$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: 0I3Y713sNkWIg31y1u64qEOuM3D7X+fvrVxMqikojtU= Subject key identifier: 95:8A:55:41:3D:BE:85:2A:EF:BC:03:AB:19:6B:D6:FD:7B:C5:43:66 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 0229 Signing time: Mon 27 Jul 2026 04:13:52 +0000 Manifest this update: Mon 27 Jul 2026 04:13:52 +0000 Manifest next update: Mon 03 Aug 2026 04:13:52 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: PBXiNHv1rxB73LvgHdVwBgh+arCrSMOnOOfZ/sONKd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Jul 27 04:13:52 2026 GMT Not After : Aug 3 04:13:52 2026 GMT Subject: CN=6a66db00-8292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:14:6b:63:6b:9c:e0:1b:20:09:bc:b5:eb: 0d:16:a1:e8:e6:e5:51:3f:b0:fc:06:03:06:25:c2: 9f:0a:df:63:c8:7e:d7:f1:09:c1:3c:b2:04:b0:31: 32:2c:db:92:34:56:36:b5:d3:a2:7f:b8:c2:1b:da: 44:39:fc:b1:58:c3:73:09:36:7e:18:0e:26:85:2f: d9:a2:75:59:6b:d9:c2:3f:29:a2:48:27:a9:bb:c9: df:3c:e1:7b:5b:21:46:cd:54:c1:06:db:99:12:9a: a0:d8:97:2c:5c:0b:fa:9a:47:3c:88:be:52:ed:71: bc:c3:a4:f7:12:9f:f3:24:3e:ea:b6:85:b7:ce:08: 23:fa:5d:17:94:62:9b:75:c8:d0:3d:01:3c:a4:81: b0:20:41:0b:d8:6a:f7:d3:a6:8b:46:c0:ae:e7:45: 9e:3a:c6:49:1e:b7:7b:71:26:bb:56:7a:7f:d9:e6: 00:8f:86:24:74:5d:6a:7d:6c:dd:e0:25:02:f0:95: 56:b5:0a:db:0e:6a:4c:e6:f0:df:01:18:91:75:d7: 37:08:52:8c:72:09:6b:bb:cf:0b:e1:86:4d:23:9f: 15:44:dc:ca:76:f0:bd:e6:33:63:57:04:cf:91:82: f8:b9:ff:25:87:93:0f:f1:53:a0:04:68:54:31:6a: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8A:55:41:3D:BE:85:2A:EF:BC:03:AB:19:6B:D6:FD:7B:C5:43:66 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:40:4e:0a:46:6f:15:72:2c:93:e5:27:24:e8:8b:7f:1b:7d: 6c:e8:8d:10:69:6b:e3:39:d6:ce:ec:2f:4b:4b:d1:c2:38:72: bb:27:4e:0e:e1:33:7b:36:f5:2d:8a:c7:93:ce:23:bf:9b:99: ba:89:06:70:72:0e:68:3a:e2:91:9b:66:8b:40:48:40:4b:4a: a5:c3:ca:c8:c0:76:2f:64:ed:58:65:02:8e:17:de:32:35:14: 48:bb:d3:68:4f:03:c2:f6:b5:a0:93:13:b9:77:13:74:dd:16: a3:22:56:9a:03:5f:96:ae:6d:0d:b4:98:b4:c7:2b:65:91:af: 36:21:fa:76:e4:12:af:5c:a1:30:a5:a6:91:ac:f2:46:5e:46: ad:1d:ee:30:d2:c5:35:25:4c:6e:f1:9e:09:91:76:7e:0a:e4: 1c:10:31:cd:a7:1b:82:fc:6c:f5:be:ca:30:79:a5:83:61:2e: 8f:93:6c:94:04:8f:fb:f3:6d:23:4f:9a:3a:9a:4e:5f:90:46: 14:32:3b:7c:a4:da:02:62:83:03:5c:d7:c9:74:6a:28:a6:df: ff:1d:95:67:8c:05:c8:67:c3:d5:f8:c9:2e:6d:93:57:48:5e: 65:43:90:58:14:40:89:39:45:fd:de:2c:c3:52:82:34:65:04: 80:ba:c8:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjYwNzI3MDQxMzUyWhcNMjYwODAzMDQxMzUyWjAYMRYwFAYD VQQDEw02YTY2ZGIwMC04MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA4Ua2NrnOAbIAm8tesNFqHo5uVRP7D8BgMGJcKfCt9jyH7X8QnBPLIEsDEy LNuSNFY2tdOif7jCG9pEOfyxWMNzCTZ+GA4mhS/ZonVZa9nCPymiSCepu8nfPOF7 WyFGzVTBBtuZEpqg2JcsXAv6mkc8iL5S7XG8w6T3Ep/zJD7qtoW3zggj+l0XlGKb dcjQPQE8pIGwIEEL2Gr306aLRsCu50WeOsZJHrd7cSa7Vnp/2eYAj4YkdF1qfWzd 4CUC8JVWtQrbDmpM5vDfARiRddc3CFKMcglru88L4YZNI58VRNzKdvC95jNjVwTP kYL4uf8lh5MP8VOgBGhUMWoSEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWKVUE9 voUq77wDqxlr1v17xUNmMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0BOCkZvFXIsk+UnJOiLfxt9bOiNEGlr4znWzuwvS0vRwjhyuydODuEzezb1 LYrHk84jv5uZuokGcHIOaDrikZtmi0BIQEtKpcPKyMB2L2TtWGUCjhfeMjUUSLvT aE8Dwva1oJMTuXcTdN0WoyJWmgNflq5tDbSYtMcrZZGvNiH6duQSr1yhMKWmkazy Rl5GrR3uMNLFNSVMbvGeCZF2fgrkHBAxzacbgvxs9b7KMHmlg2Euj5NslASP+/Nt I0+aOppOX5BGFDI7fKTaAmKDA1zXyXRqKKbf/x2VZ4wFyGfD1fjJLm2TV0heZUOQ WBRAiTlF/d4sw1KCNGUEgLrI6A== -----END CERTIFICATE-----Generated at Tue Jul 28 23:37:20 2026 by rpki-client