$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json) Hash identifier: kotfZqu7QalYo8cciTiYExUkTxfhmPs8+FDz7XdbZVw= Subject key identifier: 8C:9D:0D:A7:E1:3B:CC:87:AC:17:95:06:E6:A3:8C:9D:CE:66:C9:66 Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft Manifest number: 034C Signing time: Wed 13 May 2026 01:07:32 +0000 Manifest this update: Wed 13 May 2026 01:07:31 +0000 Manifest next update: Wed 20 May 2026 01:07:31 +0000 Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: mxiXw6ugWpZyaHn3tIi1LehjsuF53n49OHQHpBLklZY=) 2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=) 3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: May 13 01:07:31 2026 GMT Not After : May 20 01:07:31 2026 GMT Subject: CN=6a03ced4-8d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:89:88:7a:60:ed:43:91:1b:46:d1:a4:d2:2f: d1:55:64:a2:99:22:c5:aa:75:72:c0:32:79:0a:e4: f9:06:02:ed:04:5f:87:49:2e:3f:79:1a:7f:90:a9: 81:f1:c5:ff:a4:5f:df:c4:c1:2a:ed:cc:78:63:7f: fa:5f:27:1e:59:3b:88:c5:78:09:62:6f:33:bc:1b: 31:c1:41:cc:23:46:c7:87:85:41:4e:f5:7a:f4:43: 6a:59:1e:67:3b:03:ae:bb:07:d5:2f:52:6e:b3:fb: 96:7c:85:30:2c:4f:bd:ae:e2:61:ac:9f:1c:ad:6d: a3:e8:e5:aa:ff:cb:d8:5b:75:5c:e1:f7:1f:d6:94: 39:69:e5:90:ae:ea:1b:6a:2a:d4:05:af:cb:59:08: 53:88:02:5e:1f:eb:4d:d7:9f:03:c4:1f:8d:e8:8f: 21:0f:10:80:be:df:df:53:6e:8d:af:6f:2d:50:5e: 00:2c:35:60:fc:53:e7:01:29:f6:c1:f6:0f:33:fc: 8e:27:7c:8b:34:c6:5b:36:e3:16:b5:e1:0d:0d:b8: b1:24:af:92:97:97:2b:3c:00:f9:7f:e9:a9:47:91: eb:da:e5:18:f5:3a:6b:bc:22:f3:e5:45:52:16:a5: 40:0b:31:43:65:42:ff:21:6a:b2:e5:dc:15:6f:c6: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:0D:A7:E1:3B:CC:87:AC:17:95:06:E6:A3:8C:9D:CE:66:C9:66 X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:46:87:dd:a9:9d:18:2b:9b:97:7d:fb:c5:34:92:e4:59:fe: 05:20:b5:18:bb:c7:9d:cc:5e:07:28:6a:95:cb:de:2b:07:61: ae:55:1e:75:41:b0:ef:3c:8d:0d:9a:5a:c7:e3:f4:27:c1:d6: 75:b0:ca:b6:24:40:5d:ec:bf:a5:fd:31:57:44:32:b6:5c:90: 27:db:22:06:08:b8:3a:79:5e:55:66:ce:01:f6:d0:1e:9b:8f: a3:0b:ce:50:b4:52:2a:83:60:d3:24:9f:2c:e6:ad:5f:a3:c6: 6d:3c:f3:59:88:12:d8:ba:e4:16:f1:1a:89:c6:6e:96:d4:c8: d3:a7:54:5e:c9:b3:b6:8e:c2:4a:49:a3:6e:2e:f3:20:ab:e6: a1:93:f2:74:aa:38:27:16:92:bb:0b:92:6c:96:98:26:c4:f3: c9:6c:e9:36:99:e5:25:4c:08:e1:6c:81:78:a5:79:c1:90:1a: 3d:77:bc:6e:b3:33:15:b8:e8:5f:15:16:a1:4c:42:eb:d2:3f: 09:61:54:cc:cb:d1:69:84:e9:01:9f:da:31:57:b4:14:78:18: fa:60:de:86:44:2c:86:47:34:9c:b1:4b:0c:7c:f3:7b:be:b6: 23:76:7f:3e:88:07:49:82:ef:95:ce:dd:30:84:5d:d3:e9:42: c7:5d:5c:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjYwNTEzMDEwNzMxWhcNMjYwNTIwMDEwNzMxWjAYMRYwFAYD VQQDEw02YTAzY2VkNC04ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi4mIemDtQ5EbRtGk0i/RVWSimSLFqnVywDJ5CuT5BgLtBF+HSS4/eRp/kKmB 8cX/pF/fxMEq7cx4Y3/6XyceWTuIxXgJYm8zvBsxwUHMI0bHh4VBTvV69ENqWR5n OwOuuwfVL1Jus/uWfIUwLE+9ruJhrJ8crW2j6OWq/8vYW3Vc4fcf1pQ5aeWQruob airUBa/LWQhTiAJeH+tN158DxB+N6I8hDxCAvt/fU26Nr28tUF4ALDVg/FPnASn2 wfYPM/yOJ3yLNMZbNuMWteENDbixJK+Sl5crPAD5f+mpR5Hr2uUY9TprvCLz5UVS FqVACzFDZUL/IWqy5dwVb8bgbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIydDafh O8yHrBeVBuajjJ3OZslmMB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5j eDJRcGRMcko0VkFyblBndEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALUaH3amdGCubl337xTSS5Fn+BSC1GLvHncxeByhqlcveKwdhrlUedUGw7zyN DZpax+P0J8HWdbDKtiRAXey/pf0xV0QytlyQJ9siBgi4OnleVWbOAfbQHpuPowvO ULRSKoNg0ySfLOatX6PGbTzzWYgS2LrkFvEaicZultTI06dUXsmzto7CSkmjbi7z IKvmoZPydKo4JxaSuwuSbJaYJsTzyWzpNpnlJUwI4WyBeKV5wZAaPXe8brMzFbjo XxUWoUxC69I/CWFUzMvRaYTpAZ/aMVe0FHgY+mDehkQshkc0nLFLDHzze762I3Z/ PogHSYLvlc7dMIRd0+lCx11ciw== -----END CERTIFICATE-----Generated at Wed May 13 09:04:45 2026 by rpki-client