$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: t0QwTb5Hq/MimWQS9hCyNXRYTFQlbD39/0Y02v0ze3I= Subject key identifier: 03:6A:DF:C3:86:A9:28:23:A7:32:BE:17:D8:26:CE:29:F2:9A:73:EC Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 1143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 1138 Signing time: Sun 26 Jul 2026 17:25:19 +0000 Manifest this update: Sun 26 Jul 2026 17:25:18 +0000 Manifest next update: Sun 02 Aug 2026 17:25:18 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: 2bmD8OheTDS6j8AKxcBV5s1S9tNnSlcwW8yEH4Ry1Rw=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: Qlspkhh8uor8ecMraj5PR2UqS4cARaGBWVRKRXzt500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4419 (0x1143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Jul 26 17:25:18 2026 GMT Not After : Aug 2 17:25:18 2026 GMT Subject: CN=6a6642ff-d905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:cc:49:de:1c:35:5e:f7:15:0a:fb:b2:1e: 18:66:e2:a6:ef:3c:94:9e:f2:d0:65:bb:54:35:a5: 21:12:13:23:6e:28:91:be:1c:40:a4:db:54:5f:35: 8c:f9:2c:27:b5:18:3d:70:6b:84:6e:05:78:32:3c: 44:87:8d:e1:91:31:72:18:ce:7f:06:86:b9:d9:8a: 85:3a:1d:f7:35:27:a7:f4:1e:32:01:31:2f:cc:29: 09:7d:5f:5c:bb:bf:5a:01:7b:da:f7:38:f9:85:89: fd:45:97:76:03:32:94:c7:fa:16:78:0d:25:56:20: c2:cc:29:ae:8e:92:e0:f0:52:67:df:36:88:f2:33: 5d:49:51:5c:6b:19:a9:8b:2c:a9:d7:5d:f6:7c:85: ba:fe:e9:04:6c:10:5c:36:50:57:41:ae:d1:d5:97: 45:30:3a:74:8f:ef:6c:71:bc:d4:71:5c:e8:c5:3f: 4f:10:b3:e6:61:2e:f9:c8:ff:ed:53:c4:2f:29:f5: 7f:39:0c:b4:4e:68:66:ea:b4:1e:6b:ec:a0:66:46: a8:02:15:85:a8:88:d3:11:ee:9f:1b:36:25:b7:21: 37:1b:bd:a4:5a:29:82:38:9e:70:8d:6f:38:88:b0: 3a:f9:06:32:1e:7c:3b:75:03:9d:ad:cf:3b:4b:70: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6A:DF:C3:86:A9:28:23:A7:32:BE:17:D8:26:CE:29:F2:9A:73:EC X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:8d:ce:a0:70:3b:02:94:78:1c:86:d3:2d:0b:b9:9d:5a:61: 36:0f:39:98:44:3d:75:9b:f0:d2:b9:08:39:95:13:5e:d0:3e: 46:cf:e6:c8:c7:45:85:8f:91:f2:cf:c0:e2:8a:f1:73:69:64: ee:c0:b2:6c:e3:82:c3:d2:f6:22:2a:7d:18:87:14:07:65:7c: 33:f1:12:8c:cb:eb:fa:eb:29:07:89:1b:50:2d:a1:04:4a:5f: 0e:f1:2d:33:01:14:ff:a9:5d:15:cf:0c:ec:eb:06:09:20:a5: b4:51:e3:83:36:44:0c:01:cc:56:6f:94:f8:26:14:3e:62:0e: 12:45:17:4d:9c:32:d8:43:a4:1f:01:da:62:ad:0f:45:21:13: 91:39:6a:91:ea:4b:2d:82:05:77:fd:0e:5f:23:da:15:02:8b: 07:8b:16:07:70:08:77:5f:7f:e0:18:5c:e9:e2:09:38:eb:de: bf:e1:f6:11:eb:80:b8:8f:86:fa:78:be:98:7f:d5:32:86:5e: c4:76:ee:9d:17:0c:3e:f8:99:8f:04:90:b5:94:04:81:5f:b1: 47:57:4f:b9:9d:6a:76:32:71:af:40:dd:6a:b8:5b:9a:b3:63: c4:fe:c2:c8:3b:70:55:8d:de:5d:61:48:55:0b:2e:f5:a3:78: dd:92:2f:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjYwNzI2MTcyNTE4WhcNMjYwODAyMTcyNTE4WjAYMRYwFAYD VQQDEw02YTY2NDJmZi1kOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKHMSd4cNV73FQr7sh4YZuKm7zyUnvLQZbtUNaUhEhMjbiiRvhxApNtUXzWM +SwntRg9cGuEbgV4MjxEh43hkTFyGM5/Boa52YqFOh33NSen9B4yATEvzCkJfV9c u79aAXva9zj5hYn9RZd2AzKUx/oWeA0lViDCzCmujpLg8FJn3zaI8jNdSVFcaxmp iyyp1132fIW6/ukEbBBcNlBXQa7R1ZdFMDp0j+9scbzUcVzoxT9PELPmYS75yP/t U8QvKfV/OQy0Tmhm6rQea+ygZkaoAhWFqIjTEe6fGzYltyE3G72kWimCOJ5wjW84 iLA6+QYyHnw7dQOdrc87S3BUkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANq38OG qSgjpzK+F9gmzinymnPsMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApI3OoHA7ApR4HIbTLQu5nVphNg85mEQ9dZvw0rkIOZUTXtA+Rs/myMdFhY+R 8s/A4orxc2lk7sCybOOCw9L2Iip9GIcUB2V8M/ESjMvr+uspB4kbUC2hBEpfDvEt MwEU/6ldFc8M7OsGCSCltFHjgzZEDAHMVm+U+CYUPmIOEkUXTZwy2EOkHwHaYq0P RSETkTlqkepLLYIFd/0OXyPaFQKLB4sWB3AId19/4Bhc6eIJOOvev+H2EeuAuI+G +ni+mH/VMoZexHbunRcMPviZjwSQtZQEgV+xR1dPuZ1qdjJxr0DdarhbmrNjxP7C yDtwVY3eXWFIVQsu9aN43ZIvCg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:59 2026 by rpki-client