$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft File: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json) Hash identifier: Bklv6AWje6yFvBYk9fIsISQD0BIgYzrLL9U6iOzdkpw= Subject key identifier: B1:01:AE:B4:42:CE:00:0D:B6:F3:F9:F9:61:DB:3C:9E:8F:EF:2C:5B Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F Certificate issuer: /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft Manifest number: 29 Signing time: Mon 27 Jul 2026 11:08:20 +0000 Manifest this update: Mon 27 Jul 2026 11:08:20 +0000 Manifest next update: Mon 03 Aug 2026 11:08:20 +0000 Files and hashes: 1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: LEFSED5rPJyCE/Phmbprltflph1MJrNajqJFK715tX4=) 2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: f7QabRTI7sk2IZG0kdDs+LNBsIzZTK1/4WtgGby64wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Validity Not Before: Jul 27 11:08:20 2026 GMT Not After : Aug 3 11:08:20 2026 GMT Subject: CN=6a673c24-0bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:ea:79:3e:51:59:07:25:ad:28:16:f7:38: f0:16:22:e1:b4:0a:c1:75:7a:66:e9:8b:dc:83:82: 4e:39:66:53:fe:2c:ad:bb:0a:94:83:83:e0:e8:c5: 49:fc:6b:4e:9a:7f:cb:9f:ee:42:b8:ce:28:2b:98: df:e9:c1:38:b0:31:22:96:a1:18:d2:4b:47:17:26: 87:3d:87:be:49:1f:24:51:80:fc:46:82:d4:98:60: dc:41:ba:ab:15:af:0a:88:12:66:80:d1:1c:b6:77: f0:cf:81:07:62:25:f8:b3:72:df:de:99:f8:a2:f6: b3:dd:26:ee:8f:15:8c:df:ad:5d:14:f3:03:48:04: 1c:01:24:53:7a:d9:0c:db:cb:b1:f6:50:22:b9:85: 7a:0b:39:b6:ff:b0:cc:3e:6f:ad:ee:85:60:d1:35: f9:97:c1:65:79:1f:8c:40:e6:80:df:61:73:f9:a2: 34:62:d0:29:e3:64:8a:82:12:0d:b9:2e:fe:58:4b: ca:0e:26:9e:65:52:07:5f:7c:b0:dc:57:36:1d:31: 3a:b9:b0:f5:15:79:aa:a0:f0:e3:f1:b5:fc:04:37: f4:d4:07:34:bc:ee:90:34:60:84:2c:70:58:e9:e9: 98:d6:f4:d4:b8:3a:4a:4c:fa:0c:c1:3d:99:1f:c9: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:01:AE:B4:42:CE:00:0D:B6:F3:F9:F9:61:DB:3C:9E:8F:EF:2C:5B X509v3 Authority Key Identifier: keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c9:f5:d1:bb:4c:ea:43:4b:e0:a6:7e:e6:ec:70:f3:b1:96: 53:73:c9:31:98:a6:11:67:8f:1b:7f:85:ff:37:3a:72:c4:6d: db:19:3b:09:2a:07:3e:50:5c:6a:13:93:a0:a5:8f:9a:98:b1: 1f:2a:97:58:1d:74:c7:76:31:d3:c9:60:af:1d:ab:a4:ab:92: f4:50:30:8b:81:c5:c3:ed:2a:a9:26:5e:b7:6e:6e:33:ae:7e: ee:f4:bc:50:dc:4d:8a:e9:8f:d1:ef:fa:42:8c:ff:74:22:7c: 59:82:bf:e2:6b:c4:e1:55:2d:69:0f:57:cc:43:ac:c7:30:16: c6:9f:1e:97:36:03:86:7d:8f:a8:05:09:23:6e:5c:97:ce:89: b3:ef:08:cf:2e:eb:e1:91:11:35:4d:a0:7d:2f:83:46:52:2f: 00:10:17:cc:83:38:de:15:d1:58:51:06:f5:f6:6f:6b:7a:08: 61:14:cf:79:b8:46:b3:16:35:14:54:8a:2e:1c:22:c5:ff:ad: 09:04:fd:db:3e:24:86:2e:64:50:f4:8e:77:30:96:0b:f9:7d: cf:02:ce:08:b1:e7:6b:ea:8b:41:34:b2:12:5d:1a:62:ed:5d: 7d:51:7b:34:0b:f6:26:78:53:99:fe:d5:d2:ee:a6:1a:cf:a4: 90:f6:d9:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx Qzk4RTY4RjAeFw0yNjA3MjcxMTA4MjBaFw0yNjA4MDMxMTA4MjBaMBgxFjAUBgNV BAMTDTZhNjczYzI0LTBiYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM8ep5PlFZByWtKBb3OPAWIuG0CsF1embpi9yDgk45ZlP+LK27CpSDg+DoxUn8 a06af8uf7kK4zigrmN/pwTiwMSKWoRjSS0cXJoc9h75JHyRRgPxGgtSYYNxBuqsV rwqIEmaA0Ry2d/DPgQdiJfizct/emfii9rPdJu6PFYzfrV0U8wNIBBwBJFN62Qzb y7H2UCK5hXoLObb/sMw+b63uhWDRNfmXwWV5H4xA5oDfYXP5ojRi0CnjZIqCEg25 Lv5YS8oOJp5lUgdffLDcVzYdMTq5sPUVeaqg8OPxtfwEN/TUBzS87pA0YIQscFjp 6ZjW9NS4OkpM+gzBPZkfyZSzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsQGutELO AA228/n5Yds8no/vLFswHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC1yfXRu0zqQ0vgpn7m7HDzsZZTc8kxmKYRZ48bf4X/NzpyxG3bGTsJKgc+UFxq E5OgpY+amLEfKpdYHXTHdjHTyWCvHaukq5L0UDCLgcXD7SqpJl63bm4zrn7u9LxQ 3E2K6Y/R7/pCjP90InxZgr/ia8ThVS1pD1fMQ6zHMBbGnx6XNgOGfY+oBQkjblyX zomz7wjPLuvhkRE1TaB9L4NGUi8AEBfMgzjeFdFYUQb19m9reghhFM95uEazFjUU VIouHCLF/60JBP3bPiSGLmRQ9I53MJYL+X3PAs4Isedr6otBNLISXRpi7V19UXs0 C/YmeFOZ/tXS7qYaz6SQ9tmg -----END CERTIFICATE-----Generated at Wed Jul 29 05:19:32 2026 by rpki-client