$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json) Hash identifier: zY+tAD3e4wsmel9EeBU3LBFr7H2btPd33Y6wJBYiLg4= Subject key identifier: EC:01:BE:A5:C2:B2:AA:7F:4E:80:24:C7:9B:E9:5C:01:F4:F5:59:35 Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft Manifest number: 0903 Signing time: Tue 12 May 2026 20:22:25 +0000 Manifest this update: Tue 12 May 2026 20:22:25 +0000 Manifest next update: Tue 19 May 2026 20:22:25 +0000 Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: oGRWEs0zXYRtIsHAVkALg+zBY3c6Wvh0/L1Ead2HhOQ=) 2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: FHR5X9UUHIe+lbh333dtqmnv9RGCApUiICBVfwjLgCs=) 3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: T90KWb99cEbWcYjxKrcTOKfx/Qq8bgV36JoCAoZr1DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8 Validity Not Before: May 12 20:22:25 2026 GMT Not After : May 19 20:22:25 2026 GMT Subject: CN=6a038c01-09d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:7f:0e:9e:d8:ce:23:9a:55:b8:60:62:6c: 30:dd:54:a3:2d:f8:2a:f7:46:ca:15:8c:78:93:aa: 3c:92:82:b1:9a:f0:4d:a1:35:b3:d4:b4:7c:5f:4c: eb:c8:13:df:8d:ba:1b:0f:7e:56:39:06:55:0a:b5: 6a:a6:ec:18:a1:63:d4:fa:0e:31:38:ff:6f:64:cb: 89:b7:7c:d9:9a:f4:90:12:62:ad:04:e1:c5:b3:e4: 31:64:dd:72:43:54:77:97:22:d7:7d:f3:05:76:20: 98:6b:e8:bf:54:e2:93:74:e9:6d:b2:5c:f3:ff:1f: f0:77:b9:e3:9c:5b:8e:bc:ae:a2:47:6c:a3:db:d5: e8:ae:aa:8a:5e:86:0e:7e:6d:f7:e4:be:db:33:29: 68:5e:94:01:ea:ed:f3:a6:d2:cc:1c:e5:67:52:14: 7a:85:06:fe:c0:8e:7e:41:6d:f4:84:58:fe:9d:6b: bc:52:77:0c:05:df:d8:ab:14:9c:fb:b4:ab:0d:24: 34:71:fa:eb:ed:d0:4b:69:bb:72:23:20:83:65:af: ac:c8:44:23:20:cc:7c:da:e9:b5:ca:d1:92:f8:d9: 43:e7:46:db:55:2c:d1:a1:d0:23:c2:ce:6f:62:73: 71:de:f5:30:35:a0:b5:a3:2c:7e:1b:e8:4b:9e:ec: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:01:BE:A5:C2:B2:AA:7F:4E:80:24:C7:9B:E9:5C:01:F4:F5:59:35 X509v3 Authority Key Identifier: keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e8:87:be:ce:98:ff:45:8b:64:78:d7:a5:b9:0d:b3:28:f8: f5:f6:75:0e:9f:12:d0:fb:2a:f0:2a:5c:b4:f5:b3:98:a0:12: a8:00:b6:29:9d:5a:ca:7f:e4:d8:58:ab:d5:c1:ae:37:5a:fb: c8:3b:a5:2d:f8:d6:a2:67:bd:d6:f5:b3:95:81:fe:d9:fd:31: 8c:7e:f0:69:65:b5:92:61:4f:39:2e:79:27:3a:0e:1f:a5:6e: f4:2d:4f:19:7d:a6:93:1c:9b:d0:24:af:32:5d:de:ab:ed:5e: 61:1c:22:3a:bc:21:11:eb:68:d4:35:c0:ed:56:b4:aa:8c:5d: 69:e1:c6:b5:f2:1c:6d:74:b0:c0:2c:4f:f5:8a:ef:33:00:31: f2:96:f8:6b:b6:c6:36:f3:92:b1:c8:20:50:94:9f:50:1e:32: d5:62:90:83:fb:61:12:d9:f3:23:bf:3b:b2:51:89:e1:29:f1: 89:19:e4:a7:7a:98:07:fd:e9:62:0c:a9:dc:89:76:79:ea:05: 2c:ac:c4:fb:04:06:b2:45:41:9f:63:6b:9b:79:80:ec:bb:94: ac:94:6b:0f:df:fa:b1:fd:d0:d5:7f:ca:d0:d6:31:a5:5d:2a: 09:6a:ed:b5:b7:2f:3e:95:3d:18:75:92:e6:6c:f3:96:fb:ff: 08:78:03:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5M0ExMTAvBgNVBAUTKEExNzkyQzc4RDMwRTEwNzMwQTNDNDQ1NjFDN0U1ODIy RTdGMUMyRjgwHhcNMjYwNTEyMjAyMjI1WhcNMjYwNTE5MjAyMjI1WjAYMRYwFAYD VQQDEw02YTAzOGMwMS0wOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mp/Dp7YziOaVbhgYmww3VSjLfgq90bKFYx4k6o8koKxmvBNoTWz1LR8X0zr yBPfjbobD35WOQZVCrVqpuwYoWPU+g4xOP9vZMuJt3zZmvSQEmKtBOHFs+QxZN1y Q1R3lyLXffMFdiCYa+i/VOKTdOltslzz/x/wd7njnFuOvK6iR2yj29XorqqKXoYO fm335L7bMyloXpQB6u3zptLMHOVnUhR6hQb+wI5+QW30hFj+nWu8UncMBd/YqxSc +7SrDSQ0cfrr7dBLabtyIyCDZa+syEQjIMx82um1ytGS+NlD50bbVSzRodAjws5v YnNx3vUwNaC1oyx+G+hLnuy+jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwBvqXC sqp/ToAkx5vpXAH09Vk1MB8GA1UdIwQYMBaAFKF5LHjTDhBzCjxEVhx+WCLn8cL4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDkzQS9FQkEzNTMxRUNC RDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VITUtQRVJXSEg1WUl1Znh3 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Ya3NlTk1PRUhNS1BFUldISDVZSXVmeHd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDkzQS9FQkEzNTMxRUNCRDgxMUVBODY3QUZCNEZDNEY5QUUwMi9vWGtzZU5NT0VI TUtQRVJXSEg1WUl1Znh3dmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiuiHvs6Y/0WLZHjXpbkNsyj49fZ1Dp8S0Psq8CpctPWzmKASqAC2KZ1ayn/k 2Fir1cGuN1r7yDulLfjWome91vWzlYH+2f0xjH7waWW1kmFPOS55JzoOH6Vu9C1P GX2mkxyb0CSvMl3eq+1eYRwiOrwhEeto1DXA7Va0qoxdaeHGtfIcbXSwwCxP9Yrv MwAx8pb4a7bGNvOSscggUJSfUB4y1WKQg/thEtnzI787slGJ4SnxiRnkp3qYB/3p Ygyp3Il2eeoFLKzE+wQGskVBn2Nrm3mA7LuUrJRrD9/6sf3Q1X/K0NYxpV0qCWrt tbcvPpU9GHWS5mzzlvv/CHgDDw== -----END CERTIFICATE-----Generated at Wed May 13 07:53:19 2026 by rpki-client