$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: 9fvL5NDo4ADG9cYYXf1AbkOKXUfuMp7J4IMGZfdSBos= Subject key identifier: 8F:82:EE:81:C1:00:94:90:76:DE:CD:56:CA:DD:57:3C:9E:B8:04:1E Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 01D7 Signing time: Fri 17 Apr 2026 03:17:34 +0000 Manifest this update: Fri 17 Apr 2026 03:17:33 +0000 Manifest next update: Fri 24 Apr 2026 03:17:33 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: Hvyl+txztOLgY19ZGRwtxnrFADy/1BFVjop4snMNgsA=) 2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: 5SIEytqj/kUtficVvfQzNkbf84VZDuhF0/ee1j7nlyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Apr 17 03:17:33 2026 GMT Not After : Apr 24 03:17:33 2026 GMT Subject: CN=69e1a64d-6228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:52:a1:69:08:3b:fa:04:87:1a:b9:71:5c: d6:59:00:65:20:8b:f8:56:c9:fa:4f:3e:31:3b:e4: 5f:3f:3b:80:cc:69:47:2d:e5:3b:6d:b3:6b:50:a5: 3c:3a:8b:15:af:9b:7d:f0:04:3e:a4:fb:fc:1d:e2: ce:2b:1a:8e:31:22:d6:e5:76:c0:62:8e:34:73:ca: 9f:19:7b:43:79:0a:b4:fd:49:d4:5e:c2:f9:d9:78: 9e:a4:14:bd:27:47:fa:96:87:22:0a:bd:54:d7:dd: 76:84:d8:90:76:3c:22:1e:fe:2f:a2:13:c5:8e:6c: a5:31:32:a1:6e:9e:5c:3a:62:d9:60:23:91:11:70: 07:11:80:45:41:b2:56:d0:b7:0d:59:1d:45:74:85: 24:bd:97:08:b5:97:11:92:7a:df:ea:ba:04:10:90: c5:86:ed:ac:8a:6c:25:23:bc:67:ca:f5:4e:96:58: 62:28:7e:4c:ea:84:d1:99:25:84:b9:43:08:a8:51: 48:38:59:a0:b4:a2:9f:15:53:fa:76:f4:c0:2a:dc: 12:b0:dd:71:1b:cb:30:f8:d6:3a:09:32:7d:1e:9b: ad:ab:40:a6:95:66:31:83:1c:1a:10:90:dd:94:d8: 78:33:d2:2b:8a:f2:79:02:02:a9:38:74:5b:08:64: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:82:EE:81:C1:00:94:90:76:DE:CD:56:CA:DD:57:3C:9E:B8:04:1E X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:44:a8:5d:58:c7:f1:c7:75:63:48:df:ca:69:2c:28:3e:5b: 65:c6:f9:cb:be:eb:62:69:54:ef:83:7d:14:e2:2d:a8:e0:dc: 92:97:7d:04:1b:51:19:da:5b:51:a5:35:5b:4b:46:06:40:1f: 3e:fe:77:05:b0:d9:fa:07:65:6e:14:01:42:ff:98:e4:f8:a5: 0e:53:06:65:0c:d6:8f:7a:94:48:db:b3:4a:e0:4d:30:fe:e2: 4f:ad:a6:f7:50:ba:9e:ac:79:4e:7d:54:51:b1:f4:fe:4b:69: 60:09:01:45:8a:28:72:d5:36:e7:ac:e9:54:b2:d6:75:22:72: 80:bc:af:d0:e1:bf:60:e1:6e:9c:97:e9:6e:d3:a3:98:cb:76: 08:52:21:a1:09:e0:b9:ef:b9:d6:bb:27:64:fe:2f:c3:39:b2: fd:e9:5f:19:c8:6a:34:05:3b:7a:43:4a:34:eb:b2:c8:08:e7: cd:c4:80:5c:9b:c3:e0:ad:b0:07:96:6f:e2:ab:41:ac:de:e1: 40:a0:49:24:4e:eb:75:25:8d:3c:c4:4a:59:81:0c:b2:53:ea: 58:59:12:7d:49:5d:81:7f:a6:20:2e:57:88:bd:19:9c:53:b9: ee:c3:89:d1:63:99:48:32:6c:72:39:14:6d:ee:86:ba:83:b5: 1d:00:27:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjYwNDE3MDMxNzMzWhcNMjYwNDI0MDMxNzMzWjAYMRYwFAYD VQQDEw02OWUxYTY0ZC02MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutlSoWkIO/oEhxq5cVzWWQBlIIv4Vsn6Tz4xO+RfPzuAzGlHLeU7bbNrUKU8 OosVr5t98AQ+pPv8HeLOKxqOMSLW5XbAYo40c8qfGXtDeQq0/UnUXsL52XiepBS9 J0f6lociCr1U1912hNiQdjwiHv4vohPFjmylMTKhbp5cOmLZYCOREXAHEYBFQbJW 0LcNWR1FdIUkvZcItZcRknrf6roEEJDFhu2simwlI7xnyvVOllhiKH5M6oTRmSWE uUMIqFFIOFmgtKKfFVP6dvTAKtwSsN1xG8sw+NY6CTJ9Hputq0CmlWYxgxwaEJDd lNh4M9IrivJ5AgKpOHRbCGQX/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+C7oHB AJSQdt7NVsrdVzyeuAQeMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnUSoXVjH8cd1Y0jfymksKD5bZcb5y77rYmlU74N9FOItqODckpd9BBtRGdpb UaU1W0tGBkAfPv53BbDZ+gdlbhQBQv+Y5PilDlMGZQzWj3qUSNuzSuBNMP7iT62m 91C6nqx5Tn1UUbH0/ktpYAkBRYooctU256zpVLLWdSJygLyv0OG/YOFunJfpbtOj mMt2CFIhoQngue+51rsnZP4vwzmy/elfGchqNAU7ekNKNOuyyAjnzcSAXJvD4K2w B5Zv4qtBrN7hQKBJJE7rdSWNPMRKWYEMslPqWFkSfUldgX+mIC5XiL0ZnFO57sOJ 0WOZSDJscjkUbe6GuoO1HQAnew== -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:56 2026 by rpki-client