$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: W54ROi5LBTh/hYR/cR3sphUj83A1TxLWuWVrbppfXos= Subject key identifier: 88:2D:D1:C5:0C:38:A5:9F:C4:5C:03:BB:CF:31:03:FE:98:88:E8:46 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: 99 Signing time: Mon 11 May 2026 07:37:10 +0000 Manifest this update: Mon 11 May 2026 07:37:09 +0000 Manifest next update: Mon 18 May 2026 07:37:09 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: TBlAQZZIT/GO8qIsahqq6xtFQUa5qstjys1s8yoN4dE=) 2: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: ysVuW5LnYi59x1lz18NXRjV3JavVPishhatCefOBZLg=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: V8o99dNNhmaM2c88PY3odEi8XIfBLs9AedcwcTXfAbs=) 4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: PG7OBR6GyNLrIjZOfwPBfDBaGVKv/qZwCkbhTbs1CAg=) 5: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: 377aBWt/4YjE0cdxFMi4oiB5yI0io2fUU0WHhpm9ooo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: May 11 07:37:09 2026 GMT Not After : May 18 07:37:09 2026 GMT Subject: CN=6a018726-d96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:6b:47:03:1b:9b:be:12:b3:57:9c:0b:5b: fd:27:43:f9:1c:8b:d3:75:2e:72:90:09:1d:71:cc: c1:dd:f0:7f:53:9f:35:37:72:f9:0a:47:90:2e:47: d0:8e:63:9d:19:b3:65:69:7d:b6:49:e8:6c:11:4c: a8:16:f1:04:65:05:f0:38:8a:68:65:e8:71:a0:a4: 40:33:af:53:e5:e8:f4:96:62:61:d5:a3:7d:05:78: 7b:71:e0:8c:3b:c7:f2:41:f2:88:89:b9:4f:c8:69: b5:7f:45:50:58:a8:97:1e:05:9d:a8:73:d4:af:d8: de:2b:ec:7c:4e:25:d9:ae:53:05:6d:fe:2e:09:5a: 16:30:c0:97:a3:a8:88:25:78:34:58:88:a3:2f:7c: 2c:cd:b3:be:ab:4b:c0:38:43:91:b3:35:ae:85:b1: 73:82:93:be:bf:2c:b6:ca:f2:3a:af:31:9b:3c:1e: ca:16:e5:35:c7:9c:be:55:5a:ff:1b:c8:01:b4:c6: 00:fb:ce:a5:05:53:56:e2:47:be:87:17:56:09:eb: 49:12:db:ce:a7:55:18:69:c8:ec:d2:51:01:f2:89: d7:48:55:6d:83:14:0b:3c:61:69:e1:b4:cb:2f:bd: 16:46:3d:d3:71:3f:35:16:34:f2:41:07:2b:b0:f3: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:D1:C5:0C:38:A5:9F:C4:5C:03:BB:CF:31:03:FE:98:88:E8:46 X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3b:c0:5e:d3:08:f1:bc:6b:57:b2:f1:90:c9:25:27:a0:ce: 48:95:c7:18:73:08:7a:0f:64:53:38:57:c0:5c:4b:16:38:f7: 90:34:bc:9a:64:20:b1:53:30:57:8e:8c:b7:15:87:c8:18:5c: ab:a1:99:34:7d:e6:73:78:01:a9:bb:8e:bc:0e:33:92:93:d8: ba:fb:f3:30:cb:36:05:4c:b2:f7:2d:d7:41:f2:b9:a6:42:11: 1b:9c:1e:2b:41:5e:7a:c8:43:29:22:8b:e4:61:72:dd:fd:34: 76:23:b2:62:6f:6a:ce:e9:37:4f:d4:6f:d3:39:b9:bf:6e:11: 7f:f0:2d:09:50:86:79:91:6a:fc:70:6b:80:92:8f:2b:c4:c7: 1c:b9:01:c6:24:6f:9b:fc:68:2e:16:0d:23:c6:03:74:fb:c2: 7f:90:d1:0b:2a:ba:bb:ba:19:81:79:de:f8:a0:27:c1:7b:e0: 8b:fb:59:df:66:c6:1e:c2:1b:71:1b:fe:01:3f:e1:20:62:99: 83:ce:de:2e:dc:65:8a:13:f7:fa:28:f0:ad:ab:9d:04:d0:77: 84:17:68:d3:17:52:33:4f:f7:e6:1e:27:5b:45:fd:95:58:0e: 52:8e:4b:fc:ac:2b:54:ce:b5:89:37:14:bc:82:b5:10:c2:8e: f9:4a:99:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwNTExMDczNzA5WhcNMjYwNTE4MDczNzA5WjAYMRYwFAYD VQQDEw02YTAxODcyNi1kOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJxrRwMbm74Ss1ecC1v9J0P5HIvTdS5ykAkdcczB3fB/U581N3L5CkeQLkfQ jmOdGbNlaX22SehsEUyoFvEEZQXwOIpoZehxoKRAM69T5ej0lmJh1aN9BXh7ceCM O8fyQfKIiblPyGm1f0VQWKiXHgWdqHPUr9jeK+x8TiXZrlMFbf4uCVoWMMCXo6iI JXg0WIijL3wszbO+q0vAOEORszWuhbFzgpO+vyy2yvI6rzGbPB7KFuU1x5y+VVr/ G8gBtMYA+86lBVNW4ke+hxdWCetJEtvOp1UYacjs0lEB8onXSFVtgxQLPGFp4bTL L70WRj3TcT81FjTyQQcrsPMY5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgt0cUM OKWfxFwDu88xA/6YiOhGMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTvAXtMI8bxrV7LxkMklJ6DOSJXHGHMIeg9kUzhXwFxLFjj3kDS8mmQgsVMw V46MtxWHyBhcq6GZNH3mc3gBqbuOvA4zkpPYuvvzMMs2BUyy9y3XQfK5pkIRG5we K0FeeshDKSKL5GFy3f00diOyYm9qzuk3T9Rv0zm5v24Rf/AtCVCGeZFq/HBrgJKP K8THHLkBxiRvm/xoLhYNI8YDdPvCf5DRCyq6u7oZgXne+KAnwXvgi/tZ32bGHsIb cRv+AT/hIGKZg87eLtxlihP3+ijwraudBNB3hBdo0xdSM0/35h4nW0X9lVgOUo5L /KwrVM61iTcUvIK1EMKO+UqZVg== -----END CERTIFICATE-----Generated at Wed May 13 08:36:12 2026 by rpki-client