$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json) Hash identifier: pZlVwPPFjqhqM2Mz0K1IHUia42IuIzRSLJwDSG6BhoY= Subject key identifier: B5:F5:73:21:E2:4C:36:A4:26:96:D8:0A:ED:BB:CE:70:61:05:8B:33 Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Certificate serial: 1443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft Manifest number: 1437 Signing time: Tue 12 May 2026 16:54:09 +0000 Manifest this update: Tue 12 May 2026 16:54:09 +0000 Manifest next update: Tue 19 May 2026 16:54:09 +0000 Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: IRDie4ysc4rvxPNv4PxTI4sWnW7PI2RjIwg9Kfda7Zc=) 2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 3poz9WeE/VQCro0QqBaX5PdACtIqSQyu6Jy9OGfa5do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5187 (0x1443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC Validity Not Before: May 12 16:54:09 2026 GMT Not After : May 19 16:54:09 2026 GMT Subject: CN=6a035b31-c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:af:35:40:3c:e7:86:0d:cd:24:8a:a4:b5: 0c:3f:32:24:e4:97:6c:9b:28:a4:4e:97:bd:34:b4: 77:4b:34:2e:cc:e6:74:15:79:c1:b4:88:1f:61:04: 25:66:f5:47:bb:fc:b0:d4:36:b5:cf:37:93:a0:8b: f2:a9:0a:e9:05:a3:3c:ea:6c:0c:2d:58:e3:6d:53: c6:40:25:c0:5a:37:0a:58:34:c1:3b:25:9c:49:75: 06:e4:b3:0a:e0:fa:74:6f:6a:5f:d6:9a:fe:a1:ba: f7:4d:31:7c:cb:83:c7:4f:59:50:13:f7:59:94:93: d1:cd:4b:b7:67:6f:98:11:39:f2:61:8e:53:a7:01: db:43:1a:c6:53:63:6c:47:80:dc:f3:ae:a2:02:9d: 3d:ad:10:35:25:51:f8:5b:69:b1:c3:35:69:93:51: 6b:cf:1f:e3:9f:73:c2:85:5d:44:35:4d:70:89:81: 61:81:7c:6a:83:a8:cb:57:98:d9:36:f5:b2:63:aa: c3:bb:f6:5e:11:11:27:af:26:89:99:d8:7d:b4:80: e8:81:3e:7d:d9:90:78:3a:77:bc:e3:bd:c8:2b:e9: 87:3a:a6:b2:d7:36:5d:70:02:82:65:55:2d:27:58: 18:d9:82:cc:06:5b:9c:10:1f:ba:16:68:5b:bf:35: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:73:21:E2:4C:36:A4:26:96:D8:0A:ED:BB:CE:70:61:05:8B:33 X509v3 Authority Key Identifier: keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:5a:ff:59:d7:cb:45:4a:8d:c1:e0:50:5e:d0:52:a3:d4:fb: a5:85:db:af:65:58:7a:f6:e8:0f:f6:05:5b:14:90:3d:1a:ff: d4:de:89:55:48:26:27:ba:ba:58:69:c5:2e:a8:b9:db:d8:f3: 20:6b:5d:59:ab:44:fa:2e:a1:c8:55:34:fc:b3:7f:f0:20:f4: fb:44:8b:ac:93:91:3b:a8:5e:0b:c0:10:9c:e8:e1:2f:62:ed: 5e:48:78:ce:ba:35:c2:5e:76:8f:e9:f6:9d:f9:e6:ba:78:96: 09:15:b0:5d:65:24:6e:c4:37:cd:88:4d:9a:7d:8c:ae:aa:b5: 88:2a:e7:b4:ee:40:00:43:21:a4:b8:d3:97:7e:50:8e:33:11: 85:91:5f:91:ad:bb:5a:9f:48:e8:4c:2a:87:f7:ff:a1:03:bb: e7:0a:4b:48:58:ed:e6:a8:f9:d7:23:7e:0c:cb:e8:b4:66:31: 33:d7:c0:1e:2e:c9:76:c9:f6:82:0d:e2:6d:89:c0:93:34:b4: 52:6e:5a:8c:31:41:3a:ad:c1:c0:1a:99:3e:f9:c7:e6:6a:5a: 93:7a:f1:b2:1e:da:23:29:5e:04:98:f0:5f:c0:94:ac:6c:d4: 34:69:ba:ab:75:ea:a1:40:f7:7d:ff:c8:6c:70:bd:8a:6e:ec: 9e:7a:64:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCNEUxMTAvBgNVBAUTKDNBMTQ5NDI1QkUzMjg1RDYxMTRCMDFGNkMyRkM4OEEx N0FGRjRCRUMwHhcNMjYwNTEyMTY1NDA5WhcNMjYwNTE5MTY1NDA5WjAYMRYwFAYD VQQDEw02YTAzNWIzMS1jODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwqvNUA854YNzSSKpLUMPzIk5JdsmyikTpe9NLR3SzQuzOZ0FXnBtIgfYQQl ZvVHu/yw1Da1zzeToIvyqQrpBaM86mwMLVjjbVPGQCXAWjcKWDTBOyWcSXUG5LMK 4Pp0b2pf1pr+obr3TTF8y4PHT1lQE/dZlJPRzUu3Z2+YETnyYY5TpwHbQxrGU2Ns R4Dc866iAp09rRA1JVH4W2mxwzVpk1Frzx/jn3PChV1ENU1wiYFhgXxqg6jLV5jZ NvWyY6rDu/ZeEREnryaJmdh9tIDogT592ZB4One8473IK+mHOqay1zZdcAKCZVUt J1gY2YLMBlucEB+6FmhbvzUslQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLX1cyHi TDakJpbYCu27znBhBYszMB8GA1UdIwQYMBaAFDoUlCW+MoXWEUsB9sL8iKF6/0vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUI0RS8yQ0E0NzA2Njk5 NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhkWVJTd0gyd3Z5SW9Ycl9T LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09oU1VKYjR5aGRZUlN3SDJ3dnlJb1hyX1Mtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUI0RS8yQ0E0NzA2Njk5NzAxMUU4ODYxREQwNTdDNEY5QUUwMi9PaFNVSmI0eWhk WVJTd0gyd3Z5SW9Ycl9TLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJVr/WdfLRUqNweBQXtBSo9T7pYXbr2VYevboD/YFWxSQPRr/1N6JVUgmJ7q6 WGnFLqi529jzIGtdWatE+i6hyFU0/LN/8CD0+0SLrJORO6heC8AQnOjhL2LtXkh4 zro1wl52j+n2nfnmuniWCRWwXWUkbsQ3zYhNmn2Mrqq1iCrntO5AAEMhpLjTl35Q jjMRhZFfka27Wp9I6Ewqh/f/oQO75wpLSFjt5qj51yN+DMvotGYxM9fAHi7Jdsn2 gg3ibYnAkzS0Um5ajDFBOq3BwBqZPvnH5mpak3rxsh7aIyleBJjwX8CUrGzUNGm6 q3XqoUD3ff/IbHC9im7snnpkBQ== -----END CERTIFICATE-----Generated at Wed May 13 14:00:46 2026 by rpki-client