$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft File: oiiPiWTWFpqHlfL07wXg1ebhOwk.mft (raw, json) Hash identifier: SHcS+Ptxw2/D7sMBu9uNsh39oJr2XZIAyLw0viUq2p4= Subject key identifier: B1:2B:7C:D6:19:7C:8A:1B:62:73:BB:5C:F3:F2:80:95:7C:74:3D:8B Authority key identifier: A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 Certificate issuer: /CN=A91FB68C/serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft Manifest number: 0120 Signing time: Mon 27 Jul 2026 08:02:30 +0000 Manifest this update: Mon 27 Jul 2026 08:02:29 +0000 Manifest next update: Mon 03 Aug 2026 08:02:29 +0000 Files and hashes: 1: oiiPiWTWFpqHlfL07wXg1ebhOwk.crl (hash: qJfWwZAKbL4DDrFr4uGPu+k5GRblDNAUDgVwpAcPcII=) 2: 965254F8278811F09217002CC4F9AE02.roa (hash: 0RhsOifNGasCmCxCAJFq65+7Iqu3gbPwoj7AcEDMVxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB68C, serialNumber=A2288F8964D6169A8795F2F4EF05E0D5E6E13B09 Validity Not Before: Jul 27 08:02:29 2026 GMT Not After : Aug 3 08:02:29 2026 GMT Subject: CN=6a671095-150d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:66:5d:d3:97:e8:62:6c:df:e5:62:4e:2f: b0:c9:eb:26:ab:8b:60:ab:19:48:cc:2b:f8:94:7b: a4:f9:e0:3d:0b:3d:b2:4f:e0:ac:7d:87:3b:01:4d: 0a:44:85:7c:2c:f8:1c:00:80:3b:6f:5b:e1:94:68: 69:31:52:c4:26:48:b8:96:0f:f4:cd:d5:67:e2:41: 80:76:ad:ee:30:97:c0:18:53:45:8e:8a:94:e1:32: 1f:f5:70:e8:66:66:ba:f6:64:b6:fe:6d:81:7f:d2: ef:24:e8:dd:8c:9a:6a:12:78:57:d6:fd:5d:13:ce: 10:7e:73:ef:73:fc:9b:5f:02:26:5e:f5:03:90:10: c9:6d:f5:50:16:eb:e0:96:85:71:56:2d:fe:9e:d6: a5:e9:d3:d8:f0:c5:2e:d4:20:8c:ee:03:8d:d9:d5: 68:94:6d:77:d7:55:ff:12:94:dc:97:cb:03:9a:b0: 45:70:41:ab:9b:7a:40:76:98:24:ea:a9:f5:ed:2e: 30:0b:53:14:9b:cb:c0:be:e1:ed:6f:b5:20:46:85: e2:09:29:9d:d9:4b:f3:66:b9:77:9b:30:45:44:52: 90:5c:05:7c:1c:23:90:96:50:d3:64:17:1c:fc:9a: 7e:7b:5e:d2:2d:02:67:c2:a8:4e:57:d5:2c:2e:91: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2B:7C:D6:19:7C:8A:1B:62:73:BB:5C:F3:F2:80:95:7C:74:3D:8B X509v3 Authority Key Identifier: keyid:A2:28:8F:89:64:D6:16:9A:87:95:F2:F4:EF:05:E0:D5:E6:E1:3B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiiPiWTWFpqHlfL07wXg1ebhOwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB68C/17D103A8EAB211EF846F1337C4F9AE02/oiiPiWTWFpqHlfL07wXg1ebhOwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5d:fe:6a:ac:0c:4e:06:ed:19:9e:8c:0a:0f:13:0a:95:cc: 