$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json) Hash identifier: PcbYl3dHSzhrjM1Y/ZKFwbkEm4yG8mEQabgOCua9gxQ= Subject key identifier: CC:6E:53:3B:F0:30:FC:40:0E:6E:B4:B4:55:D0:3A:E8:63:1A:DE:9D Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft Manifest number: 0121 Signing time: Wed 13 May 2026 05:54:20 +0000 Manifest this update: Wed 13 May 2026 05:54:20 +0000 Manifest next update: Wed 20 May 2026 05:54:20 +0000 Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: 0CRD8kKnAB8KjhAvAY/j8vZpWRDJ5JH4/ZSEZAvmBJc=) 2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: /TeFmAq6WUrTiuCuPlwLIq4bJylbmUbGhfodPgyaENY=) 3: 03FFD61EEF8A11F09F678C04616F56BC.roa (hash: Vq7WOAaGyHrEANMuaydXxs4oGlSE1GWybP72WD+YuWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: May 13 05:54:20 2026 GMT Not After : May 20 05:54:20 2026 GMT Subject: CN=6a04120c-b366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:77:bd:ca:f6:f9:55:f8:93:49:7e:a8:4b: 57:60:80:a4:2c:62:bc:c0:20:58:9e:59:e1:fd:38: 4e:64:b9:fa:a4:c3:af:a5:89:82:21:14:5e:7d:51: d4:64:54:00:58:bb:84:2e:7f:54:fb:24:5c:50:4e: ce:df:b1:4f:58:3a:df:b0:c4:4d:85:86:f4:ee:be: 6a:8c:e1:ac:72:c5:47:51:d6:87:fb:dd:97:37:a0: 78:73:b8:41:a0:c2:ca:8d:41:cb:9d:d2:22:8f:65: 0d:0c:2b:33:75:e7:fa:18:b6:f6:1a:bd:51:e1:20: 13:96:e1:7c:89:47:a4:4b:da:0f:d9:91:98:01:c0: 68:80:9d:f0:d9:2f:c1:f6:80:8f:44:2e:cb:31:c0: 87:6a:f3:a5:35:88:82:31:a5:30:6d:29:9b:89:74: ff:6b:48:05:48:50:fd:de:31:91:be:73:50:ab:ef: d6:13:85:27:04:9b:e0:07:6e:46:f8:f2:89:ea:f7: 39:0e:74:7a:50:59:b4:eb:64:cd:b2:7e:13:b7:f9: 82:ae:1e:ea:c1:08:20:16:c5:6a:7e:bb:cb:8d:0a: e8:ff:b8:2b:16:d4:48:92:1c:7f:c6:14:95:f4:af: 0a:ea:94:5d:49:df:6f:8d:9a:40:80:19:eb:dc:62: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6E:53:3B:F0:30:FC:40:0E:6E:B4:B4:55:D0:3A:E8:63:1A:DE:9D X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:71:dc:1b:42:9d:1f:fa:fd:85:51:78:33:31:d3:3d:39:d7: 14:a4:9d:fc:8e:87:52:b3:59:32:e8:4d:4f:82:9e:51:00:3e: dd:78:a9:f0:92:6e:a7:da:68:c9:59:5c:e0:31:9a:8b:35:c1: a7:36:d6:dc:3a:60:4e:db:db:0a:33:bd:e7:97:5b:86:ad:7c: 8a:3e:92:01:4d:a4:e1:21:e1:75:99:47:ac:48:13:24:84:1c: d6:bd:f7:86:fb:8f:9f:c8:db:1c:4d:60:1e:1d:fe:2c:a5:c4: 68:86:78:c9:2e:21:c8:28:cc:14:a3:e1:7f:fd:8f:b1:4e:53: c9:a1:bf:a5:62:eb:93:38:3a:35:4b:d2:5f:05:68:74:92:e7: 80:43:ec:09:e2:01:8b:7d:0e:82:e9:49:c5:2d:0a:8c:ad:10: 1a:dd:30:3f:6c:23:5c:d7:02:06:57:02:96:70:66:5e:93:c5: 04:99:cd:66:e0:d8:0a:2b:7f:d3:39:e9:38:09:95:c7:e8:7d: 49:f8:00:2c:c5:3a:4e:1e:2b:97:dd:0a:05:21:a9:18:ff:76: ab:f1:f3:b8:d4:08:bd:e6:90:93:aa:c4:7c:a1:a1:8f:06:20: eb:0e:ca:7c:e1:c0:db:f2:97:ba:2c:3a:1b:04:45:bd:c7:2a: 3a:b3:85:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwNTEzMDU1NDIwWhcNMjYwNTIwMDU1NDIwWjAYMRYwFAYD VQQDEw02YTA0MTIwYy1iMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTR3vcr2+VX4k0l+qEtXYICkLGK8wCBYnlnh/ThOZLn6pMOvpYmCIRRefVHU ZFQAWLuELn9U+yRcUE7O37FPWDrfsMRNhYb07r5qjOGscsVHUdaH+92XN6B4c7hB oMLKjUHLndIij2UNDCszdef6GLb2Gr1R4SATluF8iUekS9oP2ZGYAcBogJ3w2S/B 9oCPRC7LMcCHavOlNYiCMaUwbSmbiXT/a0gFSFD93jGRvnNQq+/WE4UnBJvgB25G +PKJ6vc5DnR6UFm062TNsn4Tt/mCrh7qwQggFsVqfrvLjQro/7grFtRIkhx/xhSV 9K8K6pRdSd9vjZpAgBnr3GJXzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxuUzvw MPxADm60tFXQOuhjGt6dMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zy b0hCNmhSVVpYTWFPZzJxX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu3HcG0KdH/r9hVF4MzHTPTnXFKSd/I6HUrNZMuhNT4KeUQA+3Xip8JJup9po yVlc4DGaizXBpzbW3DpgTtvbCjO955dbhq18ij6SAU2k4SHhdZlHrEgTJIQc1r33 hvuPn8jbHE1gHh3+LKXEaIZ4yS4hyCjMFKPhf/2PsU5TyaG/pWLrkzg6NUvSXwVo dJLngEPsCeIBi30OgulJxS0KjK0QGt0wP2wjXNcCBlcClnBmXpPFBJnNZuDYCit/ 0znpOAmVx+h9SfgALMU6Th4rl90KBSGpGP92q/HzuNQIveaQk6rEfKGhjwYg6w7K fOHA2/KXuiw6GwRFvccqOrOFaQ== -----END CERTIFICATE-----Generated at Wed May 13 13:23:35 2026 by rpki-client