$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: 6E12OsY14sJTm+nscjIILO2VjM5/NXiiLImhSBaPr7c= Subject key identifier: B4:26:8B:F9:2D:19:EB:C0:24:4E:EB:2D:B9:35:EE:34:BD:46:AD:F7 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 08CF Signing time: Fri 12 Jun 2026 20:27:58 +0000 Manifest this update: Fri 12 Jun 2026 20:27:58 +0000 Manifest next update: Fri 19 Jun 2026 20:27:58 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: 7/zX/pHe6usb2hk/p/bkV90gBUqFdMLw3USvvW/JgH4=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 20:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Jun 12 20:27:58 2026 GMT Not After : Jun 19 20:27:58 2026 GMT Subject: CN=6a2c6bce-e72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:1a:01:d0:40:7a:6d:2a:c8:e7:78:b1:6c: 0f:69:5a:f6:5d:39:08:ae:15:81:ed:9e:35:ea:c9: 80:5d:a2:51:ed:91:ca:c4:88:53:2f:8a:73:6e:8c: 1f:22:02:fd:c0:b1:12:49:c3:e8:e3:d3:5f:b7:05: 98:63:95:83:5f:c1:44:af:a9:72:00:b3:8a:ab:90: f7:c0:66:a9:cd:58:fa:0a:4d:f3:ea:ed:20:9b:09: 47:f3:1b:bc:9c:80:14:62:01:a1:20:bd:09:22:e8: b3:9f:9b:7e:86:1c:e8:c9:3c:11:5c:98:3d:93:ee: 16:b8:13:7e:4a:58:d3:91:2c:bd:1f:02:71:58:6d: 92:82:f3:c3:17:b9:64:e5:29:f6:31:ed:e1:4c:81: 4d:38:b9:5e:0b:f9:00:12:70:26:b5:fa:62:1f:53: 4d:a9:e9:f3:55:19:f8:be:97:24:e0:3d:b8:9f:5a: b1:68:53:c2:f8:51:df:98:5d:e1:9c:45:9b:7b:86: 28:b2:7d:25:d1:e7:8a:90:e3:98:40:fa:06:6e:83: 82:c7:de:63:52:6e:c7:4b:a3:d9:6f:52:3a:66:f1: 25:2e:7f:1a:58:f3:f1:43:ed:48:67:ec:6a:f7:f6: ae:06:c8:81:3f:42:d2:1c:2c:29:47:00:3e:58:57: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:26:8B:F9:2D:19:EB:C0:24:4E:EB:2D:B9:35:EE:34:BD:46:AD:F7 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9f:90:5a:20:47:8d:c7:f6:7f:ad:7d:fa:d4:e6:a9:7b:dd: 5c:86:4b:29:00:c2:1b:54:db:a8:94:10:2e:c7:ea:c5:6a:f3: 03:8d:05:e7:c3:1d:f1:8d:bd:6a:a8:40:91:e6:9b:c9:db:55: 66:ae:86:54:a7:fe:be:45:8d:6c:a8:63:5e:cb:3f:d0:ab:7c: 94:c0:10:1f:49:7d:57:d5:be:74:12:76:ae:5b:5e:7f:59:c5: c8:ed:66:70:38:ec:ee:fb:86:8d:0e:82:f6:37:05:c1:3d:1c: 56:92:c4:33:1f:06:62:a2:d2:d8:f7:57:15:3f:26:53:c2:33: 54:32:a3:a3:eb:e7:64:16:b9:a6:94:30:62:b8:bb:c8:db:7a: 1a:76:9e:78:1e:d9:b8:35:35:e2:30:80:f7:cd:aa:17:dc:72: dd:91:eb:03:d4:f0:aa:dd:d1:5d:55:87:ce:3a:bf:8a:b7:14: 29:46:f7:23:47:0f:24:dc:6a:b6:ec:9b:0b:49:ce:c1:33:75: a0:5a:b2:55:78:fd:07:de:74:97:0a:29:c9:44:77:7d:34:d6: da:21:62:dd:95:0b:34:89:30:21:73:c9:eb:97:6b:2d:fa:21: 36:d3:d5:d4:a0:4b:fa:3a:90:3f:de:3e:55:58:d1:68:af:ad: 0c:ec:31:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYwNjEyMjAyNzU4WhcNMjYwNjE5MjAyNzU4WjAYMRYwFAYD VQQDEw02YTJjNmJjZS1lNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf8aAdBAem0qyOd4sWwPaVr2XTkIrhWB7Z416smAXaJR7ZHKxIhTL4pzbowf IgL9wLESScPo49NftwWYY5WDX8FEr6lyALOKq5D3wGapzVj6Ck3z6u0gmwlH8xu8 nIAUYgGhIL0JIuizn5t+hhzoyTwRXJg9k+4WuBN+SljTkSy9HwJxWG2SgvPDF7lk 5Sn2Me3hTIFNOLleC/kAEnAmtfpiH1NNqenzVRn4vpck4D24n1qxaFPC+FHfmF3h nEWbe4Yosn0l0eeKkOOYQPoGboOCx95jUm7HS6PZb1I6ZvElLn8aWPPxQ+1IZ+xq 9/auBsiBP0LSHCwpRwA+WFerhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQmi/kt GevAJE7rLbk17jS9Rq33MB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5+QWiBHjcf2f619+tTmqXvdXIZLKQDCG1TbqJQQLsfqxWrzA40F58Md8Y29 aqhAkeabydtVZq6GVKf+vkWNbKhjXss/0Kt8lMAQH0l9V9W+dBJ2rltef1nFyO1m cDjs7vuGjQ6C9jcFwT0cVpLEMx8GYqLS2PdXFT8mU8IzVDKjo+vnZBa5ppQwYri7 yNt6GnaeeB7ZuDU14jCA982qF9xy3ZHrA9Twqt3RXVWHzjq/ircUKUb3I0cPJNxq tuybC0nOwTN1oFqyVXj9B950lwopyUR3fTTW2iFi3ZULNIkwIXPJ65drLfohNtPV 1KBL+jqQP94+VVjRaK+tDOwxrw== -----END CERTIFICATE-----Generated at Sun Jun 14 09:35:46 2026 by rpki-client