$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json) Hash identifier: VE+1N/i6399c6vKN5jxUHhgUs3uvOG0e7If3pKfDh+E= Subject key identifier: 53:00:5F:8F:91:8B:A8:BA:17:4D:B1:72:A8:5F:4B:6C:19:A7:11:05 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft Manifest number: 03A5 Signing time: Fri 17 Apr 2026 00:19:23 +0000 Manifest this update: Fri 17 Apr 2026 00:19:23 +0000 Manifest next update: Fri 24 Apr 2026 00:19:23 +0000 Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: DkIXE8ZOqeFou/fP3tD8hAIwXGizUr9GQi10980jCgY=) 2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: cU2lqC8TIbL72lTnvOhD/xI/XrTHAha+gv4NhbTb0Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: Apr 17 00:19:23 2026 GMT Not After : Apr 24 00:19:23 2026 GMT Subject: CN=69e17c8b-5886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:24:95:a7:f8:a7:ec:b2:e7:44:ff:78:96: 4d:f7:71:25:f6:59:db:fa:70:15:8f:7d:4f:fa:9d: f8:8d:03:25:7d:39:f8:3a:ba:e8:ac:24:3a:a5:2c: a5:ec:a5:8c:35:d6:05:dd:ae:9d:9b:42:66:2f:13: b7:e8:01:cd:6a:7d:79:1b:d9:88:5e:81:01:57:2b: c5:06:e3:dd:f3:61:74:4c:21:32:e0:e9:85:79:80: fd:6a:d4:0e:a7:7a:cd:ee:ad:39:74:c4:6f:32:eb: 5f:da:db:1c:f3:82:13:1f:36:19:4e:15:85:a0:21: bb:40:d5:84:b6:61:2c:43:49:69:28:2e:f8:35:cc: a2:05:b4:87:95:5b:cf:a8:f2:22:cb:fa:86:7a:da: bc:2b:b0:d2:57:b4:14:60:22:da:92:bb:f8:51:a7: d5:6b:8e:04:86:8d:03:96:c6:18:1a:bd:26:52:15: a1:ab:a6:be:ac:e8:5b:f1:b7:c2:25:06:ee:91:9a: bf:32:5c:97:1d:9e:3a:25:91:d2:cb:bb:80:77:66: 6b:e7:60:e9:bf:d3:ca:0f:5c:be:66:02:9f:32:d5: 36:0d:e1:1a:8c:cd:7e:6a:d8:b3:25:70:62:da:60: 0d:3c:90:0b:6c:06:61:d0:e7:e6:d7:ba:cd:c9:dd: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:00:5F:8F:91:8B:A8:BA:17:4D:B1:72:A8:5F:4B:6C:19:A7:11:05 X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:00:eb:23:3c:ca:d6:06:3c:05:48:c1:0c:d5:30:fb:bb:ed: 8c:49:50:28:8c:ba:ef:d1:2c:0a:ca:f6:8d:80:9e:5a:b4:d7: 5d:dc:5c:ff:6b:c7:1f:d7:9e:25:80:95:6a:b7:f8:7c:a0:17: 2b:c0:b3:d1:f6:bd:9f:91:1d:61:61:60:73:47:e1:56:4a:46: 29:a0:82:47:a9:f5:80:0a:c1:e9:50:e3:cf:b2:83:64:66:3b: 29:36:bb:1f:96:8f:a3:4e:d0:89:8e:01:32:c7:57:a6:38:e1: b3:1f:e6:bd:98:78:9d:9f:53:7b:1b:97:7b:de:7c:3f:7f:79: ce:24:7b:5e:a8:86:e0:01:3f:98:c8:85:f7:08:71:b1:2d:ea: 1f:53:74:bb:c2:0b:1e:bb:75:b4:ee:2c:0e:15:7c:d7:1b:78: 40:d1:bf:00:87:7b:52:ed:3e:04:b1:92:ec:62:99:3d:89:4b: 23:43:3f:fc:48:4e:7c:c7:0d:b0:02:97:bd:76:e9:43:cb:76: 68:9b:48:aa:5c:ec:3e:45:9b:d8:28:27:3c:af:f5:5c:1c:a1: 7d:0b:a6:bc:84:37:db:44:83:d3:89:38:3c:08:e2:3a:d1:59: 43:96:68:b4:89:4f:a4:08:c1:d7:3a:33:a4:82:33:c2:9c:73: 37:1d:5f:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjYwNDE3MDAxOTIzWhcNMjYwNDI0MDAxOTIzWjAYMRYwFAYD VQQDEw02OWUxN2M4Yi01ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSoklaf4p+yy50T/eJZN93El9lnb+nAVj31P+p34jQMlfTn4OrrorCQ6pSyl 7KWMNdYF3a6dm0JmLxO36AHNan15G9mIXoEBVyvFBuPd82F0TCEy4OmFeYD9atQO p3rN7q05dMRvMutf2tsc84ITHzYZThWFoCG7QNWEtmEsQ0lpKC74NcyiBbSHlVvP qPIiy/qGetq8K7DSV7QUYCLakrv4UafVa44Eho0DlsYYGr0mUhWhq6a+rOhb8bfC JQbukZq/MlyXHZ46JZHSy7uAd2Zr52Dpv9PKD1y+ZgKfMtU2DeEajM1+atizJXBi 2mANPJALbAZh0Ofm17rNyd2S8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMAX4+R i6i6F02xcqhfS2wZpxEFMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFgDrIzzK1gY8BUjBDNUw+7vtjElQKIy679EsCsr2jYCeWrTXXdxc/2vHH9ee JYCVarf4fKAXK8Cz0fa9n5EdYWFgc0fhVkpGKaCCR6n1gArB6VDjz7KDZGY7KTa7 H5aPo07QiY4BMsdXpjjhsx/mvZh4nZ9TexuXe958P395ziR7XqiG4AE/mMiF9whx sS3qH1N0u8ILHrt1tO4sDhV81xt4QNG/AId7Uu0+BLGS7GKZPYlLI0M//EhOfMcN sAKXvXbpQ8t2aJtIqlzsPkWb2CgnPK/1XByhfQumvIQ320SD04k4PAjiOtFZQ5Zo tIlPpAjB1zozpIIzwpxzNx1fvg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:19:19 2026 by rpki-client