$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: afXOM9NtK76gwb4y0IKSknKEJVXc8pBISSNiDeu7vzY= Subject key identifier: 83:C7:81:34:58:71:2F:E4:B2:03:4C:5E:16:A4:17:6C:7D:AC:D9:21 Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: 017F Signing time: Wed 13 May 2026 04:38:08 +0000 Manifest this update: Wed 13 May 2026 04:38:08 +0000 Manifest next update: Wed 20 May 2026 04:38:08 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: i6A/ywKZUrB7X0gmBf/roS7h8GHH8SXAnX+ewsRuOEM=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: May 13 04:38:08 2026 GMT Not After : May 20 04:38:08 2026 GMT Subject: CN=6a040030-41de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:e1:e3:c3:24:d7:8c:2e:ce:e9:03:3c:94: 3e:59:b6:76:0d:a8:d1:ff:d7:f7:fe:c9:6c:d6:7d: 75:76:00:27:30:97:66:6c:b6:f3:5a:b3:8e:d2:80: c1:cf:9b:82:b2:c7:c8:d5:c0:f0:b9:b6:c2:fb:01: 9b:4d:b6:00:8e:0a:a8:11:99:58:d0:a2:6d:8b:6a: b6:1f:31:70:68:9b:8d:67:11:55:27:a7:0c:c0:07: de:76:39:ad:2a:e7:08:56:ef:42:dc:a5:2b:b4:83: e0:b4:4b:d0:98:e4:d3:7a:cd:a6:05:22:b7:ed:83: 55:c4:c8:69:78:38:c1:c5:a2:40:72:d4:96:38:22: 5c:79:5d:23:0a:f4:f1:7a:22:c2:b4:34:ba:90:09: 13:9e:a7:08:98:a0:ba:f7:b8:bb:27:a7:5d:3a:9e: 21:63:56:20:17:8b:b0:b8:01:4a:c4:e2:7a:74:86: 5c:df:3b:5f:d3:29:af:f4:2b:f8:b0:f3:ec:7e:4a: 70:f4:ee:c5:0f:dd:6b:55:3c:69:78:87:f2:8f:cd: 29:15:ba:53:63:5c:9c:5c:59:37:07:d7:28:bb:a5: d5:d6:96:67:6c:f3:98:0e:72:02:4c:2a:79:28:4e: f8:9f:15:ef:8c:93:e2:9c:37:f2:a4:2d:b0:c7:87: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C7:81:34:58:71:2F:E4:B2:03:4C:5E:16:A4:17:6C:7D:AC:D9:21 X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:48:1a:81:51:76:fb:c8:b8:a0:86:d7:f9:0d:48:db:f4:63: 77:fe:4d:fc:85:19:86:10:ef:66:9b:28:f2:c5:e5:6b:e2:71: b9:fa:ae:e5:3a:1e:01:28:a1:d6:ca:60:06:40:85:d2:b3:38: 1a:36:9b:59:d4:d8:88:41:1c:5b:9d:86:f2:cc:12:60:60:d6: eb:03:e3:29:2c:2f:e7:e1:a0:bc:05:b2:5e:35:14:cc:1c:a8: fb:f4:a5:d9:67:b1:18:8f:2e:5e:b6:24:9f:33:92:c3:19:b0: c8:a7:5d:b5:49:dd:d6:18:c5:0e:62:84:b8:59:5b:a9:db:01: 5a:ec:a1:44:e9:5a:ee:3d:f3:44:6c:73:38:d7:f0:53:0a:3d: aa:07:f3:5f:07:aa:33:57:dc:d4:86:05:ce:90:01:63:33:29: aa:b0:0c:9f:59:9d:65:de:bd:31:da:a7:6f:5e:ce:69:40:b0: a8:ed:6d:ea:b6:09:ed:fa:ea:5b:1b:ba:e7:e3:6d:6e:00:79: f7:5a:02:0b:fa:10:1f:f4:3d:8a:a2:c9:61:3a:08:da:56:8c: 29:86:9f:29:6e:5c:eb:9a:76:7b:56:df:e9:73:db:1f:1b:1c: 85:c0:94:10:82:f0:1d:72:07:99:33:51:26:ac:87:b3:31:a9: 36:1e:fc:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjYwNTEzMDQzODA4WhcNMjYwNTIwMDQzODA4WjAYMRYwFAYD VQQDEw02YTA0MDAzMC00MWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tzh48Mk14wuzukDPJQ+WbZ2DajR/9f3/sls1n11dgAnMJdmbLbzWrOO0oDB z5uCssfI1cDwubbC+wGbTbYAjgqoEZlY0KJti2q2HzFwaJuNZxFVJ6cMwAfedjmt KucIVu9C3KUrtIPgtEvQmOTTes2mBSK37YNVxMhpeDjBxaJActSWOCJceV0jCvTx eiLCtDS6kAkTnqcImKC697i7J6ddOp4hY1YgF4uwuAFKxOJ6dIZc3ztf0ymv9Cv4 sPPsfkpw9O7FD91rVTxpeIfyj80pFbpTY1ycXFk3B9cou6XV1pZnbPOYDnICTCp5 KE74nxXvjJPinDfypC2wx4earwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPHgTRY cS/ksgNMXhakF2x9rNkhMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0gagVF2+8i4oIbX+Q1I2/Rjd/5N/IUZhhDvZpso8sXla+Jxufqu5ToeASih 1spgBkCF0rM4GjabWdTYiEEcW52G8swSYGDW6wPjKSwv5+GgvAWyXjUUzByo+/Sl 2WexGI8uXrYknzOSwxmwyKddtUnd1hjFDmKEuFlbqdsBWuyhROla7j3zRGxzONfw Uwo9qgfzXweqM1fc1IYFzpABYzMpqrAMn1mdZd69Mdqnb17OaUCwqO1t6rYJ7frq Wxu65+NtbgB591oCC/oQH/Q9iqLJYToI2laMKYafKW5c65p2e1bf6XPbHxschcCU EILwHXIHmTNRJqyHszGpNh782A== -----END CERTIFICATE-----Generated at Wed May 13 13:39:16 2026 by rpki-client