$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json) Hash identifier: A8U0FQCArfQU8Op79qRlO9gfRojIzR49mzn9JkwesWI= Subject key identifier: 54:17:84:B3:BA:75:EA:8D:0F:B9:2C:CE:05:AB:85:9E:63:CF:4F:32 Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft Manifest number: 01C4 Signing time: Sun 19 Apr 2026 03:36:03 +0000 Manifest this update: Sun 19 Apr 2026 03:36:03 +0000 Manifest next update: Sun 26 Apr 2026 03:36:03 +0000 Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: ACiKgI/leO1fHiCuIFYsfrxv1Bv5zLbKRlBt/Ycsb4c=) 2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Apr 19 03:36:03 2026 GMT Not After : Apr 26 03:36:03 2026 GMT Subject: CN=69e44da3-1237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:9b:74:84:26:a6:4d:35:8d:25:73:57:21: 71:06:c3:d4:94:33:6b:a0:ac:ff:2f:f7:0b:85:17: cc:6c:5c:04:8f:bf:39:d7:8c:c5:6c:91:69:4e:c1: 8b:e6:4e:bf:85:f2:5b:15:4a:65:9f:1e:e4:df:6b: e9:df:62:3b:ca:f1:99:12:e1:eb:b0:c9:a7:64:8a: 0b:06:ca:57:b5:73:e2:9e:25:9c:c3:2c:39:b5:d3: be:44:a6:ac:9f:b9:11:2b:99:8f:e4:21:6f:98:26: b0:1e:bc:97:53:4e:f6:b4:d9:0e:70:2d:8d:a1:8b: 67:21:0f:1f:f0:ec:18:86:96:8d:ec:b4:bc:38:9a: 90:10:c2:60:e9:fc:cb:4c:b9:7d:5a:2a:66:cb:9d: 5b:74:61:85:70:28:66:aa:04:79:7a:67:bf:d4:f7: cb:c8:79:c9:33:47:6f:2a:04:45:cd:78:a9:bf:88: e7:a2:9e:e9:b4:65:91:91:2a:7a:3b:42:5d:e5:c7: 7c:3b:ec:b2:50:25:cd:49:f8:6b:df:e5:57:34:24: ad:c0:27:26:af:73:9f:59:ad:51:f7:00:41:dc:55: 93:71:9a:9b:e6:8e:6d:95:55:53:ab:29:ba:af:e4: 77:d7:62:78:44:8a:ef:49:d5:52:79:22:39:b0:77: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:84:B3:BA:75:EA:8D:0F:B9:2C:CE:05:AB:85:9E:63:CF:4F:32 X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:53:be:a6:5e:79:ff:e0:3f:cc:5b:ac:62:2e:2a:c5:16:6a: 6a:04:05:a8:fb:e0:33:7e:43:92:0e:ec:e1:82:27:89:a1:a8: 76:2f:10:50:74:cf:00:79:46:b3:0d:c2:61:5d:68:2a:11:1f: 97:a6:c6:38:68:d7:be:b5:01:3d:34:45:11:57:02:45:68:1e: ad:36:b4:7f:9d:89:9a:a7:f9:21:20:43:b3:73:06:29:5b:61: 49:63:88:39:08:1d:93:31:ec:1f:8b:8d:37:5c:45:70:f0:79: e0:95:86:5d:63:02:a0:cc:bb:a0:a7:9a:45:1c:a0:18:3c:0c: 27:20:a4:5d:b5:5a:d9:ef:4c:b6:57:6d:18:da:81:53:ab:d4: 02:22:aa:f5:da:91:87:9f:fc:27:a5:13:bd:a0:03:a6:12:b7: 8d:ec:01:61:01:b6:0f:53:6d:65:aa:ec:86:52:dd:bd:69:8a: 04:d1:19:b5:b8:9f:49:5b:8c:1d:b8:e5:43:f2:22:dd:05:8a: 3e:e0:17:3b:2e:a3:c7:73:cd:12:96:89:9e:b0:54:5f:cb:74: 14:d1:48:bf:2f:5c:0a:55:dd:a4:a5:07:23:86:0a:19:a6:a2: 58:8a:9f:ce:a4:29:97:41:00:a8:6d:67:b4:05:ab:90:de:0d: c7:c7:ed:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjYwNDE5MDMzNjAzWhcNMjYwNDI2MDMzNjAzWjAYMRYwFAYD VQQDEw02OWU0NGRhMy0xMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviubdIQmpk01jSVzVyFxBsPUlDNroKz/L/cLhRfMbFwEj78514zFbJFpTsGL 5k6/hfJbFUplnx7k32vp32I7yvGZEuHrsMmnZIoLBspXtXPiniWcwyw5tdO+RKas n7kRK5mP5CFvmCawHryXU072tNkOcC2NoYtnIQ8f8OwYhpaN7LS8OJqQEMJg6fzL TLl9Wipmy51bdGGFcChmqgR5eme/1PfLyHnJM0dvKgRFzXipv4jnop7ptGWRkSp6 O0Jd5cd8O+yyUCXNSfhr3+VXNCStwCcmr3OfWa1R9wBB3FWTcZqb5o5tlVVTqym6 r+R312J4RIrvSdVSeSI5sHfL2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQXhLO6 deqND7kszgWrhZ5jz08yMB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IyMy83NTQ1RjAzQTk3RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4 eWhVbDhoOTk3UFdtb3FaTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnFO+pl55/+A/zFusYi4qxRZqagQFqPvgM35Dkg7s4YIniaGodi8QUHTPAHlG sw3CYV1oKhEfl6bGOGjXvrUBPTRFEVcCRWgerTa0f52Jmqf5ISBDs3MGKVthSWOI OQgdkzHsH4uNN1xFcPB54JWGXWMCoMy7oKeaRRygGDwMJyCkXbVa2e9MtldtGNqB U6vUAiKq9dqRh5/8J6UTvaADphK3jewBYQG2D1NtZarshlLdvWmKBNEZtbifSVuM HbjlQ/Ii3QWKPuAXOy6jx3PNEpaJnrBUX8t0FNFIvy9cClXdpKUHI4YKGaaiWIqf zqQpl0EAqG1ntAWrkN4Nx8ftrA== -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:36 2026 by rpki-client