$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: SFiLL6vOSg5zv+540dqf5PUTFgHLwDv/aL4zSgbvsV0= Subject key identifier: 7E:DB:9C:38:9B:FF:1C:CD:3B:38:B5:90:73:EF:97:80:C5:DC:03:0E Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 01F7 Signing time: Fri 17 Apr 2026 02:56:46 +0000 Manifest this update: Fri 17 Apr 2026 02:56:45 +0000 Manifest next update: Fri 24 Apr 2026 02:56:45 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: qjB+dwGneM2mYNnXsW4QaqkTJzBsdxXRoRkb3WkFGJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Apr 17 02:56:45 2026 GMT Not After : Apr 24 02:56:45 2026 GMT Subject: CN=69e1a16e-b765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:ce:94:9a:9a:d3:9b:22:69:57:86:01:cf: 11:d3:53:8b:25:cc:c4:dd:ea:d5:d9:84:05:82:95: f6:77:3a:4d:9e:6b:60:1d:5a:50:2c:fe:6b:3e:00: 94:da:af:44:38:70:10:68:5c:8f:89:89:c0:1f:34: b3:75:c7:eb:3f:5b:01:8f:57:91:c0:8c:ea:1d:2f: db:75:35:81:6c:8b:53:dc:b1:ab:38:fc:4a:2f:3a: d2:26:bc:23:61:b2:e3:08:a0:cd:6e:b7:6b:0c:c0: f9:05:c3:27:7e:a7:4a:78:68:3d:3b:23:d8:64:e0: a5:71:7b:c7:a5:70:65:4b:ad:db:9c:44:c2:77:b0: af:bd:f0:b6:6c:4e:1b:70:5d:10:41:0a:44:24:ed: c2:36:19:89:92:9b:cb:50:f8:58:dd:35:f5:3d:c0: ce:6d:61:71:aa:58:7a:6c:6b:47:d6:55:bf:e9:d7: f2:db:a1:60:07:10:37:37:85:ab:36:1c:2d:e6:02: 46:b7:d7:28:dc:8a:05:b4:85:7f:14:2e:92:73:67: cd:af:31:5f:74:95:66:e3:b6:10:f9:6d:b2:b2:b9: 5f:99:de:84:42:92:34:73:2f:61:de:52:2d:81:7d: 61:b6:3f:6c:dd:5e:ab:18:e5:f6:52:aa:16:a0:a8: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DB:9C:38:9B:FF:1C:CD:3B:38:B5:90:73:EF:97:80:C5:DC:03:0E X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:41:54:0c:86:29:9d:be:c3:ee:99:6f:f2:20:c8:e3:f3:a7: 9e:33:1b:79:77:3a:55:ac:98:ed:6d:35:05:69:8a:49:90:1b: df:eb:20:61:1d:39:0d:23:c4:14:4a:2e:b7:52:e6:62:53:63: 5c:aa:a8:65:69:04:3f:5d:ad:a5:dc:5e:21:08:62:f5:c6:bc: 53:e9:bf:92:65:db:fd:3a:d2:66:0d:0f:d9:a6:0d:05:02:b2: e1:1d:10:ed:8e:52:5f:63:e0:d0:f4:1c:ec:d1:a0:1d:10:2d: 22:de:76:c0:d8:85:a5:ae:ae:69:e5:b6:e6:8b:08:26:12:2e: 0e:3c:46:c8:9a:86:b8:5b:84:bf:3b:80:2f:a9:f6:eb:22:ea: 72:86:94:3e:64:3e:ab:fc:23:36:58:8d:8b:bd:55:33:14:38: ac:43:3a:70:c9:1f:10:a0:d8:c5:8b:66:c2:bd:01:f1:e9:b6: 38:41:af:b9:5c:5e:d2:de:38:fb:98:8b:0f:a5:62:b1:c0:c6: 31:26:97:10:6a:97:21:ee:69:96:2e:09:0d:2b:b3:c6:27:89: 3d:08:e2:f0:6f:aa:dc:25:9f:c1:6a:04:fb:4b:d9:17:16:63: a1:bd:a7:af:fe:28:fc:78:e2:47:be:72:a3:28:21:3f:8d:38: 68:c3:04:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjYwNDE3MDI1NjQ1WhcNMjYwNDI0MDI1NjQ1WjAYMRYwFAYD VQQDEw02OWUxYTE2ZS1iNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjfbOlJqa05siaVeGAc8R01OLJczE3erV2YQFgpX2dzpNnmtgHVpQLP5rPgCU 2q9EOHAQaFyPiYnAHzSzdcfrP1sBj1eRwIzqHS/bdTWBbItT3LGrOPxKLzrSJrwj YbLjCKDNbrdrDMD5BcMnfqdKeGg9OyPYZOClcXvHpXBlS63bnETCd7CvvfC2bE4b cF0QQQpEJO3CNhmJkpvLUPhY3TX1PcDObWFxqlh6bGtH1lW/6dfy26FgBxA3N4Wr Nhwt5gJGt9co3IoFtIV/FC6Sc2fNrzFfdJVm47YQ+W2ysrlfmd6EQpI0cy9h3lIt gX1htj9s3V6rGOX2UqoWoKhyoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7bnDib /xzNOzi1kHPvl4DF3AMOMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGkFUDIYpnb7D7plv8iDI4/OnnjMbeXc6VayY7W01BWmKSZAb3+sgYR05DSPE FEout1LmYlNjXKqoZWkEP12tpdxeIQhi9ca8U+m/kmXb/TrSZg0P2aYNBQKy4R0Q 7Y5SX2Pg0PQc7NGgHRAtIt52wNiFpa6uaeW25osIJhIuDjxGyJqGuFuEvzuAL6n2 6yLqcoaUPmQ+q/wjNliNi71VMxQ4rEM6cMkfEKDYxYtmwr0B8em2OEGvuVxe0t44 +5iLD6ViscDGMSaXEGqXIe5pli4JDSuzxieJPQji8G+q3CWfwWoE+0vZFxZjob2n r/4o/HjiR75yoyghP404aMMEyw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:14 2026 by rpki-client