$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json) Hash identifier: y8tz11l2JY5+QCZYsXHVw+O5VvvrtpfeaOmNiU6bTWg= Subject key identifier: 33:79:5D:FE:02:E6:84:B1:27:33:E7:CC:F0:97:41:11:42:0F:68:3D Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft Manifest number: 19 Signing time: Wed 15 Apr 2026 08:32:45 +0000 Manifest this update: Wed 15 Apr 2026 08:32:45 +0000 Manifest next update: Wed 22 Apr 2026 08:32:45 +0000 Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: zazGFLg0nNC3A75hhganxMP+AH3KiXvIEYdTpvE/0+A=) 2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Validity Not Before: Apr 15 08:32:45 2026 GMT Not After : Apr 22 08:32:45 2026 GMT Subject: CN=69df4d2d-566d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:18:9a:bd:ce:f8:09:ea:2a:e3:7d:a1:0b: d9:11:12:44:84:63:79:82:17:8b:05:74:d9:25:4c: 3e:33:54:5d:c7:1c:19:a4:b0:eb:5f:63:b5:48:38: 9e:7e:14:06:69:ee:08:f7:01:73:42:db:6a:cb:a9: 98:95:81:1d:f2:ef:2c:11:29:05:d9:f3:9a:d2:63: dd:49:57:d9:e1:c3:59:28:da:75:74:4a:99:e8:35: e7:e0:56:16:80:06:28:a3:c9:a1:2e:57:68:0e:6a: 03:97:38:a3:37:26:ee:ed:85:7f:38:84:8b:fb:3c: 80:08:df:e8:e0:00:9d:02:0f:8f:0f:cd:48:b3:df: 76:bc:b3:e7:fc:6d:64:5c:51:1e:9e:7e:9a:56:af: 56:d8:f7:96:ce:04:94:73:fe:13:c2:1a:4d:58:92: 95:2f:c0:30:91:61:f5:83:b4:c7:07:97:34:ea:a9: 9b:de:73:27:ee:a8:e2:7c:0a:c8:ce:11:32:89:f7: 13:b6:cd:07:32:3a:e4:43:60:ee:fa:10:df:0d:91: 17:47:d8:9c:41:ba:89:f7:dd:3d:fb:f7:f8:55:7b: 56:14:d5:1a:d3:1c:d8:e5:90:90:5b:e9:11:8b:88: 5a:41:54:84:7a:db:87:c6:1f:02:00:43:9c:73:4f: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:5D:FE:02:E6:84:B1:27:33:E7:CC:F0:97:41:11:42:0F:68:3D X509v3 Authority Key Identifier: keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:95:c9:1a:fd:9a:d1:91:09:e9:4e:64:70:f0:be:ba:0d:4e: 00:48:c8:60:ce:f8:64:dc:15:e4:0f:24:e3:c5:65:d0:f0:8f: 0c:99:3c:52:3f:8b:d4:77:59:6a:b9:7b:53:6c:b9:9d:cc:f3: 51:05:40:28:1a:99:71:e4:36:3a:98:67:9f:c4:0c:35:25:be: 98:30:e2:01:38:33:20:5b:5b:ed:dc:f5:2d:dd:92:e2:bd:29: ec:b6:2b:55:3c:af:a9:e1:41:79:a1:35:38:f1:d3:93:24:55: 80:63:45:85:b7:02:31:74:3a:33:46:99:ed:70:3a:90:19:f8: 28:79:cc:db:00:d5:8c:43:c6:bd:a7:4f:3b:f1:0c:c6:25:e7: ca:78:e6:da:1f:81:18:46:12:f5:c6:6f:14:de:cc:45:6f:7a: 2a:7a:e9:bf:0b:24:52:7f:17:4c:b2:c6:98:40:13:d2:60:a7: 00:91:3f:bb:7b:18:ee:ee:e8:4a:2a:a6:59:f7:2a:f1:6d:5f: b8:23:60:51:11:c0:70:a3:b0:89:9d:ae:31:fa:48:be:77:9e: 06:7a:7f:da:67:bb:ba:9b:a7:03:15:2e:10:8a:73:72:23:b1: 59:e8:b7:b5:79:03:b8:d4:2d:2c:71:a7:ea:06:6d:40:6c:2b: 9b:2e:b7:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjVDNjExMC8GA1UEBRMoQTE2RjE4REMwMTQ0RjI1NjQwNTg4NUY0MEQ4RDkyMjdF QzFCN0IzNjAeFw0yNjA0MTUwODMyNDVaFw0yNjA0MjIwODMyNDVaMBgxFjAUBgNV BAMTDTY5ZGY0ZDJkLTU2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYbRiavc74Ceoq432hC9kREkSEY3mCF4sFdNklTD4zVF3HHBmksOtfY7VIOJ5+ FAZp7gj3AXNC22rLqZiVgR3y7ywRKQXZ85rSY91JV9nhw1ko2nV0SpnoNefgVhaA BiijyaEuV2gOagOXOKM3Ju7thX84hIv7PIAI3+jgAJ0CD48PzUiz33a8s+f8bWRc UR6efppWr1bY95bOBJRz/hPCGk1YkpUvwDCRYfWDtMcHlzTqqZvecyfuqOJ8CsjO ETKJ9xO2zQcyOuRDYO76EN8NkRdH2JxBuon33T379/hVe1YU1RrTHNjlkJBb6RGL iFpBVIR624fGHwIAQ5xzT2sHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM3ld/gLm hLEnM+fM8JdBEUIPaD0wHwYDVR0jBBgwFoAUoW8Y3AFE8lZAWIX0DY2SJ+wbezYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NUM2LzEyOTM1MEM2MTc4 RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxaQVdJWDBEWTJTSi13YmV6 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1c4WTNBRkU4bFpBV0lYMERZMlNKLXdiZXpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NUM2LzEyOTM1MEM2MTc4RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxa QVdJWDBEWTJTSi13YmV6WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBplcka/ZrRkQnpTmRw8L66DU4ASMhgzvhk3BXkDyTjxWXQ8I8MmTxSP4vUd1lq uXtTbLmdzPNRBUAoGplx5DY6mGefxAw1Jb6YMOIBODMgW1vt3PUt3ZLivSnstitV PK+p4UF5oTU48dOTJFWAY0WFtwIxdDozRpntcDqQGfgoeczbANWMQ8a9p0878QzG JefKeObaH4EYRhL1xm8U3sxFb3oqeum/CyRSfxdMssaYQBPSYKcAkT+7exju7uhK KqZZ9yrxbV+4I2BREcBwo7CJna4x+ki+d54Gen/aZ7u6m6cDFS4QinNyI7FZ6Le1 eQO41C0scafqBm1AbCubLrcA -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:52 2026 by rpki-client