$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json) Hash identifier: n5Rpawe0QT5N8I7NrL8rvNx2ao7JirrJw2PWROw8lmg= Subject key identifier: 34:65:A4:0B:B0:E8:D2:61:53:E3:7A:EC:E0:4C:53:05:9A:6D:90:C4 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft Manifest number: 024C Signing time: Wed 13 May 2026 02:28:49 +0000 Manifest this update: Wed 13 May 2026 02:28:49 +0000 Manifest next update: Wed 20 May 2026 02:28:49 +0000 Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: JUjsCzhLQFhK1RIknu+KVAz/68Ck8FuSxI6XTBl8A/4=) 2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: May 13 02:28:49 2026 GMT Not After : May 20 02:28:49 2026 GMT Subject: CN=6a03e1e1-4bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:c9:05:a3:73:30:cc:cf:10:f2:f4:3a:3d: d1:78:d4:d1:bb:9e:d5:2b:ba:30:8f:28:dc:7e:17: 1b:37:32:3e:a0:ef:81:14:f0:7e:98:9f:66:42:79: 1f:a4:ca:d7:25:4a:69:f2:d5:48:db:d7:dc:59:f0: fd:09:be:fc:7d:e2:4a:32:f8:e6:c3:69:4c:90:56: ec:e2:be:c6:06:8c:a7:ab:cf:96:fc:ee:55:e6:d9: b0:cd:5d:d4:69:54:4f:c9:8b:89:f8:bf:c0:2d:d9: cd:70:5d:4d:ab:88:c4:6f:3e:09:0c:ed:30:63:10: d8:bd:cd:e8:93:91:92:07:c5:22:a6:e4:8b:d2:8b: 2c:a1:9c:7b:87:91:f6:a2:c3:26:f9:43:dc:50:7f: 24:7f:a9:c0:e3:f7:d7:2f:0c:83:df:0d:54:36:63: 43:68:ba:0b:de:dc:cb:26:d6:c2:9d:a0:7a:ef:59: 41:bd:42:fa:01:2e:e4:7a:01:c8:a9:05:32:80:3e: 04:c5:9e:07:50:21:ce:0f:68:16:35:86:06:c6:cd: 9b:53:78:d2:60:22:8a:e0:5a:30:8b:16:f4:72:9c: 4c:8e:c6:ee:44:74:f0:58:0d:30:4f:4a:75:c9:a6: 4f:2d:ba:57:5e:73:93:73:9a:1a:f2:2b:76:ce:32: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:65:A4:0B:B0:E8:D2:61:53:E3:7A:EC:E0:4C:53:05:9A:6D:90:C4 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a2:de:9f:e8:09:fe:18:06:57:ba:52:6b:94:8f:05:c4:88: e1:87:80:8a:d1:98:ac:05:2d:71:24:ba:96:3f:17:2a:e7:e5: 9b:c6:08:68:34:b4:eb:55:1c:db:cf:e3:fa:e6:92:25:96:dd: ad:06:d2:02:b6:76:14:d3:8b:76:05:d2:8b:5e:6e:4b:ca:f6: 19:4d:5f:74:67:f9:b6:7b:a9:79:59:2c:e1:cb:d1:75:ca:3f: f7:e4:08:3d:81:9b:c0:e7:06:b9:c2:ed:38:03:c9:2e:bf:6f: 57:32:12:7d:af:f2:30:dc:72:ac:42:69:13:4c:7f:3b:d7:35: a1:6e:b5:8a:cc:dd:a3:16:79:0d:20:18:5b:a5:51:55:11:31: 59:2d:f6:4a:fc:84:9b:2f:59:d9:4c:ca:ae:ba:55:67:71:12: 44:7c:d7:45:c8:dd:ad:5b:c7:72:eb:9e:4f:f0:5d:0c:ac:13: 13:43:b8:c9:59:32:e1:89:86:7e:7f:59:c0:bb:d1:35:3c:f2: 1e:cc:e1:7e:72:98:c9:88:6a:e1:8f:d2:76:6c:23:30:2c:e2: d7:78:04:70:17:ad:da:6b:7d:8b:78:19:d4:b6:ac:b2:95:23: d3:e2:65:9d:63:90:ee:33:55:26:3c:63:80:1f:1f:b9:10:8c: c5:3d:49:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjYwNTEzMDIyODQ5WhcNMjYwNTIwMDIyODQ5WjAYMRYwFAYD VQQDEw02YTAzZTFlMS00YmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30DJBaNzMMzPEPL0Oj3ReNTRu57VK7owjyjcfhcbNzI+oO+BFPB+mJ9mQnkf pMrXJUpp8tVI29fcWfD9Cb78feJKMvjmw2lMkFbs4r7GBoynq8+W/O5V5tmwzV3U aVRPyYuJ+L/ALdnNcF1Nq4jEbz4JDO0wYxDYvc3ok5GSB8UipuSL0ossoZx7h5H2 osMm+UPcUH8kf6nA4/fXLwyD3w1UNmNDaLoL3tzLJtbCnaB671lBvUL6AS7kegHI qQUygD4ExZ4HUCHOD2gWNYYGxs2bU3jSYCKK4Fowixb0cpxMjsbuRHTwWA0wT0p1 yaZPLbpXXnOTc5oa8it2zjJ/rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRlpAuw 6NJhU+N67OBMUwWabZDEMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK SzJoLXpHUU95RjNDbnlBWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjaLen+gJ/hgGV7pSa5SPBcSI4YeAitGYrAUtcSS6lj8XKuflm8YIaDS061Uc 28/j+uaSJZbdrQbSArZ2FNOLdgXSi15uS8r2GU1fdGf5tnupeVks4cvRdco/9+QI PYGbwOcGucLtOAPJLr9vVzISfa/yMNxyrEJpE0x/O9c1oW61iszdoxZ5DSAYW6VR VRExWS32SvyEmy9Z2UzKrrpVZ3ESRHzXRcjdrVvHcuueT/BdDKwTE0O4yVky4YmG fn9ZwLvRNTzyHszhfnKYyYhq4Y/SdmwjMCzi13gEcBet2mt9i3gZ1LasspUj0+Jl nWOQ7jNVJjxjgB8fuRCMxT1JdQ== -----END CERTIFICATE-----Generated at Wed May 13 06:30:17 2026 by rpki-client