$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: yT3bVEydyXHEq8BZvfBxjjip9ispz/Mm1hOzUz3lo2A= Subject key identifier: B5:F3:16:AD:D4:90:CD:A3:FD:9E:3E:19:6F:F8:25:43:73:4B:20:01 Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 020A Signing time: Mon 27 Jul 2026 04:36:59 +0000 Manifest this update: Mon 27 Jul 2026 04:36:58 +0000 Manifest next update: Mon 03 Aug 2026 04:36:58 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: fkh+vdIwuLV0dnD9yqPP9dgy3/4zrBu9ih/l0sN4rqA=) 2: uBjXwSK2dkrvdHR2yxPpHoA0_4U.asa (hash: YOXKkz0Fmo2/c6LztWniOULV+zi5rkCLcvFXCPhMNVI=) 3: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: 5SIEytqj/kUtficVvfQzNkbf84VZDuhF0/ee1j7nlyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Jul 27 04:36:58 2026 GMT Not After : Aug 3 04:36:58 2026 GMT Subject: CN=6a66e06b-f307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:ae:09:90:13:5a:40:99:c2:1c:f0:87:98: f7:83:cc:0f:c8:01:f3:54:d2:e2:6c:36:c7:36:40: 55:ac:b9:56:ba:9b:18:7a:b8:7e:32:e8:b9:d4:c9: 1a:ee:26:7f:18:cd:e6:f0:9d:d6:b3:0f:71:78:b9: 8b:5d:47:8a:75:9c:06:3c:23:e7:dc:28:e8:f6:58: 61:ef:f3:f2:98:01:08:43:b4:29:da:86:e5:76:2f: 24:c1:af:94:d2:5a:88:a8:7e:b9:2b:dd:8f:e1:a2: e4:fd:7f:6f:87:6a:07:dd:d8:4b:38:88:60:db:c0: 00:49:9a:e2:90:70:6a:ab:d2:4a:0a:f4:15:91:b2: 96:d2:c0:ed:89:19:c8:a4:47:04:bc:26:59:ab:e1: 40:7d:6e:32:02:ca:03:cc:85:63:85:ba:b2:92:37: f6:e2:2a:d0:6d:41:43:27:74:fa:25:4b:2f:d6:d1: 41:80:f3:e7:8b:da:d5:e8:39:0f:80:cf:e4:cb:88: b1:e4:88:db:61:a5:bb:bb:35:e3:98:f2:73:94:bc: 31:7b:8a:0b:73:a8:fc:0e:7a:ed:06:08:04:a8:c3: 36:d5:f7:cd:84:e4:22:b4:df:23:d4:ef:74:f9:bf: fa:bf:96:b3:33:02:96:2d:7a:11:d2:6e:f1:86:31: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:16:AD:D4:90:CD:A3:FD:9E:3E:19:6F:F8:25:43:73:4B:20:01 X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b9:2a:44:91:c3:3d:10:3b:6d:8b:d6:27:3c:59:b0:c7:4b: ef:96:48:22:47:72:0e:4b:71:a7:de:f1:84:17:9d:13:a9:0a: 7a:af:43:21:55:b2:ae:7f:1d:cc:2c:7f:e8:a3:65:f2:28:58: 6f:44:0e:59:78:6a:63:a8:be:b0:7b:a9:d1:46:fa:5d:12:fa: 6e:e1:a4:46:b2:92:fd:ce:5d:1d:d6:31:19:42:85:55:90:bf: d3:53:4f:a6:0c:2c:c0:c4:d3:d2:24:2e:f6:6a:c1:75:30:7f: ea:1c:f6:d5:ac:a9:76:fd:51:09:50:8c:14:ad:cf:75:c9:31: 13:cd:f7:2e:6d:4b:09:e9:7f:ac:8c:87:4f:e4:b4:6c:24:c1: 05:31:ae:0f:1b:fb:b6:15:21:51:43:f0:fa:a2:a5:78:20:8c: 74:f1:4d:ad:43:49:2b:bb:88:33:45:01:08:d5:0f:24:65:40: 59:ac:5e:ee:c8:80:62:c2:42:bf:06:14:09:1c:fb:35:32:c9: e1:a3:5a:5d:a7:55:06:5b:7f:89:ac:3d:24:38:90:7c:a5:e0: 97:ec:f1:7f:9a:cb:f6:d9:cd:92:9e:57:2c:05:e8:5a:9e:f5: 2b:a3:10:ff:d9:b6:6c:e4:2f:13:71:f0:0b:fa:67:31:61:d1: 5d:86:0b:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjYwNzI3MDQzNjU4WhcNMjYwODAzMDQzNjU4WjAYMRYwFAYD VQQDEw02YTY2ZTA2Yi1mMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FmuCZATWkCZwhzwh5j3g8wPyAHzVNLibDbHNkBVrLlWupsYerh+Mui51Mka 7iZ/GM3m8J3Wsw9xeLmLXUeKdZwGPCPn3Cjo9lhh7/PymAEIQ7Qp2obldi8kwa+U 0lqIqH65K92P4aLk/X9vh2oH3dhLOIhg28AASZrikHBqq9JKCvQVkbKW0sDtiRnI pEcEvCZZq+FAfW4yAsoDzIVjhbqykjf24irQbUFDJ3T6JUsv1tFBgPPni9rV6DkP gM/ky4ix5IjbYaW7uzXjmPJzlLwxe4oLc6j8DnrtBggEqMM21ffNhOQitN8j1O90 +b/6v5azMwKWLXoR0m7xhjFVmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXzFq3U kM2j/Z4+GW/4JUNzSyABMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXrkqRJHDPRA7bYvWJzxZsMdL75ZIIkdyDktxp97xhBedE6kKeq9DIVWyrn8d zCx/6KNl8ihYb0QOWXhqY6i+sHup0Ub6XRL6buGkRrKS/c5dHdYxGUKFVZC/01NP pgwswMTT0iQu9mrBdTB/6hz21aypdv1RCVCMFK3PdckxE833Lm1LCel/rIyHT+S0 bCTBBTGuDxv7thUhUUPw+qKleCCMdPFNrUNJK7uIM0UBCNUPJGVAWaxe7siAYsJC vwYUCRz7NTLJ4aNaXadVBlt/iaw9JDiQfKXgl+zxf5rL9tnNkp5XLAXoWp71K6MQ /9m2bOQvE3HwC/pnMWHRXYYLTg== -----END CERTIFICATE-----Generated at Tue Jul 28 16:47:25 2026 by rpki-client