$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft File: onKsr-j6pPKpcApvwRQlkIx0PUs.mft (raw, json) Hash identifier: 55Gv8Y0Y7ZG9sfuLrcvAn29/fzzkb16yzmLO8vjMZw4= Subject key identifier: DD:66:15:02:31:85:C3:8E:F6:31:B6:D3:29:91:05:CB:08:85:34:D7 Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft Manifest number: 0B41 Signing time: Tue 28 Jul 2026 19:38:29 +0000 Manifest this update: Tue 28 Jul 2026 19:38:29 +0000 Manifest next update: Tue 04 Aug 2026 19:38:29 +0000 Files and hashes: 1: onKsr-j6pPKpcApvwRQlkIx0PUs.crl (hash: +cuZ5hdu0TL4Vd6RjV0HDCb1wiCoAH3I4CJ4MzMnyZs=) 2: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (hash: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI=) 3: B379B0346F4711EA81200366C4F9AE02.roa (hash: rNv+e/nApXchUNVWJU267CDDp90NgTEj+7l6gvjg9/E=) 4: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (hash: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Jul 28 19:38:29 2026 GMT Not After : Aug 4 19:38:29 2026 GMT Subject: CN=6a690535-76e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:06:30:05:08:e8:63:49:6e:76:4d:a1:f3: 59:8f:a2:36:18:75:1f:36:be:61:ec:c4:e6:a3:d2: 53:a7:2c:93:d8:c2:f5:41:e5:de:47:f1:72:65:4b: d5:4a:d0:bf:fb:40:1c:e5:dd:9e:2a:57:f5:ce:5b: be:5a:62:b9:71:d4:7e:c8:9c:e9:e7:99:4b:db:56: 74:23:c7:3c:be:f6:f4:8a:0c:ea:5a:7e:b0:c1:22: dc:84:df:28:e1:92:03:9b:ba:3c:b3:6b:04:76:5c: 2c:d3:eb:d6:fe:da:21:37:29:69:4e:59:95:c6:56: 54:61:9b:cf:93:a7:9c:04:47:84:6d:0d:6a:bd:95: e6:d9:67:b6:bc:6c:c9:ed:01:99:0c:68:6c:ff:73: b1:5c:d1:44:d1:ee:42:2a:57:bf:5e:8a:ae:f1:9b: cd:ef:c8:85:90:99:f7:a4:1e:05:4d:69:22:e8:ee: e9:ce:58:33:a0:45:90:d0:28:9a:f8:63:e0:0b:13: 25:32:3a:ba:ba:7c:de:28:ea:1e:f0:1c:70:1e:a3: 13:15:bc:60:f9:77:fc:13:50:d1:d5:55:4d:d0:69: 54:61:75:db:ea:b7:9b:60:ef:72:1d:d2:e9:70:bb: ee:af:02:67:31:df:8b:35:72:68:31:3d:7e:6e:2d: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:15:02:31:85:C3:8E:F6:31:B6:D3:29:91:05:CB:08:85:34:D7 X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:3b:4f:78:a9:c2:f4:45:2d:42:5d:c4:10:f3:8e:3a:02: 54:9a:8c:c3:51:68:c3:0a:27:5b:25:4a:52:39:40:f0:1d:38: 7c:ba:50:45:f6:2e:48:32:1b:4e:cd:fc:af:21:42:c2:e7:7f: 89:a2:7c:79:3c:92:52:79:2d:66:b2:7f:eb:9a:78:d4:b4:fe: 7d:93:28:d8:d5:a6:9f:8d:bc:82:65:67:96:16:bf:86:9d:89: cd:91:cb:7a:7e:46:d9:f2:53:01:c7:1c:a0:10:8f:36:58:9f: 83:32:e6:79:37:7a:39:82:0c:de:64:a4:b5:5e:1b:29:81:33: c6:54:52:8b:9f:c9:e9:fd:e4:64:42:6a:f5:df:86:2b:be:a1: 6e:9b:96:8c:75:b4:4b:8f:e7:28:e8:16:b4:3b:9c:89:a0:0d: ac:65:04:b5:9a:fe:de:4d:0c:a6:40:72:44:f5:d6:ee:61:46: 15:ab:ea:8b:8c:3e:5b:59:0a:fa:57:ac:eb:29:9d:85:d0:59: f1:1a:ee:be:2f:b5:45:7e:cb:bc:b8:ac:0c:f6:78:d6:8c:e7: 92:c6:b8:c0:4b:15:34:ab:77:40:4e:4a:3b:c2:6f:96:c2:1c: 68:95:64:0e:b9:28:52:33:a3:c6:5b:8b:ec:71:27:0a:41:0c: 90:f2:b7:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYwNzI4MTkzODI5WhcNMjYwODA0MTkzODI5WjAYMRYwFAYD VQQDEw02YTY5MDUzNS03NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwloGMAUI6GNJbnZNofNZj6I2GHUfNr5h7MTmo9JTpyyT2ML1QeXeR/FyZUvV StC/+0Ac5d2eKlf1zlu+WmK5cdR+yJzp55lL21Z0I8c8vvb0igzqWn6wwSLchN8o 4ZIDm7o8s2sEdlws0+vW/tohNylpTlmVxlZUYZvPk6ecBEeEbQ1qvZXm2We2vGzJ 7QGZDGhs/3OxXNFE0e5CKle/Xoqu8ZvN78iFkJn3pB4FTWki6O7pzlgzoEWQ0Cia +GPgCxMlMjq6unzeKOoe8BxwHqMTFbxg+Xf8E1DR1VVN0GlUYXXb6rebYO9yHdLp cLvurwJnMd+LNXJoMT1+bi1dfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1mFQIx hcOO9jG20ymRBcsIhTTXMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UyNy9GMzg4ODc2NjZGM0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQ S3BjQXB2d1JRbGtJeDBQVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANWE7T3ipwvRFLUJdxBDzjjoCVJqMw1FowwonWyVKUjlA8B04fLpQRfYuSDIb Ts38ryFCwud/iaJ8eTySUnktZrJ/65p41LT+fZMo2NWmn428gmVnlha/hp2JzZHL en5G2fJTAcccoBCPNlifgzLmeTd6OYIM3mSktV4bKYEzxlRSi5/J6f3kZEJq9d+G K76hbpuWjHW0S4/nKOgWtDuciaANrGUEtZr+3k0MpkByRPXW7mFGFavqi4w+W1kK +les6ymdhdBZ8Rruvi+1RX7LvLisDPZ41oznksa4wEsVNKt3QE5KO8JvlsIcaJVk DrkoUjOjxluL7HEnCkEMkPK3Iw== -----END CERTIFICATE-----Generated at Wed Jul 29 13:11:29 2026 by rpki-client