$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: xLMsW+Gn4huPX+LsdrisAr1oX5ZBQ+i7CRMn5gWlXPs= Subject key identifier: 25:57:A7:07:42:02:BB:E2:EC:68:B9:A0:0A:BD:D3:85:AE:BD:C9:06 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 01FA Signing time: Wed 29 Jul 2026 04:34:56 +0000 Manifest this update: Wed 29 Jul 2026 04:34:56 +0000 Manifest next update: Wed 05 Aug 2026 04:34:56 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: OXJswaXAEh11uOYnYsti8SsxKOYdFve+c+L5Ck673xM=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 04:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Jul 29 04:34:56 2026 GMT Not After : Aug 5 04:34:56 2026 GMT Subject: CN=6a6982f0-92b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:8b:af:a1:55:72:a6:24:78:0b:7e:81:e9: c6:33:01:b9:71:a7:e8:13:69:07:c0:65:bc:a8:45: f1:6f:ad:11:4f:44:e0:e6:74:9f:c4:03:28:5e:f7: 98:3d:1e:80:52:da:99:fa:7a:67:a3:8a:4e:fa:12: e8:3a:86:5b:73:a2:b0:f6:6d:26:a8:82:d6:95:5b: b6:92:42:25:6a:98:c6:d8:ac:75:2b:28:93:3f:7c: ba:f8:b0:87:98:a7:77:14:1e:2c:8e:18:1d:cf:c2: da:ef:6d:21:5a:31:a7:78:28:c6:94:77:c7:8f:10: 4a:de:b3:e2:f4:38:63:a5:fc:a8:1b:dc:2e:fa:76: 2e:fb:69:7a:3e:32:6f:78:f7:df:76:61:00:c3:be: 7a:1f:1f:41:7e:05:93:35:ff:73:59:8d:7f:0e:fb: 3d:ef:ad:92:b2:76:8e:b7:22:48:c6:ae:bc:d3:ac: 2d:d7:6e:ad:b7:c6:ee:70:43:b4:e6:cb:37:de:b8: 5e:e2:df:f5:36:f6:ca:24:e0:d4:2a:98:d2:ed:ca: b0:63:25:ec:a8:0a:ce:eb:fe:fa:0d:2e:2b:9f:68: b7:d2:73:db:ac:2f:6c:df:62:c6:b5:bd:9c:9b:da: 15:00:b7:91:d8:ee:02:02:e3:d5:9a:3e:12:62:8d: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:A7:07:42:02:BB:E2:EC:68:B9:A0:0A:BD:D3:85:AE:BD:C9:06 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e5:ab:8c:a0:e8:04:fb:fc:6b:96:59:41:ea:49:ac:1b:80: bf:f9:bb:4d:14:af:50:54:41:64:aa:73:92:fb:c4:a7:3a:48: cd:e1:ff:dc:2a:2c:8b:bf:07:b9:3c:7c:4b:26:62:c2:68:00: 8f:3d:88:ba:9c:df:87:d1:d5:b6:70:32:54:2f:3d:84:77:c8: 55:20:8d:0a:15:3d:fb:66:fe:73:ba:42:06:38:5b:a2:bf:37: 54:57:46:e4:37:e8:f4:13:c3:77:c6:b6:77:d3:7d:12:ed:18: cc:7c:04:b9:68:7c:d6:8b:51:c2:93:bc:36:8a:63:5a:35:97: 0a:19:25:8f:4d:55:89:53:e7:45:19:7c:5b:be:9b:78:ee:f5: 77:ea:83:c1:b5:18:59:29:2d:69:97:b8:bf:8d:af:34:c5:f8: 9b:b0:65:72:f4:8f:b3:8d:2c:62:fa:3c:7d:29:be:ed:67:af: 8e:4a:4a:32:50:94:0d:41:bc:fe:ec:cf:d9:9b:f8:53:aa:7b: be:a2:2f:10:c1:cf:fa:d9:52:86:34:5f:cf:98:15:33:eb:51: 81:fe:ab:fe:9b:cb:ce:e9:23:75:de:e3:5d:0a:b7:7b:b6:04: 30:6c:f2:9c:fe:b1:1a:a7:5d:e1:76:a3:49:d9:b1:fe:54:64: 10:65:fe:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYwNzI5MDQzNDU2WhcNMjYwODA1MDQzNDU2WjAYMRYwFAYD VQQDEw02YTY5ODJmMC05MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8WLr6FVcqYkeAt+genGMwG5cafoE2kHwGW8qEXxb60RT0Tg5nSfxAMoXveY PR6AUtqZ+npno4pO+hLoOoZbc6Kw9m0mqILWlVu2kkIlapjG2Kx1KyiTP3y6+LCH mKd3FB4sjhgdz8La720hWjGneCjGlHfHjxBK3rPi9DhjpfyoG9wu+nYu+2l6PjJv ePffdmEAw756Hx9BfgWTNf9zWY1/Dvs9762SsnaOtyJIxq6806wt126tt8bucEO0 5ss33rhe4t/1NvbKJODUKpjS7cqwYyXsqArO6/76DS4rn2i30nPbrC9s32LGtb2c m9oVALeR2O4CAuPVmj4SYo0Y3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVXpwdC Arvi7Gi5oAq904WuvckGMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADOWrjKDoBPv8a5ZZQepJrBuAv/m7TRSvUFRBZKpzkvvEpzpIzeH/3Cosi78H uTx8SyZiwmgAjz2Iupzfh9HVtnAyVC89hHfIVSCNChU9+2b+c7pCBjhbor83VFdG 5Dfo9BPDd8a2d9N9Eu0YzHwEuWh81otRwpO8NopjWjWXChklj01ViVPnRRl8W76b eO71d+qDwbUYWSktaZe4v42vNMX4m7BlcvSPs40sYvo8fSm+7WevjkpKMlCUDUG8 /uzP2Zv4U6p7vqIvEMHP+tlShjRfz5gVM+tRgf6r/pvLzukjdd7jXQq3e7YEMGzy nP6xGqdd4XajSdmx/lRkEGX+Rg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:51:40 2026 by rpki-client