$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json) Hash identifier: RVaWDx3pgs+x4ivbnpWa19Q8Qg4qev7X6AQ3hIE8gdM= Subject key identifier: C4:77:2D:9F:C0:8C:17:3E:9C:20:ED:C2:02:1E:D1:0A:A0:CF:39:5E Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59 Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft Manifest number: 12 Signing time: Fri 17 Apr 2026 08:44:30 +0000 Manifest this update: Fri 17 Apr 2026 08:44:29 +0000 Manifest next update: Fri 24 Apr 2026 08:44:29 +0000 Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: 7P3UqzJFWQyFqu27RormvM9IlgOKojFlR8EOJmDhrxc=) 2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59 Validity Not Before: Apr 17 08:44:29 2026 GMT Not After : Apr 24 08:44:29 2026 GMT Subject: CN=69e1f2ee-35c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:8d:e2:91:b0:94:18:35:e0:23:d4:fc:27: 71:1f:52:f2:eb:0a:02:cb:19:18:7e:5a:68:7e:90: ab:3b:12:ad:54:df:16:4e:b7:0d:ef:81:e6:64:da: 1a:f3:b2:0e:57:61:fb:9b:9a:e7:0a:6d:7d:b9:4d: 32:e4:89:f4:a2:dd:f3:54:6e:31:ce:bd:48:5c:0f: 53:89:28:cf:94:1f:04:1b:7f:81:81:60:8f:44:53: 1b:61:4e:0b:24:8a:34:d1:48:ae:69:e0:1f:73:43: 34:e6:96:19:80:04:da:37:a2:58:0e:a2:31:6f:29: f5:87:02:84:27:0b:65:2d:2c:8e:51:c9:27:b0:92: 7d:e9:8e:64:94:19:32:5d:58:76:d9:e8:d9:34:b3: f5:32:7d:07:12:c0:55:56:48:dd:1f:fd:6f:fd:92: 3c:25:45:75:17:79:28:03:58:bc:e7:1f:a8:5e:56: 6a:9b:3c:53:7e:53:07:49:85:a5:b9:ed:7d:bd:88: 59:60:e7:9c:ae:1a:3d:dc:6d:fd:ee:8e:f6:2e:2f: 46:b3:3a:2d:31:72:53:a8:b9:38:49:f3:50:33:ba: 0f:43:66:ab:9d:a2:8b:b5:2d:66:71:6f:81:c9:e9: d0:06:9e:22:28:13:ed:01:d9:21:14:bd:8a:43:d4: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:2D:9F:C0:8C:17:3E:9C:20:ED:C2:02:1E:D1:0A:A0:CF:39:5E X509v3 Authority Key Identifier: keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a6:57:0a:9b:97:80:77:3a:2d:b8:61:3d:83:b8:cd:6c:e6: f7:21:ce:45:52:3e:d2:9c:03:43:72:1f:62:ce:5a:01:6f:9a: ee:bc:ba:69:ad:1c:af:03:1f:df:fa:f9:21:b1:79:f0:47:79: 77:d2:88:cd:b1:85:a3:b5:45:da:c6:40:f9:41:a5:7b:03:e2: 24:5d:f7:ad:a9:bc:b2:90:8c:70:65:68:2c:ea:3e:82:2a:69: b0:db:46:3d:9d:63:20:ca:b3:aa:25:12:24:47:d5:b1:29:5a: db:e8:0e:55:f0:89:d6:ff:02:73:b6:3b:ac:33:c4:3f:67:6d: ea:e4:0f:e0:73:84:0f:bc:25:0b:ac:b0:7c:97:36:ed:b9:66: 1c:3f:1c:6d:41:84:db:c5:37:ae:ff:69:ac:5c:c6:df:f2:e3: a5:ed:c5:fe:5a:8d:d7:80:3d:85:e9:20:20:63:b1:7f:1f:4a: 82:92:6c:8f:c7:62:71:fb:11:dd:1c:e5:31:a1:c7:eb:7e:89: f5:12:ee:4e:cd:76:c1:cf:f0:c0:7d:10:f8:c8:e9:fb:12:b1: eb:97:42:c3:1d:48:ac:d3:9e:89:94:50:c2:e4:4c:24:4e:8c: df:bc:64:dd:0a:20:7f:48:14:74:8d:91:8c:fe:02:d4:27:66: 8c:3b:9f:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NURENDExMC8GA1UEBRMoMzlCRkZERTYzRDAyNjIwMkJEQ0FCMDNFODA3NTlBQjYy RUE2REM1OTAeFw0yNjA0MTcwODQ0MjlaFw0yNjA0MjQwODQ0MjlaMBgxFjAUBgNV BAMTDTY5ZTFmMmVlLTM1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIJI3ikbCUGDXgI9T8J3EfUvLrCgLLGRh+Wmh+kKs7Eq1U3xZOtw3vgeZk2hrz sg5XYfubmucKbX25TTLkifSi3fNUbjHOvUhcD1OJKM+UHwQbf4GBYI9EUxthTgsk ijTRSK5p4B9zQzTmlhmABNo3olgOojFvKfWHAoQnC2UtLI5RySewkn3pjmSUGTJd WHbZ6Nk0s/UyfQcSwFVWSN0f/W/9kjwlRXUXeSgDWLznH6heVmqbPFN+UwdJhaW5 7X29iFlg55yuGj3cbf3ujvYuL0azOi0xclOouThJ81Azug9DZqudoou1LWZxb4HJ 6dAGniIoE+0B2SEUvYpD1HehAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxHctn8CM Fz6cIO3CAh7RCqDPOV4wHwYDVR0jBBgwFoAUOb/95j0CYgK9yrA+gHWati6m3Fkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1REQ0LzExOUM0QUZFMjIx NzExRjFCMURGMjEwMDM5M0Q4QzY3L09iXzk1ajBDWWdLOXlyQS1nSFdhdGk2bTNG ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2JfOTVqMENZZ0s5eXJBLWdIV2F0aTZtM0ZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 REQ0LzExOUM0QUZFMjIxNzExRjFCMURGMjEwMDM5M0Q4QzY3L09iXzk1ajBDWWdL OXlyQS1nSFdhdGk2bTNGay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmplcKm5eAdzotuGE9g7jNbOb3Ic5FUj7SnANDch9izloBb5ruvLpprRyvAx/f +vkhsXnwR3l30ojNsYWjtUXaxkD5QaV7A+IkXfetqbyykIxwZWgs6j6CKmmw20Y9 nWMgyrOqJRIkR9WxKVrb6A5V8InW/wJztjusM8Q/Z23q5A/gc4QPvCULrLB8lzbt uWYcPxxtQYTbxTeu/2msXMbf8uOl7cX+Wo3XgD2F6SAgY7F/H0qCkmyPx2Jx+xHd HOUxocfrfon1Eu5OzXbBz/DAfRD4yOn7ErHrl0LDHUis056JlFDC5EwkTozfvGTd CiB/SBR0jZGM/gLUJ2aMO59L -----END CERTIFICATE-----Generated at Fri Apr 17 23:54:13 2026 by rpki-client