$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: 8FVUk4BpS3TvZhMW2vlHxoiYQNX2cTzrUztMYzjmQxA= Subject key identifier: 41:D9:00:63:E4:D0:F8:39:68:0B:53:E9:7D:73:FD:3D:92:BC:6F:AC Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0A7D Signing time: Tue 12 May 2026 21:31:34 +0000 Manifest this update: Tue 12 May 2026 21:31:34 +0000 Manifest next update: Tue 19 May 2026 21:31:34 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: BeeUUYQkrlJEviVfx9tdtckHtyNv9BOzDfXX13ZXEp4=) 2: 61EE2500936E11F091943583C4F9AE02.roa (hash: FyZ2T9YtfO8751gJOrXY8EZRCxhkemfv7jCshKx0dv8=) 3: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: J0sAShMAS7TBXIrBTuQVLuuil+RzIlr22j/AeepAcBs=) 4: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (hash: s77Ei8EC37Djt+pew6TOMR9zQCEM+rq8eyiOuZgQork=) 5: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: TZoK6id0rUzh56KPEUCZAm7vzhoQKcumpCyH1Z185+Y=) 6: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: o8Efs0Zmsyf+yPslQE6u+yFKAm4P6NONEQAjk5sGm4c=) 7: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: ye8jq88ep0wSruy1WtzE0bv/JRbtY6NOkRlK24kmsxo=) 8: 18E343FA3A3411F195AC72659C833773.roa (hash: KmC1y6Iu7HBzh2swaBdIcYsNGsBp1fh+v0hV3x9SRrk=) 9: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: w6yzFziDeBAoUWZ59xaLHwBZh42R2pzo/qzXpmN8kyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: May 12 21:31:34 2026 GMT Not After : May 19 21:31:34 2026 GMT Subject: CN=6a039c36-3f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:e1:8c:da:2d:04:db:45:19:2a:70:47:50: f2:7c:4c:fa:c4:4d:0d:7e:8f:7d:94:30:10:68:84: 15:81:22:e1:05:41:fd:ff:f1:74:ad:cd:fb:06:51: b5:40:d7:2f:21:04:69:b1:88:19:91:31:59:5a:83: 57:e4:a5:e9:46:4a:6d:da:70:6b:bd:e3:24:98:73: 82:e0:fa:fb:ab:98:5f:20:0d:b4:eb:8e:04:5b:07: a7:6e:03:c6:ad:1a:d8:ba:f2:48:98:69:df:62:35: c5:fc:ac:6a:b8:e1:86:30:e3:64:d4:64:6b:19:2b: 0d:4a:54:2d:99:3b:1c:f5:bb:3e:2d:97:9f:df:06: 13:4f:72:b9:98:7a:a6:41:4e:27:2f:de:97:1e:99: 84:70:a0:f8:8e:5b:14:26:51:0f:a6:7e:00:f9:3f: 07:f8:57:ed:f9:3e:a9:f0:98:e6:37:da:6a:a8:68: bf:db:2d:57:28:45:a3:5b:b0:1d:12:a5:d4:54:75: 05:21:44:e0:06:1e:6d:f2:c8:38:07:b2:f9:f5:0f: 6f:26:fb:c2:ed:16:e6:16:3d:41:43:5a:47:d9:9e: 70:1c:dd:20:ac:83:2e:e9:86:8a:e0:b7:cf:37:20: ed:2d:3c:0e:cf:20:f7:24:a3:b2:dc:5d:65:14:8c: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D9:00:63:E4:D0:F8:39:68:0B:53:E9:7D:73:FD:3D:92:BC:6F:AC X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f9:3e:52:d6:3b:df:69:5f:ed:15:6b:eb:4e:cb:43:42:5d: e8:f3:d2:88:75:73:75:cd:c4:3b:f1:89:43:b1:3a:d0:5d:9f: c3:6e:36:5e:fa:4d:ca:f4:3d:0d:87:11:ec:93:52:a5:b5:e0: c1:f4:43:6f:55:3d:be:ea:eb:cb:1b:59:b1:03:a8:b8:55:02: 61:b1:fd:df:b7:4d:d7:cf:46:7c:43:df:cc:1e:c9:63:b6:2c: e8:c4:f6:34:7e:b7:ba:15:12:e0:59:30:37:82:f1:eb:76:f1: 40:ee:50:c9:b6:63:82:c7:3f:70:56:01:4c:63:78:95:ab:07: b9:c6:ec:92:c3:55:fc:fa:01:04:10:03:a4:73:eb:8c:ab:ee: 5c:2a:11:31:8e:c8:5b:bc:1a:b8:f1:ee:ea:f8:ea:38:0a:be: 36:08:54:90:f2:96:b7:01:8e:75:ef:de:59:3e:b9:c8:06:5e: 41:65:d5:71:5b:d7:0f:2f:1a:9d:32:ae:72:0a:87:ef:bb:33: f2:9b:be:43:7a:2c:6a:58:c0:34:84:cd:47:9f:13:7f:2b:d5: 4b:21:28:c9:68:4f:fa:45:b8:83:a8:ea:2b:70:6d:2b:ee:4c: 11:cc:f1:fb:4d:64:46:ea:04:cf:3f:b0:d8:b2:e7:67:10:d4: 23:60:e5:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwNTEyMjEzMTM0WhcNMjYwNTE5MjEzMTM0WjAYMRYwFAYD VQQDEw02YTAzOWMzNi0zZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJPhjNotBNtFGSpwR1DyfEz6xE0Nfo99lDAQaIQVgSLhBUH9//F0rc37BlG1 QNcvIQRpsYgZkTFZWoNX5KXpRkpt2nBrveMkmHOC4Pr7q5hfIA20644EWwenbgPG rRrYuvJImGnfYjXF/KxquOGGMONk1GRrGSsNSlQtmTsc9bs+LZef3wYTT3K5mHqm QU4nL96XHpmEcKD4jlsUJlEPpn4A+T8H+Fft+T6p8JjmN9pqqGi/2y1XKEWjW7Ad EqXUVHUFIUTgBh5t8sg4B7L59Q9vJvvC7RbmFj1BQ1pH2Z5wHN0grIMu6YaK4LfP NyDtLTwOzyD3JKOy3F1lFIzA3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHZAGPk 0Pg5aAtT6X1z/T2SvG+sMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPk+UtY732lf7RVr607LQ0Jd6PPSiHVzdc3EO/GJQ7E60F2fw242XvpNyvQ9 DYcR7JNSpbXgwfRDb1U9vurryxtZsQOouFUCYbH937dN189GfEPfzB7JY7Ys6MT2 NH63uhUS4FkwN4Lx63bxQO5QybZjgsc/cFYBTGN4lasHucbsksNV/PoBBBADpHPr jKvuXCoRMY7IW7wauPHu6vjqOAq+NghUkPKWtwGOde/eWT65yAZeQWXVcVvXDy8a nTKucgqH77sz8pu+Q3osaljANITNR58TfyvVSyEoyWhP+kW4g6jqK3BtK+5MEczx +01kRuoEzz+w2LLnZxDUI2DlDg== -----END CERTIFICATE-----Generated at Wed May 13 03:25:55 2026 by rpki-client