$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: uRPSjgPysvPwKR9JQSJI3pksSb/pnKpp5K6GLdADl7s= Subject key identifier: D2:FF:66:7D:8D:F1:AE:41:3C:F8:7F:96:7B:FB:3A:41:30:78:FA:52 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 01C7 Signing time: Fri 17 Apr 2026 03:41:45 +0000 Manifest this update: Fri 17 Apr 2026 03:41:44 +0000 Manifest next update: Fri 24 Apr 2026 03:41:44 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: WczJiJPpwFiMkAy2EuEyZpFwCD2Gg51A5KR+ypautPk=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Apr 17 03:41:44 2026 GMT Not After : Apr 24 03:41:44 2026 GMT Subject: CN=69e1abf9-a6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:58:1b:0a:09:d9:83:ea:bf:57:a9:18:6b: cc:33:96:7e:64:bc:f2:8a:c7:39:67:cb:6a:dd:b4: f0:a5:5b:94:4d:cf:20:79:d6:ce:ad:26:a3:d4:53: 71:8f:3b:e7:6c:02:ba:e6:c5:2d:c6:b7:56:c0:cb: 47:7c:bc:3f:4f:6b:d7:01:15:f7:a0:19:ad:3a:62: 88:a4:ab:32:f7:ec:d2:ef:31:1a:b5:00:82:cc:03: 06:46:30:3f:01:ce:5a:46:82:60:79:9e:87:74:cc: 66:e0:ae:a7:46:02:16:0c:7f:9c:79:1b:e9:fa:14: 9d:3c:70:7b:c6:d0:d4:18:67:92:ce:7d:5e:b1:f2: ed:94:d4:7c:3f:4d:06:71:72:e2:b4:37:a9:01:5f: 01:f9:a1:90:16:8c:17:27:aa:e9:c5:a0:4d:10:05: a4:f9:cf:09:71:bc:3c:94:f9:4e:4c:aa:6b:4a:87: 96:48:f2:41:e8:f7:db:91:7a:88:df:e9:81:3c:cd: 10:31:48:af:81:ed:51:2d:be:9c:b6:16:94:ca:bc: c9:8d:fa:3b:ec:32:65:b5:54:7f:fb:22:f5:a5:36: 63:63:48:8d:c4:36:b4:54:f9:ad:57:69:11:ce:48: d3:19:72:ac:27:6e:ae:e4:39:b9:95:81:df:ed:8a: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:66:7D:8D:F1:AE:41:3C:F8:7F:96:7B:FB:3A:41:30:78:FA:52 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:bf:1d:c9:20:5b:04:e9:06:d5:d0:a9:26:79:92:a1:fe:04: 3a:a1:bf:b1:00:03:75:d8:ef:72:e2:7a:70:14:45:89:6c:c7: ad:95:ca:59:d1:0b:55:e1:06:fc:7a:86:11:d9:5f:01:6b:6b: ba:b6:69:24:e0:4c:13:73:2f:4c:79:89:b0:13:df:0c:b4:3a: 7e:e7:b8:6d:ea:91:11:c5:be:35:a8:44:7e:81:c9:95:7d:2d: 6a:f6:36:4f:10:04:31:25:7d:28:19:11:f1:f0:c1:9a:57:b3: 64:63:61:1a:0e:a9:87:94:ea:7f:0f:2b:64:42:d2:cc:1e:6e: 14:f3:97:f1:be:53:4c:8d:5e:38:c1:ab:71:b9:fa:a7:cf:d0: 21:f7:fc:21:75:5b:a0:b3:2b:e4:e6:80:9c:e3:ae:1c:53:a3: 39:75:12:67:f2:cc:1e:17:92:39:9c:e3:0e:08:bb:13:b5:96: f2:a2:a5:40:c8:dd:b9:b9:84:ca:f9:24:bb:47:f6:be:b0:ac: 42:3b:f0:59:99:e4:3b:f1:3d:33:74:c9:13:29:db:2e:ac:18: 92:41:7f:6a:d6:25:6a:d2:8c:2c:e6:1b:eb:a4:c1:a0:01:c8: 36:e9:78:4e:f1:52:86:dd:b7:3e:05:6a:ab:7d:91:dd:66:0f: f4:67:ef:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYwNDE3MDM0MTQ0WhcNMjYwNDI0MDM0MTQ0WjAYMRYwFAYD VQQDEw02OWUxYWJmOS1hNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJtYGwoJ2YPqv1epGGvMM5Z+ZLzyisc5Z8tq3bTwpVuUTc8gedbOrSaj1FNx jzvnbAK65sUtxrdWwMtHfLw/T2vXARX3oBmtOmKIpKsy9+zS7zEatQCCzAMGRjA/ Ac5aRoJgeZ6HdMxm4K6nRgIWDH+ceRvp+hSdPHB7xtDUGGeSzn1esfLtlNR8P00G cXLitDepAV8B+aGQFowXJ6rpxaBNEAWk+c8Jcbw8lPlOTKprSoeWSPJB6PfbkXqI 3+mBPM0QMUivge1RLb6cthaUyrzJjfo77DJltVR/+yL1pTZjY0iNxDa0VPmtV2kR zkjTGXKsJ26u5Dm5lYHf7YoGWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNL/Zn2N 8a5BPPh/lnv7OkEwePpSMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc78dySBbBOkG1dCpJnmSof4EOqG/sQADddjvcuJ6cBRFiWzHrZXKWdELVeEG /HqGEdlfAWtrurZpJOBME3MvTHmJsBPfDLQ6fue4beqREcW+NahEfoHJlX0tavY2 TxAEMSV9KBkR8fDBmlezZGNhGg6ph5Tqfw8rZELSzB5uFPOX8b5TTI1eOMGrcbn6 p8/QIff8IXVboLMr5OaAnOOuHFOjOXUSZ/LMHheSOZzjDgi7E7WW8qKlQMjdubmE yvkku0f2vrCsQjvwWZnkO/E9M3TJEynbLqwYkkF/atYlatKMLOYb66TBoAHINul4 TvFSht23PgVqq32R3WYP9Gfvnw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:44 2026 by rpki-client