$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: 1GCtE+kek89erCHam7Jpufrxv27jhJtpuCJTfFMAwCw= Subject key identifier: 90:47:03:62:19:68:05:5E:B3:DB:FF:3A:00:F7:0A:53:83:FE:2B:EA Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 0122 Signing time: Fri 17 Apr 2026 05:27:27 +0000 Manifest this update: Fri 17 Apr 2026 05:27:27 +0000 Manifest next update: Fri 24 Apr 2026 05:27:27 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: bJN6LCUaQaa7+KAp64XWTV2g2Xng8k8k0Ykvy1hfXr4=) 2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: FGzuhrRvwprB5KpbvWYZLSjwv3h28HP8C3ekeqhOVdI=) 3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: l3eydfjGEoMs5mo5Jx4Wnn5QeJIXXCfrBKeGcyLZ8Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Apr 17 05:27:27 2026 GMT Not After : Apr 24 05:27:27 2026 GMT Subject: CN=69e1c4bf-c2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:e1:99:ea:90:df:3f:d6:21:79:7a:9a:3b: 62:70:7f:c7:57:eb:6f:99:06:c1:2a:6a:b9:7c:55: be:fb:cd:de:fd:0d:12:41:5b:7b:b9:48:00:fe:65: 86:dd:97:4f:c3:22:a2:33:bf:d4:b4:f5:01:66:c1: e8:5c:38:67:63:2c:cb:5f:87:cc:b9:49:34:bf:f2: ba:7c:e3:74:c8:b7:76:bb:8b:6f:f3:e7:4e:f8:98: 72:84:14:d2:1c:72:a6:bd:d2:fe:e0:fd:18:ea:85: d4:b0:55:75:80:d3:76:8b:24:fb:08:67:16:f9:7d: bb:24:58:f0:66:69:7f:eb:53:e2:36:c5:98:0f:45: 0f:3c:17:cd:85:4c:d2:13:7e:29:af:f9:df:b5:89: 86:e3:77:7c:7f:55:bd:6c:49:c4:56:62:8b:21:e4: 64:3c:7e:04:80:54:b3:24:89:9a:d8:42:39:37:22: e4:2a:01:37:2f:a2:f5:a0:37:c4:df:ad:56:55:ff: 94:9e:36:36:5d:a4:f0:f7:90:ae:43:b8:c4:0d:2c: d9:a1:d8:17:a6:7c:ec:66:e7:d2:f3:37:c1:08:79: fd:0f:bd:59:14:eb:ee:84:04:19:7d:4e:96:3d:f8: 5f:df:88:ae:fe:5a:8d:6b:e6:48:e8:26:86:c6:de: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:03:62:19:68:05:5E:B3:DB:FF:3A:00:F7:0A:53:83:FE:2B:EA X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:04:6b:fe:52:f9:b7:98:e0:7b:08:33:1c:de:c8:0c:c0: cb:94:09:ab:a4:a4:c1:e6:f7:d5:fa:18:92:82:21:73:f9:2c: a2:3e:01:26:f1:d3:94:ab:5a:54:e5:88:29:ec:cc:f5:7c:6b: 44:5a:9f:ee:ad:ed:4e:5c:64:6b:67:86:88:8a:7d:9d:ba:8d: 9d:6a:0f:e5:8b:c0:8c:58:42:c2:33:a9:93:bf:c1:5b:ae:da: da:46:17:20:90:9f:56:f3:64:9b:e7:b2:14:e2:90:49:bc:06: fc:01:26:9a:1b:ac:f9:2b:22:35:4d:5f:dd:26:da:d3:b9:f5: fc:c6:91:85:88:85:df:50:6a:70:16:31:81:a0:99:20:88:51: 4a:04:c5:5d:cd:54:53:7b:18:ab:ab:66:d2:e6:2d:ca:25:7e: 40:c3:86:4b:f1:b9:66:fd:7e:a2:f5:c1:d5:15:22:ac:ef:a0: a4:2e:7c:5a:95:6e:18:d9:5d:d8:db:aa:d6:a6:45:88:3c:58: 2c:51:0c:48:6d:f9:bc:db:e0:b9:cc:87:bd:0c:46:6f:63:48: bf:6f:6b:2d:c0:11:48:bf:da:8d:47:4c:e7:91:79:81:ac:4e: cb:41:b2:c4:85:6c:fa:2d:cc:46:41:c8:fc:58:cf:ff:b9:16: ff:98:7f:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjYwNDE3MDUyNzI3WhcNMjYwNDI0MDUyNzI3WjAYMRYwFAYD VQQDEw02OWUxYzRiZi1jMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhbhmeqQ3z/WIXl6mjticH/HV+tvmQbBKmq5fFW++83e/Q0SQVt7uUgA/mWG 3ZdPwyKiM7/UtPUBZsHoXDhnYyzLX4fMuUk0v/K6fON0yLd2u4tv8+dO+JhyhBTS HHKmvdL+4P0Y6oXUsFV1gNN2iyT7CGcW+X27JFjwZml/61PiNsWYD0UPPBfNhUzS E34pr/nftYmG43d8f1W9bEnEVmKLIeRkPH4EgFSzJIma2EI5NyLkKgE3L6L1oDfE 361WVf+UnjY2XaTw95CuQ7jEDSzZodgXpnzsZufS8zfBCHn9D71ZFOvuhAQZfU6W Pfhf34iu/lqNa+ZI6CaGxt7h1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBHA2IZ aAVes9v/OgD3ClOD/ivqMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMs4Ea/5S+beY4HsIMxzeyAzAy5QJq6Skweb31foYkoIhc/ksoj4BJvHTlKta VOWIKezM9XxrRFqf7q3tTlxka2eGiIp9nbqNnWoP5YvAjFhCwjOpk7/BW67a2kYX IJCfVvNkm+eyFOKQSbwG/AEmmhus+SsiNU1f3Sba07n1/MaRhYiF31BqcBYxgaCZ IIhRSgTFXc1UU3sYq6tm0uYtyiV+QMOGS/G5Zv1+ovXB1RUirO+gpC58WpVuGNld 2Nuq1qZFiDxYLFEMSG35vNvgucyHvQxGb2NIv29rLcARSL/ajUdM55F5gaxOy0Gy xIVs+i3MRkHI/FjP/7kW/5h/Ug== -----END CERTIFICATE-----Generated at Fri Apr 17 22:32:23 2026 by rpki-client