$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: wbwASrlBnf93I7nb+Mxb4IZBVVWi0sgt0vQkXnlIJ9E= Subject key identifier: A1:E4:E5:AF:CD:D0:AF:F4:26:A0:16:E4:0B:B7:8A:6B:D7:02:F0:3C Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0683 Signing time: Tue 12 May 2026 22:36:33 +0000 Manifest this update: Tue 12 May 2026 22:36:32 +0000 Manifest next update: Tue 19 May 2026 22:36:32 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: K2MuQv8KcJarHsTt2VqapoJgihEHw4eNVtKYe/gQ5Dk=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: LkWBUiZRF9C2VJ1E3RZPIAtHdVr7r2jvAKoSLz3FinE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: May 12 22:36:32 2026 GMT Not After : May 19 22:36:32 2026 GMT Subject: CN=6a03ab71-03ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:29:54:6c:2a:ff:1a:42:24:37:41:d7:39: 2d:00:6b:ce:16:f4:c9:15:74:b4:79:2b:39:da:2f: b9:90:53:78:56:05:32:e9:19:a7:79:75:9e:b7:fb: d9:73:a1:3e:d5:98:4c:de:e4:e5:ea:c9:ea:ca:06: 42:fe:06:b4:70:20:28:6b:66:0b:59:1d:30:5a:96: 80:49:dd:10:8c:4b:db:8d:89:f1:a7:e3:0a:7c:32: 11:0d:ee:2b:72:48:00:7e:76:90:7d:d4:f9:85:99: 15:4a:80:17:63:10:cb:8a:0a:9c:1e:8f:f9:e2:b3: 96:de:8d:2d:b9:7a:0d:8f:b9:04:bf:df:b9:34:71: 6d:0d:84:23:9f:d6:33:e2:f2:73:d3:44:eb:95:49: 0f:99:f4:4e:9e:f3:6f:f0:88:55:e4:11:e6:f1:ee: 6b:34:36:80:05:94:9e:23:5f:8a:51:50:0f:f9:53: 6e:78:4b:8b:12:3c:f7:a5:38:52:47:f3:0d:c1:61: 57:ef:89:a6:03:01:76:e5:ea:90:42:d8:22:14:50: 45:0f:f5:41:f3:5d:93:2d:ff:e1:f6:8c:cb:4b:59: d3:5b:f4:fc:a3:fc:ee:49:f8:c8:da:d7:e4:55:b0: 7c:0a:ff:7c:f1:4e:06:cb:8e:0e:4f:21:dd:03:32: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E4:E5:AF:CD:D0:AF:F4:26:A0:16:E4:0B:B7:8A:6B:D7:02:F0:3C X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:dc:82:bb:50:bc:c4:c7:64:e6:0a:55:1e:4d:e3:d2:3f:5a: d7:6f:2c:9a:1f:53:d8:60:dc:87:69:c9:f2:42:75:f3:8e:5b: 99:b9:d8:8f:9e:44:84:2f:21:9c:1c:1b:fd:52:3b:5d:b7:24: f1:25:b8:50:33:82:3f:b6:a8:5f:88:39:73:b6:7d:bd:d6:54: 87:86:64:80:65:13:c6:f9:fd:9d:ee:ae:b1:ce:74:94:b1:10: e0:b8:09:ca:94:2a:83:0e:52:b0:95:e1:c2:5a:48:38:93:78: 2d:d8:47:a7:a2:01:6f:46:43:63:9e:fb:42:d1:41:ad:02:ee: 08:cc:9b:39:b0:75:73:47:4b:99:8a:52:48:9d:04:59:43:68: ee:41:a6:73:88:05:70:b2:59:84:cd:41:c9:b3:bf:a0:81:b1: 59:e9:7a:fa:70:d0:05:c7:26:5f:e8:82:47:a4:34:29:71:8a: 90:4f:02:02:e3:2e:55:7f:75:87:bd:12:0e:31:cc:d0:2d:b4: 41:55:b4:78:25:8e:0f:0f:81:a3:3a:14:3f:50:6c:46:fc:07: 8a:dc:08:c6:a0:80:65:0e:bd:74:5a:57:6b:59:80:e7:f0:ef: a4:5e:c4:70:05:39:1a:cc:17:b0:67:d2:39:ce:9a:ad:0e:d6: 54:9f:4b:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjYwNTEyMjIzNjMyWhcNMjYwNTE5MjIzNjMyWjAYMRYwFAYD VQQDEw02YTAzYWI3MS0wM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqYpVGwq/xpCJDdB1zktAGvOFvTJFXS0eSs52i+5kFN4VgUy6RmneXWet/vZ c6E+1ZhM3uTl6snqygZC/ga0cCAoa2YLWR0wWpaASd0QjEvbjYnxp+MKfDIRDe4r ckgAfnaQfdT5hZkVSoAXYxDLigqcHo/54rOW3o0tuXoNj7kEv9+5NHFtDYQjn9Yz 4vJz00TrlUkPmfROnvNv8IhV5BHm8e5rNDaABZSeI1+KUVAP+VNueEuLEjz3pThS R/MNwWFX74mmAwF25eqQQtgiFFBFD/VB812TLf/h9ozLS1nTW/T8o/zuSfjI2tfk VbB8Cv988U4Gy44OTyHdAzIpMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHk5a/N 0K/0JqAW5Au3imvXAvA8MB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJdyCu1C8xMdk5gpVHk3j0j9a128smh9T2GDch2nJ8kJ1845bmbnYj55EhC8h nBwb/VI7Xbck8SW4UDOCP7aoX4g5c7Z9vdZUh4ZkgGUTxvn9ne6usc50lLEQ4LgJ ypQqgw5SsJXhwlpIOJN4LdhHp6IBb0ZDY577QtFBrQLuCMybObB1c0dLmYpSSJ0E WUNo7kGmc4gFcLJZhM1BybO/oIGxWel6+nDQBccmX+iCR6Q0KXGKkE8CAuMuVX91 h70SDjHM0C20QVW0eCWODw+BozoUP1BsRvwHitwIxqCAZQ69dFpXa1mA5/DvpF7E cAU5GswXsGfSOc6arQ7WVJ9LZw== -----END CERTIFICATE-----Generated at Wed May 13 12:31:33 2026 by rpki-client