$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: 9/PsgA/BM6qsXyBgSgSV5/FLFLYcoZzrEHsDGeB/KIE= Subject key identifier: 1E:3B:4F:9A:6C:23:79:FB:CA:CB:65:99:1C:06:AE:E5:83:13:B8:D3 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0815 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 0809 Signing time: Thu 16 Apr 2026 21:04:46 +0000 Manifest this update: Thu 16 Apr 2026 21:04:46 +0000 Manifest next update: Thu 23 Apr 2026 21:04:46 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: iwM6kDqUbSayhpweqDNfVkr7/cipbJnSzQS2THkRJmY=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: eZnBeGRp/XjPgjBo8RzoLFHJq1ASGdJfGhbtwCwrNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2069 (0x815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Apr 16 21:04:46 2026 GMT Not After : Apr 23 21:04:46 2026 GMT Subject: CN=69e14eee-2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:39:d7:d3:58:1c:85:1a:43:01:bc:09:2c: 57:47:96:71:19:a4:8d:17:9f:14:11:21:8a:f2:42: a1:81:3e:e2:b9:50:bd:b8:55:89:df:13:11:9e:ed: 6a:47:da:f7:c6:94:1f:54:74:67:a9:f5:c4:dd:b5: b0:1f:fb:4b:1a:72:26:17:5a:fd:ef:bd:18:31:a5: f6:09:56:d6:32:bb:ee:9e:1a:b9:18:63:ee:47:67: 83:cb:bc:bd:5b:86:84:bd:11:4f:6f:9d:a7:96:ed: 6f:c3:f4:e8:4e:58:9a:43:1f:23:b3:2a:34:93:57: 83:a1:8b:aa:0e:18:f5:a2:8f:cd:0d:ac:2a:88:ed: 89:e5:67:86:86:29:67:75:91:4c:66:1e:4d:36:68: f0:e3:d4:d6:a8:2e:a2:f7:b6:f1:bb:85:da:fa:80: 86:6e:cf:41:e8:3d:f3:3e:07:8d:fc:12:36:59:95: ab:7c:f9:66:1a:77:c3:63:7f:e9:db:1e:ec:8a:8f: 9d:07:f4:b8:e5:4c:fe:ea:c5:8d:83:5a:c1:02:05: f0:c7:89:0a:6f:69:52:02:49:71:38:4a:33:ca:6c: 78:6a:e9:31:c2:ed:62:ac:1d:45:c0:b9:74:83:c5: 5b:68:4d:a1:9e:3e:d1:58:98:12:5c:61:76:e6:d8: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:4F:9A:6C:23:79:FB:CA:CB:65:99:1C:06:AE:E5:83:13:B8:D3 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:37:56:19:59:e5:38:6e:56:82:8a:a9:3d:19:9d:72:73:c2: b9:91:09:d4:91:05:02:4b:70:e7:f3:a2:20:96:3d:c9:b4:58: 95:2a:23:0d:09:c3:4f:a0:41:81:22:a5:d2:e1:12:2b:c6:6b: f0:e1:cb:1b:7e:de:0f:b0:8c:cc:3b:ff:e4:cd:24:bd:a6:74: bd:59:76:b2:f9:ba:89:91:09:82:d5:aa:a0:58:19:3a:54:eb: 2a:78:70:1f:d7:1f:bf:66:85:97:c2:fb:f7:68:33:63:89:06: 81:77:00:23:9d:d2:57:5c:85:b6:47:ce:4b:09:a5:ee:de:88: b6:1e:fa:24:41:46:d4:0c:f3:26:45:94:c0:f6:10:c0:ae:4e: 95:9a:19:90:5e:dc:ec:5b:42:1b:9d:30:f4:e5:de:87:ab:fa: 17:2e:1f:ad:36:bd:8d:14:1d:47:8b:50:b9:5a:51:4a:97:c0: 73:de:2f:04:c0:26:25:12:77:cd:5e:9c:b5:a9:89:9d:a4:19: a4:98:95:4b:0a:b5:3f:30:54:0d:32:69:61:ca:fa:c1:78:d5: 68:7a:43:a9:c5:e6:50:ba:ce:1c:e0:cd:07:71:f1:a0:cf:d5: e8:1f:22:9b:70:3a:a5:c9:f0:68:4c:8e:d7:bc:8c:d8:bb:92: c1:68:3a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjYwNDE2MjEwNDQ2WhcNMjYwNDIzMjEwNDQ2WjAYMRYwFAYD VQQDEw02OWUxNGVlZS0yMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzko519NYHIUaQwG8CSxXR5ZxGaSNF58UESGK8kKhgT7iuVC9uFWJ3xMRnu1q R9r3xpQfVHRnqfXE3bWwH/tLGnImF1r9770YMaX2CVbWMrvunhq5GGPuR2eDy7y9 W4aEvRFPb52nlu1vw/ToTliaQx8jsyo0k1eDoYuqDhj1oo/NDawqiO2J5WeGhiln dZFMZh5NNmjw49TWqC6i97bxu4Xa+oCGbs9B6D3zPgeN/BI2WZWrfPlmGnfDY3/p 2x7sio+dB/S45Uz+6sWNg1rBAgXwx4kKb2lSAklxOEozymx4aukxwu1irB1FwLl0 g8VbaE2hnj7RWJgSXGF25tiiYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB47T5ps I3n7ystlmRwGruWDE7jTMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzzdWGVnlOG5WgoqpPRmdcnPCuZEJ1JEFAktw5/OiIJY9ybRYlSojDQnDT6BB gSKl0uESK8Zr8OHLG37eD7CMzDv/5M0kvaZ0vVl2svm6iZEJgtWqoFgZOlTrKnhw H9cfv2aFl8L792gzY4kGgXcAI53SV1yFtkfOSwml7t6Ith76JEFG1AzzJkWUwPYQ wK5OlZoZkF7c7FtCG50w9OXeh6v6Fy4frTa9jRQdR4tQuVpRSpfAc94vBMAmJRJ3 zV6ctamJnaQZpJiVSwq1PzBUDTJpYcr6wXjVaHpDqcXmULrOHODNB3HxoM/V6B8i m3A6pcnwaEyO17yM2LuSwWg6Ug== -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:22 2026 by rpki-client