$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: qv86ns+Ow1qvbVuIokznvmKZ77ZaPHb+FKKNyxvwShg= Subject key identifier: 72:0E:42:50:6C:0D:6D:0E:81:17:0B:88:5B:22:71:2C:94:5F:8B:6A Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0296 Signing time: Wed 13 May 2026 01:52:06 +0000 Manifest this update: Wed 13 May 2026 01:52:05 +0000 Manifest next update: Wed 20 May 2026 01:52:05 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: kJh9O08aWHjIP4r5ijlMP6AqbVPcpAdkCvgjjZ7uOU4=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: May 13 01:52:05 2026 GMT Not After : May 20 01:52:05 2026 GMT Subject: CN=6a03d946-f211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:c0:54:6f:7f:7b:7e:ea:cb:9e:4a:05:0b: f0:74:0d:a5:8a:1c:db:d3:b9:49:2f:41:ef:05:0e: 48:44:05:cd:2c:37:42:a2:e1:f9:fa:cc:0c:41:b6: 43:8c:9e:64:a4:66:3f:8d:ef:a4:97:25:df:e2:1b: df:c0:31:92:8f:38:e5:87:02:2e:48:79:6c:46:a2: 1a:8a:76:21:44:23:d8:83:59:5c:bc:b5:4e:cb:f2: 59:2d:e9:06:ec:1e:24:07:86:b3:ab:26:d3:e3:3f: 21:5d:e2:a9:fb:c1:fb:b3:b0:90:73:bb:a1:33:8e: e2:66:94:bd:a1:77:89:dd:03:2c:af:72:5c:76:52: 9d:8a:6e:19:d9:b5:4a:be:2d:42:9e:ad:c8:1a:27: cf:5b:02:80:30:a0:f8:b4:3e:c3:51:99:35:f1:f2: c1:55:45:63:90:37:4a:28:71:96:03:af:7a:2c:9b: ec:31:c9:fb:03:dc:c0:05:ea:dd:de:f6:12:e7:ea: ca:b2:38:28:11:80:19:45:d1:0c:a4:70:a8:f0:6c: 75:0e:f0:17:e2:9b:e3:32:eb:1c:16:55:d2:35:10: cd:77:66:de:71:e4:7c:b4:4e:d6:59:93:f7:c0:e0: 69:d5:0f:c1:5e:4e:9f:5f:02:62:c9:32:89:81:12: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0E:42:50:6C:0D:6D:0E:81:17:0B:88:5B:22:71:2C:94:5F:8B:6A X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:55:9f:bc:2c:0b:3f:32:1b:45:8d:18:ea:b8:85:6c:8a:22: 1c:91:d6:09:cc:b2:fe:4b:2d:7e:28:8a:7e:58:a4:e1:50:38: 96:b9:d1:dc:56:3e:28:2e:35:c5:3b:73:05:dd:19:a7:ac:77: 64:d7:1c:9b:10:e2:81:2e:1f:15:d6:29:d3:c5:81:69:55:ae: 68:1a:71:32:a2:05:fb:1a:67:57:a9:21:f6:05:0e:c0:c8:6a: 1d:ee:6e:b9:ee:15:d1:f1:bf:f1:e1:3d:32:5b:dd:40:89:03: 89:e8:86:99:eb:06:11:9a:15:10:49:fb:e3:fc:51:8c:e6:0a: b3:cd:0f:17:2e:d9:e8:69:b9:a1:2c:04:b4:1f:03:18:bc:7f: 0d:c8:2a:c9:39:68:c6:9f:83:a1:49:2e:72:b1:cd:d0:9b:f5: 54:9d:dd:9d:5b:8e:77:95:10:12:41:a9:7c:60:0a:f3:d6:a4: f3:66:25:0b:c9:61:76:5c:f9:40:1c:33:9d:98:e4:7e:6a:25: c0:76:3e:3f:e2:2c:09:25:ff:4e:a1:e5:b3:de:38:2a:78:b7: bd:a4:11:59:71:2a:f1:e4:2a:a1:c9:68:33:33:c9:29:1a:71: e4:93:39:0a:50:ec:07:05:a7:c3:42:37:80:a4:03:ee:54:1f: 48:8e:c9:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjYwNTEzMDE1MjA1WhcNMjYwNTIwMDE1MjA1WjAYMRYwFAYD VQQDEw02YTAzZDk0Ni1mMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz37AVG9/e37qy55KBQvwdA2lihzb07lJL0HvBQ5IRAXNLDdCouH5+swMQbZD jJ5kpGY/je+klyXf4hvfwDGSjzjlhwIuSHlsRqIainYhRCPYg1lcvLVOy/JZLekG 7B4kB4azqybT4z8hXeKp+8H7s7CQc7uhM47iZpS9oXeJ3QMsr3JcdlKdim4Z2bVK vi1Cnq3IGifPWwKAMKD4tD7DUZk18fLBVUVjkDdKKHGWA696LJvsMcn7A9zABerd 3vYS5+rKsjgoEYAZRdEMpHCo8Gx1DvAX4pvjMuscFlXSNRDNd2beceR8tE7WWZP3 wOBp1Q/BXk6fXwJiyTKJgRKmzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIOQlBs DW0OgRcLiFsicSyUX4tqMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFFWfvCwLPzIbRY0Y6riFbIoiHJHWCcyy/kstfiiKflik4VA4lrnR3FY+KC41 xTtzBd0Zp6x3ZNccmxDigS4fFdYp08WBaVWuaBpxMqIF+xpnV6kh9gUOwMhqHe5u ue4V0fG/8eE9MlvdQIkDieiGmesGEZoVEEn74/xRjOYKs80PFy7Z6Gm5oSwEtB8D GLx/DcgqyTloxp+DoUkucrHN0Jv1VJ3dnVuOd5UQEkGpfGAK89ak82YlC8lhdlz5 QBwznZjkfmolwHY+P+IsCSX/TqHls944Kni3vaQRWXEq8eQqocloMzPJKRpx5JM5 ClDsBwWnw0I3gKQD7lQfSI7JlA== -----END CERTIFICATE-----Generated at Wed May 13 03:50:00 2026 by rpki-client