$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft File: OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json) Hash identifier: XV1ZrbCHEujDdPveQ377BsRhyy4x/iNzpqP8dukfEkI= Subject key identifier: 35:3F:0E:68:AD:F8:87:C6:24:34:57:F5:C0:2B:8D:C2:3A:C4:6D:C1 Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft Manifest number: 06AE Signing time: Thu 16 Apr 2026 22:17:14 +0000 Manifest this update: Thu 16 Apr 2026 22:17:13 +0000 Manifest next update: Thu 23 Apr 2026 22:17:13 +0000 Files and hashes: 1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: tMnFEPmb8aclo9WTThbvevddz5Xsw4uScdGxnjytzx8=) 2: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: 6vQYG50f3j6imFaVQZEGv9cRp+WLhKWy37R6OQpNEPg=) 3: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: /n8cgLUSSIv+DUP3F5GFZI1msmeIRLj2tRmEAM9D6xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75 Validity Not Before: Apr 16 22:17:13 2026 GMT Not After : Apr 23 22:17:13 2026 GMT Subject: CN=69e15fea-34dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3c:a4:69:90:47:85:8e:15:43:98:e2:d5:42: ed:e2:d9:08:44:fe:e5:16:b9:32:cd:4a:15:49:81: d4:b3:cb:b0:0f:78:39:68:9c:09:ad:07:89:8a:1b: a8:b8:a6:fc:19:d6:58:a3:4f:a1:1e:fe:f7:ef:d7: 85:38:7b:5c:c3:86:8b:ab:bc:96:fc:74:20:99:4b: e9:53:05:d1:a8:3f:37:8f:b7:2e:0d:0a:94:9f:68: 42:e7:57:2e:56:0c:c0:ff:1f:77:5b:5d:44:3c:2d: 93:75:e9:66:00:10:05:a6:ff:03:41:a2:d8:fd:3d: eb:13:37:35:4f:d4:30:34:69:cf:35:94:5a:83:cd: c2:5a:66:42:29:d5:64:5b:f2:12:b6:88:38:b5:f5: a0:2d:03:e5:e3:cf:bf:32:08:b5:a9:04:60:79:b2: 09:6c:07:87:b5:df:a7:f8:f4:8e:de:71:80:30:0b: d2:b4:54:c7:78:12:25:6f:3b:07:b3:65:ac:33:31: cd:46:aa:bc:32:5d:3e:2c:8b:f0:e2:ef:84:e2:bf: 13:51:a4:77:c5:cf:54:ee:88:3f:6b:4f:81:a1:16: 7a:4a:52:46:57:00:08:f0:05:1d:eb:f3:e3:99:47: dd:77:4a:f1:9e:c2:99:6b:0b:fe:51:b0:a0:e3:2e: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:0E:68:AD:F8:87:C6:24:34:57:F5:C0:2B:8D:C2:3A:C4:6D:C1 X509v3 Authority Key Identifier: keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7e:0c:ad:09:94:df:31:4d:8b:d8:c5:7b:a4:b4:aa:62:6e: 58:01:da:c8:f6:91:7f:1a:07:56:86:55:bf:65:5b:c3:d5:b1: 99:d3:c9:fb:ca:c9:2b:69:4d:cf:08:8f:3a:02:25:7b:15:41: e6:04:c0:f3:81:59:ed:48:42:f9:9a:de:c6:00:a5:03:d3:a7: f3:4b:b4:48:42:3e:54:c1:c0:99:3e:21:22:ba:3e:ac:df:96: 10:cd:37:92:54:d6:25:75:3a:a6:d0:d3:d4:f6:83:af:f2:1f: 88:32:70:0c:f0:b5:a7:8b:91:aa:e5:d7:25:27:2c:ab:47:1d: 39:6e:9d:72:b0:2e:c2:b0:24:d5:93:27:ff:98:99:1a:9c:e1: 3a:ed:42:c5:74:95:1f:46:b4:3f:8c:1c:79:60:07:7e:cb:ad: 79:e4:1c:35:ae:c1:02:86:2d:ef:87:4a:80:b6:31:ff:d1:52: 67:88:1d:cc:9d:ac:8c:11:af:8b:b8:f8:64:99:e4:6e:85:e8: 83:27:da:b6:c9:ba:f5:a3:00:4f:79:bc:e9:59:d4:e8:9c:7f: ec:b9:41:a9:d9:a1:b6:20:96:70:50:58:0d:50:09:15:a5:0b: e5:e0:62:7f:65:63:82:ed:d2:3c:64:6c:ee:44:5a:85:91:71: 2b:f4:b6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NEQxMTAvBgNVBAUTKDNBRjA5RDI4Q0E0ODdBOTMyNjYzMUE2QkU5QkQ5QkRC QUExOERBNzUwHhcNMjYwNDE2MjIxNzEzWhcNMjYwNDIzMjIxNzEzWjAYMRYwFAYD VQQDEw02OWUxNWZlYS0zNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TykaZBHhY4VQ5ji1ULt4tkIRP7lFrkyzUoVSYHUs8uwD3g5aJwJrQeJihuo uKb8GdZYo0+hHv7379eFOHtcw4aLq7yW/HQgmUvpUwXRqD83j7cuDQqUn2hC51cu VgzA/x93W11EPC2TdelmABAFpv8DQaLY/T3rEzc1T9QwNGnPNZRag83CWmZCKdVk W/IStog4tfWgLQPl48+/Mgi1qQRgebIJbAeHtd+n+PSO3nGAMAvStFTHeBIlbzsH s2WsMzHNRqq8Ml0+LIvw4u+E4r8TUaR3xc9U7og/a0+BoRZ6SlJGVwAI8AUd6/Pj mUfdd0rxnsKZawv+UbCg4y5RZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDU/Dmit +IfGJDRX9cArjcI6xG3BMB8GA1UdIwQYMBaAFDrwnSjKSHqTJmMaa+m9m9uqGNp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0RC9EMzU5NTY4Q0E4 REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVwTW1ZeHByNmIyYjI2b1ky blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL092Q2RLTXBJZXBNbVl4cHI2YjJiMjZvWTJuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0RC9EMzU5NTY4Q0E4REMxMUVCOTc5REE1MEVDNEY5QUUwMi9PdkNkS01wSWVw TW1ZeHByNmIyYjI2b1kyblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN34MrQmU3zFNi9jFe6S0qmJuWAHayPaRfxoHVoZVv2Vbw9WxmdPJ+8rJK2lN zwiPOgIlexVB5gTA84FZ7UhC+ZrexgClA9On80u0SEI+VMHAmT4hIro+rN+WEM03 klTWJXU6ptDT1PaDr/IfiDJwDPC1p4uRquXXJScsq0cdOW6dcrAuwrAk1ZMn/5iZ GpzhOu1CxXSVH0a0P4wceWAHfsuteeQcNa7BAoYt74dKgLYx/9FSZ4gdzJ2sjBGv i7j4ZJnkboXogyfatsm69aMAT3m86VnU6Jx/7LlBqdmhtiCWcFBYDVAJFaUL5eBi f2Vjgu3SPGRs7kRahZFxK/S2xQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:39 2026 by rpki-client