$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: h1DCNPDFuV8CyRnrOpjsDE1zFJWmjyaKT55MrRcBZAo= Subject key identifier: 4B:58:E6:ED:A9:34:E3:01:35:51:E2:E1:25:EA:5C:26:76:3C:F7:E9 Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 13C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 2525 Signing time: Thu 16 Apr 2026 16:52:50 +0000 Manifest this update: Thu 16 Apr 2026 16:52:50 +0000 Manifest next update: Thu 23 Apr 2026 16:52:50 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: nB8IvQDqkxaKVN1nz6NTTCa1ECceUDmNLkY/cbB8OA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5062 (0x13c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: Apr 16 16:52:50 2026 GMT Not After : Apr 23 16:52:50 2026 GMT Subject: CN=69e113e2-5a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:72:08:b8:59:ce:5b:ae:ae:78:78:49:4d: 1e:1e:2a:56:d5:6a:06:4a:c7:c5:14:b8:f0:19:b1: 2e:38:74:40:ac:eb:58:10:47:6e:66:69:61:ff:10: 4a:ef:7d:c1:57:a4:76:ba:17:c3:08:80:63:f3:b9: e3:ba:db:a9:03:3e:d3:ce:f4:a0:18:d5:1f:e0:e6: 34:09:cb:23:3d:93:3c:b2:1d:1a:91:af:84:62:4a: b8:dd:78:3d:0b:be:bf:fa:26:28:f3:68:96:84:f2: 00:aa:9f:99:35:b7:9b:04:bb:d2:a6:41:2a:c9:1e: 7f:57:77:d9:27:55:ae:a1:4f:14:ea:d6:1b:5b:60: da:26:04:e6:3e:9d:a2:bf:88:00:0c:4a:64:f1:a7: 32:ea:83:89:aa:a3:31:9c:72:c9:21:a9:7f:88:42: 79:50:c1:08:71:cc:00:f1:0f:4c:db:d9:41:38:1a: 7b:ac:47:6f:08:97:64:72:92:d2:94:3e:53:79:78: 89:db:2e:1a:bf:94:78:12:53:4c:68:2e:d7:03:f5: ff:3f:c2:5c:fb:3f:a9:d9:38:9c:18:37:de:95:fc: 1d:39:7f:ee:e9:a4:91:b6:19:29:c8:d1:9f:88:ef: 5b:39:e1:83:d1:a7:43:c6:86:74:02:a1:9d:13:ff: ed:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:E6:ED:A9:34:E3:01:35:51:E2:E1:25:EA:5C:26:76:3C:F7:E9 X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e5:88:09:b4:72:d3:d2:0d:18:63:39:54:a6:dd:92:2d:b4: ab:2e:9c:8c:05:c9:67:59:82:8a:e9:df:fc:78:e4:4c:b7:20: 57:03:62:33:e8:a2:ee:9b:77:19:c2:a7:11:cb:59:2f:ac:06: 65:aa:cb:59:36:bf:55:53:4b:e5:b0:77:c8:09:45:9f:e0:51: 7e:05:af:9b:36:7d:1e:3f:9b:3a:a0:82:9f:b8:5a:b8:1d:88: bd:55:e5:be:59:c1:e0:d3:d1:2e:b3:cc:e9:a6:cc:b6:ff:a6: cf:01:83:92:bb:0d:8a:24:c8:29:10:e5:e4:9f:e6:64:e3:21: 1e:3d:30:15:b0:7a:a7:55:e3:80:cf:bc:f6:ea:61:0d:7a:51: fc:24:c9:a8:af:08:82:a8:45:86:50:64:c5:e2:15:c3:2b:8f: ac:91:48:63:ac:49:c5:13:dc:52:44:0e:4f:00:9b:67:ef:bb: 26:e9:9d:07:d5:8f:e1:f9:56:9b:c6:d7:b1:5a:ef:26:ae:ab: ab:e4:97:6a:f4:ef:e0:75:cb:f0:37:cd:8c:b4:f3:b9:63:00: 1b:cb:7c:c2:60:b3:7f:86:18:7b:be:19:30:ce:5f:bd:10:ed: 5a:ad:ef:32:62:ab:8d:fd:76:df:5f:8a:18:4d:33:b0:67:71: 31:6d:13:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjYwNDE2MTY1MjUwWhcNMjYwNDIzMTY1MjUwWjAYMRYwFAYD VQQDEw02OWUxMTNlMi01YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv9yCLhZzluurnh4SU0eHipW1WoGSsfFFLjwGbEuOHRArOtYEEduZmlh/xBK 733BV6R2uhfDCIBj87njutupAz7TzvSgGNUf4OY0CcsjPZM8sh0aka+EYkq43Xg9 C76/+iYo82iWhPIAqp+ZNbebBLvSpkEqyR5/V3fZJ1WuoU8U6tYbW2DaJgTmPp2i v4gADEpk8acy6oOJqqMxnHLJIal/iEJ5UMEIccwA8Q9M29lBOBp7rEdvCJdkcpLS lD5TeXiJ2y4av5R4ElNMaC7XA/X/P8Jc+z+p2TicGDfelfwdOX/u6aSRthkpyNGf iO9bOeGD0adDxoZ0AqGdE//tPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtY5u2p NOMBNVHi4SXqXCZ2PPfpMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAieWICbRy09INGGM5VKbdki20qy6cjAXJZ1mCiunf/HjkTLcgVwNiM+ii7pt3 GcKnEctZL6wGZarLWTa/VVNL5bB3yAlFn+BRfgWvmzZ9Hj+bOqCCn7hauB2IvVXl vlnB4NPRLrPM6abMtv+mzwGDkrsNiiTIKRDl5J/mZOMhHj0wFbB6p1XjgM+89uph DXpR/CTJqK8IgqhFhlBkxeIVwyuPrJFIY6xJxRPcUkQOTwCbZ++7JumdB9WP4flW m8bXsVrvJq6rq+SXavTv4HXL8DfNjLTzuWMAG8t8wmCzf4YYe74ZMM5fvRDtWq3v MmKrjf1231+KGE0zsGdxMW0T2g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:56:18 2026 by rpki-client