$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: X3hJ+yyw3RzRJavhLINo6pIKwNR69bjWW3zBcxZM4fU= Subject key identifier: 1D:D2:6C:7D:F0:5E:92:F9:1C:F4:06:9C:E4:9C:DA:C9:7B:98:23:ED Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 0227 Signing time: Tue 28 Jul 2026 17:41:54 +0000 Manifest this update: Tue 28 Jul 2026 17:41:53 +0000 Manifest next update: Tue 04 Aug 2026 17:41:53 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: w+x8cY2Wr5fz444whqPTuL3JIFvbHqDnfG7flggBYr8=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: oB4kxasRgRq+GKJ70NUc/sJMH3q5nYfTRjnemmCHnis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Jul 28 17:41:53 2026 GMT Not After : Aug 4 17:41:53 2026 GMT Subject: CN=6a68e9e2-ead4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:1b:68:f5:36:43:04:04:f4:04:04:98:69: 3c:8a:df:d9:65:02:89:2d:59:a8:ce:46:9f:92:06: c7:6b:68:15:00:00:2d:85:87:46:53:bf:4f:57:8d: e2:cb:7b:fe:f7:88:8b:b6:4f:04:9f:c8:f3:c6:47: fb:ac:3b:6f:64:6b:a6:2c:e5:d9:68:d9:f2:f9:29: 2a:09:95:ba:54:c9:d6:1f:a3:ba:83:2a:41:a3:be: 64:a5:ec:eb:1a:fa:49:0c:b7:9c:a4:79:f3:33:2b: 2a:00:0a:95:24:9d:22:94:ad:39:68:9a:a3:79:df: 9f:65:d0:4f:af:d1:92:bf:c7:1b:14:3b:6e:c8:d1: 09:5b:52:31:3d:dd:99:32:59:fb:d5:85:93:e8:6a: c0:e9:56:06:86:05:61:f5:b9:4a:da:d0:2e:c7:6f: 5c:bc:f1:80:2b:3a:e2:8d:4d:45:7a:36:d0:15:b1: 4f:f8:f8:8b:3d:43:8f:16:40:e7:10:5e:39:62:78: e5:61:8b:ca:54:01:39:cb:4f:cd:7a:5b:c0:ca:b9: 0f:65:75:dc:b6:87:74:49:99:e4:45:1a:18:a8:9d: de:76:75:56:b3:d9:66:8a:34:e2:2e:7f:0d:7c:c9: 72:d0:09:a9:f3:f4:ab:5d:d3:04:eb:74:71:a0:0b: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D2:6C:7D:F0:5E:92:F9:1C:F4:06:9C:E4:9C:DA:C9:7B:98:23:ED X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:9f:cc:6d:cd:08:e3:46:cb:12:35:f4:b6:a0:12:6b:70:c0: 5d:c3:02:12:4a:69:b8:50:eb:ad:08:7e:ea:92:e6:58:e0:82: 1c:5a:b3:fa:16:79:ab:29:06:1a:75:8c:8e:ae:e3:2a:6f:de: 48:ed:79:06:01:e7:07:09:08:86:1d:41:74:2f:03:90:c0:e3: 03:c7:79:b7:b1:68:70:7b:72:93:f5:de:a3:d3:79:6c:6f:5c: 1e:03:2a:8a:86:b5:e7:dc:19:10:d0:b0:41:55:3b:06:b4:f5: ae:45:57:14:65:5a:1c:11:c9:ad:93:d6:43:ed:9e:8f:b7:29: 8f:e6:20:06:00:48:b0:37:b8:45:34:de:b5:46:dd:08:dc:79: c4:da:8a:dd:1d:70:91:05:f2:ff:38:4d:35:c6:f3:fb:21:b2: 62:4b:10:46:01:eb:46:05:41:ac:84:46:dc:62:c5:38:7f:12: 91:49:7e:5e:b3:e5:e1:f6:1e:69:bc:ef:6a:8a:52:58:0e:92: 03:ae:c5:41:a5:c0:b4:ec:12:2f:57:98:97:93:fd:18:18:87: de:37:86:83:fc:32:9b:69:ac:be:8d:46:d1:90:0e:0c:08:3c: b9:78:89:25:bb:7d:e0:18:a8:fd:60:45:85:7c:60:65:f7:e5: 2c:18:ba:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwNzI4MTc0MTUzWhcNMjYwODA0MTc0MTUzWjAYMRYwFAYD VQQDEw02YTY4ZTllMi1lYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdYbaPU2QwQE9AQEmGk8it/ZZQKJLVmozkafkgbHa2gVAAAthYdGU79PV43i y3v+94iLtk8En8jzxkf7rDtvZGumLOXZaNny+SkqCZW6VMnWH6O6gypBo75kpezr GvpJDLecpHnzMysqAAqVJJ0ilK05aJqjed+fZdBPr9GSv8cbFDtuyNEJW1IxPd2Z Mln71YWT6GrA6VYGhgVh9blK2tAux29cvPGAKzrijU1FejbQFbFP+PiLPUOPFkDn EF45YnjlYYvKVAE5y0/NelvAyrkPZXXctod0SZnkRRoYqJ3ednVWs9lmijTiLn8N fMly0Amp8/SrXdME63RxoAur4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3SbH3w XpL5HPQGnOSc2sl7mCPtMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOJ/Mbc0I40bLEjX0tqASa3DAXcMCEkppuFDrrQh+6pLmWOCCHFqz+hZ5qykG GnWMjq7jKm/eSO15BgHnBwkIhh1BdC8DkMDjA8d5t7FocHtyk/Xeo9N5bG9cHgMq ioa159wZENCwQVU7BrT1rkVXFGVaHBHJrZPWQ+2ej7cpj+YgBgBIsDe4RTTetUbd CNx5xNqK3R1wkQXy/zhNNcbz+yGyYksQRgHrRgVBrIRG3GLFOH8SkUl+XrPl4fYe abzvaopSWA6SA67FQaXAtOwSL1eYl5P9GBiH3jeGg/wym2msvo1G0ZAODAg8uXiJ Jbt94Bio/WBFhXxgZfflLBi6Rw== -----END CERTIFICATE-----Generated at Wed Jul 29 12:56:12 2026 by rpki-client