$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: bSkLCYL2Myiux1kpI0D84DH92DZTfC3qINi9ZmspK2A= Subject key identifier: 8A:66:1E:E4:2D:12:E0:09:6B:BB:5D:AB:3C:F2:11:57:02:AD:EF:81 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 111D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 1112 Signing time: Tue 12 May 2026 17:17:24 +0000 Manifest this update: Tue 12 May 2026 17:17:24 +0000 Manifest next update: Tue 19 May 2026 17:17:24 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: 7wDMkIqc5Bk+1/4btE71WKj3kjkre4lj/rAbxBfqcyM=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: Qlspkhh8uor8ecMraj5PR2UqS4cARaGBWVRKRXzt500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4381 (0x111d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: May 12 17:17:24 2026 GMT Not After : May 19 17:17:24 2026 GMT Subject: CN=6a0360a4-f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:25:aa:20:7b:58:5f:34:e2:b5:1a:8f:6a: c6:8b:d7:b2:5d:24:34:e3:6c:a2:dc:c5:3d:cc:6c: 21:e4:4b:6f:5c:34:09:9f:44:f2:0d:92:bc:06:44: f4:29:cf:bb:55:89:f4:ee:16:a9:b7:db:c1:a1:9c: e8:c2:d7:04:9b:1e:1b:9a:33:72:c3:da:aa:a7:c9: 6f:4b:ce:dd:6a:5d:60:4a:2f:aa:b1:ac:bd:a6:76: ad:d7:71:14:b4:2b:66:c4:c3:18:b7:92:61:8d:eb: 6d:18:0c:00:ba:41:c4:08:53:bf:62:6c:6e:6b:b6: 98:f9:b1:a6:5f:dc:6c:bf:72:36:33:05:74:69:a6: 1b:f6:0c:68:9b:c2:c5:67:0c:b4:9e:5e:62:0b:e4: d0:7b:33:5b:4e:02:63:c1:de:61:1b:5a:2f:a7:76: 96:33:67:1d:19:a0:14:96:f6:97:96:d8:ab:83:80: 36:b4:92:9b:53:ed:21:72:38:d1:35:95:f1:ea:ec: c6:99:ee:f0:8e:42:3e:08:9f:7b:84:02:32:45:29: 6a:50:72:0b:fe:fc:29:81:9a:21:69:3d:43:b7:90: 70:c4:25:9c:56:50:d4:87:d1:29:44:aa:86:b2:2d: 80:8a:c7:4b:90:4c:29:9a:71:2d:16:76:3f:c3:f3: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:66:1E:E4:2D:12:E0:09:6B:BB:5D:AB:3C:F2:11:57:02:AD:EF:81 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:15:17:e5:af:3a:bf:bc:97:86:04:fc:df:55:f2:fc:59:39: 01:17:7e:52:08:c5:1f:8e:d2:34:1e:3e:72:1b:e0:49:77:eb: 5d:d5:ef:c7:c5:eb:84:bc:33:0e:5a:30:95:db:60:d0:4e:68: c5:d4:43:bf:29:a3:94:e7:34:40:03:52:c3:2f:3a:11:96:4f: 2a:9e:79:e4:52:98:37:15:13:5e:fb:b1:e7:ba:04:86:df:56: 1a:1e:1d:91:6a:cf:d2:63:53:a5:25:61:f5:2a:b5:4d:c3:5a: 6a:3a:10:cd:28:85:dd:ee:55:76:cf:67:b8:7f:f0:27:22:54: df:14:6e:f8:97:1c:39:e9:4c:49:68:b6:72:44:e8:ee:f0:19: 56:9f:8f:0d:1c:0b:14:8a:82:64:ac:8b:23:2e:22:d9:37:f3: 53:6e:6e:55:f4:24:3e:db:a7:f2:e8:32:2f:6d:cb:08:df:e7: b5:f6:33:a6:49:77:66:93:a3:2d:6f:e7:bf:10:d6:90:98:03: 50:eb:c4:bf:a4:4c:e9:68:a4:d2:8e:60:77:b3:17:09:a1:57: cf:bc:32:a0:6a:80:92:d1:a5:56:73:36:80:9b:f8:23:38:1e: 5e:19:3a:e0:91:2b:5a:f0:f6:94:e0:5e:e3:1e:2b:ce:97:93: 32:b3:96:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICER0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjYwNTEyMTcxNzI0WhcNMjYwNTE5MTcxNzI0WjAYMRYwFAYD VQQDEw02YTAzNjBhNC1mNWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhuAlqiB7WF804rUaj2rGi9eyXSQ042yi3MU9zGwh5EtvXDQJn0TyDZK8BkT0 Kc+7VYn07hapt9vBoZzowtcEmx4bmjNyw9qqp8lvS87dal1gSi+qsay9pnat13EU tCtmxMMYt5JhjettGAwAukHECFO/Ymxua7aY+bGmX9xsv3I2MwV0aaYb9gxom8LF Zwy0nl5iC+TQezNbTgJjwd5hG1ovp3aWM2cdGaAUlvaXltirg4A2tJKbU+0hcjjR NZXx6uzGme7wjkI+CJ97hAIyRSlqUHIL/vwpgZohaT1Dt5BwxCWcVlDUh9EpRKqG si2AisdLkEwpmnEtFnY/w/NHwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpmHuQt EuAJa7tdqzzyEVcCre+BMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXRUX5a86v7yXhgT831Xy/Fk5ARd+UgjFH47SNB4+chvgSXfrXdXvx8XrhLwz Dlowldtg0E5oxdRDvymjlOc0QANSwy86EZZPKp555FKYNxUTXvux57oEht9WGh4d kWrP0mNTpSVh9Sq1TcNaajoQzSiF3e5Vds9nuH/wJyJU3xRu+JccOelMSWi2ckTo 7vAZVp+PDRwLFIqCZKyLIy4i2TfzU25uVfQkPtun8ugyL23LCN/ntfYzpkl3ZpOj LW/nvxDWkJgDUOvEv6RM6Wik0o5gd7MXCaFXz7wyoGqAktGlVnM2gJv4IzgeXhk6 4JErWvD2lOBe4x4rzpeTMrOWZg== -----END CERTIFICATE-----Generated at Wed May 13 15:30:05 2026 by rpki-client