42:03:24:e9:2b:3b:b7:78:73:39:f2:df:83:81:e4:f4:26:07: 07:59:05:7c:0e:d6:7e:d0:4e:25:44:f5:53:1e:97:aa:7b:36: 2c:4c:da:64:fe:d4:e5:e0:06:44:48:a0:f6:3d:43:07:fa:ca: 87:b0:fd:0b:38:13:b0:6e:95:c3:fb:c3:ea:4b:21:b2:73:3b: 38:d3:5c:c2:d0:53:b7:78:3a:49:45:94:ce:46:d7:71:d3:75: 4e:f9:70:19:cf:11:76:71:0e:64:68:95:12:05:5c:e7:d1:2a: 56:8f:1c:b7:ca:8e:e5:02:f7:4b:72:21:0c:3d:2f:fe:ba:bf: 4c:4e:41:e2:d2:6c:32:13:12:c5:6f:62:02:af:c9:b5:ea:9c: 42:4a:45:2b:b5:a2:c3:d3:f4:14:45:fb:4c:05:91:be:47:a7: 6c:40:0b:47:32:56:1e:5b:34:50:e8:79:23:85:2f:d7:43:68: 95:66:ef:50:d1:ee:ac:61:07:19:37:91:8a:12:1d:c4:63:6f: 4b:b3:66:96:04:95:35:bf:53:9b:1b:b3:d5:46:c2:b9:d5:2a: 0f:31:75:88:a0:f5:38:99:f1:3c:f5:b3:5f:b8:9d:ea:19:db: a1:44:e7:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI2OEMxMTAvBgNVBAUTKEEyMjg4Rjg5NjRENjE2OUE4Nzk1RjJGNEVGMDVFMEQ1 RTZFMTNCMDkwHhcNMjYwNzI3MDgwMjI5WhcNMjYwODAzMDgwMjI5WjAYMRYwFAYD VQQDEw02YTY3MTA5NS0xNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YFmXdOX6GJs3+ViTi+wyesmq4tgqxlIzCv4lHuk+eA9Cz2yT+CsfYc7AU0K RIV8LPgcAIA7b1vhlGhpMVLEJki4lg/0zdVn4kGAdq3uMJfAGFNFjoqU4TIf9XDo Zma69mS2/m2Bf9LvJOjdjJpqEnhX1v1dE84QfnPvc/ybXwImXvUDkBDJbfVQFuvg loVxVi3+ntal6dPY8MUu1CCM7gON2dVolG1311X/EpTcl8sDmrBFcEGrm3pAdpgk 6qn17S4wC1MUm8vAvuHtb7UgRoXiCSmd2UvzZrl3mzBFRFKQXAV8HCOQllDTZBcc /Jp+e17SLQJnwqhOV9UsLpGANwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLErfNYZ fIobYnO7XPPygJV8dD2LMB8GA1UdIwQYMBaAFKIoj4lk1haah5Xy9O8F4NXm4TsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjY4Qy8xN0QxMDNBOEVB QjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0ZwcUhsZkwwN3dYZzFlYmhP d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29paVBpV1RXRnBxSGxmTDA3d1hnMWViaE93ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY4Qy8xN0QxMDNBOEVBQjIxMUVGODQ2RjEzMzdDNEY5QUUwMi9vaWlQaVdUV0Zw cUhsZkwwN3dYZzFlYmhPd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbF3+aqwMTgbtGZ6MCg8TCpXMQgMk6Ss7t3hzOfLfg4Hk9CYHB1kFfA7WftBO JUT1Ux6Xqns2LEzaZP7U5eAGREig9j1DB/rKh7D9CzgTsG6Vw/vD6kshsnM7ONNc wtBTt3g6SUWUzkbXcdN1TvlwGc8RdnEOZGiVEgVc59EqVo8ct8qO5QL3S3IhDD0v /rq/TE5B4tJsMhMSxW9iAq/JteqcQkpFK7Wiw9P0FEX7TAWRvkenbEALRzJWHls0 UOh5I4Uv10NolWbvUNHurGEHGTeRihIdxGNvS7NmlgSVNb9Tmxuz1UbCudUqDzF1 iKD1OJnxPPWzX7id6hnboUTn/Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:24 2026 by rpki-client