$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json) Hash identifier: Igj+TFa+VdS9qWd7We0/wfswa+MLpNce00pMj7/Ts1c= Subject key identifier: 10:BA:05:69:D6:C6:90:5D:83:1F:F9:4C:15:4D:E0:CB:02:A8:52:A6 Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft Manifest number: 01E7 Signing time: Wed 13 May 2026 03:30:47 +0000 Manifest this update: Wed 13 May 2026 03:30:47 +0000 Manifest next update: Wed 20 May 2026 03:30:47 +0000 Files and hashes: 1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: FebwD+NRtO/RXcV5Af/bOR5KOXUlJuvHbPVgfkSwDeA=) 2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: May 13 03:30:47 2026 GMT Not After : May 20 03:30:47 2026 GMT Subject: CN=6a03f067-e9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:4e:13:4e:7a:03:ae:29:6d:1c:69:ca:8b: 47:15:90:1f:12:8b:b8:43:62:dd:f2:dc:de:51:0c: de:4b:c4:46:e0:7f:39:02:5d:d8:e2:eb:04:25:fe: 64:65:16:1e:b7:7c:95:2d:1c:41:d7:ec:ec:89:bc: ee:c1:dd:41:ec:9e:b8:6c:13:4d:35:cc:ae:25:6b: d7:b7:d9:de:af:43:57:50:1c:2e:53:ea:88:98:ec: 2d:e1:4c:94:a4:0c:06:43:87:8d:59:a4:ad:07:9a: 7a:a0:27:77:13:af:f5:93:fb:51:2a:0c:38:0e:62: 07:8d:15:ab:04:f6:5d:f9:6b:ff:ba:1b:09:5f:17: b4:80:e6:ab:1e:c7:fa:f3:fb:74:d0:80:c5:79:79: a1:5f:6e:d9:3c:55:9f:11:66:5b:12:6a:a9:48:46: 4c:16:96:42:62:65:4e:be:64:0c:5e:75:65:65:e0: 74:8b:26:49:36:a7:56:bb:b6:f4:3f:98:b7:b5:1e: 2c:82:1e:94:d5:5b:b0:4e:9e:09:6b:d6:85:b1:4d: 2b:a6:90:fa:f9:bf:ef:50:a1:ee:b6:88:49:e8:4c: 70:75:bf:2b:de:ab:23:43:51:05:a5:a0:8b:50:ee: 4f:78:dc:77:01:5f:6c:05:03:b7:90:2f:8c:a7:ae: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:05:69:D6:C6:90:5D:83:1F:F9:4C:15:4D:E0:CB:02:A8:52:A6 X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:67:0d:4d:23:0e:3c:84:b8:56:33:66:83:51:3f:ec:1b:31: a4:6f:f6:ad:62:99:1d:44:db:17:67:25:ac:a3:38:86:a1:7d: 9f:0f:2b:0c:03:6c:86:8a:b5:de:fa:f4:e2:93:b0:da:65:0a: be:3d:7c:55:23:15:47:c5:cd:a1:5f:31:ed:bb:c0:ed:0e:c7: df:c0:ef:ca:cd:3a:e3:dd:a2:8a:34:6b:da:5d:66:ed:e6:93: 6b:4d:51:f8:07:d7:c0:fd:0d:17:00:9d:1b:b2:f0:b6:21:95: 09:a5:2b:ef:6b:8c:e5:d8:b2:f0:63:c6:bc:19:43:6a:82:7f: 1f:db:42:90:eb:35:87:c0:4a:25:fc:bc:15:c1:46:6d:86:ed: 5d:a1:50:28:bc:34:f1:e7:5e:57:0a:21:67:7f:f8:f2:d7:00: 48:f7:c3:43:3f:4b:f1:e7:da:1b:cd:cb:59:d4:2f:62:4f:fa: 43:7b:8b:68:8f:b3:57:eb:50:a4:8d:64:ed:8d:d1:62:8e:35: b0:53:f5:15:b2:10:20:d5:d1:8a:64:ad:d2:fd:0c:61:ed:b5: 35:71:ff:b6:4b:93:4d:a8:05:34:47:c2:e7:de:a1:93:84:40: 7d:5f:e5:66:4a:3b:59:d1:fb:a4:28:a5:95:0e:f9:b5:10:c3: 9b:a7:a1:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjYwNTEzMDMzMDQ3WhcNMjYwNTIwMDMzMDQ3WjAYMRYwFAYD VQQDEw02YTAzZjA2Ny1lOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+1OE056A64pbRxpyotHFZAfEou4Q2Ld8tzeUQzeS8RG4H85Al3Y4usEJf5k ZRYet3yVLRxB1+zsibzuwd1B7J64bBNNNcyuJWvXt9ner0NXUBwuU+qImOwt4UyU pAwGQ4eNWaStB5p6oCd3E6/1k/tRKgw4DmIHjRWrBPZd+Wv/uhsJXxe0gOarHsf6 8/t00IDFeXmhX27ZPFWfEWZbEmqpSEZMFpZCYmVOvmQMXnVlZeB0iyZJNqdWu7b0 P5i3tR4sgh6U1VuwTp4Ja9aFsU0rppD6+b/vUKHutohJ6Exwdb8r3qsjQ1EFpaCL UO5PeNx3AV9sBQO3kC+Mp65bXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBC6BWnW xpBdgx/5TBVN4MsCqFKmMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq WjZDMXc2eXJrY1RwOHhHTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHmcNTSMOPIS4VjNmg1E/7BsxpG/2rWKZHUTbF2clrKM4hqF9nw8rDANshoq1 3vr04pOw2mUKvj18VSMVR8XNoV8x7bvA7Q7H38Dvys06492iijRr2l1m7eaTa01R +AfXwP0NFwCdG7LwtiGVCaUr72uM5diy8GPGvBlDaoJ/H9tCkOs1h8BKJfy8FcFG bYbtXaFQKLw08edeVwohZ3/48tcASPfDQz9L8efaG83LWdQvYk/6Q3uLaI+zV+tQ pI1k7Y3RYo41sFP1FbIQINXRimSt0v0MYe21NXH/tkuTTagFNEfC596hk4RAfV/l Zko7WdH7pCillQ75tRDDm6eh1Q== -----END CERTIFICATE-----Generated at Wed May 13 09:37:21 2026 by rpki-client