$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft File: oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json) Hash identifier: dX5qEZAPVi/Npw8bNYzPjUZg256l+9ePbc4Liy4dOuE= Subject key identifier: 7F:06:8C:00:B4:9F:A2:1B:0B:F3:77:FD:7A:A8:B2:70:21:80:C9:4E Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 Certificate issuer: /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft Manifest number: 0B4F Signing time: Tue 12 May 2026 19:17:36 +0000 Manifest this update: Tue 12 May 2026 19:17:35 +0000 Manifest next update: Tue 19 May 2026 19:17:35 +0000 Files and hashes: 1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: RMxp0wj0ASVguuzBIT1kLEPZ3Zs58gqF5oO7gkcCDns=) 2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: RQ9oUS0oQbbXxdZ70QI7FGuHbVBiYm8ftlMbEKia248=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02 Validity Not Before: May 12 19:17:35 2026 GMT Not After : May 19 19:17:35 2026 GMT Subject: CN=6a037cd0-ec37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:21:c8:04:bb:75:d4:4b:34:d8:8f:e0:2c: 73:44:18:1c:51:93:8b:ae:8d:2c:41:d3:42:0a:8a: 18:77:08:45:d5:9c:71:7a:b2:1a:91:52:98:73:49: e5:2a:b3:72:23:57:37:b9:c2:db:ce:24:ca:48:db: a1:89:f9:30:24:0d:b7:b4:65:c3:84:fa:50:f1:fc: 43:f0:aa:0d:6b:15:28:b9:62:d6:14:52:21:22:19: f6:09:af:60:0c:02:0e:12:1b:4f:98:e8:cc:85:29: cf:52:cb:1b:3b:f5:b4:c8:cd:76:fd:1b:48:bb:80: 06:e4:53:af:61:d5:de:31:39:a8:1f:f6:0c:69:71: ff:3a:f5:27:b5:70:6b:97:71:c6:05:33:2d:7a:e0: 7c:53:36:34:4d:4e:71:68:91:21:9b:95:cd:33:c4: 75:2b:58:0b:5f:31:c1:ff:db:2b:93:7a:e4:80:b1: a7:2a:72:44:40:a0:a2:7f:6f:b0:6d:85:ba:9b:27: c4:d5:34:7b:49:43:bb:f6:08:18:9f:e6:f6:1f:cc: 3d:24:2b:09:ff:a1:1a:a9:2c:48:4d:73:66:1d:76: 71:32:d9:76:0d:e6:76:1b:a8:d6:3b:e7:0a:49:09: 55:f0:c9:08:50:41:75:4f:23:f8:10:84:49:13:70: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:8C:00:B4:9F:A2:1B:0B:F3:77:FD:7A:A8:B2:70:21:80:C9:4E X509v3 Authority Key Identifier: keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:20:47:a6:ec:8f:7f:f3:39:32:eb:4d:c5:1b:7c:c9:07:ba: 3d:e3:48:19:8e:9c:e0:67:76:d5:e1:a4:96:25:44:91:d5:eb: c9:9f:a9:e5:86:d4:10:6c:85:1b:8b:06:d8:91:6a:d1:82:54: 86:21:90:73:ca:b1:3e:ba:6d:bc:b5:31:89:21:a0:b5:ff:64: 21:29:6b:09:7d:9a:45:8f:91:b0:3b:3e:a6:40:ff:2d:20:14: 88:3e:37:cf:b3:0a:37:ab:bb:1c:00:db:9b:8c:ba:52:77:02: c3:9e:38:8b:11:3b:40:a1:08:c2:2a:eb:e1:41:e8:b8:90:49: 82:3b:2b:20:0b:f9:be:4c:b2:e6:a9:89:b3:50:50:91:48:5c: 1e:76:b7:02:f0:f6:26:fe:b9:ba:2b:ef:61:8d:ed:c2:ab:bb: b4:82:8d:8d:1f:04:b3:fd:0e:e8:14:7b:41:5c:44:99:de:b5: 7a:4e:c6:ce:eb:54:0e:c9:c6:01:e1:be:91:fb:e3:57:7c:11: f6:3f:17:7c:03:e2:8c:d1:0a:3e:32:cb:18:ed:be:80:e2:25: ba:f4:4f:89:c5:f8:8d:91:14:78:17:1c:69:41:26:e6:4e:7b: ba:0d:2e:33:44:e6:78:37:7c:74:f0:fc:e3:fe:6a:35:ed:67: 3d:33:a0:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRDAxMTAvBgNVBAUTKEEwOUNBMkQzMUIxNkJGQTU4NEE3NThDM0E3RDUxRkFD RDIxNTFCMDIwHhcNMjYwNTEyMTkxNzM1WhcNMjYwNTE5MTkxNzM1WjAYMRYwFAYD VQQDEw02YTAzN2NkMC1lYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VghyAS7ddRLNNiP4CxzRBgcUZOLro0sQdNCCooYdwhF1ZxxerIakVKYc0nl KrNyI1c3ucLbziTKSNuhifkwJA23tGXDhPpQ8fxD8KoNaxUouWLWFFIhIhn2Ca9g DAIOEhtPmOjMhSnPUssbO/W0yM12/RtIu4AG5FOvYdXeMTmoH/YMaXH/OvUntXBr l3HGBTMteuB8UzY0TU5xaJEhm5XNM8R1K1gLXzHB/9srk3rkgLGnKnJEQKCif2+w bYW6myfE1TR7SUO79ggYn+b2H8w9JCsJ/6EaqSxITXNmHXZxMtl2DeZ2G6jWO+cK SQlV8MkIUEF1TyP4EIRJE3DoLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8GjAC0 n6IbC/N3/XqosnAhgMlOMB8GA1UdIwQYMBaAFKCcotMbFr+lhKdYw6fVH6zSFRsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVEMC85MkIzQ0Q1QTU4 Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2V0VwMWpEcDlVZnJOSVZH d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29KeWkweHNXdjZXRXAxakRwOVVmck5JVkd3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVEMC85MkIzQ0Q1QTU4Q0YxMUVBODVFODU5NERDNEY5QUUwMi9vSnlpMHhzV3Y2 V0VwMWpEcDlVZnJOSVZHd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATiBHpuyPf/M5MutNxRt8yQe6PeNIGY6c4Gd21eGkliVEkdXryZ+p5YbUEGyF G4sG2JFq0YJUhiGQc8qxPrptvLUxiSGgtf9kISlrCX2aRY+RsDs+pkD/LSAUiD43 z7MKN6u7HADbm4y6UncCw544ixE7QKEIwirr4UHouJBJgjsrIAv5vkyy5qmJs1BQ kUhcHna3AvD2Jv65uivvYY3twqu7tIKNjR8Es/0O6BR7QVxEmd61ek7GzutUDsnG AeG+kfvjV3wR9j8XfAPijNEKPjLLGO2+gOIluvRPicX4jZEUeBccaUEm5k57ug0u M0TmeDd8dPD84/5qNe1nPTOgMQ== -----END CERTIFICATE-----Generated at Wed May 13 10:02:18 2026 by rpki-client