$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: mF0f1Q+a/Z9HOyNqbRpXiwpij1u19RSlW+FwDO75sng= Subject key identifier: 86:6A:54:77:66:65:CD:04:33:37:2E:5C:99:0D:27:11:E5:9E:38:50 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0E28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0E1A Signing time: Thu 16 Apr 2026 17:44:20 +0000 Manifest this update: Thu 16 Apr 2026 17:44:20 +0000 Manifest next update: Thu 23 Apr 2026 17:44:20 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: k32nVjYvikdG08rrDf3wuH8iOXTv4KdmeD5djENzHyM=) 2: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: LJdsn8M+8WOyn3xfnVOerz5lCaK7ncj5KJBGdZ3Z5os=) 3: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: gEMIOBcajdhE7ILa/lRfnCIRCgvUIHfApcn6AAUhQyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3624 (0xe28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Apr 16 17:44:20 2026 GMT Not After : Apr 23 17:44:20 2026 GMT Subject: CN=69e11ff4-880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d9:cd:e8:f7:fa:ab:6a:f2:f4:64:9e:31:be: d0:e2:2e:88:34:dc:16:47:a3:ab:00:80:13:f1:56: a7:c7:9f:c3:94:8d:35:ca:38:fe:85:23:27:a6:3b: c3:bf:2e:8a:4a:d1:c8:af:9f:d0:dd:22:de:a4:bb: a9:e2:f8:88:7b:10:7c:93:d8:ee:55:fc:46:a6:ed: ec:cc:cc:d2:7e:29:94:16:0c:f4:1b:cd:0c:a8:bb: bc:1c:ca:a5:ca:8d:9e:38:67:58:be:1a:06:6f:ad: ea:f9:89:63:30:73:4f:26:db:22:b9:f1:db:13:ab: 96:65:95:b8:2b:43:09:66:9d:50:a8:0e:1c:0b:97: 74:bb:ca:3a:03:37:f5:00:62:91:4b:b2:e9:2f:cb: e0:17:c8:e4:24:aa:d7:f8:ff:13:d0:3e:94:67:0c: 11:f2:b3:57:a1:00:0c:82:20:bc:22:37:e4:37:51: a3:e6:76:23:a2:56:e1:7e:37:c1:fb:51:c8:21:6a: 1b:63:ef:86:06:20:fe:b5:8c:0e:ae:c5:d8:56:5e: 0b:2f:9c:03:77:84:51:2e:12:fe:55:47:f0:f5:4c: 5f:03:7f:1c:9f:de:99:c9:61:a7:90:ee:ec:aa:7c: 11:97:76:c2:61:4f:72:be:22:c9:85:19:0e:d5:8a: bc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6A:54:77:66:65:CD:04:33:37:2E:5C:99:0D:27:11:E5:9E:38:50 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:60:cc:8c:f4:53:bf:9d:ed:32:39:e8:ba:2d:bf:c1:85: b2:01:30:79:86:e2:98:59:3b:bd:1f:55:8c:74:be:92:11:52: 2a:99:05:ad:5b:7b:26:df:04:c4:a0:5b:5e:bb:6b:0b:5a:89: c7:aa:76:6b:d9:c7:6f:73:60:23:e5:ed:83:f2:60:fa:11:9e: 04:af:76:c2:ba:0d:1f:52:b0:f8:bd:1c:36:69:7f:51:4d:0f: 86:af:3e:40:df:df:6a:b3:1d:ed:06:b3:00:a2:08:09:72:12: a8:0a:fe:de:6a:3d:c2:11:7c:e9:64:b8:9b:43:f0:a3:0b:12: 0f:a1:e4:c1:5a:ce:a3:d4:47:0d:02:f9:e3:5c:cf:a5:09:38: 80:9e:f9:93:28:4c:28:47:89:4b:1e:0b:44:cc:06:5e:63:19: 58:5c:82:3f:41:76:53:90:07:78:7c:1e:96:aa:63:9d:75:5d: a8:52:40:34:54:b7:a2:9e:95:51:76:86:43:0b:4f:1f:c9:13: 93:ea:73:5d:af:52:85:72:15:74:7b:ac:1d:92:02:57:35:fb: bc:6c:5e:93:e3:de:3f:06:8f:30:d5:ad:df:e9:2d:b8:1a:6e: b5:6a:f2:e0:a5:3d:e5:5f:8c:b5:e3:64:cf:d7:f6:32:00:27: 0e:56:3c:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjYwNDE2MTc0NDIwWhcNMjYwNDIzMTc0NDIwWjAYMRYwFAYD VQQDEw02OWUxMWZmNC04ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dnN6Pf6q2ry9GSeMb7Q4i6INNwWR6OrAIAT8Vanx5/DlI01yjj+hSMnpjvD vy6KStHIr5/Q3SLepLup4viIexB8k9juVfxGpu3szMzSfimUFgz0G80MqLu8HMql yo2eOGdYvhoGb63q+YljMHNPJtsiufHbE6uWZZW4K0MJZp1QqA4cC5d0u8o6Azf1 AGKRS7LpL8vgF8jkJKrX+P8T0D6UZwwR8rNXoQAMgiC8IjfkN1Gj5nYjolbhfjfB +1HIIWobY++GBiD+tYwOrsXYVl4LL5wDd4RRLhL+VUfw9UxfA38cn96ZyWGnkO7s qnwRl3bCYU9yviLJhRkO1Yq84QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZqVHdm Zc0EMzcuXJkNJxHlnjhQMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAAdgzIz0U7+d7TI56Lotv8GFsgEweYbimFk7vR9VjHS+khFSKpkFrVt7Jt8E xKBbXrtrC1qJx6p2a9nHb3NgI+Xtg/Jg+hGeBK92wroNH1Kw+L0cNml/UU0Phq8+ QN/farMd7QazAKIICXISqAr+3mo9whF86WS4m0PwowsSD6HkwVrOo9RHDQL541zP pQk4gJ75kyhMKEeJSx4LRMwGXmMZWFyCP0F2U5AHeHwelqpjnXVdqFJANFS3op6V UXaGQwtPH8kTk+pzXa9ShXIVdHusHZICVzX7vGxek+PePwaPMNWt3+ktuBputWry 4KU95V+MteNkz9f2MgAnDlY8bw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:48 2026 by rpki-client