$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json) Hash identifier: MN86VA4sGHXncs0cfv/7u1ddmRiIHk4ccr5Ry4XxC38= Subject key identifier: E0:67:07:01:BA:0A:8B:2B:2E:F0:BB:89:48:15:23:11:35:64:B4:9A Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft Manifest number: 64 Signing time: Wed 15 Apr 2026 07:32:40 +0000 Manifest this update: Wed 15 Apr 2026 07:32:39 +0000 Manifest next update: Wed 22 Apr 2026 07:32:39 +0000 Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: NC+Xz8QkZ881mlT+qav/FvplDWDMtWZR/PrnTfAPUIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Validity Not Before: Apr 15 07:32:39 2026 GMT Not After : Apr 22 07:32:39 2026 GMT Subject: CN=69df3f18-265d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:12:c9:45:64:df:6f:c9:48:74:b9:a5:8a:3d: 75:e5:d4:01:1e:6c:70:14:c2:fc:9f:5c:e6:1a:d4: e8:b8:c5:e7:a8:38:71:8e:9d:17:cc:e3:47:ce:e2: a6:67:c4:cf:7c:02:6e:c2:a5:8c:ad:84:26:bd:5c: 9f:04:45:a7:3e:09:70:00:4a:82:7b:ae:bb:79:4e: a7:5d:25:93:7f:28:4c:21:c7:bd:66:20:ae:f8:3f: 19:3b:18:5d:29:5b:8f:57:92:52:d9:1b:65:5a:f2: ff:47:c0:6e:c8:4d:68:44:5f:42:06:47:e2:07:ce: 68:6f:d6:97:b0:26:88:51:cf:9c:f9:ca:65:77:12: f6:37:f3:ce:4b:35:29:ab:82:c2:f7:88:10:14:38: df:cc:d3:70:dd:36:7f:34:b6:1e:35:c7:64:91:9b: c7:bb:5a:94:a6:c7:0e:9b:fa:72:cd:aa:8c:f8:15: 3a:59:c1:28:8b:a4:e5:37:4e:45:97:20:e9:4f:76: af:a5:97:28:a2:28:75:25:91:05:5e:63:b8:82:77: 58:a0:a1:3a:79:2b:de:43:66:6d:cb:2f:35:b9:73: 4f:9c:7b:ba:f4:93:c1:34:ac:4e:aa:19:6e:21:50: 97:f8:82:9d:b9:51:96:69:6f:fb:9f:53:48:c1:fa: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:67:07:01:BA:0A:8B:2B:2E:F0:BB:89:48:15:23:11:35:64:B4:9A X509v3 Authority Key Identifier: keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:71:e9:45:1f:4a:12:e0:14:50:e1:e1:29:45:76:10:1d:d6: b0:08:17:42:c1:49:a7:db:15:8b:2a:0c:96:3f:48:4f:92:d1: c1:cd:d5:82:69:fe:81:65:98:67:05:d1:82:f4:13:8c:41:96: 12:a9:64:b1:49:06:bd:15:db:90:50:8c:bd:86:36:3f:73:60: ff:bd:52:1e:91:f6:b2:da:b1:b2:18:d2:68:53:bc:52:0a:dc: 5b:c1:ef:bc:70:32:62:ba:f4:be:34:a2:4b:42:83:0b:eb:76: 2f:35:2b:a7:68:0d:6f:be:74:79:2a:70:81:63:24:27:2a:2e: 65:51:81:2d:7e:d8:9e:cc:67:b2:ff:5a:02:ca:e2:9d:42:e2: c5:e5:bb:38:ed:ac:4c:5e:34:0e:61:55:9a:6a:9c:48:ee:9e: c5:fe:33:cc:86:49:d2:37:c5:aa:3f:6e:cb:fd:52:c7:8e:57: a3:e2:59:ab:9e:e4:01:d4:b0:47:1a:92:c5:dc:fe:6b:34:ac: 42:7d:72:d1:6c:37:87:9d:00:fa:99:d3:68:98:6a:90:32:d7: dd:d0:eb:df:f5:a6:cb:ea:3a:dd:97:19:cb:7b:cb:af:e9:f7: 25:6c:e7:f0:1d:d2:48:f1:41:bc:6a:c9:79:5a:a2:68:bf:a8: 41:4a:91:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2 RDE0MkJFQTAeFw0yNjA0MTUwNzMyMzlaFw0yNjA0MjIwNzMyMzlaMBgxFjAUBgNV BAMTDTY5ZGYzZjE4LTI2NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwEslFZN9vyUh0uaWKPXXl1AEebHAUwvyfXOYa1Oi4xeeoOHGOnRfM40fO4qZn xM98Am7CpYythCa9XJ8ERac+CXAASoJ7rrt5TqddJZN/KEwhx71mIK74Pxk7GF0p W49XklLZG2Va8v9HwG7ITWhEX0IGR+IHzmhv1pewJohRz5z5ymV3EvY3885LNSmr gsL3iBAUON/M03DdNn80th41x2SRm8e7WpSmxw6b+nLNqoz4FTpZwSiLpOU3TkWX IOlPdq+llyiiKHUlkQVeY7iCd1igoTp5K95DZm3LLzW5c0+ce7r0k8E0rE6qGW4h UJf4gp25UZZpb/ufU0jB+ouBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4GcHAboK iysu8LuJSBUjETVktJowHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv R3lYa3YxUENGRTIwVUstby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdcelFH0oS4BRQ4eEpRXYQHdawCBdCwUmn2xWLKgyWP0hPktHBzdWCaf6BZZhn BdGC9BOMQZYSqWSxSQa9FduQUIy9hjY/c2D/vVIekfay2rGyGNJoU7xSCtxbwe+8 cDJiuvS+NKJLQoML63YvNSunaA1vvnR5KnCBYyQnKi5lUYEtftiezGey/1oCyuKd QuLF5bs47axMXjQOYVWaapxI7p7F/jPMhknSN8WqP27L/VLHjlej4lmrnuQB1LBH GpLF3P5rNKxCfXLRbDeHnQD6mdNomGqQMtfd0Ovf9abL6jrdlxnLe8uv6fclbOfw HdJI8UG8asl5WqJov6hBSpG3 -----END CERTIFICATE-----Generated at Fri Apr 17 07:59:24 2026 by rpki-client