$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft File: kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json) Hash identifier: SNCllm8Hhg/DojhZPAUVynS3gexO1MWpMGBb3WQiyPk= Subject key identifier: F8:4F:FF:1F:E2:22:64:AA:F8:2E:83:F5:67:B2:A1:7E:20:FC:ED:34 Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft Manifest number: 04E9 Signing time: Thu 16 Apr 2026 23:42:07 +0000 Manifest this update: Thu 16 Apr 2026 23:42:07 +0000 Manifest next update: Thu 23 Apr 2026 23:42:07 +0000 Files and hashes: 1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: mkrf4bweg13CmUo+Y5zi6ajombiYu+n0ymchTltj9TE=) 2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=) 3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47 Validity Not Before: Apr 16 23:42:07 2026 GMT Not After : Apr 23 23:42:07 2026 GMT Subject: CN=69e173cf-a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:e0:d6:a5:05:ec:4b:73:c3:ad:f9:9c:59: 01:60:3a:e9:31:fb:65:79:e6:07:bd:4d:16:19:eb: 2f:0d:66:d6:e3:12:db:22:15:ba:39:f6:80:b2:0b: fd:09:0d:57:2d:ab:b2:90:50:c1:04:14:64:6b:ad: d4:ae:12:7e:4e:c7:80:c0:82:ec:38:2d:42:64:59: d5:53:28:a6:66:b8:ff:8b:8f:a4:e2:aa:80:de:73: 0f:cb:58:6d:d7:98:f9:73:54:5b:23:a2:a1:3f:5a: 67:5d:68:50:36:c4:f7:23:09:f8:7c:27:04:56:cb: 76:b6:f6:d2:3a:28:f0:95:e2:17:85:92:cb:c1:bc: 09:9e:ce:7b:ee:2c:42:39:42:ba:a1:87:4a:ba:77: ad:c2:5f:f9:92:22:dc:59:c6:94:b2:8d:2d:e5:5d: 15:34:23:3c:f0:d3:9c:43:10:05:cb:7c:c8:01:85: c6:2d:97:2a:b4:34:11:74:ee:49:94:8a:a2:92:2f: 29:d5:8d:4e:3a:a6:40:f5:ff:94:ce:be:06:18:0f: e8:b6:3a:1c:57:d3:e9:aa:70:16:f3:8b:c0:29:4b: 6b:10:2b:fe:a4:e1:cc:b1:4e:32:e8:17:5a:91:7d: 68:bc:66:59:f9:c0:36:6b:6f:05:8e:9c:be:ad:37: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4F:FF:1F:E2:22:64:AA:F8:2E:83:F5:67:B2:A1:7E:20:FC:ED:34 X509v3 Authority Key Identifier: keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3e:f1:43:74:4c:a4:ca:a0:d5:f8:8e:2a:0f:31:b5:29:49: ee:5b:6e:c8:ad:18:7d:4b:c8:d4:7c:04:de:50:d4:4f:d9:80: 5c:67:32:af:83:dd:34:25:ff:6c:45:cf:0d:e3:ef:b6:62:45: 1b:9a:b3:bb:b6:c7:a6:a2:44:34:55:f7:e2:77:35:43:fa:0f: ff:54:4c:98:0d:6c:9a:85:9e:e9:dc:e9:fc:43:02:7e:2f:fc: a7:b3:c4:b2:0f:09:f3:63:b1:fa:68:2d:69:bd:64:f7:0c:63: 13:7e:c0:5b:f6:fa:61:1e:e3:37:9b:a6:9a:67:ff:5d:96:8d: 4f:0c:c2:92:a2:cd:3c:82:ba:18:78:f5:05:5f:b0:45:70:96: eb:f2:cf:67:a5:d6:52:5b:75:be:5d:47:06:3e:fe:d6:25:ca: f9:2f:c1:22:86:39:a7:ce:ed:44:4b:ca:de:58:d9:5c:ca:4a: d2:7d:3a:05:9b:c1:1b:e8:7e:69:a4:82:76:e2:30:55:b8:6c: 0d:db:81:66:fb:af:41:96:cc:d8:a0:1b:93:be:64:b7:e7:e1: 11:3c:ac:c8:0e:4f:80:b1:7d:52:7c:27:45:2c:8c:da:6f:7d: 81:bc:c9:b8:0c:33:4e:96:7d:af:cf:a7:1e:1f:d9:fb:c9:c3: c7:12:af:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB MzdDRjNFNDcwHhcNMjYwNDE2MjM0MjA3WhcNMjYwNDIzMjM0MjA3WjAYMRYwFAYD VQQDEw02OWUxNzNjZi1hNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp33g1qUF7Etzw635nFkBYDrpMftleeYHvU0WGesvDWbW4xLbIhW6OfaAsgv9 CQ1XLauykFDBBBRka63UrhJ+TseAwILsOC1CZFnVUyimZrj/i4+k4qqA3nMPy1ht 15j5c1RbI6KhP1pnXWhQNsT3Iwn4fCcEVst2tvbSOijwleIXhZLLwbwJns577ixC OUK6oYdKunetwl/5kiLcWcaUso0t5V0VNCM88NOcQxAFy3zIAYXGLZcqtDQRdO5J lIqiki8p1Y1OOqZA9f+Uzr4GGA/otjocV9PpqnAW84vAKUtrECv+pOHMsU4y6Bda kX1ovGZZ+cA2a28Fjpy+rTf27wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhP/x/i ImSq+C6D9WeyoX4g/O00MB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC NTRudUNmNG01cS1qZlBQa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXT7xQ3RMpMqg1fiOKg8xtSlJ7ltuyK0YfUvI1HwE3lDUT9mAXGcyr4PdNCX/ bEXPDePvtmJFG5qzu7bHpqJENFX34nc1Q/oP/1RMmA1smoWe6dzp/EMCfi/8p7PE sg8J82Ox+mgtab1k9wxjE37AW/b6YR7jN5ummmf/XZaNTwzCkqLNPIK6GHj1BV+w RXCW6/LPZ6XWUlt1vl1HBj7+1iXK+S/BIoY5p87tREvK3ljZXMpK0n06BZvBG+h+ aaSCduIwVbhsDduBZvuvQZbM2KAbk75kt+fhETysyA5PgLF9UnwnRSyM2m99gbzJ uAwzTpZ9r8+nHh/Z+8nDxxKvOA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:44 2026 by rpki-client