$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft File: OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json) Hash identifier: xHSfu9CSCi2hGxZTMTFNEmnP4VhZXJDTG9yl2DM/6uU= Subject key identifier: C8:A0:6E:91:04:12:FF:A5:2D:E6:AF:17:FD:AD:79:7F:70:72:D7:B4 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft Manifest number: 011B Signing time: Fri 17 Apr 2026 05:32:33 +0000 Manifest this update: Fri 17 Apr 2026 05:32:32 +0000 Manifest next update: Fri 24 Apr 2026 05:32:32 +0000 Files and hashes: 1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: IYC8oJTeQ12ikWQ5n1+UWLm6L4RUnhiq3nbzGKRcwe0=) 2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Apr 17 05:32:32 2026 GMT Not After : Apr 24 05:32:32 2026 GMT Subject: CN=69e1c5f1-a841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:e0:1c:73:7b:28:14:61:24:49:93:52:f0: 11:83:e4:9d:1a:ea:8a:6c:5a:e4:ac:7b:2b:22:17: 76:57:8b:0a:8c:68:0a:d1:04:6f:02:c4:13:d4:24: a3:4b:8a:34:de:48:68:ba:2b:5d:79:58:c1:b5:38: b2:6a:48:a3:40:27:9c:fe:34:3e:93:9c:ed:df:c3: 3d:e9:28:23:e2:03:f8:b9:ab:e4:61:68:40:a2:eb: 0e:66:12:79:81:12:2a:9a:df:33:08:2b:97:93:f8: 78:75:56:59:6b:ab:6f:bc:48:4b:5c:0b:ec:2e:ba: 9d:21:e5:00:1b:fc:fe:37:f1:3a:77:1c:7b:0b:18: 44:71:81:0d:6e:38:a5:5a:6e:47:1e:9c:35:e0:0b: ce:c0:28:15:d6:e3:2a:0b:2f:de:4b:c2:9a:d4:66: 63:19:3c:01:f6:a3:a3:52:49:86:7b:5b:2c:12:a0: b7:30:09:9c:66:cf:d1:d9:c6:0c:b9:6a:dd:05:f8: 34:80:60:2c:5f:5c:1b:92:ed:a4:a1:50:9b:52:3d: be:88:2f:1d:0f:bd:29:8e:8a:12:7b:d2:66:ba:43: 9f:eb:27:b4:ae:9b:d6:8b:99:66:d7:b4:59:4c:e2: 3f:4a:60:a3:25:d5:11:ba:ca:68:bb:6d:7c:86:2f: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:6E:91:04:12:FF:A5:2D:E6:AF:17:FD:AD:79:7F:70:72:D7:B4 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:cb:23:3d:9e:5f:66:25:b1:40:cd:50:d5:07:c0:11:d8: 3d:cc:7c:3f:c3:fc:bd:74:e9:0a:59:fe:20:22:c9:50:5b:a3: e9:2e:57:f5:0c:28:7c:ff:45:1e:b2:29:ff:69:bd:e3:6a:64: e7:c9:8e:ea:13:fb:03:ff:cf:7f:18:2e:5f:ce:44:c0:b6:1f: ba:98:80:51:5e:84:24:fd:ff:17:72:17:6b:bd:2c:1c:df:6f: 4c:91:da:e0:64:92:49:26:55:97:60:44:8b:99:11:9a:24:b7: 05:10:3f:59:f7:6f:22:f1:24:d4:c3:93:3d:b2:8b:5e:fd:05: 84:8c:3b:cb:b4:d8:d9:ca:b7:35:64:9b:50:e0:42:77:a9:b0: b4:7f:db:08:a2:16:be:39:bd:6a:2f:74:34:54:f1:81:d3:ba: ae:ca:e6:8a:5a:f4:50:0e:1c:b9:41:cb:56:f8:79:77:5d:33: c9:f9:72:6f:0d:f1:0f:02:de:c6:e1:e3:4f:c5:62:8a:96:ac: fb:ad:e3:2e:1c:55:44:23:2f:1c:fe:38:2f:6e:3a:91:29:10: d9:94:3b:c4:91:04:e4:ee:d2:ba:f5:ac:1a:f4:77:18:19:fd: 5e:f8:84:d8:36:ca:2d:ca:f0:f7:79:46:d4:bf:9f:a2:18:ad: 24:92:dc:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjYwNDE3MDUzMjMyWhcNMjYwNDI0MDUzMjMyWjAYMRYwFAYD VQQDEw02OWUxYzVmMS1hODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGHgHHN7KBRhJEmTUvARg+SdGuqKbFrkrHsrIhd2V4sKjGgK0QRvAsQT1CSj S4o03khouitdeVjBtTiyakijQCec/jQ+k5zt38M96Sgj4gP4uavkYWhAousOZhJ5 gRIqmt8zCCuXk/h4dVZZa6tvvEhLXAvsLrqdIeUAG/z+N/E6dxx7CxhEcYENbjil Wm5HHpw14AvOwCgV1uMqCy/eS8Ka1GZjGTwB9qOjUkmGe1ssEqC3MAmcZs/R2cYM uWrdBfg0gGAsX1wbku2koVCbUj2+iC8dD70pjooSe9JmukOf6ye0rpvWi5lm17RZ TOI/SmCjJdURuspou218hi9buQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMigbpEE Ev+lLeavF/2teX9wcte0MB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT6PLIz2eX2YlsUDNUNUHwBHYPcx8P8P8vXTpCln+ICLJUFuj6S5X9QwofP9F HrIp/2m942pk58mO6hP7A//PfxguX85EwLYfupiAUV6EJP3/F3IXa70sHN9vTJHa 4GSSSSZVl2BEi5kRmiS3BRA/WfdvIvEk1MOTPbKLXv0FhIw7y7TY2cq3NWSbUOBC d6mwtH/bCKIWvjm9ai90NFTxgdO6rsrmilr0UA4cuUHLVvh5d10zyflybw3xDwLe xuHjT8Viipas+63jLhxVRCMvHP44L246kSkQ2ZQ7xJEE5O7SuvWsGvR3GBn9XviE 2DbKLcrw93lG1L+fohitJJLcrQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:06 2026 by rpki-client