$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft (raw, json) Hash identifier: /1Dz4yKhna9RZs3R8hTQ3ho6XePmC9ZWBCJ6w8TqK8A= Subject key identifier: E9:88:1A:BD:9A:CB:B7:51:A7:D8:43:15:6D:C6:73:0A:57:40:67:9F Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft Manifest number: 0137 Signing time: Mon 27 Jul 2026 07:29:18 +0000 Manifest this update: Mon 27 Jul 2026 07:29:17 +0000 Manifest next update: Mon 03 Aug 2026 07:29:17 +0000 Files and hashes: 1: oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl (hash: 1XmIyPSEI4pLADZ0Y0uNtJuyD7X42rpmWihpG+qWfvs=) 2: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (hash: swU/cIT55IB6CLXX7olyaDaVghm9dVy0OQ1HquSKmXw=) 3: 1597CAC6B00711EF863A582EC4F9AE02.roa (hash: Pjr/Al+ZFffNus+aH+TIpueq22icnlUqNTg+gkHkCcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Validity Not Before: Jul 27 07:29:17 2026 GMT Not After : Aug 3 07:29:17 2026 GMT Subject: CN=6a6708cd-b1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:fb:bc:5e:79:e3:64:de:d9:e7:73:e8:c2: 16:a1:c1:b6:a9:86:ba:04:9f:ca:eb:29:c1:9f:fa: 14:95:9a:93:68:8b:31:0f:41:70:0e:39:3e:18:e3: f5:d3:70:5f:95:de:da:49:d7:89:48:72:3a:9e:d8: 6d:be:d1:84:cd:bc:ca:a0:cb:e9:ca:e1:86:a9:b2: 69:10:0d:68:3e:00:75:73:55:89:89:56:81:70:57: 50:f6:59:70:1d:82:1e:6d:e7:21:30:75:cb:ce:14: 4d:64:56:dc:3d:50:e2:fe:d2:f8:37:2c:81:93:c5: c1:2e:1b:b2:f1:0c:71:a3:43:fc:08:5d:1a:2d:8d: f2:63:bd:8d:83:37:9f:5e:b9:58:c0:b1:15:84:20: f4:f9:b8:1a:eb:b5:a3:ea:d4:9d:1c:b4:b8:fe:9e: 32:f3:69:c3:61:19:b7:f4:66:dd:f4:46:dd:80:66: c9:fa:c7:ab:ae:53:90:ba:29:1c:cd:32:be:03:53: 49:c2:13:dd:cc:d7:bd:7c:e1:a7:8f:e4:4c:50:e3: 7a:12:61:fe:1b:53:09:a1:33:21:7f:03:99:c6:20: ed:a2:51:3f:3c:0c:c8:3b:d0:2d:26:03:90:57:e9: e4:47:d3:f7:47:90:a2:c4:5c:fb:b4:b9:6f:de:4c: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:1A:BD:9A:CB:B7:51:A7:D8:43:15:6D:C6:73:0A:57:40:67:9F X509v3 Authority Key Identifier: keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:93:fe:7b:f1:c3:1e:92:48:b1:33:47:9e:ad:e3:97:6f:6a: 65:de:b5:46:16:36:d7:d6:e7:9a:a8:1b:f1:97:06:eb:b0:42: 60:5b:fc:b9:03:65:12:b2:14:88:ee:c4:b6:aa:1a:b1:a1:a3: 06:d1:9f:a4:4e:01:e6:52:62:27:23:8b:8f:1c:c5:33:c1:b8: 31:72:db:52:6a:eb:85:86:26:6a:90:3f:7d:2d:b3:82:37:6b: b5:ea:00:91:79:ee:c0:03:13:67:9b:35:81:7d:68:97:5a:2b: eb:e5:e3:1e:fc:88:14:4c:55:c5:ff:da:2a:38:bb:13:4f:7a: 75:b5:ea:96:01:ce:15:9a:db:75:6b:78:ca:43:d1:7f:c0:ad: 7a:f0:9c:b2:49:6b:fe:fa:f8:66:85:74:69:ca:73:1c:c0:c6: 4b:ff:77:f2:9e:7c:b7:ed:48:70:5c:5a:be:c4:52:ec:44:8b: f4:c4:8c:9b:3a:76:59:c8:2b:2f:8e:8d:97:ee:6a:4a:41:c8: ba:98:0e:2b:bd:9f:4c:3d:80:a7:e2:2c:be:58:db:3e:2e:8b: ce:f2:b3:9e:4e:e3:52:10:19:b6:bf:7b:cc:93:23:bf:49:ee: 33:0e:da:c3:00:4a:87:5a:f8:12:74:50:4f:e0:3f:52:18:21: 71:a8:b6:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF QzQ3RDM0MzgwHhcNMjYwNzI3MDcyOTE3WhcNMjYwODAzMDcyOTE3WjAYMRYwFAYD VQQDEw02YTY3MDhjZC1iMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk77vF5542Te2edz6MIWocG2qYa6BJ/K6ynBn/oUlZqTaIsxD0FwDjk+GOP1 03Bfld7aSdeJSHI6nthtvtGEzbzKoMvpyuGGqbJpEA1oPgB1c1WJiVaBcFdQ9llw HYIebechMHXLzhRNZFbcPVDi/tL4NyyBk8XBLhuy8Qxxo0P8CF0aLY3yY72Ngzef XrlYwLEVhCD0+bga67Wj6tSdHLS4/p4y82nDYRm39Gbd9EbdgGbJ+serrlOQuikc zTK+A1NJwhPdzNe9fOGnj+RMUON6EmH+G1MJoTMhfwOZxiDtolE/PAzIO9AtJgOQ V+nkR9P3R5CixFz7tLlv3kyf8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmIGr2a y7dRp9hDFW3GcwpXQGefMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJ UUNIZmxQZFlZbVRzUjlORGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZP+e/HDHpJIsTNHnq3jl29qZd61RhY219bnmqgb8ZcG67BCYFv8uQNlErIU iO7EtqoasaGjBtGfpE4B5lJiJyOLjxzFM8G4MXLbUmrrhYYmapA/fS2zgjdrteoA kXnuwAMTZ5s1gX1ol1or6+XjHvyIFExVxf/aKji7E096dbXqlgHOFZrbdWt4ykPR f8CtevCcsklr/vr4ZoV0acpzHMDGS/938p58t+1IcFxavsRS7ESL9MSMmzp2Wcgr L46Nl+5qSkHIupgOK72fTD2Ap+IsvljbPi6LzvKznk7jUhAZtr97zJMjv0nuMw7a wwBKh1r4EnRQT+A/Uhghcai2KA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:57:53 2026 by rpki-client