$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json) Hash identifier: P7ay6ON3hW3AKvSiIGr2fq+W1083A3qf4xM62ZxvGhA= Subject key identifier: 9E:2A:57:E6:13:22:24:1D:D5:7C:DB:00:2F:D7:A2:3E:A6:B1:90:1F Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft Manifest number: 08B3 Signing time: Sun 26 Jul 2026 21:07:03 +0000 Manifest this update: Sun 26 Jul 2026 21:07:03 +0000 Manifest next update: Sun 02 Aug 2026 21:07:03 +0000 Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: iYnp4QKfrAmAviJ9mWJ9O4JlShaMjP1HAHXytlObTwU=) 2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1 Validity Not Before: Jul 26 21:07:03 2026 GMT Not After : Aug 2 21:07:03 2026 GMT Subject: CN=6a6676f7-17b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:f0:86:28:0c:cc:f7:32:d4:59:b2:d6:eb: 85:d9:87:89:1d:09:7e:11:ed:e9:09:25:e6:d9:e4: 40:6b:d7:41:2b:54:35:35:03:59:f5:ee:31:fb:f1: b8:1c:2d:c3:95:b5:56:6b:f4:5d:45:4f:5b:11:83: 61:bc:fa:c1:8a:fc:24:bd:f7:f2:1c:8a:46:12:31: 48:a7:c2:56:c1:10:5b:f2:bf:1d:3e:ed:7b:d6:44: 2b:c6:d8:b4:19:02:33:db:82:da:be:0e:14:76:32: 4e:30:6c:77:3b:df:78:df:46:ea:ce:2d:25:bc:47: 94:61:13:60:e3:8f:c3:31:5b:f2:a0:a8:ed:16:2a: fe:85:e6:8b:c0:11:a5:55:ea:30:8c:7c:f3:a3:f4: 3b:ac:66:56:86:e5:aa:22:eb:03:4e:ce:0c:49:c6: f5:77:3d:c6:72:aa:ac:76:b0:9a:14:42:a9:d3:bf: d3:3b:15:85:ce:68:06:78:25:78:2d:c0:ea:c2:ec: 64:e2:e1:ef:bb:80:b6:22:28:72:5c:6b:a5:20:8d: 25:4a:19:e9:da:5b:06:13:18:92:13:dd:d8:52:9d: 70:29:ca:25:ee:3b:a5:18:53:fd:c1:ed:b8:ef:9f: 4e:11:20:65:ac:a2:55:76:36:0a:eb:d5:10:2f:e9: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2A:57:E6:13:22:24:1D:D5:7C:DB:00:2F:D7:A2:3E:A6:B1:90:1F X509v3 Authority Key Identifier: keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:eb:76:c0:dd:37:9b:9b:06:39:bc:84:24:f8:c8:f5:2a:34: 43:3e:7a:45:31:32:ae:d3:8e:96:54:eb:d5:34:e0:1d:68:b7: a8:2b:f4:37:51:9a:c6:b9:ce:03:b3:06:77:70:a7:0b:53:5c: 27:f6:9f:30:39:9f:60:f2:36:0e:d8:55:ee:57:6e:f3:8d:fd: f5:11:d4:c0:93:e5:79:bd:ee:46:59:4c:b3:74:9a:80:8b:2c: ad:e3:c9:87:46:84:d0:73:3d:58:29:60:f4:9f:d0:2c:ee:80: 17:0d:fd:6d:a8:2c:ad:4d:16:12:9b:b8:89:a6:55:c9:61:b9: 76:b5:52:f7:cb:a4:51:17:32:c7:68:a0:36:74:84:9c:2d:f6: d7:c7:08:e6:8d:54:bb:9a:ac:66:36:db:50:ff:32:63:9e:50: 08:76:1e:00:9b:fe:33:9c:7a:35:7c:8c:8c:ef:b2:fd:45:e5: c7:74:26:f0:86:da:70:54:ac:44:e7:50:fa:49:1a:18:be:3c: f4:19:9c:5c:4e:84:94:5f:4d:a0:3f:2d:41:7d:e8:75:7a:23: e3:d8:1b:aa:41:13:17:59:68:49:e9:85:53:24:5d:f9:bb:4f: 71:83:86:9c:23:0f:2b:2f:fc:2a:d9:b9:fc:4c:6a:bd:15:14: ba:84:4a:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4 NTcwMkRBQjEwHhcNMjYwNzI2MjEwNzAzWhcNMjYwODAyMjEwNzAzWjAYMRYwFAYD VQQDEw02YTY2NzZmNy0xN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HHwhigMzPcy1Fmy1uuF2YeJHQl+Ee3pCSXm2eRAa9dBK1Q1NQNZ9e4x+/G4 HC3DlbVWa/RdRU9bEYNhvPrBivwkvffyHIpGEjFIp8JWwRBb8r8dPu171kQrxti0 GQIz24Lavg4UdjJOMGx3O99430bqzi0lvEeUYRNg44/DMVvyoKjtFir+heaLwBGl VeowjHzzo/Q7rGZWhuWqIusDTs4MScb1dz3GcqqsdrCaFEKp07/TOxWFzmgGeCV4 LcDqwuxk4uHvu4C2IihyXGulII0lShnp2lsGExiSE93YUp1wKcol7julGFP9we24 759OESBlrKJVdjYK69UQL+kEcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4qV+YT IiQd1XzbAC/Xoj6msZAfMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAyNC9EMzNBNDc5NEYxODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04w MENaX3AyU04wXy1GY0MyckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAset2wN03m5sGObyEJPjI9So0Qz56RTEyrtOOllTr1TTgHWi3qCv0N1GaxrnO A7MGd3CnC1NcJ/afMDmfYPI2DthV7ldu84399RHUwJPleb3uRllMs3SagIssrePJ h0aE0HM9WClg9J/QLO6AFw39bagsrU0WEpu4iaZVyWG5drVS98ukURcyx2igNnSE nC3218cI5o1Uu5qsZjbbUP8yY55QCHYeAJv+M5x6NXyMjO+y/UXlx3Qm8IbacFSs ROdQ+kkaGL489BmcXE6ElF9NoD8tQX3odXoj49gbqkETF1loSemFUyRd+btPcYOG nCMPKy/8Ktm5/ExqvRUUuoRKkw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:13 2026 by rpki-client