$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft File: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json) Hash identifier: SPL64LIUTe8ZFCIwT6/uPmqJhESXmv/4gQTDnISlI1Y= Subject key identifier: CE:3F:05:4B:8E:3E:D1:F6:A1:98:BD:88:58:C6:57:2E:77:C3:8B:DD Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F Certificate issuer: /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft Manifest number: 05 Signing time: Wed 13 May 2026 09:22:42 +0000 Manifest this update: Wed 13 May 2026 09:22:42 +0000 Manifest next update: Wed 20 May 2026 09:22:42 +0000 Files and hashes: 1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: xRY9h+ZWfgZvTo1kWd9dFBFa+67EfyDxKmtxLfBlNFg=) 2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: f7QabRTI7sk2IZG0kdDs+LNBsIzZTK1/4WtgGby64wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Validity Not Before: May 13 09:22:42 2026 GMT Not After : May 20 09:22:42 2026 GMT Subject: CN=6a0442e2-a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:ae:f8:af:3f:a0:19:c1:0d:f3:86:7c:3f: 63:1b:6b:d7:17:6b:dc:d2:f7:40:bf:54:05:61:c6: d0:5d:3c:2a:bc:e5:e3:c0:c7:eb:ed:3a:83:a7:7c: fc:b9:2d:c9:83:51:d9:8e:72:ca:7b:6c:cb:c4:88: e2:42:08:49:36:d1:79:cb:81:3d:5e:5d:c1:6d:4e: b9:5d:c5:83:3b:c9:d4:71:d0:ac:54:2b:98:49:c1: b9:8a:3e:4f:87:91:09:96:13:62:b1:88:ed:e3:a7: a0:59:c4:ab:7d:10:3a:2c:4c:92:44:22:fb:be:b4: 02:e9:e8:45:f7:67:fa:1b:0c:e8:f5:17:8c:33:1f: 7c:e2:07:9d:51:c5:5c:3f:15:0f:a1:49:14:44:4c: f0:5a:7b:9d:63:93:2d:dc:7a:2b:e6:03:20:70:c0: cc:69:6e:dc:bd:3d:c5:22:be:35:68:a9:47:1c:70: fb:48:77:f3:1e:2b:c0:5e:8d:2a:ff:59:23:e0:89: 00:2f:9a:fe:1e:7c:98:2a:7b:f9:30:31:46:43:60: 9d:ca:f2:90:42:e1:e2:d0:e9:78:e6:99:0e:bf:08: 0d:76:d8:a6:6a:98:cd:e0:e5:65:a2:8b:15:25:25: d6:d6:d4:87:01:2d:22:b0:41:59:f3:74:cb:61:71: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3F:05:4B:8E:3E:D1:F6:A1:98:BD:88:58:C6:57:2E:77:C3:8B:DD X509v3 Authority Key Identifier: keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:31:57:d1:3b:ba:d1:b1:04:27:94:dd:d7:a3:7f:10:32:28: 46:ff:41:b9:4b:27:e1:44:4b:88:d7:3d:93:5e:53:f6:24:2c: a9:28:1b:98:27:4a:fc:91:23:47:d2:68:59:d0:60:12:8a:30: c6:f6:66:6c:1b:f2:c1:72:57:26:73:9e:59:75:73:cc:66:dc: b9:35:74:3b:5d:ce:a7:72:e0:48:72:ba:75:dd:1e:70:dd:74: a4:a0:00:25:60:91:a7:62:37:04:dd:3b:d9:bd:9e:08:e8:9e: 9d:3a:ab:6b:13:e9:f5:1d:26:a3:42:85:d4:43:98:a9:56:fc: af:46:26:2b:7b:73:b6:ae:c8:4b:34:84:aa:e8:b0:35:f6:88: 26:d5:48:4e:8b:c7:1f:76:6f:3f:de:66:77:65:76:95:fb:9e: 65:23:21:70:4f:f4:9c:2b:f6:f7:cb:2f:3a:ac:0f:c3:44:e2: 1f:e0:09:85:a8:7e:2b:fc:c9:a9:8e:78:82:dd:89:83:4f:36: ef:b6:37:8e:b0:78:b7:91:0e:ae:fb:9c:73:93:64:6d:6f:7a: 50:e6:f9:6f:c1:93:fe:95:54:79:6a:36:5f:52:23:d2:bc:73: 1e:51:5b:61:3e:39:c7:d3:c6:61:49:c5:ae:22:5f:9f:7e:f7: f5:7c:5e:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx Qzk4RTY4RjAeFw0yNjA1MTMwOTIyNDJaFw0yNjA1MjAwOTIyNDJaMBgxFjAUBgNV BAMTDTZhMDQ0MmUyLWEwZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA2a74rz+gGcEN84Z8P2Mba9cXa9zS90C/VAVhxtBdPCq85ePAx+vtOoOnfPy5 LcmDUdmOcsp7bMvEiOJCCEk20XnLgT1eXcFtTrldxYM7ydRx0KxUK5hJwbmKPk+H kQmWE2KxiO3jp6BZxKt9EDosTJJEIvu+tALp6EX3Z/obDOj1F4wzH3ziB51RxVw/ FQ+hSRRETPBae51jky3ceivmAyBwwMxpbty9PcUivjVoqUcccPtId/MeK8BejSr/ WSPgiQAvmv4efJgqe/kwMUZDYJ3K8pBC4eLQ6XjmmQ6/CA122KZqmM3g5WWiixUl JdbW1IcBLSKwQVnzdMthcbdBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzj8FS44+ 0fahmL2IWMZXLnfDi90wHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqMVfRO7rRsQQnlN3Xo38QMihG/0G5SyfhREuI1z2TXlP2JCypKBuYJ0r8kSNH 0mhZ0GASijDG9mZsG/LBclcmc55ZdXPMZty5NXQ7Xc6ncuBIcrp13R5w3XSkoAAl YJGnYjcE3TvZvZ4I6J6dOqtrE+n1HSajQoXUQ5ipVvyvRiYre3O2rshLNISq6LA1 9ogm1UhOi8cfdm8/3mZ3ZXaV+55lIyFwT/ScK/b3yy86rA/DROIf4AmFqH4r/Mmp jniC3YmDTzbvtjeOsHi3kQ6u+5xzk2Rtb3pQ5vlvwZP+lVR5ajZfUiPSvHMeUVth PjnH08ZhScWuIl+ffvf1fF4P -----END CERTIFICATE-----Generated at Wed May 13 15:35:36 2026 by rpki-client