNzI4MTY1OTA2WhcNMjYwODA0MTY1OTA2WjAYMRYwFAYD VQQDEw02YTY4ZGZkYS02MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9XLa29D4plo5wiELd7/VV3RiIa/2eH0rgCUrAwdUmVrKAGOknhGM/HqnIYK zzp+PJt9Swvgw3mbNgqsO5HvHtoKQHEcyNKaQGwnpj9oQ9gCWkBMdwSao+eIKCcr nUxwTfwJhIqBPSSp9uVa9PjhwoKZ+JgbuLPsRLf5HC+DvBfZHUo3Gt0UF8OinQYU HlS8tNyKbRyVog3ff6MehR1sfPkPGD2m8kh8Smt2JQGbBA2bYciTVzYPWPsLD7es 3x3Fayb11soN3ZG/e0xaKst8YUoAhqA84sBrzOLfWni8SAgyxQ3jDshcqQEtnw7A tW0RyrjUdcSZ58TuAIbBzw/shwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCN7skIE ayRjdf76BZ683mmomb+/MB8GA1UdIwQYMBaAFKER6BxLPie9puJxJJf227oM+wgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8wRDk5MzFCQUEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3Mm00bkVrbF9iYnVnejdD Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29SSG9IRXMtSjcybTRuRWtsX2JidWd6N0NDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8wRDk5MzFCQUExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3 Mm00bkVrbF9iYnVnejdDQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbFFCcy9zUCavU1NkH3spxzX7oQXS6y3vCW3uRW2KLuQnGyO9C0zv5Y6YaYaD VkqEUT2lNAPzIapWSKXxEFda062co1ICxN8rL5aM3FANuq4mRCrfHdL0OU+M4Ot6 rapt69q/icv6OWM3lx79Ybx+6tSM2F6iQCjdbAxlU1gXj+fZbVuBkG+SfuaMBL58 8sFWVnZMEmblib10wBFf1gVJMoSeiBmzxQ1GWWYipK/em+08aAInK6pzmEsyFPr9 m44XabBbsS+QDb/5ERoVeufdr4fPKQhLD86ckfy50GLUTxnhMAZGvJC9XypAA06K z2JyhvF4Q5GgT5Tco0/lIDdYPQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:07 2026 by rpki-client