$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: R/ofD+1XK86G+z82Oqwqo3RNhTOg/L9TalhyBeHLnQo= Subject key identifier: 8F:0D:53:C1:7B:52:7E:F5:3A:F9:8D:14:1D:D3:FA:DE:4B:2F:2C:4C Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1DE8 Signing time: Tue 12 May 2026 16:06:14 +0000 Manifest this update: Tue 12 May 2026 16:06:13 +0000 Manifest next update: Tue 19 May 2026 16:06:13 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: BMPVB4d1+r6EfIRhTM+A2n2PgSar9vseoYYLxK1S5kU=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: x37ecenCy3jbXj6Gv2z3koAXtHNV/RyDae1qY9A2y4M=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: k6CtfEJwOIjqwI8wE1ffbbr6dcu91HX2CafEBgOBGsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7673 (0x1df9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: May 12 16:06:13 2026 GMT Not After : May 19 16:06:13 2026 GMT Subject: CN=6a034ff6-51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:70:40:02:0c:76:59:e4:d3:cf:1c:3c:eb: 56:f2:28:00:03:77:bc:ee:ec:a0:c0:b9:ca:8d:11: 6a:c2:41:4a:f7:8f:92:10:09:e7:b6:50:82:9d:61: c1:8e:1c:c8:09:d3:9a:1a:d4:92:97:86:1a:c0:31: 25:af:75:61:bd:53:25:c2:18:16:97:31:1c:4b:58: 57:9c:ab:93:df:12:a8:c6:13:b6:37:30:99:2a:cd: a5:d9:65:a1:e8:f8:ad:e7:6c:9f:33:7d:b5:7c:99: 2b:a4:e0:1b:5d:1c:8a:9c:33:be:7e:fb:c9:8b:de: 84:5c:2e:70:51:1f:37:fe:5d:b9:f0:1a:84:03:04: b9:1c:8b:53:8e:d9:c7:a3:c1:0b:e8:45:d8:b4:c6: 3d:f0:8c:d4:77:c0:a2:4b:17:96:53:05:36:b3:dd: 3d:a6:41:22:7e:09:58:fc:5e:0c:26:0c:1f:83:0d: bb:cb:5e:c0:5c:16:0a:23:b2:4f:cd:3b:cc:60:ab: 89:1a:db:76:3e:67:17:dd:a5:ac:92:0d:7e:19:b4: ed:88:9f:04:b6:ea:13:df:46:dc:e3:62:f0:fd:d2: 6a:9c:ac:be:a8:1d:7d:44:c9:0b:14:e7:93:c8:ee: 27:fa:66:90:89:7d:dc:d4:24:da:54:7d:ee:ed:0b: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:53:C1:7B:52:7E:F5:3A:F9:8D:14:1D:D3:FA:DE:4B:2F:2C:4C X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a1:53:95:3e:3b:c2:c9:d8:2a:b2:e6:83:00:6b:06:c5:2f: 22:2d:c7:3d:5f:b3:f4:94:cc:12:20:83:bb:1a:52:a3:06:c2: 9a:c6:e9:9a:0f:12:7a:38:91:e8:df:35:35:70:73:9c:8a:e2: 24:f6:63:e4:89:be:fd:84:a1:54:66:d0:36:13:7c:5b:9f:38: 50:04:63:27:f0:f7:d2:8e:da:b4:ad:b7:d8:41:e9:5d:c5:33: 72:19:a9:e3:48:1e:90:06:5e:1f:20:0d:a4:c2:44:1a:b7:ba: 5a:5a:6d:2a:93:07:d7:f1:68:b0:29:25:99:7c:e5:56:ab:26: 93:f5:4d:37:b0:51:fd:63:55:07:2d:b1:98:53:e2:dd:e0:5b: 23:05:4a:c9:3a:7f:ae:b1:f1:9b:1e:e6:ff:1e:17:ac:a8:8b: 58:c0:a4:95:02:bb:c0:fc:f8:ec:d5:e8:9e:53:3a:b9:77:0a: d2:8b:d5:83:64:ed:8b:ca:8e:52:09:06:44:9a:65:cf:ac:55: 0f:4e:1e:28:18:ca:b0:75:cf:60:96:18:1f:56:2e:41:0d:d7: c9:68:d9:11:40:34:bb:03:bd:a6:16:35:7c:fb:bd:f8:af:bd: 12:6d:79:51:f2:00:d3:54:7c:88:95:2b:fd:17:ad:88:f2:80: ba:74:29:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwNTEyMTYwNjEzWhcNMjYwNTE5MTYwNjEzWjAYMRYwFAYD VQQDEw02YTAzNGZmNi01MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp1wQAIMdlnk088cPOtW8igAA3e87uygwLnKjRFqwkFK94+SEAnntlCCnWHB jhzICdOaGtSSl4YawDElr3VhvVMlwhgWlzEcS1hXnKuT3xKoxhO2NzCZKs2l2WWh 6Pit52yfM321fJkrpOAbXRyKnDO+fvvJi96EXC5wUR83/l258BqEAwS5HItTjtnH o8EL6EXYtMY98IzUd8CiSxeWUwU2s909pkEifglY/F4MJgwfgw27y17AXBYKI7JP zTvMYKuJGtt2PmcX3aWskg1+GbTtiJ8EtuoT30bc42Lw/dJqnKy+qB19RMkLFOeT yO4n+maQiX3c1CTaVH3u7Qs52QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8NU8F7 Un71OvmNFB3T+t5LLyxMMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdqFTlT47wsnYKrLmgwBrBsUvIi3HPV+z9JTMEiCDuxpSowbCmsbpmg8SejiR 6N81NXBznIriJPZj5Im+/YShVGbQNhN8W584UARjJ/D30o7atK232EHpXcUzchmp 40gekAZeHyANpMJEGre6WlptKpMH1/FosCklmXzlVqsmk/VNN7BR/WNVBy2xmFPi 3eBbIwVKyTp/rrHxmx7m/x4XrKiLWMCklQK7wPz47NXonlM6uXcK0ovVg2Tti8qO UgkGRJplz6xVD04eKBjKsHXPYJYYH1YuQQ3XyWjZEUA0uwO9phY1fPu9+K+9Em15 UfIA01R8iJUr/RetiPKAunQpYQ== -----END CERTIFICATE-----Generated at Wed May 13 13:15:33 2026 by rpki-client