$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: DFQKhzsdK6BPqEs+4jc+8cP6u8iAZpeuUmv5/hHcxSI= Subject key identifier: B5:54:A6:C4:CA:7A:BD:24:12:A6:68:AF:12:2C:E6:4A:39:28:FF:01 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 08BF Signing time: Tue 12 May 2026 20:32:04 +0000 Manifest this update: Tue 12 May 2026 20:32:03 +0000 Manifest next update: Tue 19 May 2026 20:32:03 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: wIqzjw4XmIQVxl7r5LgL9SloVnjjo3YWB7COtGgzwSw=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: May 12 20:32:03 2026 GMT Not After : May 19 20:32:03 2026 GMT Subject: CN=6a038e44-dbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:f7:37:d9:8f:46:cf:67:22:26:87:28:3c: f8:00:e6:8e:fb:14:cb:1c:28:3a:80:df:99:74:c1: 3a:6d:25:7d:7f:68:29:41:39:2f:80:b3:0d:6c:93: 07:2d:88:7c:80:bb:3c:01:f7:21:f5:83:6f:09:98: 17:2c:03:2b:dd:d2:5b:94:c0:8c:6c:a1:52:bb:ce: 29:32:07:47:b8:c7:a4:15:59:a1:66:dd:5d:7d:cf: f3:cd:8c:a5:1a:6d:8b:76:20:db:f8:56:e5:fb:54: 5c:94:4f:62:d0:ff:77:f2:c0:0d:5b:06:81:f8:79: 4c:d8:56:6a:b7:8a:f2:b7:aa:5b:40:4e:1d:cc:2c: 92:4e:9c:46:12:ad:30:fd:ae:fe:35:4b:03:c3:d1: 76:1d:6a:2e:4a:62:88:56:20:bc:2d:44:f1:34:d1: 5a:dd:ec:d5:12:14:f3:11:bb:82:d5:aa:63:d7:36: 37:1f:3f:8e:dd:8b:85:98:ad:f7:f9:bb:17:ad:92: 2b:4f:ad:26:b3:92:18:84:15:01:52:37:dd:72:7e: e4:f6:9e:a0:01:13:ee:06:ce:77:9e:c4:67:5c:9e: d5:02:a0:0c:59:bb:38:1b:4f:c5:40:83:21:44:3b: 46:71:9f:2a:77:27:3e:0f:82:a6:a9:cc:67:a4:16: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:A6:C4:CA:7A:BD:24:12:A6:68:AF:12:2C:E6:4A:39:28:FF:01 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8e:ab:4b:9b:d8:84:24:be:59:5b:80:3c:21:9e:6d:48:72: 87:28:7c:de:0a:50:fe:be:ba:c0:fc:7b:28:82:f8:a0:3e:66: e2:34:7e:df:b6:12:a8:30:ed:d5:6e:25:d7:04:91:51:61:ca: 69:1a:96:77:ec:cd:87:b7:e5:97:53:f9:4d:3d:71:2d:0b:ed: ba:49:97:f1:fb:23:a4:91:91:9a:68:9d:45:29:90:63:5b:93: 45:4e:94:2f:a7:97:79:77:fa:a2:40:ea:97:cd:3b:29:aa:dd: 84:c4:86:0b:10:d8:ec:88:f6:57:02:26:4d:ba:7f:db:bc:e6: a3:5e:56:4a:35:c7:5b:72:70:fb:a5:7c:91:99:39:60:27:ee: 23:a8:9d:1e:be:d4:d1:68:ca:6e:18:c1:63:e2:d7:ca:38:0f: 4a:da:21:52:4a:03:96:8f:70:29:d4:20:27:28:2d:23:43:a9: a7:78:81:61:18:1c:bd:8f:17:03:8e:f4:ea:a2:8a:45:cf:01: 8c:d9:f0:57:ed:76:ac:f3:d7:26:4e:da:00:26:a5:bc:c6:b8: bd:72:37:4e:c8:cc:71:dd:d4:71:30:3d:b6:ce:f7:ce:6a:ba: 6f:53:57:4a:38:c0:57:7c:e7:03:b5:b5:04:81:de:fa:54:f2: 5f:93:ac:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYwNTEyMjAzMjAzWhcNMjYwNTE5MjAzMjAzWjAYMRYwFAYD VQQDEw02YTAzOGU0NC1kYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE33N9mPRs9nIiaHKDz4AOaO+xTLHCg6gN+ZdME6bSV9f2gpQTkvgLMNbJMH LYh8gLs8Afch9YNvCZgXLAMr3dJblMCMbKFSu84pMgdHuMekFVmhZt1dfc/zzYyl Gm2LdiDb+Fbl+1RclE9i0P938sANWwaB+HlM2FZqt4ryt6pbQE4dzCySTpxGEq0w /a7+NUsDw9F2HWouSmKIViC8LUTxNNFa3ezVEhTzEbuC1apj1zY3Hz+O3YuFmK33 +bsXrZIrT60ms5IYhBUBUjfdcn7k9p6gARPuBs53nsRnXJ7VAqAMWbs4G0/FQIMh RDtGcZ8qdyc+D4KmqcxnpBbEQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVUpsTK er0kEqZorxIs5ko5KP8BMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh46rS5vYhCS+WVuAPCGebUhyhyh83gpQ/r66wPx7KIL4oD5m4jR+37YSqDDt 1W4l1wSRUWHKaRqWd+zNh7fll1P5TT1xLQvtukmX8fsjpJGRmmidRSmQY1uTRU6U L6eXeXf6okDql807KardhMSGCxDY7Ij2VwImTbp/27zmo15WSjXHW3Jw+6V8kZk5 YCfuI6idHr7U0WjKbhjBY+LXyjgPStohUkoDlo9wKdQgJygtI0Opp3iBYRgcvY8X A4706qKKRc8BjNnwV+12rPPXJk7aACalvMa4vXI3TsjMcd3UcTA9ts73zmq6b1NX SjjAV3znA7W1BIHe+lTyX5OsYg== -----END CERTIFICATE-----Generated at Wed May 13 20:18:04 2026 by rpki-client