$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft File: Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json) Hash identifier: oymA5LWj+ptrO2+010KBdGYG0hG6Ued2FVUIsQpqV0A= Subject key identifier: 3D:CD:87:CE:EA:27:2B:14:D6:40:49:5C:A6:BA:63:F9:3D:05:0A:6F Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Certificate serial: 3660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft Manifest number: 35E7 Signing time: Tue 28 Jul 2026 14:51:17 +0000 Manifest this update: Tue 28 Jul 2026 14:51:16 +0000 Manifest next update: Tue 04 Aug 2026 14:51:16 +0000 Files and hashes: 1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: /LfY9RgUKZ71qZKVrDEnCoX/aqswMGE7s3RoGJbQpl0=) 2: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: bGRZ0FpspSCf0cAveUKjR/NLCR8lXup6exlYiK4KDOA=) 3: 3556F236591D11F1B1E1CE2EC9833773.roa (hash: xZnAAlTCl+JT5OotaR0JxL8HG25CqlkoxYP53N4yaTg=) 4: 6F1612BE562511EB9470B150C4F9AE02.roa (hash: VN3fbgbN+VB5jjHGJ778LsC3bD0h86H1GfKAiCzDGbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13920 (0x3660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7 Validity Not Before: Jul 28 14:51:16 2026 GMT Not After : Aug 4 14:51:16 2026 GMT Subject: CN=6a68c1e4-8b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:89:34:05:97:3d:b7:11:c7:63:2c:3d:5f: 76:92:b4:a1:17:d5:65:e2:29:dc:02:53:b9:0e:5c: 67:8f:d1:6a:6a:8c:c6:84:f6:ac:90:f0:c2:23:e6: 01:d3:b6:a6:cf:92:94:37:60:f2:6c:0e:96:55:60: 60:58:70:5d:ff:02:b7:cc:65:88:41:ad:57:11:8e: 1c:15:e2:a3:d8:2a:e9:d0:42:2a:e9:e7:4c:0d:a8: 00:d3:2f:41:46:a8:d6:80:f0:3e:9d:2d:94:78:e5: 01:1b:62:8c:71:b9:09:e8:10:e7:87:55:ca:0b:6c: 8f:1d:94:5d:06:01:83:69:78:56:41:fa:88:72:f9: b1:08:48:85:f9:e0:d3:95:11:e7:92:4a:96:f2:73: a1:c1:ce:46:46:3c:cb:a8:94:08:3f:85:a3:f2:b2: 14:fb:9e:fa:2a:36:b3:5c:78:47:c9:f5:1e:f7:85: c2:34:f7:70:c7:d5:66:83:2f:2e:ed:03:64:d6:fe: 49:4c:3d:4c:6b:9c:2f:cd:41:97:93:ba:a8:da:01: 0c:48:84:ff:ff:19:70:f0:26:02:09:b5:58:71:cd: 53:9e:bb:f6:1c:1a:f6:2a:6f:ad:7b:9f:bc:58:f3: e6:11:15:af:ea:4f:9b:4d:63:cc:bb:2a:50:81:fb: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CD:87:CE:EA:27:2B:14:D6:40:49:5C:A6:BA:63:F9:3D:05:0A:6F X509v3 Authority Key Identifier: keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2b:09:aa:38:40:da:d1:b4:f2:68:6e:ae:eb:34:4d:d5:c5: a1:9a:d5:4f:3a:bd:25:9a:39:71:cb:6a:a4:a8:c9:ff:99:90: 1e:4d:12:2e:b1:fa:03:56:6e:32:64:c4:41:98:8e:e0:55:63: 3f:b7:b9:67:92:2d:42:56:3a:c6:f8:af:41:46:6d:2d:1f:2d: 7e:9f:e0:b4:dc:fa:d5:83:f0:08:80:98:d5:d0:a4:cd:4e:81: 75:f8:75:0a:3a:1d:37:96:54:1c:62:6a:dd:25:48:1d:30:b8: de:b5:17:57:f4:93:3c:7f:2d:0b:54:92:81:75:48:2c:21:3b: 1c:cc:13:35:14:6c:d0:3b:e8:c8:d8:09:75:d3:7c:01:57:23: 38:ef:71:e3:53:44:a4:e5:7b:d4:b0:47:ed:77:34:0b:aa:c9: cc:d4:9b:ae:19:a9:b4:66:e3:2a:1d:9f:b8:63:1c:ce:e4:1c: bd:69:f5:51:e3:4f:f9:c9:b4:b2:bc:ea:0b:82:90:d9:fd:d0: 5f:4b:d2:83:7d:e2:a2:00:4d:ca:b7:39:b1:86:9b:4d:69:e1: 69:67:8b:dc:75:a7:1e:9b:a9:a2:39:5b:c4:32:d1:3d:df:40: c1:ac:06:f9:07:7e:51:8e:1d:9e:83:04:fa:ea:8a:25:b0:55: 39:d2:7e:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMDYxMTAvBgNVBAUTKDNBQUY4MEVBOTdFOTlCOTUyNUIzM0JDMTMzNUJCMDk1 QzJEMjc4QTcwHhcNMjYwNzI4MTQ1MTE2WhcNMjYwODA0MTQ1MTE2WjAYMRYwFAYD VQQDEw02YTY4YzFlNC04YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+SJNAWXPbcRx2MsPV92krShF9Vl4incAlO5Dlxnj9FqaozGhPaskPDCI+YB 07amz5KUN2DybA6WVWBgWHBd/wK3zGWIQa1XEY4cFeKj2Crp0EIq6edMDagA0y9B RqjWgPA+nS2UeOUBG2KMcbkJ6BDnh1XKC2yPHZRdBgGDaXhWQfqIcvmxCEiF+eDT lRHnkkqW8nOhwc5GRjzLqJQIP4Wj8rIU+576KjazXHhHyfUe94XCNPdwx9Vmgy8u 7QNk1v5JTD1Ma5wvzUGXk7qo2gEMSIT//xlw8CYCCbVYcc1Tnrv2HBr2Km+te5+8 WPPmERWv6k+bTWPMuypQgfsRBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3Nh87q JysU1kBJXKa6Y/k9BQpvMB8GA1UdIwQYMBaAFDqvgOqX6ZuVJbM7wTNbsJXC0nin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYwNi83NkUxQzQ3RTFE OTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01VWxzenZCTTF1d2xjTFNl S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xLUE2cGZwbTVVbHN6dkJNMXV3bGNMU2VLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYwNi83NkUxQzQ3RTFEOTUxMUUyQkU1OTVFN0QwOEIwMkNEMi9PcS1BNnBmcG01 VWxzenZCTTF1d2xjTFNlS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPysJqjhA2tG08mhurus0TdXFoZrVTzq9JZo5cctqpKjJ/5mQHk0SLrH6A1Zu MmTEQZiO4FVjP7e5Z5ItQlY6xvivQUZtLR8tfp/gtNz61YPwCICY1dCkzU6Bdfh1 CjodN5ZUHGJq3SVIHTC43rUXV/STPH8tC1SSgXVILCE7HMwTNRRs0DvoyNgJddN8 AVcjOO9x41NEpOV71LBH7Xc0C6rJzNSbrhmptGbjKh2fuGMczuQcvWn1UeNP+cm0 srzqC4KQ2f3QX0vSg33iogBNyrc5sYabTWnhaWeL3HWnHpupojlbxDLRPd9AwawG +Qd+UY4dnoME+uqKJbBVOdJ+vw== -----END CERTIFICATE-----Generated at Wed Jul 29 03:24:58 2026 by rpki-client