$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: J1QRe9aZZVi9d2xNnF9lJxC5ya9gnsXdWBpf3OneTH8= Subject key identifier: 1E:B0:41:5C:BC:0F:8F:0F:1A:7D:59:9F:5E:8F:67:24:4D:4B:DF:36 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 0348 Signing time: Wed 13 May 2026 01:06:58 +0000 Manifest this update: Wed 13 May 2026 01:06:57 +0000 Manifest next update: Wed 20 May 2026 01:06:57 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: EBWdz+cktKqMojpPIqqrx8VukDsPITNsZiJLUpGJMkc=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: H+Evm+yHnBSmOexYo7titYsM/D4dZ2Sj/np2eWPGmNY=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: P8/5kr8bHdI9BV8115gmvyOf1Tob/Bbi8osi5OVZzfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: May 13 01:06:57 2026 GMT Not After : May 20 01:06:57 2026 GMT Subject: CN=6a03ceb2-1f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:9e:a9:75:44:54:53:06:f3:05:5a:ac:72: d8:15:5b:12:dd:2f:20:6f:1b:94:9e:cb:6f:70:61: 98:f3:10:35:41:ce:9e:ef:05:57:6d:51:cb:d9:9e: ec:6e:e4:b2:5b:23:ad:50:13:8b:87:bb:81:0e:a9: 39:b1:5f:28:48:a7:ac:62:b8:bb:d3:98:89:40:8d: 7e:22:63:14:3f:f8:de:dc:9c:36:b9:9d:04:20:01: 20:79:80:aa:6c:d7:90:5d:92:c3:0e:90:ca:a7:6a: 46:d1:9d:53:76:3e:6e:75:22:d8:15:07:a6:25:c7: d4:ce:25:d3:98:cd:05:13:8c:b7:e7:0d:2c:8d:5d: f9:d3:e3:ff:6a:50:1b:c7:06:cb:13:90:6c:d7:d7: 36:07:d7:39:01:e7:7d:9c:40:30:e6:3f:5b:00:8a: 8f:c3:0f:fc:0f:3d:81:b8:15:fc:1b:48:1d:87:8c: c0:20:a8:c8:a3:63:42:e4:53:5e:2a:dc:20:fd:a9: 88:32:59:2d:5f:5f:03:00:bc:4e:8d:42:89:16:6e: fb:7c:cd:7f:76:9c:79:26:b6:23:ff:8a:65:19:db: 0d:47:81:7d:71:07:d6:e9:8d:dd:71:b1:74:19:34: 20:8b:65:10:6b:7f:29:5b:77:3f:6a:2b:1c:af:c7: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B0:41:5C:BC:0F:8F:0F:1A:7D:59:9F:5E:8F:67:24:4D:4B:DF:36 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a9:e0:9a:89:e3:b9:b2:5e:df:47:cd:b6:88:85:82:91:41: 3c:0a:ba:f8:0f:90:1d:0c:9e:f1:60:70:0a:4c:be:4e:e2:c6: cf:c4:83:f4:3a:c7:3e:15:11:b5:33:99:ca:08:21:d0:a2:6a: 5d:a2:b5:80:74:42:0f:15:ba:f2:6a:38:9f:cb:f7:16:15:8d: e8:ba:f9:8d:98:6f:77:99:46:c5:ad:d8:e6:2f:64:b4:05:83: 66:d4:c0:3a:5c:27:94:6d:b4:ba:50:6f:51:bc:d2:e6:50:fa: 2b:da:4d:0b:2d:0e:61:37:c9:42:7a:1c:75:b2:f4:ef:1c:3f: 47:1b:24:26:32:9b:b3:47:08:62:3c:0e:f8:e6:c1:d5:09:62: c1:b9:dc:46:a9:98:6a:f0:5f:d9:25:d3:47:d2:2a:57:89:40: ef:88:77:bb:6b:b8:d3:cc:3f:7b:aa:88:03:6f:5e:ed:1c:32: 8f:bc:96:be:74:d9:61:61:0e:24:b6:bd:4e:de:f4:d0:49:b8: 42:71:e1:24:29:23:fc:da:5b:79:e5:10:89:4f:ca:07:aa:c5: 69:f1:64:2a:5a:42:d7:c1:50:18:73:c6:0f:d0:f6:1a:0d:3e: 5c:b4:dd:fe:f8:fa:19:a8:ec:39:e3:24:64:9d:e9:80:49:3c: ca:17:e1:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjYwNTEzMDEwNjU3WhcNMjYwNTIwMDEwNjU3WjAYMRYwFAYD VQQDEw02YTAzY2ViMi0xZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru6eqXVEVFMG8wVarHLYFVsS3S8gbxuUnstvcGGY8xA1Qc6e7wVXbVHL2Z7s buSyWyOtUBOLh7uBDqk5sV8oSKesYri705iJQI1+ImMUP/je3Jw2uZ0EIAEgeYCq bNeQXZLDDpDKp2pG0Z1Tdj5udSLYFQemJcfUziXTmM0FE4y35w0sjV350+P/alAb xwbLE5Bs19c2B9c5Aed9nEAw5j9bAIqPww/8Dz2BuBX8G0gdh4zAIKjIo2NC5FNe Ktwg/amIMlktX18DALxOjUKJFm77fM1/dpx5JrYj/4plGdsNR4F9cQfW6Y3dcbF0 GTQgi2UQa38pW3c/aiscr8eeXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6wQVy8 D48PGn1Zn16PZyRNS982MB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKngmonjubJe30fNtoiFgpFBPAq6+A+QHQye8WBwCky+TuLGz8SD9DrHPhUR tTOZyggh0KJqXaK1gHRCDxW68mo4n8v3FhWN6Lr5jZhvd5lGxa3Y5i9ktAWDZtTA OlwnlG20ulBvUbzS5lD6K9pNCy0OYTfJQnocdbL07xw/RxskJjKbs0cIYjwO+ObB 1QliwbncRqmYavBf2SXTR9IqV4lA74h3u2u408w/e6qIA29e7Rwyj7yWvnTZYWEO JLa9Tt700Em4QnHhJCkj/NpbeeUQiU/KB6rFafFkKlpC18FQGHPGD9D2Gg0+XLTd /vj6GajsOeMkZJ3pgEk8yhfhGA== -----END CERTIFICATE-----Generated at Wed May 13 06:33:34 2026 by rpki-client