$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: 6lDFiVQbdx9oGhEfVBb2lWN+cVQM2mTRSuDuJue5NLg= Subject key identifier: 1F:33:A9:BD:98:E2:D2:7F:32:F2:87:E3:6F:EB:A6:B4:7C:1A:3F:F7 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 227C Signing time: Tue 28 Jul 2026 15:57:08 +0000 Manifest this update: Tue 28 Jul 2026 15:57:07 +0000 Manifest next update: Tue 04 Aug 2026 15:57:07 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: eplv3t1Kw9CfHjci4rDk5ySSYj3No9v8PSVavhOXY8E=) 2: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=) 3: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=) 4: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=) 5: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=) 6: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=) 7: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=) 8: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8918 (0x22d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Jul 28 15:57:07 2026 GMT Not After : Aug 4 15:57:07 2026 GMT Subject: CN=6a68d154-3b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:00:2e:07:0f:05:40:b3:9c:57:28:90:48: 12:6e:c1:8e:2c:24:65:26:21:67:1c:ae:d6:50:5a: e7:0c:c4:9f:0f:9b:f3:02:64:78:3f:ca:06:9e:48: 4f:7a:f4:ce:78:35:0d:b2:57:fe:b7:c4:4c:9b:f3: f8:c5:76:5f:a1:c4:08:8f:14:80:d8:12:aa:91:64: dc:84:f7:22:58:6d:7e:46:68:d2:57:1b:1c:c7:46: 5e:85:16:d7:7c:82:24:1b:d7:3b:02:37:ed:a0:87: 05:b9:01:27:92:16:d1:f0:60:f3:ca:dd:23:32:a1: 86:51:92:8b:77:4e:71:6c:8f:4e:7f:6f:95:8b:e3: 24:1c:13:a3:a6:2d:f3:57:b1:48:df:4c:fb:59:90: f6:99:8d:b7:39:32:57:75:d9:8a:79:6c:1e:f8:aa: 91:5c:53:7f:c4:75:01:b1:7d:00:61:ea:85:17:ae: c7:2f:fc:be:6c:7b:ba:16:9e:0d:ea:e9:f7:8c:96: d7:0c:a2:18:bf:93:78:15:58:25:06:be:db:4f:a7: 82:46:fd:28:9e:20:5a:e5:42:c2:c1:fd:a9:7a:c1: f5:16:3a:25:32:9f:af:df:c0:06:4e:bb:fa:e4:f7: 62:f3:cb:b5:8a:64:51:c6:1c:0c:2d:da:8e:ea:30: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:33:A9:BD:98:E2:D2:7F:32:F2:87:E3:6F:EB:A6:B4:7C:1A:3F:F7 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:41:e2:27:86:4a:92:d1:74:0c:88:84:14:8e:5a:63:97:5b: 3f:68:49:af:b6:f0:c7:44:24:b2:1b:ba:68:c4:b7:89:f7:57: 1b:36:c3:3b:37:23:49:70:56:3d:47:d5:af:93:c3:ea:88:d7: 85:fe:db:89:fc:18:9b:60:23:bc:c5:1a:62:9b:6e:df:0b:af: b7:b3:ae:a4:f9:12:ec:d3:e1:97:b1:3b:91:1a:4c:c7:d0:33: fe:d4:a4:90:b9:eb:12:e8:0a:38:bf:24:e1:91:f0:b0:16:d0: 93:1d:4b:f4:e2:53:4d:e0:13:5d:c4:c2:2b:59:b1:e1:13:07: 78:77:02:15:00:e0:1a:14:43:aa:1b:1e:eb:97:82:8f:01:a0: 16:71:a2:7e:f6:69:66:57:57:82:bd:6c:52:99:43:03:2a:85: 3d:54:b1:f6:d3:98:ee:17:7c:92:00:5c:01:ec:b7:27:3a:14: d8:f2:f2:56:2e:ae:5c:dd:3b:36:e6:8d:30:3b:68:c9:1f:02: 0c:53:ae:e0:ad:a7:8b:fc:61:11:69:97:11:6d:a4:82:cc:b1: dc:cb:4b:11:26:3f:d1:f3:d6:ba:cb:12:fe:ab:e8:1b:74:4b: 8d:10:f4:6b:88:14:5b:12:10:b8:ad:e6:12:71:67:84:98:89: bb:98:8b:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICItYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwNzI4MTU1NzA3WhcNMjYwODA0MTU1NzA3WjAYMRYwFAYD VQQDEw02YTY4ZDE1NC0zYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7YALgcPBUCznFcokEgSbsGOLCRlJiFnHK7WUFrnDMSfD5vzAmR4P8oGnkhP evTOeDUNslf+t8RMm/P4xXZfocQIjxSA2BKqkWTchPciWG1+RmjSVxscx0ZehRbX fIIkG9c7AjftoIcFuQEnkhbR8GDzyt0jMqGGUZKLd05xbI9Of2+Vi+MkHBOjpi3z V7FI30z7WZD2mY23OTJXddmKeWwe+KqRXFN/xHUBsX0AYeqFF67HL/y+bHu6Fp4N 6un3jJbXDKIYv5N4FVglBr7bT6eCRv0oniBa5ULCwf2pesH1FjolMp+v38AGTrv6 5Pdi88u1imRRxhwMLdqO6jDNWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8zqb2Y 4tJ/MvKH42/rprR8Gj/3MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM0HiJ4ZKktF0DIiEFI5aY5dbP2hJr7bwx0Qkshu6aMS3ifdXGzbDOzcjSXBW PUfVr5PD6ojXhf7bifwYm2AjvMUaYptu3wuvt7OupPkS7NPhl7E7kRpMx9Az/tSk kLnrEugKOL8k4ZHwsBbQkx1L9OJTTeATXcTCK1mx4RMHeHcCFQDgGhRDqhse65eC jwGgFnGifvZpZldXgr1sUplDAyqFPVSx9tOY7hd8kgBcAey3JzoU2PLyVi6uXN07 NuaNMDtoyR8CDFOu4K2ni/xhEWmXEW2kgsyx3MtLESY/0fPWussS/qvoG3RLjRD0 a4gUWxIQuK3mEnFnhJiJu5iL/Q== -----END CERTIFICATE-----Generated at Wed Jul 29 05:44:00 2026 by rpki-client