$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: MZd2oXPJgSS2CTxwY4qxxTPtnhrjMmf/EOPC4cAskd4= Subject key identifier: 0C:C4:20:D3:6D:29:78:25:48:AD:5F:51:91:4D:0A:4E:82:5E:C9:F7 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D2D Signing time: Sat 18 Apr 2026 18:02:37 +0000 Manifest this update: Sat 18 Apr 2026 18:02:36 +0000 Manifest next update: Sat 25 Apr 2026 18:02:36 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: OwTuVUcxz8O6isqq/iO+4kT4c9pLQ7SmMiJX2xAaKWk=) 2: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=) 3: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Apr 18 18:02:36 2026 GMT Not After : Apr 25 18:02:36 2026 GMT Subject: CN=69e3c73d-c338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:41:8f:61:29:bc:c9:d7:a9:cb:bb:1a:46: 59:a0:be:f3:74:12:76:8b:a4:f4:41:78:9a:44:a6: d4:75:b2:be:77:99:40:ec:55:a0:58:37:12:44:dc: cc:83:78:59:9c:ba:62:59:4b:7b:c7:f7:0a:9f:df: db:6b:a2:3d:dd:38:0a:e1:e3:e1:60:23:21:34:14: bb:d8:46:9a:4b:82:e0:5e:5a:89:7b:a4:29:6f:6a: 5d:2d:2e:f5:18:a3:ee:55:a3:c1:bb:45:b0:fc:e1: 4b:21:dc:42:1e:7d:ac:ea:33:a7:6e:0d:eb:f2:06: ad:16:4a:c4:20:01:1b:23:9a:fd:7c:e3:b6:53:0e: 8d:93:19:3e:64:f4:16:1d:40:c7:35:27:09:8f:2e: 45:b7:2b:e5:d3:cd:59:1c:e4:cc:df:0a:29:dd:81: 4e:3e:a0:32:c0:9d:12:88:27:58:4c:05:af:ec:9a: 2c:50:5a:80:16:33:18:30:25:8f:8e:3d:d5:b2:be: c1:b6:fc:e6:db:d2:2f:da:ae:5d:b5:e4:08:c6:8f: 2b:c3:05:64:14:1e:5a:17:6a:b5:db:5e:00:8b:0a: 02:8d:97:5e:00:54:cb:08:a3:00:4a:cd:9b:15:b7: 92:22:52:af:a5:65:62:a2:16:42:09:02:76:ed:27: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C4:20:D3:6D:29:78:25:48:AD:5F:51:91:4D:0A:4E:82:5E:C9:F7 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:fc:ec:b6:4f:5c:c9:33:28:d1:b9:1c:22:49:d6:f1:73:dc: 2f:b1:86:40:32:e5:55:62:23:52:99:78:d9:03:75:d4:4b:16: 39:96:72:38:1c:1b:b1:fb:24:c8:f1:55:8d:5e:8d:02:51:1b: 80:36:63:71:e9:74:1a:1e:5a:22:0d:24:7b:d2:f9:3c:7a:34: 53:27:f3:f8:89:08:72:20:80:9e:d8:02:9f:67:7f:bd:24:82: 32:e1:b1:cc:bb:91:36:0d:be:b1:cb:c9:7b:39:8f:72:80:a1: f0:ec:ce:49:f9:86:7a:37:4c:71:f1:ce:cc:7c:18:2a:19:64: 56:13:7b:8d:3f:04:43:35:ac:31:ae:2e:8d:05:b7:70:f1:9a: e6:8c:3e:b7:cd:f6:cd:63:00:f6:b5:7b:aa:75:10:5c:ce:49: 35:3c:9a:05:dd:7c:c4:1a:9b:31:01:3b:3d:8c:ac:d4:2c:a6: 4c:85:36:90:be:3d:10:f7:fb:fb:d2:10:d7:da:13:a8:6a:77: 09:a1:ef:39:07:54:1b:56:0b:aa:a7:e4:0d:bb:f8:f6:26:60: 82:94:8b:da:83:bb:e9:8b:a2:1f:12:74:ce:6f:73:df:5c:d7: a1:c7:a0:3b:39:fe:ec:3f:f8:73:cb:c7:18:ea:7c:01:00:3a: 70:1f:b1:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwNDE4MTgwMjM2WhcNMjYwNDI1MTgwMjM2WjAYMRYwFAYD VQQDEw02OWUzYzczZC1jMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuitBj2EpvMnXqcu7GkZZoL7zdBJ2i6T0QXiaRKbUdbK+d5lA7FWgWDcSRNzM g3hZnLpiWUt7x/cKn9/ba6I93TgK4ePhYCMhNBS72EaaS4LgXlqJe6Qpb2pdLS71 GKPuVaPBu0Ww/OFLIdxCHn2s6jOnbg3r8gatFkrEIAEbI5r9fOO2Uw6Nkxk+ZPQW HUDHNScJjy5Ftyvl081ZHOTM3wop3YFOPqAywJ0SiCdYTAWv7JosUFqAFjMYMCWP jj3Vsr7Btvzm29Iv2q5dteQIxo8rwwVkFB5aF2q1214AiwoCjZdeAFTLCKMASs2b FbeSIlKvpWViohZCCQJ27SdebQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzEINNt KXglSK1fUZFNCk6CXsn3MB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfzstk9cyTMo0bkcIknW8XPcL7GGQDLlVWIjUpl42QN11EsWOZZyOBwbsfsk yPFVjV6NAlEbgDZjcel0Gh5aIg0ke9L5PHo0Uyfz+IkIciCAntgCn2d/vSSCMuGx zLuRNg2+scvJezmPcoCh8OzOSfmGejdMcfHOzHwYKhlkVhN7jT8EQzWsMa4ujQW3 cPGa5ow+t832zWMA9rV7qnUQXM5JNTyaBd18xBqbMQE7PYys1CymTIU2kL49EPf7 +9IQ19oTqGp3CaHvOQdUG1YLqqfkDbv49iZggpSL2oO76YuiHxJ0zm9z31zXoceg Ozn+7D/4c8vHGOp8AQA6cB+xPA== -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:27 2026 by rpki-client