$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft File: Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft (raw, json) Hash identifier: NmhpKlfBx3GtKQ387rt0eapkzrde7Yl+tl+ZG4keP7Y= Subject key identifier: 5B:F1:57:AD:3B:24:EF:0C:E9:86:9D:81:DB:47:17:65:2D:3E:15:70 Authority key identifier: 3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42 Certificate issuer: /CN=A91B6899/serialNumber=3A6EE6F015941F5072AE71391B172058A0190142 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft Manifest number: 03 Signing time: Mon 11 May 2026 09:27:27 +0000 Manifest this update: Mon 11 May 2026 09:27:26 +0000 Manifest next update: Mon 18 May 2026 09:27:26 +0000 Files and hashes: 1: Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl (hash: yiTTKrAprE/irnt8PGXn3dOI6aAlWYbUyYEdMlFj92s=) 2: B70755C04C7311F1ACB58F89C4833773.roa (hash: LSxJplD9UL5reXwNEwfkGB8ity1ZcN9w6tgZf+NqgRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6899, serialNumber=3A6EE6F015941F5072AE71391B172058A0190142 Validity Not Before: May 11 09:27:26 2026 GMT Not After : May 18 09:27:26 2026 GMT Subject: CN=6a01a0fe-abac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:61:bb:31:c2:f9:8d:91:89:9c:db:45:e5: 54:2a:b8:da:36:25:4d:99:89:0e:cb:66:1a:1e:a4: a0:76:a4:65:16:6d:90:4d:85:11:cb:d4:12:c8:17: c5:05:1b:31:ef:05:c4:a3:5c:b5:25:a9:fe:f1:5d: 49:45:c0:6f:1d:d3:4f:39:be:07:51:cc:4a:44:73: ec:6d:a1:01:e7:51:a9:46:7c:2d:ed:11:29:25:29: fa:ab:33:a5:96:37:86:2b:64:3d:7f:83:1c:52:14: 20:86:b4:54:b4:43:92:3f:53:bf:2a:c4:9a:12:15: 73:fe:93:84:a5:77:c2:62:31:48:95:c6:ab:ac:dd: 94:ad:0f:69:e4:ca:f4:5d:9d:95:0d:ba:21:82:c4: 76:ca:72:b7:88:e3:09:89:02:0a:e3:a8:f0:ce:c9: 30:ac:6d:a9:0e:c0:73:67:f5:69:5e:b6:34:e0:cc: 91:73:e7:53:30:d3:49:4e:6c:53:02:49:92:a7:e3: 1b:5a:84:db:29:81:29:7a:7b:48:94:05:5a:3b:28: fd:a6:27:88:8a:fa:f0:75:24:96:29:02:30:12:94: 4e:14:86:21:67:53:95:e9:13:ff:a3:c3:69:5a:c6: e0:d6:55:9a:33:6c:2b:42:6b:20:08:5f:18:89:ee: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F1:57:AD:3B:24:EF:0C:E9:86:9D:81:DB:47:17:65:2D:3E:15:70 X509v3 Authority Key Identifier: keyid:3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:0e:6f:b0:7f:b8:80:16:82:b4:77:ad:a1:d8:8e:32:9c:e7: 40:fb:20:81:65:6c:86:a9:c1:98:d9:b5:ec:d1:59:18:cd:c8: 11:48:29:a3:c2:a9:fc:6a:e1:8a:17:a6:91:80:47:8c:c7:92: 64:aa:20:1d:12:3d:c8:b9:0b:ae:03:59:1f:2b:53:c8:ab:26: ec:f9:18:2b:5e:0c:e4:f1:69:95:c3:7e:d5:bc:cc:cf:34:69: c5:e2:91:b4:a8:4e:20:0d:a0:16:35:13:35:cb:3e:a3:69:db: 08:7b:d1:d9:ab:82:c9:f8:40:77:44:f4:ed:6b:06:e9:3a:10: a8:a3:23:d8:e9:7f:db:64:0c:bf:1a:41:9d:7b:36:12:91:fa: 17:cb:dc:39:d6:5a:ed:b6:49:1f:d4:e3:48:3d:08:08:47:2f: ab:72:9e:31:a0:ed:24:5b:4c:b8:77:94:db:e7:66:b5:00:51: 92:b8:e1:09:5b:7c:a7:ee:cf:c7:10:55:f2:a4:fb:f0:71:c1: 47:ac:20:e1:74:04:b2:45:62:b7:c7:00:e1:24:21:83:04:23: 79:38:f6:76:c7:00:77:a6:f7:23:e0:f7:91:9e:b4:24:64:7d: 75:54:d9:08:09:c9:d9:f5:ba:0d:f8:6f:4f:22:26:61:26:d8: c1:94:0b:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Njg5OTExMC8GA1UEBRMoM0E2RUU2RjAxNTk0MUY1MDcyQUU3MTM5MUIxNzIwNThB MDE5MDE0MjAeFw0yNjA1MTEwOTI3MjZaFw0yNjA1MTgwOTI3MjZaMBgxFjAUBgNV BAMTDTZhMDFhMGZlLWFiYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWw2G7McL5jZGJnNtF5VQquNo2JU2ZiQ7LZhoepKB2pGUWbZBNhRHL1BLIF8UF GzHvBcSjXLUlqf7xXUlFwG8d0085vgdRzEpEc+xtoQHnUalGfC3tESklKfqrM6WW N4YrZD1/gxxSFCCGtFS0Q5I/U78qxJoSFXP+k4Sld8JiMUiVxqus3ZStD2nkyvRd nZUNuiGCxHbKcreI4wmJAgrjqPDOyTCsbakOwHNn9WletjTgzJFz51Mw00lObFMC SZKn4xtahNspgSl6e0iUBVo7KP2mJ4iK+vB1JJYpAjASlE4UhiFnU5XpE/+jw2la xuDWVZozbCtCayAIXxiJ7gkRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW/FXrTsk 7wzphp2B20cXZS0+FXAwHwYDVR0jBBgwFoAUOm7m8BWUH1ByrnE5GxcgWKAZAUIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODk5LzYwQTIwRkZFNEM3 MzExRjE5QUJERTAwNUM0ODMzNzczL09tN204QldVSDFCeXJuRTVHeGNnV0tBWkFV SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT203bThCV1VIMUJ5cm5FNUd4Y2dXS0FaQVVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODk5LzYwQTIwRkZFNEM3MzExRjE5QUJERTAwNUM0ODMzNzczL09tN204QldVSDFC eXJuRTVHeGNnV0tBWkFVSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDQDm+wf7iAFoK0d62h2I4ynOdA+yCBZWyGqcGY2bXs0VkYzcgRSCmjwqn8auGK F6aRgEeMx5JkqiAdEj3IuQuuA1kfK1PIqybs+RgrXgzk8WmVw37VvMzPNGnF4pG0 qE4gDaAWNRM1yz6jadsIe9HZq4LJ+EB3RPTtawbpOhCooyPY6X/bZAy/GkGdezYS kfoXy9w51lrttkkf1ONIPQgIRy+rcp4xoO0kW0y4d5Tb52a1AFGSuOEJW3yn7s/H EFXypPvwccFHrCDhdASyRWK3xwDhJCGDBCN5OPZ2xwB3pvcj4PeRnrQkZH11VNkI CcnZ9boN+G9PIiZhJtjBlAs4 -----END CERTIFICATE-----Generated at Wed May 13 06:47:26 2026 by rpki-client