$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: MIcp2Ti5OBvbW+umfNka1UFG2Nb2NKEFStIt+hxS+zM= Subject key identifier: E1:D7:30:7B:AF:17:12:AE:F0:21:93:F5:A1:04:42:CD:7E:FD:B9:03 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 0576 Signing time: Sun 08 Nov 2026 23:08:45 +0000 Manifest this update: Sun 08 Nov 2026 23:08:45 +0000 Manifest next update: Sun 15 Nov 2026 23:08:45 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: cG7uOyBd1qC1hAJzcT4i4L+O89yDASce456XzfX199U=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Nov 8 23:08:45 2026 GMT Not After : Nov 15 23:08:45 2026 GMT Subject: CN=6af100fd-d33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:37:d3:a7:9d:4e:12:6c:2a:81:f5:4b:38: a7:9c:ec:c6:6e:c0:17:be:79:38:84:c8:59:c2:62: 78:10:68:a6:07:4e:7c:7f:91:92:62:bc:b0:9f:32: 93:9f:2f:c3:7c:17:68:e6:31:f7:fa:be:6b:81:79: f9:50:2a:5e:26:1a:01:f0:4b:53:65:d9:c6:e0:3f: 52:5c:bb:88:da:c2:27:05:27:7d:46:06:3c:af:ac: 52:0d:d1:3e:fa:6c:9b:c6:cf:4c:34:1b:ce:88:f7: 29:b4:e6:2e:54:1a:98:06:8b:3a:7c:c1:95:1a:84: 51:9d:90:7b:c1:6d:23:64:ad:26:10:a2:15:14:0d: 36:10:a9:3b:4c:21:d0:82:21:f7:5d:cb:14:fb:7a: 46:d7:01:41:57:f6:a0:24:ff:76:e3:fc:01:99:55: 96:f6:a2:ec:25:55:a8:cf:da:18:95:5f:2f:d9:51: 57:6d:63:e1:09:6a:88:b6:27:80:de:61:34:64:58: 06:2a:de:90:0a:4e:cf:a8:f1:69:97:f1:0a:7f:96: c8:a5:bb:d8:42:e3:55:36:cd:09:4e:cd:e9:01:b3: 6d:d3:39:7d:b6:0a:f7:93:a0:24:0f:8f:3c:94:cc: 0b:78:82:e2:20:86:f8:05:61:6b:e9:a1:ed:01:28: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D7:30:7B:AF:17:12:AE:F0:21:93:F5:A1:04:42:CD:7E:FD:B9:03 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8e:d6:0b:bc:0d:bc:b8:d1:8d:bc:88:72:5d:e3:18:11:b3: 6d:e8:7e:b7:94:70:d7:62:3f:70:02:ab:0b:1d:c9:17:00:6c: 1a:5b:8c:ac:2a:26:6c:d0:56:37:42:d4:96:10:c3:71:1d:42: 38:c3:c0:b7:59:b9:5b:56:f5:66:2e:d4:04:74:93:00:e4:7a: c7:f3:b8:cb:63:0c:e2:83:ae:cd:4a:9c:7f:a6:0d:b9:cf:e1: 11:2b:c8:dd:38:b8:43:95:62:1f:78:51:46:08:67:9e:ac:83: 4e:57:1a:f6:5a:4f:e1:85:91:e6:ea:28:dd:07:c0:f0:1b:ef: 95:28:56:24:aa:de:ef:96:15:1b:b2:58:ef:21:d2:3e:00:9c: 67:b1:df:39:4d:a9:e4:c8:9b:34:4c:96:e7:e3:41:04:95:2b: cf:08:3f:76:4f:c6:66:48:6e:0b:fe:ea:fb:c6:9f:a6:91:55: f2:02:e8:1b:18:3e:9e:f0:41:7b:cf:a0:89:64:8c:93:15:4f: 8d:8b:19:9e:95:c4:74:4f:7a:3a:ff:99:78:e5:52:39:6d:d2: 40:50:ce:96:45:2b:a8:f9:02:e9:d3:66:0d:76:8f:1b:d3:a4: 7e:23:ff:4b:b3:6b:a9:4f:0e:44:fb:0f:ae:63:26:31:ce:17: d2:a2:a0:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjYxMTA4MjMwODQ1WhcNMjYxMTE1MjMwODQ1WjAYMRYwFAYD VQQDEw02YWYxMDBmZC1kMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfk306edThJsKoH1SzinnOzGbsAXvnk4hMhZwmJ4EGimB058f5GSYrywnzKT ny/DfBdo5jH3+r5rgXn5UCpeJhoB8EtTZdnG4D9SXLuI2sInBSd9RgY8r6xSDdE+ +mybxs9MNBvOiPcptOYuVBqYBos6fMGVGoRRnZB7wW0jZK0mEKIVFA02EKk7TCHQ giH3XcsU+3pG1wFBV/agJP924/wBmVWW9qLsJVWoz9oYlV8v2VFXbWPhCWqItieA 3mE0ZFgGKt6QCk7PqPFpl/EKf5bIpbvYQuNVNs0JTs3pAbNt0zl9tgr3k6AkD488 lMwLeILiIIb4BWFr6aHtASgsTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHXMHuv FxKu8CGT9aEEQs1+/bkDMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATY7WC7wNvLjRjbyIcl3jGBGzbeh+t5Rw12I/cAKrCx3JFwBsGluMrCombNBW N0LUlhDDcR1COMPAt1m5W1b1Zi7UBHSTAOR6x/O4y2MM4oOuzUqcf6YNuc/hESvI 3Ti4Q5ViH3hRRghnnqyDTlca9lpP4YWR5uoo3QfA8BvvlShWJKre75YVG7JY7yHS PgCcZ7HfOU2p5MibNEyW5+NBBJUrzwg/dk/GZkhuC/7q+8afppFV8gLoGxg+nvBB e8+giWSMkxVPjYsZnpXEdE96Ov+ZeOVSOW3SQFDOlkUrqPkC6dNmDXaPG9OkfiP/ S7NrqU8ORPsPrmMmMc4X0qKgmA== -----END CERTIFICATE-----Generated at Tue Nov 10 14:25:33 2026 by rpki-client