$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json) Hash identifier: KztXrt3Yep5VGDBh3mxKx2y03x4NXicdgBeeIj3beUo= Subject key identifier: E6:E1:D1:AC:58:C3:D2:5D:4C:C8:51:C5:06:D0:D7:47:13:75:2F:11 Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft Manifest number: 0718 Signing time: Sat 18 Apr 2026 21:47:52 +0000 Manifest this update: Sat 18 Apr 2026 21:47:51 +0000 Manifest next update: Sat 25 Apr 2026 21:47:51 +0000 Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: bIZimCtCXDz+9GUuJQApiNLsPLlTY1kzuiw/1w97ZPY=) 2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: htsQTL9h1dFStX/S8fGPhD/iB1SnRc1hDGyCcwP3e/U=) 3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: 411MyxEd4SUlAxnDC0f/mu2L3C2aQqpG7IJEEqtjBBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 21:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: Apr 18 21:47:51 2026 GMT Not After : Apr 25 21:47:51 2026 GMT Subject: CN=69e3fc08-b3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:2f:f0:51:35:7c:19:0e:f3:f2:5e:c4:89: a0:62:7b:bb:92:f3:7e:f5:28:d4:7c:14:4a:80:e5: 56:eb:c0:67:4c:de:c7:9e:2b:ce:7a:62:26:50:5c: 03:2c:18:f7:1b:71:62:90:af:65:e6:0d:df:6e:17: b0:c5:f3:e3:65:76:ae:01:f7:b8:3b:52:13:b9:57: 4d:10:17:0c:47:79:db:fc:9e:a7:3b:9a:75:c0:90: 58:63:1b:49:1d:3a:4b:ac:d2:b4:73:c9:9c:ac:58: b3:92:6b:c4:d0:4f:6d:5f:61:31:89:e3:bd:00:e3: 40:74:73:05:92:40:f2:10:8c:de:79:bd:1d:cf:d0: 82:da:37:af:f7:a0:72:7b:e2:17:b7:66:c0:66:7a: 4e:64:58:8e:18:f2:30:60:e9:88:31:47:92:00:51: 8e:2e:39:d4:94:a4:1f:b8:79:f7:43:a6:6c:65:0c: f9:86:95:96:91:96:c6:46:48:f5:f9:67:22:a2:4f: 6e:68:16:97:02:43:04:9d:c3:e3:ef:cc:4c:09:18: a7:04:d7:4b:07:cb:c8:04:5d:f8:1e:ca:af:e5:5d: dd:0c:8e:be:71:db:01:3d:58:7a:bd:f0:a6:9b:b9: 0a:69:70:99:81:c0:b0:b1:d0:0a:df:4c:96:51:86: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:D1:AC:58:C3:D2:5D:4C:C8:51:C5:06:D0:D7:47:13:75:2F:11 X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7c:d6:70:81:c5:2c:7f:ff:0f:43:69:fe:38:74:94:c9:ff: c7:25:db:3b:c0:da:e0:8b:b0:43:99:21:f2:b8:7b:94:20:d3: 18:73:a0:1f:3a:0e:03:5c:92:8d:b2:52:cb:c9:ca:2e:54:2b: 6e:06:4c:87:5f:57:6b:34:77:4b:4e:f6:35:c3:f6:81:0d:bd: 86:b6:4f:85:cd:75:14:e2:b8:c6:47:f2:34:bc:db:23:91:f0: e7:f0:53:67:f0:75:ad:2f:ce:be:b4:2e:ff:1e:05:cd:9d:50: 7f:49:cb:f8:7d:4f:8d:32:f6:91:e2:d7:5b:e6:84:24:9a:d2: e7:04:be:2a:cc:0b:e1:5a:41:c9:f5:7e:ac:ce:43:4d:d2:7b: f2:4b:b7:af:ad:34:94:45:fb:b8:69:04:9c:fa:07:13:ff:a3: 1a:33:5b:87:12:29:67:c0:40:77:38:99:f8:24:e3:96:44:5d: fb:33:3f:8a:9d:cc:f9:10:db:64:fa:78:d7:2a:10:e2:04:d8: 6e:78:28:ab:fe:db:a3:d5:0b:42:a9:48:ff:26:12:3a:db:c4: aa:70:b8:4c:37:2e:b1:f0:c2:6c:5b:cd:36:5d:0d:c3:58:88: 00:f8:0b:93:15:68:fe:7f:8c:e5:98:9a:f2:ae:22:85:01:87: e8:7b:aa:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjYwNDE4MjE0NzUxWhcNMjYwNDI1MjE0NzUxWjAYMRYwFAYD VQQDEw02OWUzZmMwOC1iM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI4v8FE1fBkO8/JexImgYnu7kvN+9SjUfBRKgOVW68BnTN7HnivOemImUFwD LBj3G3FikK9l5g3fbhewxfPjZXauAfe4O1ITuVdNEBcMR3nb/J6nO5p1wJBYYxtJ HTpLrNK0c8mcrFizkmvE0E9tX2ExieO9AONAdHMFkkDyEIzeeb0dz9CC2jev96By e+IXt2bAZnpOZFiOGPIwYOmIMUeSAFGOLjnUlKQfuHn3Q6ZsZQz5hpWWkZbGRkj1 +Wciok9uaBaXAkMEncPj78xMCRinBNdLB8vIBF34Hsqv5V3dDI6+cdsBPVh6vfCm m7kKaXCZgcCwsdAK30yWUYY4jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObh0axY w9JdTMhRxQbQ10cTdS8RMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa V05pbmtSam83MWI4aHk1Y1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg3zWcIHFLH//D0Np/jh0lMn/xyXbO8Da4IuwQ5kh8rh7lCDTGHOgHzoOA1yS jbJSy8nKLlQrbgZMh19XazR3S072NcP2gQ29hrZPhc11FOK4xkfyNLzbI5Hw5/BT Z/B1rS/OvrQu/x4FzZ1Qf0nL+H1PjTL2keLXW+aEJJrS5wS+KswL4VpByfV+rM5D TdJ78ku3r600lEX7uGkEnPoHE/+jGjNbhxIpZ8BAdziZ+CTjlkRd+zM/ip3M+RDb ZPp41yoQ4gTYbngoq/7bo9ULQqlI/yYSOtvEqnC4TDcusfDCbFvNNl0Nw1iIAPgL kxVo/n+M5Zia8q4ihQGH6Huq+g== -----END CERTIFICATE-----Generated at Sun Apr 19 08:53:53 2026 by rpki-client