$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json) Hash identifier: fvh+2Eb5YsXHUs7180WZyghH9wT7xibOkcM4kRVyvNY= Subject key identifier: 34:22:47:C7:58:DB:8E:A8:03:AE:85:72:16:45:11:A6:C0:62:B1:C2 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft Manifest number: 02A4 Signing time: Mon 27 Jul 2026 02:55:30 +0000 Manifest this update: Mon 27 Jul 2026 02:55:29 +0000 Manifest next update: Mon 03 Aug 2026 02:55:29 +0000 Files and hashes: 1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: JyatrRnEBjc/yULHbcQQ5awIc0Cm9mCGhZOqGrrsE1Q=) 2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: Ouit03LRtJZqOFfBSglxXn5xGezeH2cCBVrluC7GA64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Jul 27 02:55:29 2026 GMT Not After : Aug 3 02:55:29 2026 GMT Subject: CN=6a66c8a2-b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:23:dc:1e:81:b2:65:40:01:55:0a:f8:f0: 5b:bd:f4:5b:3d:09:be:c3:f9:19:a0:3b:f4:3e:7c: 7f:3f:eb:1f:31:ca:60:d7:5a:42:a4:80:1b:39:5e: 19:6e:9f:da:d6:dc:6e:2e:bc:3c:94:2c:e9:5d:9d: 3f:60:ac:64:32:91:31:b8:b2:3c:80:ec:45:3a:ff: 7b:60:33:f0:24:0e:a9:e5:63:7f:ce:b2:22:39:0e: 64:a8:08:9a:38:6c:36:0a:78:18:19:5e:fa:b5:98: a4:c2:d6:39:bc:04:57:fc:1d:59:ba:49:79:72:83: 06:e9:29:11:57:a8:e5:fa:33:86:2b:23:34:ea:78: 49:4d:2b:e8:ee:b9:9d:9f:3e:39:f7:23:1c:d0:bf: 7d:e8:a5:f6:f1:91:17:a9:e1:b1:00:d0:3d:6a:8f: 2f:98:f2:b7:68:98:e1:79:d1:f7:1a:ff:af:35:df: ec:9c:ed:04:bd:d3:3b:eb:3a:fc:c6:cb:37:bf:46: 19:33:b7:d4:f9:5d:75:ce:79:12:4b:3e:1b:d7:5a: 34:ab:c8:42:90:82:7a:07:a4:d2:38:ad:b4:18:0d: b8:08:58:5f:56:a3:cd:16:17:dc:5c:e9:da:4d:24: ba:29:87:16:10:a6:eb:b0:4f:c7:41:7b:be:d9:2b: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:22:47:C7:58:DB:8E:A8:03:AE:85:72:16:45:11:A6:C0:62:B1:C2 X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:76:df:00:7e:42:fb:7a:c3:51:d6:25:cf:fa:7c:51:88:76: 5a:6a:c6:8c:28:34:76:8a:2d:83:57:9a:bb:a0:65:c9:3d:bb: 9b:c7:2e:2b:cd:5a:9e:b0:2a:30:77:21:19:0a:3e:40:ec:88: 1f:7d:ef:60:58:36:3a:0f:e0:d0:9e:1d:d9:d8:92:da:26:03: b6:a9:44:6a:82:45:7a:b9:2e:6e:a8:7a:9b:90:df:e2:03:5a: 72:de:f6:24:55:a8:4f:e1:a3:2f:62:24:f3:76:4e:e8:ea:fc: ae:e2:bf:81:98:94:48:9e:c3:16:da:0e:ec:c7:5a:2b:11:87: ed:f7:f5:bb:9b:66:89:fa:3a:65:0b:21:96:c2:5d:2d:a5:1b: 0e:0f:fd:db:48:02:76:c8:82:1d:e3:a1:4c:89:7a:04:a5:12: 13:f8:e5:25:b3:c3:ce:ee:09:2b:52:a9:73:72:97:38:8f:09: e8:1d:56:a0:e9:b4:5b:41:43:11:1c:20:32:ed:7d:6a:7f:5e: fd:9d:25:95:10:3f:e9:2b:98:70:86:25:22:70:3a:f6:26:bc: b5:63:b4:56:fd:c7:85:52:4f:f7:81:cb:0f:ea:d2:9c:af:d1: 9f:f8:de:a2:7a:f0:5a:9f:02:ac:d2:84:cf:79:ab:62:9e:92: f1:80:85:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjYwNzI3MDI1NTI5WhcNMjYwODAzMDI1NTI5WjAYMRYwFAYD VQQDEw02YTY2YzhhMi1iMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDwj3B6BsmVAAVUK+PBbvfRbPQm+w/kZoDv0Pnx/P+sfMcpg11pCpIAbOV4Z bp/a1txuLrw8lCzpXZ0/YKxkMpExuLI8gOxFOv97YDPwJA6p5WN/zrIiOQ5kqAia OGw2CngYGV76tZikwtY5vARX/B1Zukl5coMG6SkRV6jl+jOGKyM06nhJTSvo7rmd nz459yMc0L996KX28ZEXqeGxANA9ao8vmPK3aJjhedH3Gv+vNd/snO0EvdM76zr8 xss3v0YZM7fU+V11znkSSz4b11o0q8hCkIJ6B6TSOK20GA24CFhfVqPNFhfcXOna TSS6KYcWEKbrsE/HQXu+2SujFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQiR8dY 246oA66FchZFEabAYrHCMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ4Qi81RjExRTAyQTdGNzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlL bFl1VDJ2ajBzbklCV3cyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFnbfAH5C+3rDUdYlz/p8UYh2WmrGjCg0dootg1eau6BlyT27m8cuK81anrAq MHchGQo+QOyIH33vYFg2Og/g0J4d2diS2iYDtqlEaoJFerkubqh6m5Df4gNact72 JFWoT+GjL2Ik83ZO6Or8ruK/gZiUSJ7DFtoO7MdaKxGH7ff1u5tmifo6ZQshlsJd LaUbDg/920gCdsiCHeOhTIl6BKUSE/jlJbPDzu4JK1Kpc3KXOI8J6B1WoOm0W0FD ERwgMu19an9e/Z0llRA/6SuYcIYlInA69ia8tWO0Vv3HhVJP94HLD+rSnK/Rn/je onrwWp8CrNKEz3mrYp6S8YCFUw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:34 2026 by rpki-client