$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: 1g2KV6btadtKXuf2D/VqMAqfPDfRMgLfy5+I5kv2tQQ= Subject key identifier: FB:CF:8B:6B:BB:DC:EF:16:11:76:D1:B3:6D:B1:00:75:D9:FC:2D:C1 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 022F Signing time: Mon 11 May 2026 02:37:33 +0000 Manifest this update: Mon 11 May 2026 02:37:33 +0000 Manifest next update: Mon 18 May 2026 02:37:33 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: w4NtJrJYEh71sjmjMLkP30tum6KkOQ+nil9d/viZGEg=) 2: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: 19Rc441u91Y2HL2+FlU8nzr70BJos1ukfHPyv3DBp5k=) 3: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: v4Qu7n+fWBWXJKInz5nkseGm1QdnUq7lHUeNDDgFhss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: May 11 02:37:33 2026 GMT Not After : May 18 02:37:33 2026 GMT Subject: CN=6a0140ed-18e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:69:b2:9a:10:99:fe:2d:8e:67:a9:e4:0c:20: fe:b2:e7:2d:c2:d2:ee:68:5c:4c:77:35:a0:17:ac: 05:76:7c:cc:63:54:5a:23:f3:16:a2:4d:6a:06:cf: 71:b8:87:bc:a6:90:3f:a7:c9:c0:89:83:40:f8:fb: bc:6a:a4:fe:80:4c:6b:a2:67:96:be:ee:c5:b7:f0: d9:93:ed:52:3b:f9:c1:f2:98:ea:42:f7:39:32:47: 62:9f:db:dd:52:6f:ab:f5:da:91:95:80:90:23:cc: 4f:4b:5d:6e:3c:16:3a:9f:c3:81:b7:30:cd:e3:69: 78:94:68:61:ca:84:08:15:9d:ef:dc:1a:4c:b0:12: 5b:2f:2c:5f:e3:18:11:c4:95:f9:1e:c2:18:09:56: 21:09:f5:96:39:71:66:54:b8:a8:47:82:c2:d9:1f: ea:c4:b5:85:f8:d9:86:26:42:8c:8f:10:1d:00:fd: b9:91:de:16:24:1e:8d:15:68:e7:44:8f:9d:f2:e1: b6:22:0b:a3:83:74:66:9a:27:4c:b4:d6:2c:c7:bf: 31:fc:55:dd:f0:bd:c5:76:c9:77:cd:c1:a7:dc:7c: 55:7b:e5:8d:c2:6d:7f:b4:62:69:98:e2:0c:59:29: 76:98:fb:8e:f5:ff:2a:57:70:79:f8:07:86:a6:97: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CF:8B:6B:BB:DC:EF:16:11:76:D1:B3:6D:B1:00:75:D9:FC:2D:C1 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:5c:f8:cc:48:11:38:5a:f4:fe:40:24:23:d8:70:c0:b9:8d: d7:c6:d2:9e:01:46:60:ff:1c:b4:57:00:b7:4a:cb:d4:14:12: e3:46:83:3b:cf:26:f9:76:66:72:76:67:27:0d:6a:e4:29:5e: a2:62:9f:ab:bc:18:27:75:8c:5b:d3:96:0c:fb:1f:97:1d:78: 77:75:81:e5:41:72:00:4b:db:7b:64:89:45:8b:ea:3f:56:d9: b9:2d:22:cb:f4:fd:3f:ee:9c:71:56:59:f3:a5:80:6b:d7:be: 7f:ef:b9:df:4e:7a:cb:0b:1b:92:7c:8f:3d:ea:45:95:41:c1: 38:15:d3:72:56:7e:0a:22:e9:c5:44:8c:bd:6a:ac:d4:35:11: 9e:2d:0b:69:a6:b0:52:db:4a:de:c3:60:74:30:57:aa:a2:af: c7:e6:02:c3:20:78:9a:15:11:ca:0a:e3:63:39:3e:73:b9:f6: be:82:7e:1b:e1:ee:69:70:c3:bd:64:8c:4c:94:f2:f0:73:90: de:f9:70:e9:60:c8:5c:2a:27:7b:d8:54:bb:66:e0:96:55:25: 09:84:4b:d4:3f:97:6f:7e:9a:ce:7b:36:2f:bf:82:e4:7a:1e: f4:32:43:a9:c4:e2:46:d8:d2:04:47:1e:d0:f3:5b:cf:64:71: f3:05:9d:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjYwNTExMDIzNzMzWhcNMjYwNTE4MDIzNzMzWjAYMRYwFAYD VQQDEw02YTAxNDBlZC0xOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62mymhCZ/i2OZ6nkDCD+suctwtLuaFxMdzWgF6wFdnzMY1RaI/MWok1qBs9x uIe8ppA/p8nAiYNA+Pu8aqT+gExromeWvu7Ft/DZk+1SO/nB8pjqQvc5Mkdin9vd Um+r9dqRlYCQI8xPS11uPBY6n8OBtzDN42l4lGhhyoQIFZ3v3BpMsBJbLyxf4xgR xJX5HsIYCVYhCfWWOXFmVLioR4LC2R/qxLWF+NmGJkKMjxAdAP25kd4WJB6NFWjn RI+d8uG2Igujg3RmmidMtNYsx78x/FXd8L3Fdsl3zcGn3HxVe+WNwm1/tGJpmOIM WSl2mPuO9f8qV3B5+AeGppetkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvPi2u7 3O8WEXbRs22xAHXZ/C3BMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWVz4zEgROFr0/kAkI9hwwLmN18bSngFGYP8ctFcAt0rL1BQS40aDO88m+XZm cnZnJw1q5CleomKfq7wYJ3WMW9OWDPsflx14d3WB5UFyAEvbe2SJRYvqP1bZuS0i y/T9P+6ccVZZ86WAa9e+f++53056ywsbknyPPepFlUHBOBXTclZ+CiLpxUSMvWqs 1DURni0LaaawUttK3sNgdDBXqqKvx+YCwyB4mhURygrjYzk+c7n2voJ+G+HuaXDD vWSMTJTy8HOQ3vlw6WDIXCone9hUu2bgllUlCYRL1D+Xb36azns2L7+C5Hoe9DJD qcTiRtjSBEce0PNbz2Rx8wWdBw== -----END CERTIFICATE-----Generated at Tue May 12 22:41:34 2026 by rpki-client