$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: 30XE7/+TXpuYia4xNtbeiKSXveyfMzDlq+NryFO5GKI= Subject key identifier: C5:EB:FF:67:7A:AE:0A:8D:BC:5E:45:F9:EC:54:2B:70:17:FE:83:C5 Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 0289 Signing time: Fri 17 Apr 2026 01:41:18 +0000 Manifest this update: Fri 17 Apr 2026 01:41:18 +0000 Manifest next update: Fri 24 Apr 2026 01:41:18 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: ZF3h8qzNC59EVqS6BvXwIyslCbq+OIi/GkOFazBO3YQ=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Apr 17 01:41:18 2026 GMT Not After : Apr 24 01:41:18 2026 GMT Subject: CN=69e18fbe-ba42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:39:ca:f4:aa:53:8b:c7:5c:8c:3d:15:36: 9c:2d:ab:27:1b:80:24:d9:d0:86:a8:31:da:a3:65: f3:ba:0f:f2:89:39:c9:80:13:c3:dc:d5:04:b8:14: 91:9d:f3:44:5e:8c:79:98:08:0c:48:19:03:18:11: 47:c5:83:96:34:ee:cb:84:d9:bc:2b:68:58:cd:3f: 78:b8:9f:02:e8:a4:02:8a:b0:7c:b6:f5:ff:47:48: a6:b1:88:8d:ee:da:65:2a:0b:10:63:fc:f2:38:51: e9:26:06:97:38:0e:e0:62:3f:c2:b9:9a:b7:62:16: f2:7e:cc:71:15:07:e1:55:2c:37:28:b5:8f:d1:7f: db:41:9f:cf:5a:1b:5a:af:01:ab:07:cd:4e:1f:fd: eb:f7:f6:7f:c2:0d:30:dd:65:12:af:0a:ee:a1:b7: a3:2b:bc:0c:fa:ec:48:7c:0a:70:f5:c5:f0:00:50: 9f:92:04:3e:3a:0d:12:ae:dc:31:a1:38:df:51:c6: 62:40:75:e4:93:83:e7:1e:e2:62:e6:e7:96:da:f0: f6:b9:15:4c:1f:cd:50:02:ed:3d:ae:93:e4:36:dd: 14:25:3f:29:9a:92:2b:c0:03:fa:65:2d:92:b9:27: fe:95:e2:30:3b:6e:d0:b5:6f:3d:93:70:6d:91:95: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EB:FF:67:7A:AE:0A:8D:BC:5E:45:F9:EC:54:2B:70:17:FE:83:C5 X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c0:de:f0:05:b2:6a:2f:85:b7:60:f2:79:36:63:3a:f4:11: 7c:61:ef:ff:c0:57:1c:27:34:6c:58:22:ca:30:04:8d:c2:ec: c3:9e:af:ff:67:18:9f:da:cc:eb:01:9f:ae:43:ff:40:ca:38: 4d:23:04:cd:02:7b:f2:83:d4:c1:40:37:1d:dc:bf:1a:6f:38: 48:8b:43:ce:04:49:41:9e:f4:30:99:39:73:b1:a8:58:06:83: f8:03:bd:05:ac:88:4e:59:7b:01:02:41:cf:0a:e4:cd:c3:39: b0:b6:a5:20:5a:68:9b:ae:c7:bc:b1:79:13:f7:bd:d5:7e:f3: 10:83:8f:bd:00:5e:57:27:ca:62:c4:9a:0a:ec:8c:12:96:58: 62:89:06:90:4c:56:40:8a:44:23:e9:36:ca:28:e5:dc:cb:21: f6:25:b2:07:40:89:fc:71:66:8c:f0:3c:ee:3d:7a:78:0e:c0: 57:59:57:e2:cd:38:f8:1e:10:29:ce:b2:76:92:30:21:fb:84: 12:65:53:8d:da:f4:63:2c:44:e2:98:f6:b3:d2:62:09:ca:52: 71:38:63:08:bb:0f:2c:ce:73:97:95:da:dc:3a:87:59:f7:bc: d6:0d:b0:37:82:aa:b7:a5:51:b5:df:c2:7f:64:68:57:d0:ab: 77:8f:a1:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjYwNDE3MDE0MTE4WhcNMjYwNDI0MDE0MTE4WjAYMRYwFAYD VQQDEw02OWUxOGZiZS1iYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3c5yvSqU4vHXIw9FTacLasnG4Ak2dCGqDHao2Xzug/yiTnJgBPD3NUEuBSR nfNEXox5mAgMSBkDGBFHxYOWNO7LhNm8K2hYzT94uJ8C6KQCirB8tvX/R0imsYiN 7tplKgsQY/zyOFHpJgaXOA7gYj/CuZq3YhbyfsxxFQfhVSw3KLWP0X/bQZ/PWhta rwGrB81OH/3r9/Z/wg0w3WUSrwruobejK7wM+uxIfApw9cXwAFCfkgQ+Og0Srtwx oTjfUcZiQHXkk4PnHuJi5ueW2vD2uRVMH81QAu09rpPkNt0UJT8pmpIrwAP6ZS2S uSf+leIwO27QtW89k3BtkZVfswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXr/2d6 rgqNvF5F+exUK3AX/oPFMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesDe8AWyai+Ft2DyeTZjOvQRfGHv/8BXHCc0bFgiyjAEjcLsw56v/2cYn9rM 6wGfrkP/QMo4TSMEzQJ78oPUwUA3Hdy/Gm84SItDzgRJQZ70MJk5c7GoWAaD+AO9 BayITll7AQJBzwrkzcM5sLalIFpom67HvLF5E/e91X7zEIOPvQBeVyfKYsSaCuyM EpZYYokGkExWQIpEI+k2yijl3Msh9iWyB0CJ/HFmjPA87j16eA7AV1lX4s04+B4Q Kc6ydpIwIfuEEmVTjdr0YyxE4pj2s9JiCcpScThjCLsPLM5zl5Xa3DqHWfe81g2w N4Kqt6VRtd/Cf2RoV9Crd4+haA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:26:52 2026 by rpki-client