$ rpki-client -vvf rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft File: oYVUdv79oHy8rTr5lUhEq6B7dyw.mft (raw, json) Hash identifier: 597dsHJ+4vNPsGbmGMDNGacoSLze964rESvl7z+6VIM= Subject key identifier: 36:41:93:2E:31:0C:DC:9C:7C:56:43:E1:F5:56:DF:5D:A4:01:F2:4D Authority key identifier: A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C Certificate issuer: /CN=A91C909E/serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft Manifest number: 03 Signing time: Mon 11 May 2026 09:26:47 +0000 Manifest this update: Mon 11 May 2026 09:26:46 +0000 Manifest next update: Mon 18 May 2026 09:26:46 +0000 Files and hashes: 1: oYVUdv79oHy8rTr5lUhEq6B7dyw.crl (hash: MuY8QnEhOAjls83gpF7F8BPnHPKWFyLYThCOgBAd9TA=) 2: 377E5F464B5C11F1B3CC4A0AAE833773.roa (hash: l+MmjZZ7vb/FC3MXzcOXQHG/MQgYHBCADLYpYIgUX8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C909E, serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C Validity Not Before: May 11 09:26:46 2026 GMT Not After : May 18 09:26:46 2026 GMT Subject: CN=6a01a0d6-7079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:68:92:af:6c:06:b0:9e:dd:54:20:11:75: 7d:82:ae:b5:ef:6e:3a:f1:c3:b9:66:2d:0b:8f:75: 92:28:42:74:94:06:24:c3:82:11:73:e0:89:2b:24: c6:69:be:4b:da:3d:77:8d:f8:03:8f:dc:8b:07:be: d9:4f:09:ad:80:c3:c1:69:11:32:fc:ff:68:94:2c: a8:fd:51:0c:4c:48:4f:88:ef:36:6b:81:d1:90:c3: b2:b8:1f:e2:33:a6:f8:49:e9:31:4b:88:e4:48:92: 90:81:dc:f1:cb:2e:6c:bb:4d:5c:95:8e:8a:79:44: 1b:c6:ab:94:23:f1:f5:59:90:51:43:37:0f:73:2b: fd:53:28:d4:a5:be:5c:84:7c:62:c4:88:10:3b:8b: 3e:13:36:4a:38:5d:67:d7:a7:53:ef:42:57:5f:1a: c9:60:55:e4:34:7e:d9:30:a2:a1:92:6c:99:e2:57: 15:09:b9:da:7b:ff:26:0c:a5:8f:cf:67:28:46:30: 72:34:86:e8:3a:7f:ee:a8:aa:94:7b:e1:3c:91:93: dc:20:13:99:63:c3:36:ac:5a:40:cb:6d:50:13:2e: 09:62:63:4b:c9:ac:15:e6:b6:f9:55:1a:d7:0f:46: 1a:70:33:e1:83:18:ee:6b:09:6c:23:2b:9b:b4:29: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:93:2E:31:0C:DC:9C:7C:56:43:E1:F5:56:DF:5D:A4:01:F2:4D X509v3 Authority Key Identifier: keyid:A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2d:df:ef:4d:8b:e9:30:2c:7e:15:74:c0:98:b6:cf:bb:9b: 75:9d:e9:f9:07:ec:c0:79:50:3a:ac:41:8e:11:15:c8:01:2c: a7:ef:a5:36:6a:35:13:d9:42:69:58:15:05:c3:05:4c:ba:7b: af:4c:7b:e4:fb:0c:3f:f3:b8:db:77:75:11:30:a5:82:3e:6b: 70:71:c3:ac:35:dd:ab:7c:09:fe:2b:13:7c:d7:fe:b7:28:60: 6b:a4:7a:b8:01:cc:6f:58:6a:88:ec:e6:df:e9:3b:17:fc:3a: 65:e7:e9:58:0e:b4:30:4e:6e:a8:a8:55:ff:82:25:48:04:d7: aa:ec:d5:55:53:87:6c:4a:a5:35:a0:25:ac:02:c2:82:60:0c: 60:5e:30:8d:1b:f9:1d:81:0e:7b:cb:d6:e8:d1:04:75:dc:0d: 4b:c3:78:1f:31:33:6c:1c:55:cf:85:b5:76:0e:42:ce:86:64: 10:84:78:a9:af:61:9c:29:dd:de:f7:fd:69:a3:bb:b9:5b:1a: 8f:7e:aa:d1:2a:eb:cb:28:c7:df:b2:f3:d1:86:e0:79:38:fc: 4d:48:87:94:4b:b3:81:63:99:e0:95:48:c6:cf:7a:09:e9:63: 18:7d:16:79:79:9e:8c:d1:b9:ee:8d:93:c3:73:81:ca:cb:9f: f0:a1:ac:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTA5RTExMC8GA1UEBRMoQTE4NTU0NzZGRUZEQTA3Q0JDQUQzQUY5OTU0ODQ0QUJB MDdCNzcyQzAeFw0yNjA1MTEwOTI2NDZaFw0yNjA1MTgwOTI2NDZaMBgxFjAUBgNV BAMTDTZhMDFhMGQ2LTcwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCIimiSr2wGsJ7dVCARdX2CrrXvbjrxw7lmLQuPdZIoQnSUBiTDghFz4IkrJMZp vkvaPXeN+AOP3IsHvtlPCa2Aw8FpETL8/2iULKj9UQxMSE+I7zZrgdGQw7K4H+Iz pvhJ6TFLiORIkpCB3PHLLmy7TVyVjop5RBvGq5Qj8fVZkFFDNw9zK/1TKNSlvlyE fGLEiBA7iz4TNko4XWfXp1PvQldfGslgVeQ0ftkwoqGSbJniVxUJudp7/yYMpY/P ZyhGMHI0hug6f+6oqpR74TyRk9wgE5ljwzasWkDLbVATLgliY0vJrBXmtvlVGtcP RhpwM+GDGO5rCWwjK5u0KXBRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNkGTLjEM 3Jx8VkPh9VbfXaQB8k0wHwYDVR0jBBgwFoAUoYVUdv79oHy8rTr5lUhEq6B7dyww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5MDlFL0I4MjBFRERDNEI1 QTExRjE5MjhDRENCNUFEODMzNzczL29ZVlVkdjc5b0h5OHJUcjVsVWhFcTZCN2R5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1lWVWR2NzlvSHk4clRyNWxVaEVxNkI3ZHl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 MDlFL0I4MjBFRERDNEI1QTExRjE5MjhDRENCNUFEODMzNzczL29ZVlVkdjc5b0h5 OHJUcjVsVWhFcTZCN2R5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB1Ld/vTYvpMCx+FXTAmLbPu5t1nen5B+zAeVA6rEGOERXIASyn76U2ajUT2UJp WBUFwwVMunuvTHvk+ww/87jbd3URMKWCPmtwccOsNd2rfAn+KxN81/63KGBrpHq4 AcxvWGqI7Obf6TsX/Dpl5+lYDrQwTm6oqFX/giVIBNeq7NVVU4dsSqU1oCWsAsKC YAxgXjCNG/kdgQ57y9bo0QR13A1Lw3gfMTNsHFXPhbV2DkLOhmQQhHipr2GcKd3e 9/1po7u5WxqPfqrRKuvLKMffsvPRhuB5OPxNSIeUS7OBY5nglUjGz3oJ6WMYfRZ5 eZ6M0bnujZPDc4HKy5/woaz6 -----END CERTIFICATE-----Generated at Wed May 13 09:11:48 2026 by rpki-client