$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: OdqD34UPtC0K2G1tHy2Batg7QZ6jYnS1YvlnEnAJyDo= Subject key identifier: 0B:CA:F3:FA:70:06:20:1C:76:B8:D7:9E:77:DA:36:07:C8:5E:4A:1E Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0CCD Signing time: Tue 12 May 2026 18:28:04 +0000 Manifest this update: Tue 12 May 2026 18:28:04 +0000 Manifest next update: Tue 19 May 2026 18:28:04 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: Tq3V8A6lwtiHK7yladGGHdRrRUWSRFMKX6rj7ByZZsw=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) 3: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=) 4: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: May 12 18:28:04 2026 GMT Not After : May 19 18:28:04 2026 GMT Subject: CN=6a037134-7854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a4:1e:ae:f3:29:a2:30:76:3e:1f:02:9b:f5: ff:bb:2f:e9:8c:d4:ea:5b:4d:9c:e3:5c:6c:27:a4: 16:3b:5f:05:a7:2c:5c:a1:b0:a1:d1:7d:f0:d9:6b: e7:4f:12:d9:bf:e7:2f:31:d9:b7:ae:d5:70:56:fc: e0:18:95:83:79:cd:14:88:59:8a:9d:d4:85:78:ef: 60:e0:ea:5d:c7:df:36:d6:d2:29:0f:dd:b8:65:6d: 01:35:dd:6f:bb:d7:b4:97:a2:a8:e3:00:92:4b:12: 78:13:41:d3:bc:06:23:cd:d4:ab:7e:63:3a:f5:f7: 54:d5:a0:1b:f7:72:51:5b:82:9e:cd:d6:72:f3:7e: 8d:ff:42:01:5f:24:32:f7:06:4c:a8:f2:8b:68:30: 39:b3:75:6b:0d:4e:03:b3:2c:6b:7d:d2:e9:07:f3: b8:df:e3:46:12:06:0e:32:18:0b:12:9c:b4:30:78: 59:47:9a:dc:66:21:b0:10:40:68:b3:c1:58:e9:69: bf:54:51:e3:15:94:f4:a5:00:47:a2:30:13:28:7b: ca:39:23:86:0f:e8:d0:b2:a1:ca:da:15:81:86:ff: d9:30:92:29:25:05:a1:15:93:cf:23:56:8d:4e:57: 48:b0:64:d7:48:6f:03:3f:95:c7:b5:60:09:14:f1: 90:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CA:F3:FA:70:06:20:1C:76:B8:D7:9E:77:DA:36:07:C8:5E:4A:1E X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:76:9b:1e:fa:94:f2:d4:cf:34:17:35:b7:61:75:75:5f:b5: 45:54:59:ef:df:c3:25:53:ec:95:5e:cd:76:4e:db:2c:1e:58: 3e:0b:7b:43:e1:7e:94:48:5e:d6:83:c9:df:cf:5c:77:76:97: 58:bf:5b:91:da:76:4c:94:35:2e:a7:8a:02:65:4e:bc:40:9d: 63:55:6b:29:a4:5e:dd:1e:46:0a:c9:49:24:27:e3:a3:6a:1c: 87:d9:9b:b4:aa:ad:df:f0:c1:dc:d8:fb:ba:15:17:2b:48:43: 80:f8:a7:61:71:34:4b:83:af:63:66:30:6d:e0:a6:5d:e8:4e: bf:e3:03:98:25:71:fb:13:02:50:59:f5:92:78:1c:a4:01:29: 65:4d:c3:67:6c:bd:12:41:1b:fd:ff:89:fe:03:cb:dc:aa:37: c6:80:51:e5:47:79:18:26:45:21:36:b0:88:b8:8a:10:e4:6e: e8:57:e5:51:d7:ad:f8:4e:6e:ed:43:97:9e:31:43:d2:04:f0: dc:d7:0a:50:db:06:d2:de:f2:d6:ed:6b:46:55:06:04:da:67: 31:11:e6:5c:06:0e:db:6f:10:8f:90:e5:4f:7d:01:20:a0:cd: 8c:4d:86:8e:fc:cc:56:ad:8e:4e:d2:93:61:11:9b:f6:7c:29: f4:44:38:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYwNTEyMTgyODA0WhcNMjYwNTE5MTgyODA0WjAYMRYwFAYD VQQDEw02YTAzNzEzNC03ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6QervMpojB2Ph8Cm/X/uy/pjNTqW02c41xsJ6QWO18FpyxcobCh0X3w2Wvn TxLZv+cvMdm3rtVwVvzgGJWDec0UiFmKndSFeO9g4Opdx9821tIpD924ZW0BNd1v u9e0l6Ko4wCSSxJ4E0HTvAYjzdSrfmM69fdU1aAb93JRW4KezdZy836N/0IBXyQy 9wZMqPKLaDA5s3VrDU4DsyxrfdLpB/O43+NGEgYOMhgLEpy0MHhZR5rcZiGwEEBo s8FY6Wm/VFHjFZT0pQBHojATKHvKOSOGD+jQsqHK2hWBhv/ZMJIpJQWhFZPPI1aN TldIsGTXSG8DP5XHtWAJFPGQqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvK8/pw BiAcdrjXnnfaNgfIXkoeMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHabHvqU8tTPNBc1t2F1dV+1RVRZ79/DJVPslV7Ndk7bLB5YPgt7Q+F+lEhe 1oPJ389cd3aXWL9bkdp2TJQ1LqeKAmVOvECdY1VrKaRe3R5GCslJJCfjo2och9mb tKqt3/DB3Nj7uhUXK0hDgPinYXE0S4OvY2YwbeCmXehOv+MDmCVx+xMCUFn1kngc pAEpZU3DZ2y9EkEb/f+J/gPL3Ko3xoBR5Ud5GCZFITawiLiKEORu6FflUdet+E5u 7UOXnjFD0gTw3NcKUNsG0t7y1u1rRlUGBNpnMRHmXAYO228Qj5DlT30BIKDNjE2G jvzMVq2OTtKTYRGb9nwp9EQ4lA== -----END CERTIFICATE-----Generated at Wed May 13 12:34:12 2026 by rpki-client