$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json) Hash identifier: 1U13u88i52Z5nkRnwaA0LcIYcVG3Nm6rqYJ/haqPvhc= Subject key identifier: FD:6B:C0:8B:C0:6E:C9:D0:7B:FC:85:E4:1F:97:F2:34:EC:A5:C9:FE Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft Manifest number: 08CA Signing time: Thu 16 Apr 2026 20:19:56 +0000 Manifest this update: Thu 16 Apr 2026 20:19:55 +0000 Manifest next update: Thu 23 Apr 2026 20:19:55 +0000 Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: HjZjKDuFXcMBsSFqBWDeyaTHfaQe4y4VtGN6O9ikRkM=) 2: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: +lxeSugWEuY86E4w4UGBy7QvT+6uw0dBO3CLwKjhb3k=) 3: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: d8G/TfpNpL6HX37ocKvM5TsVlVjVR76JD7mZYT1iKdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Apr 16 20:19:55 2026 GMT Not After : Apr 23 20:19:55 2026 GMT Subject: CN=69e1446b-b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:52:1c:5e:e1:b6:f0:f4:10:a2:de:ba:f6: 5b:14:b7:e6:6e:5b:f8:d1:c0:a7:94:c3:6f:ea:07: 31:fc:ab:b5:83:f6:ee:b1:08:03:c9:7f:37:81:64: d9:e9:30:d1:6c:93:3b:9f:91:9a:c1:81:fd:f6:f0: 34:9c:52:8d:51:17:3e:5b:d0:2e:19:45:c9:84:8b: 18:22:2d:2f:3e:30:94:64:ae:b1:3a:95:7e:32:4e: 75:87:d7:10:3a:4e:18:b1:33:7a:0d:2d:45:14:a2: c5:1b:db:1f:af:2a:10:b7:86:de:3c:6b:a3:64:80: 5d:2f:55:17:08:4c:a6:6d:4b:46:df:ef:57:87:7e: 6a:f4:c1:4b:dc:54:16:23:70:0c:a1:0d:cc:f2:5f: 0d:b9:9f:9d:3d:07:ea:d8:66:ec:6e:16:5b:43:9f: 3f:ed:6e:c2:86:1b:ee:f6:c1:0c:9f:be:e4:23:89: d5:3e:e6:83:cd:9b:3f:6e:34:f0:4d:c9:7f:4e:be: 6e:69:e9:16:08:66:34:42:e4:ee:88:2d:7f:1a:19: cc:77:57:38:fa:16:eb:19:8a:4c:29:82:2e:c8:9b: ca:9e:93:9b:69:8f:a3:b8:7b:e8:f8:26:2a:36:4f: ba:20:2c:54:57:a0:3f:ea:a9:ee:ec:d3:4a:96:ba: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6B:C0:8B:C0:6E:C9:D0:7B:FC:85:E4:1F:97:F2:34:EC:A5:C9:FE X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:24:04:10:ed:90:76:c1:ec:be:0f:32:f6:40:f5:12:52: db:c2:b5:2d:cb:e2:4f:7b:0e:b9:65:81:1a:09:4a:45:a0:53: 0a:6f:11:c5:2c:92:d5:2c:15:d5:f4:bd:48:a2:1d:7c:d7:ea: 26:31:67:9d:18:06:43:a1:12:65:7e:27:e1:c6:36:ff:c6:33: 70:61:22:36:8f:ba:ef:db:75:f3:f2:b4:d5:82:03:f9:6a:07: cc:1a:fe:1f:1c:f3:26:cc:cf:f7:ab:b1:28:e3:d6:43:2a:0d: 05:97:05:be:60:c4:1b:90:b7:f0:9f:8e:33:3f:b8:94:bf:65: a8:eb:50:dc:46:8e:87:bb:5b:bd:48:e4:d2:3f:db:2d:f2:78: 8a:7b:21:f2:b6:95:e7:9d:be:8e:0c:2a:7e:5a:1d:de:7c:1a: 83:17:5d:08:d8:d6:b2:01:63:27:6f:ba:a3:72:d7:3e:0b:7f: 4f:38:c3:52:e6:8f:95:78:ba:42:2f:82:88:07:4d:1d:e4:13: 78:d3:53:d6:5e:a9:37:21:13:a3:97:33:6d:79:22:7a:8f:18: 1f:d8:cf:06:7c:d9:d3:c8:40:d7:b1:98:b0:12:a5:d7:18:9f: 8a:48:89:be:90:14:a2:9b:d1:99:3f:d4:32:63:78:66:fc:9d: c0:05:65:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjYwNDE2MjAxOTU1WhcNMjYwNDIzMjAxOTU1WjAYMRYwFAYD VQQDEw02OWUxNDQ2Yi1iNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+hSHF7htvD0EKLeuvZbFLfmblv40cCnlMNv6gcx/Ku1g/busQgDyX83gWTZ 6TDRbJM7n5GawYH99vA0nFKNURc+W9AuGUXJhIsYIi0vPjCUZK6xOpV+Mk51h9cQ Ok4YsTN6DS1FFKLFG9sfryoQt4bePGujZIBdL1UXCEymbUtG3+9Xh35q9MFL3FQW I3AMoQ3M8l8NuZ+dPQfq2GbsbhZbQ58/7W7Chhvu9sEMn77kI4nVPuaDzZs/bjTw Tcl/Tr5uaekWCGY0QuTuiC1/GhnMd1c4+hbrGYpMKYIuyJvKnpObaY+juHvo+CYq Nk+6ICxUV6A/6qnu7NNKlrrirQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1rwIvA bsnQe/yF5B+X8jTspcn+MB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQwMi8yOEE1MDZGQUQ4NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2Vz Tzh3elFOQTVzaGFJSnhKNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcrQkBBDtkHbB7L4PMvZA9RJS28K1LcviT3sOuWWBGglKRaBTCm8RxSyS1SwV 1fS9SKIdfNfqJjFnnRgGQ6ESZX4n4cY2/8YzcGEiNo+679t18/K01YID+WoHzBr+ HxzzJszP96uxKOPWQyoNBZcFvmDEG5C38J+OMz+4lL9lqOtQ3EaOh7tbvUjk0j/b LfJ4insh8raV552+jgwqflod3nwagxddCNjWsgFjJ2+6o3LXPgt/TzjDUuaPlXi6 Qi+CiAdNHeQTeNNT1l6pNyETo5czbXkieo8YH9jPBnzZ08hA17GYsBKl1xifikiJ vpAUopvRmT/UMmN4ZvydwAVlrw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:52 2026 by rpki-client