$ rpki-client -vvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft File: ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json) Hash identifier: r6VnqldmapmWOIsXo+zl/ytmQdq6Bkmz9fG+qvJQe6g= Subject key identifier: 20:18:BB:37:74:F0:14:E9:84:EA:2F:37:6C:3A:98:5B:98:16:FD:7D Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 Certificate issuer: /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft Manifest number: 01A8 Signing time: Sun 19 Apr 2026 03:46:34 +0000 Manifest this update: Sun 19 Apr 2026 03:46:34 +0000 Manifest next update: Sun 26 Apr 2026 03:46:34 +0000 Files and hashes: 1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: KJhkpeo4AeMYEjW/6ffOtSkcD5gieHNRI0Xp9Thqgts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Validity Not Before: Apr 19 03:46:34 2026 GMT Not After : Apr 26 03:46:34 2026 GMT Subject: CN=69e4501a-684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:33:30:11:9e:0d:62:4b:a4:aa:ca:8e:36: a3:d8:c3:80:68:65:d0:b6:75:52:6b:ff:8d:db:13: 05:df:33:5b:1c:ad:98:14:6a:fb:88:8a:a0:ff:cd: 8f:c2:84:17:fc:62:c2:92:56:30:3e:d9:26:72:9f: 25:78:4e:62:b8:95:34:56:f6:40:1e:6a:86:f8:65: 93:f0:98:16:90:8d:dc:92:3c:c4:d6:49:11:53:36: 11:47:ca:03:a5:98:a6:b5:bd:8e:06:b1:2b:80:50: 16:39:10:66:8e:03:43:65:2c:ab:a6:86:b6:d0:58: 7d:d5:f9:55:eb:af:4c:4b:be:e1:d6:92:b9:a9:da: 53:50:79:a5:11:b1:d7:b7:e5:b6:83:2d:66:15:88: 1a:4d:e1:32:84:99:80:73:45:bd:7c:71:63:50:ed: f8:71:10:b9:84:a6:74:2a:b0:ee:26:69:99:94:f9: f5:32:5e:b7:2d:2a:9a:25:ed:0c:0e:9a:18:cc:2e: 74:dd:5d:bc:92:c9:ba:46:6b:c6:20:16:8e:cd:55: ab:5b:11:a5:24:bf:e0:2c:cb:0c:94:c1:0e:d1:9e: 07:c3:eb:7b:49:2c:87:b0:67:32:e4:d8:4a:8f:09: ca:b2:5f:12:95:ac:ee:b2:d5:57:5e:7c:78:4d:78: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:BB:37:74:F0:14:E9:84:EA:2F:37:6C:3A:98:5B:98:16:FD:7D X509v3 Authority Key Identifier: keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2a:7d:94:63:99:ce:81:c1:69:57:9d:3a:82:33:c1:fa:2c: 37:bf:70:f7:f9:38:9e:32:f0:a9:f0:4a:67:4f:74:a7:1e:d6: 79:a9:87:43:26:b6:74:b8:ef:01:e6:fd:ef:eb:e1:62:cf:82: 91:a4:52:14:b6:ba:32:5b:4b:bc:be:6a:7e:5b:8d:24:dd:92: 82:c6:05:0f:27:03:48:30:a2:4f:3c:0e:c3:7a:df:3e:49:b6: 59:9a:b3:87:4f:7d:38:bb:ee:7a:d1:f9:c5:a5:da:c6:95:9a: b0:a6:36:0c:a5:ed:5a:ea:39:e7:a2:bc:dc:a0:5a:73:99:f9: f7:bf:ce:04:72:28:23:bd:5f:73:e0:46:f7:b1:26:ea:46:a5: 13:5e:b7:ec:d5:05:a7:5d:ee:6b:89:c3:e3:6f:d7:53:e2:04: ba:d7:ac:e7:01:89:82:ba:14:dc:f3:94:7d:b6:4c:b7:f8:a1: ed:b6:69:1b:c5:3b:53:5e:12:b6:0f:7a:56:d3:9e:a7:45:a6: af:17:af:a2:47:4f:6b:07:32:49:1f:ae:5c:0e:a6:d2:3d:4b: 5c:71:e3:b6:7a:90:0a:bb:af:fe:cc:5a:43:f6:f2:f0:d3:72: 10:65:42:41:ea:a3:a8:64:c6:19:56:5b:43:c3:3e:a4:f8:05: 08:f2:46:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC ODk0MjlFRjUwHhcNMjYwNDE5MDM0NjM0WhcNMjYwNDI2MDM0NjM0WjAYMRYwFAYD VQQDEw02OWU0NTAxYS02ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+kzMBGeDWJLpKrKjjaj2MOAaGXQtnVSa/+N2xMF3zNbHK2YFGr7iIqg/82P woQX/GLCklYwPtkmcp8leE5iuJU0VvZAHmqG+GWT8JgWkI3ckjzE1kkRUzYRR8oD pZimtb2OBrErgFAWORBmjgNDZSyrpoa20Fh91flV669MS77h1pK5qdpTUHmlEbHX t+W2gy1mFYgaTeEyhJmAc0W9fHFjUO34cRC5hKZ0KrDuJmmZlPn1Ml63LSqaJe0M DpoYzC503V28ksm6RmvGIBaOzVWrWxGlJL/gLMsMlMEO0Z4Hw+t7SSyHsGcy5NhK jwnKsl8SlazustVXXnx4TXgfnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAYuzd0 8BTphOovN2w6mFuYFv19MB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0 QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY MGxmVkd4VF9YRFc0bENudlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFCp9lGOZzoHBaVedOoIzwfosN79w9/k4njLwqfBKZ090px7WeamHQya2dLjv Aeb97+vhYs+CkaRSFLa6MltLvL5qfluNJN2SgsYFDycDSDCiTzwOw3rfPkm2WZqz h099OLvuetH5xaXaxpWasKY2DKXtWuo556K83KBac5n597/OBHIoI71fc+BG97Em 6kalE1637NUFp13ua4nD42/XU+IEutes5wGJgroU3POUfbZMt/ih7bZpG8U7U14S tg96VtOep0WmrxevokdPawcySR+uXA6m0j1LXHHjtnqQCruv/sxaQ/by8NNyEGVC QeqjqGTGGVZbQ8M+pPgFCPJGJg== -----END CERTIFICATE-----Generated at Sun Apr 19 14:04:24 2026 by rpki-client