$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft File: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft (raw, json) Hash identifier: gcgjod2g+GiU+VZ47zQvOvzBo0PUTMRL/WbgbZcc2Po= Subject key identifier: 6A:16:56:69:76:E8:36:24:F0:F0:8E:1E:49:07:7E:A5:15:A0:87:F3 Authority key identifier: 3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 Certificate issuer: /CN=A911750B/serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft Manifest number: A1 Signing time: Fri 17 Apr 2026 07:01:24 +0000 Manifest this update: Fri 17 Apr 2026 07:01:24 +0000 Manifest next update: Fri 24 Apr 2026 07:01:24 +0000 Files and hashes: 1: O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl (hash: kDv2vIkw0/RPylcmQssVHSIezAFG4+k19pFE+zzh0bo=) 2: D922E45E468D11F0B5D0835EC4F9AE02.roa (hash: 5L0n0AuaZsG9RN1VkF1qu4foHDeiS87d8mBxLuyWIUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=3B8358535BC628564AF56F31D8758648E1D04304 Validity Not Before: Apr 17 07:01:24 2026 GMT Not After : Apr 24 07:01:24 2026 GMT Subject: CN=69e1dac4-8151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:77:59:9d:cf:a2:58:77:68:ec:68:fb:bf: 3a:06:ce:15:68:c3:c8:3c:ad:8e:5c:6e:7f:be:fb: 52:f0:c2:9c:8a:ec:f2:b5:ae:d4:53:4a:64:a0:61: a4:8a:a4:01:48:65:3b:32:88:25:28:43:19:86:04: 72:62:41:00:01:a4:f7:9e:1d:8b:5a:f4:a2:82:a3: 72:a3:f7:52:90:62:64:ca:90:ba:1c:45:3a:96:27: 5a:01:0a:67:94:5c:2b:2a:07:0a:42:ee:07:c6:99: bd:e9:b1:9d:1d:8f:80:28:9f:ad:f7:cf:7b:62:99: 1f:31:fa:88:c3:3a:cd:72:17:29:eb:18:d2:11:70: d2:91:5e:c1:77:c3:72:cb:84:c4:c4:b6:c2:e2:8d: ed:97:eb:d3:b8:2e:3a:b3:91:5f:82:a2:32:3f:62: 36:8d:6d:30:35:d2:6a:a8:50:f0:01:36:84:5f:9a: b6:a1:5f:66:86:91:21:d2:f8:7b:87:50:96:3f:7d: c2:d9:48:c7:ae:de:16:a8:78:e6:bf:06:f7:ca:da: 0f:13:3e:f2:4c:ee:c6:79:bf:82:ee:5e:2d:d3:01: e5:00:24:e9:11:43:94:2c:0f:ce:dc:39:9e:ae:58: 24:c4:d2:7f:72:43:29:95:e3:9a:17:fc:52:2d:35: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:16:56:69:76:E8:36:24:F0:F0:8E:1E:49:07:7E:A5:15:A0:87:F3 X509v3 Authority Key Identifier: keyid:3B:83:58:53:5B:C6:28:56:4A:F5:6F:31:D8:75:86:48:E1:D0:43:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/64D07748468C11F084B6A539C4F9AE02/O4NYU1vGKFZK9W8x2HWGSOHQQwQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:99:04:ba:25:88:c7:d7:f1:81:18:a7:82:4f:f4:35:bd:64: ff:90:0e:71:84:1f:a3:08:2c:5a:25:f5:3b:dc:e4:79:c5:88: f7:a2:50:d2:3f:ac:3a:5e:1b:9a:e6:00:8f:fa:f2:9b:af:aa: c6:b3:b5:28:cb:a0:cc:5e:62:f4:f9:6c:ab:35:70:4c:ac:13: da:f3:37:ca:f8:4a:8a:31:65:9e:7f:37:8e:46:29:26:49:85: b3:67:d3:a0:f3:94:31:5f:f4:a2:d2:77:7a:aa:62:a9:de:4e: a7:3e:6e:b2:68:d7:83:1f:83:4f:31:8b:67:7a:a3:92:22:ab: 6a:89:2f:6c:8e:79:74:d4:60:f9:15:01:77:d0:dd:e2:9e:b0: ab:26:e2:45:55:e1:31:e5:3e:a1:43:44:a5:9c:d1:47:d5:f8: 7f:4f:e1:39:6b:e2:5e:46:47:67:b0:c6:ca:3e:6c:18:ce:e1: fe:56:bb:74:19:03:24:5b:7b:0e:29:02:0f:71:1a:02:d7:fa: 05:40:7a:33:ee:27:64:50:67:eb:1b:ea:8f:d8:70:68:2e:15: d8:71:eb:7d:e5:f9:4c:bd:be:25:74:df:91:d3:2e:38:36:22: 78:68:15:97:c4:a0:f3:49:22:ae:af:58:16:82:09:29:8e:7c: 44:61:25:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1MEIxMTAvBgNVBAUTKDNCODM1ODUzNUJDNjI4NTY0QUY1NkYzMUQ4NzU4NjQ4 RTFEMDQzMDQwHhcNMjYwNDE3MDcwMTI0WhcNMjYwNDI0MDcwMTI0WjAYMRYwFAYD VQQDEw02OWUxZGFjNC04MTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvht3WZ3Polh3aOxo+786Bs4VaMPIPK2OXG5/vvtS8MKciuzyta7UU0pkoGGk iqQBSGU7MoglKEMZhgRyYkEAAaT3nh2LWvSigqNyo/dSkGJkypC6HEU6lidaAQpn lFwrKgcKQu4Hxpm96bGdHY+AKJ+t9897YpkfMfqIwzrNchcp6xjSEXDSkV7Bd8Ny y4TExLbC4o3tl+vTuC46s5FfgqIyP2I2jW0wNdJqqFDwATaEX5q2oV9mhpEh0vh7 h1CWP33C2UjHrt4WqHjmvwb3ytoPEz7yTO7Geb+C7l4t0wHlACTpEUOULA/O3Dme rlgkxNJ/ckMpleOaF/xSLTVJrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoWVml2 6DYk8PCOHkkHfqUVoIfzMB8GA1UdIwQYMBaAFDuDWFNbxihWSvVvMdh1hkjh0EME MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi82NEQwNzc0ODQ2 OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tGWks5Vzh4MkhXR1NPSFFR d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080TllVMXZHS0ZaSzlXOHgySFdHU09IUVF3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzUwQi82NEQwNzc0ODQ2OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9PNE5ZVTF2R0tG Wks5Vzh4MkhXR1NPSFFRd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUpkEuiWIx9fxgRingk/0Nb1k/5AOcYQfowgsWiX1O9zkecWI96JQ0j+sOl4b muYAj/rym6+qxrO1KMugzF5i9PlsqzVwTKwT2vM3yvhKijFlnn83jkYpJkmFs2fT oPOUMV/0otJ3eqpiqd5Opz5usmjXgx+DTzGLZ3qjkiKraokvbI55dNRg+RUBd9Dd 4p6wqybiRVXhMeU+oUNEpZzRR9X4f0/hOWviXkZHZ7DGyj5sGM7h/la7dBkDJFt7 DikCD3EaAtf6BUB6M+4nZFBn6xvqj9hwaC4V2HHrfeX5TL2+JXTfkdMuODYieGgV l8Sg80kirq9YFoIJKY58RGElIg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:46 2026 by rpki-client