$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: ZU9bysmgby8ZQzeNpWNq237anT47TRNob+vOqtUMDLE= Subject key identifier: 1C:A6:F8:91:4D:B7:83:D2:AA:B9:E5:9B:E5:3F:7C:96:F1:69:23:D9 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D39 Signing time: Tue 12 May 2026 18:09:58 +0000 Manifest this update: Tue 12 May 2026 18:09:57 +0000 Manifest next update: Tue 19 May 2026 18:09:57 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: 0RJJL23lm/loHIKKH0WbiKiIUk8vzb3iLGLnXF47S80=) 2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=) 3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: May 12 18:09:57 2026 GMT Not After : May 19 18:09:57 2026 GMT Subject: CN=6a036cf6-d434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:39:e3:cd:51:fb:3f:34:74:ff:dd:2e:52: 66:c1:e1:d8:b0:9b:d1:2f:97:6e:49:40:d4:a9:78: 7b:94:33:22:7d:21:e0:bf:d5:83:67:3b:94:83:c9: 59:26:e9:83:de:c5:03:41:14:62:40:9f:c1:66:1c: 5e:62:53:7d:f4:7b:9e:3c:5e:30:a0:ab:46:b1:be: 87:dd:37:06:7b:53:65:85:17:22:c0:2a:cf:91:72: 2c:29:7b:db:34:2c:25:ba:9b:93:38:dd:3d:b9:5e: e7:ab:37:9c:a5:4a:14:62:ed:1a:fb:66:22:3f:e9: 76:28:85:29:c6:f1:87:8c:ea:60:4f:94:a4:ab:0f: 32:3d:91:30:d5:f3:30:74:38:0e:96:48:6a:d2:94: ab:5e:79:5a:84:25:92:c7:e1:8c:59:98:42:e7:b9: 4a:14:0b:5f:bb:93:79:01:3d:78:8f:21:83:73:eb: 4e:84:01:96:e1:55:f5:26:b7:95:90:fa:83:b0:ad: 46:2e:52:c0:ae:e0:4a:72:e4:a4:32:d6:2e:be:c9: 66:54:38:7e:b1:03:64:95:a0:c7:73:22:b8:20:0a: c6:70:b1:ba:2c:22:c2:c5:5d:cf:e3:90:8a:8f:18: 0c:b8:f6:e1:cc:92:3d:ab:a4:8f:f0:00:95:bf:b3: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A6:F8:91:4D:B7:83:D2:AA:B9:E5:9B:E5:3F:7C:96:F1:69:23:D9 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8c:db:03:40:ce:c1:a0:79:c6:a0:f4:33:66:be:22:3b:fa: 26:9c:47:48:8a:fe:77:33:93:40:09:4f:9b:4e:06:38:2a:12: 2b:ce:a5:8d:97:02:b3:ba:9e:32:42:6e:6e:cb:09:0b:7e:e9: 8f:e6:5c:4e:be:05:2d:0a:4d:b8:75:cf:eb:93:64:86:ad:58: 96:59:67:28:51:75:d5:66:4a:6a:8a:0f:d2:28:6c:81:22:4a: fc:12:f8:f7:0e:c8:f6:ad:9e:fd:39:47:53:f5:42:d2:09:bf: 8c:bb:61:bd:e5:03:7c:9a:16:ab:25:54:81:f5:d4:b0:c9:7b: 62:44:56:58:34:f5:13:df:79:cd:86:f6:74:82:12:4a:67:6c: 0f:a3:8c:f7:bb:20:6a:8d:d8:27:3a:02:83:60:14:8f:a7:3a: 40:3d:28:3d:9e:57:89:3e:8f:a9:7c:10:f5:8d:e5:b6:98:e2: 86:9e:49:a5:46:34:af:86:da:87:81:42:20:c4:3f:8a:25:f1: 09:42:5a:ad:6e:5d:d1:96:9f:a9:76:7f:59:f3:28:c8:62:56: a7:c1:db:c5:c8:9c:f9:48:53:83:01:85:b4:5f:df:15:8a:81: 50:95:c9:a2:70:47:8c:b8:e6:34:b0:a4:ec:8a:85:ed:83:3b: f7:bf:bf:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwNTEyMTgwOTU3WhcNMjYwNTE5MTgwOTU3WjAYMRYwFAYD VQQDEw02YTAzNmNmNi1kNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0o5481R+z80dP/dLlJmweHYsJvRL5duSUDUqXh7lDMifSHgv9WDZzuUg8lZ JumD3sUDQRRiQJ/BZhxeYlN99HuePF4woKtGsb6H3TcGe1NlhRciwCrPkXIsKXvb NCwlupuTON09uV7nqzecpUoUYu0a+2YiP+l2KIUpxvGHjOpgT5Skqw8yPZEw1fMw dDgOlkhq0pSrXnlahCWSx+GMWZhC57lKFAtfu5N5AT14jyGDc+tOhAGW4VX1JreV kPqDsK1GLlLAruBKcuSkMtYuvslmVDh+sQNklaDHcyK4IArGcLG6LCLCxV3P45CK jxgMuPbhzJI9q6SP8ACVv7OTBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBym+JFN t4PSqrnlm+U/fJbxaSPZMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlIzbA0DOwaB5xqD0M2a+Ijv6JpxHSIr+dzOTQAlPm04GOCoSK86ljZcCs7qe MkJubssJC37pj+ZcTr4FLQpNuHXP65Nkhq1YlllnKFF11WZKaooP0ihsgSJK/BL4 9w7I9q2e/TlHU/VC0gm/jLthveUDfJoWqyVUgfXUsMl7YkRWWDT1E995zYb2dIIS SmdsD6OM97sgao3YJzoCg2AUj6c6QD0oPZ5XiT6PqXwQ9Y3ltpjihp5JpUY0r4ba h4FCIMQ/iiXxCUJarW5d0ZafqXZ/WfMoyGJWp8Hbxcic+UhTgwGFtF/fFYqBUJXJ onBHjLjmNLCk7IqF7YM797+/Fw== -----END CERTIFICATE-----Generated at Wed May 13 03:44:13 2026 by rpki-client