$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: oEMAf3cQZ0jbXsOEO7o71nPR4hkdPorXPSroL5MZNso= Subject key identifier: 45:F4:1F:AA:20:24:79:55:D7:4F:73:E3:5A:C2:25:A4:38:45:6F:35 Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 0210 Signing time: Fri 12 Jun 2026 17:34:09 +0000 Manifest this update: Fri 12 Jun 2026 17:34:08 +0000 Manifest next update: Fri 19 Jun 2026 17:34:08 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: gvMgyTsJwBxkm5Jag0dN2SuVl6DknYHZ8Jonp+YmNn0=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: oB4kxasRgRq+GKJ70NUc/sJMH3q5nYfTRjnemmCHnis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Jun 12 17:34:08 2026 GMT Not After : Jun 19 17:34:08 2026 GMT Subject: CN=6a2c4311-73db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:16:fb:54:78:ef:22:36:b3:0e:ea:08:11: 7a:3b:b6:4c:82:af:3e:cc:cf:df:de:f0:e8:4a:2d: 40:79:52:7f:bf:72:14:f6:47:4d:7f:74:47:e6:8c: ae:f6:69:46:57:d4:2d:ad:98:06:57:a8:02:c7:cd: 93:d9:af:70:41:47:88:34:f0:19:35:7b:b3:09:e5: 62:8c:e9:cf:17:16:41:61:59:5c:a9:5c:34:9d:c5: 53:d8:48:50:45:7b:f5:3d:8d:07:aa:52:92:da:a9: 95:7a:76:bd:e5:5d:04:f3:13:94:d7:96:1e:0b:3b: b6:1c:fc:36:e7:02:1d:ca:bb:33:5e:71:85:df:a9: 87:a4:5a:ab:5c:c5:2a:c1:2c:77:9d:4a:56:21:a9: c9:09:b8:ea:e7:ee:6b:be:80:b9:82:94:f2:2a:96: 99:f2:8f:07:8c:93:53:05:ce:58:db:98:38:0f:65: f3:fb:74:7f:d5:f0:1b:11:0d:37:5c:49:fb:bc:10: b8:20:ed:2a:0f:52:ae:55:7c:09:75:07:46:2a:4b: 08:e4:ca:f6:1b:63:6f:04:8a:0b:a2:2b:ee:61:80: 47:11:bb:9b:b8:b3:bf:77:1d:ca:5a:5e:56:2d:ef: d5:10:0f:ad:48:98:da:27:db:3d:33:f4:5a:d8:93: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F4:1F:AA:20:24:79:55:D7:4F:73:E3:5A:C2:25:A4:38:45:6F:35 X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e8:2f:f2:01:3d:2d:57:07:ce:6d:e0:65:d9:eb:e0:86:73: 20:79:5b:f2:cf:b9:c0:dd:9e:3e:8d:d8:27:e0:6c:72:0d:78: 9a:9b:be:54:2d:c9:9e:ab:e4:c8:17:ab:e8:13:5e:a1:dc:94: 6b:35:c9:07:68:be:7e:a9:92:a0:37:b7:c6:4f:69:c3:24:02: 91:cc:12:f4:57:91:28:2e:7b:83:49:3f:84:43:e4:13:ea:48: 32:ae:79:c7:fa:d2:1f:f9:54:c4:d7:f9:71:f9:65:d6:b2:63: a4:57:40:d9:9f:a9:d7:06:f1:15:23:f7:0b:70:e3:a6:cc:49: 0d:48:bc:0b:5b:55:35:23:60:a9:58:2d:07:d6:bf:04:0b:d8: 73:c0:d2:28:27:f2:04:9a:6a:3f:b5:78:f3:7b:cd:a8:01:8d: 68:f0:da:68:17:f5:e3:78:e1:26:c5:33:92:71:73:73:6c:77: 83:f0:82:f9:1a:41:87:62:8d:c6:08:18:de:a9:3b:32:c3:ab: 59:bb:09:f6:fe:55:26:b6:85:8b:d8:7c:9e:46:5e:f4:37:eb: 8d:dc:62:d7:c1:45:a7:6f:3d:bf:c3:eb:f0:e6:17:c1:f7:eb: 8c:68:bb:79:78:01:35:84:31:23:b4:66:e0:57:8c:6f:15:ab: 47:98:51:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwNjEyMTczNDA4WhcNMjYwNjE5MTczNDA4WjAYMRYwFAYD VQQDEw02YTJjNDMxMS03M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllMW+1R47yI2sw7qCBF6O7ZMgq8+zM/f3vDoSi1AeVJ/v3IU9kdNf3RH5oyu 9mlGV9QtrZgGV6gCx82T2a9wQUeINPAZNXuzCeVijOnPFxZBYVlcqVw0ncVT2EhQ RXv1PY0HqlKS2qmVena95V0E8xOU15YeCzu2HPw25wIdyrszXnGF36mHpFqrXMUq wSx3nUpWIanJCbjq5+5rvoC5gpTyKpaZ8o8HjJNTBc5Y25g4D2Xz+3R/1fAbEQ03 XEn7vBC4IO0qD1KuVXwJdQdGKksI5Mr2G2NvBIoLoivuYYBHEbubuLO/dx3KWl5W Le/VEA+tSJjaJ9s9M/Ra2JNbPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEX0H6og JHlV109z41rCJaQ4RW81MB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqugv8gE9LVcHzm3gZdnr4IZzIHlb8s+5wN2ePo3YJ+Bscg14mpu+VC3Jnqvk yBer6BNeodyUazXJB2i+fqmSoDe3xk9pwyQCkcwS9FeRKC57g0k/hEPkE+pIMq55 x/rSH/lUxNf5cfll1rJjpFdA2Z+p1wbxFSP3C3DjpsxJDUi8C1tVNSNgqVgtB9a/ BAvYc8DSKCfyBJpqP7V483vNqAGNaPDaaBf143jhJsUzknFzc2x3g/CC+RpBh2KN xggY3qk7MsOrWbsJ9v5VJraFi9h8nkZe9Dfrjdxi18FFp289v8Pr8OYXwffrjGi7 eXgBNYQxI7Rm4FeMbxWrR5hRig== -----END CERTIFICATE-----Generated at Sun Jun 14 00:22:28 2026 by rpki-client