$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: az1vudCp1PFm9kmvNDv8NcKvfhbmkXiqMe7i6xZVjeA= Subject key identifier: F1:C0:F5:73:90:51:23:4E:4D:82:30:C6:A3:0D:5C:5D:71:CC:11:2E Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 050A Signing time: Thu 16 Apr 2026 23:39:14 +0000 Manifest this update: Thu 16 Apr 2026 23:39:14 +0000 Manifest next update: Thu 23 Apr 2026 23:39:14 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: 0VcpV1a540e91Ssr4rgAREA/1+aZofB1uFr8w8xbEAw=) 2: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) 3: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Apr 16 23:39:14 2026 GMT Not After : Apr 23 23:39:14 2026 GMT Subject: CN=69e17322-b529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:68:08:1d:59:f2:98:32:dc:a4:da:8a:41: b8:65:c6:3c:5a:a3:e1:12:ea:af:81:ec:bc:47:73: f3:12:fd:8a:68:91:0d:25:d4:ec:ec:1c:f4:95:28: 40:27:d5:f1:e3:a8:f2:f5:ec:65:d1:3f:08:c4:b3: a8:90:96:7a:c5:2b:20:3a:46:37:5f:1c:e6:2d:df: 60:00:60:8b:86:48:9e:30:7b:c6:03:b1:8f:35:c1: 2c:60:32:a5:74:f1:f1:2a:1e:33:88:17:0b:30:b8: 32:ae:15:d7:0f:7d:b7:c4:30:58:07:42:20:e3:78: 6c:a0:37:43:bd:e3:27:93:a0:7f:8f:ba:08:11:0e: 1e:87:d0:67:fa:45:e0:bd:33:bb:77:b8:5b:82:7e: cc:d6:a7:99:89:e4:17:ba:43:59:fd:d0:b1:76:ab: a8:4e:1e:4f:9c:2d:f6:3f:de:b4:bd:e1:41:2c:03: a7:4e:d3:a1:f1:36:73:23:48:5f:d6:84:86:15:22: f3:a9:6f:35:39:91:45:93:93:42:d7:a6:c9:ac:87: 16:d6:cd:3f:25:95:09:3f:1a:7e:96:a6:41:e3:99: b0:a7:5d:02:6a:b5:e3:06:73:1b:e2:77:89:a4:cc: ab:90:f4:a4:73:bd:e7:1e:76:e3:d2:34:07:2e:45: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C0:F5:73:90:51:23:4E:4D:82:30:C6:A3:0D:5C:5D:71:CC:11:2E X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:49:a7:e5:83:fb:a4:dc:00:f6:e6:64:a7:ea:d6:d1:b1:04: 3e:44:28:59:2d:e2:57:57:63:20:48:92:4c:5d:7f:81:ba:df: ca:b5:99:0e:3d:82:c8:14:2a:85:ae:c2:a4:9a:c8:09:27:95: 98:45:67:92:8e:2c:6c:eb:75:e6:8d:02:12:a3:98:ec:f2:4e: f1:1a:8f:83:ab:06:c6:d4:d3:33:70:1f:a3:2c:4d:f2:0e:51: 7a:0a:9a:9a:78:c6:3a:25:fb:e4:18:9c:5e:2f:b5:3b:3d:fa: c2:9a:dc:56:ff:59:b9:f2:82:54:bb:41:e7:7d:be:72:ed:de: a1:6c:e3:7a:a2:38:14:75:a7:1c:0d:ae:9b:85:92:fd:c0:5e: cf:67:4f:df:1c:15:8d:94:87:4d:4a:a4:54:53:1f:3c:e9:af: f7:03:aa:b9:8a:bd:17:22:1f:70:06:45:1f:91:87:63:1b:85: 66:f7:fb:26:5d:ed:e5:df:87:59:92:34:8e:18:7f:f4:2c:10: 4b:c7:0a:ca:95:e4:ba:90:9a:41:42:fa:82:0a:2a:1c:98:f7: 4d:76:1d:a9:7d:f5:be:c3:36:70:58:18:6b:2b:8f:d3:fa:d3: b1:0c:ca:7c:8d:1d:36:4f:1e:95:07:d9:96:09:8c:73:12:20: 84:b0:01:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYwNDE2MjMzOTE0WhcNMjYwNDIzMjMzOTE0WjAYMRYwFAYD VQQDEw02OWUxNzMyMi1iNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nZoCB1Z8pgy3KTaikG4ZcY8WqPhEuqvgey8R3PzEv2KaJENJdTs7Bz0lShA J9Xx46jy9exl0T8IxLOokJZ6xSsgOkY3XxzmLd9gAGCLhkieMHvGA7GPNcEsYDKl dPHxKh4ziBcLMLgyrhXXD323xDBYB0Ig43hsoDdDveMnk6B/j7oIEQ4eh9Bn+kXg vTO7d7hbgn7M1qeZieQXukNZ/dCxdquoTh5PnC32P960veFBLAOnTtOh8TZzI0hf 1oSGFSLzqW81OZFFk5NC16bJrIcW1s0/JZUJPxp+lqZB45mwp10CarXjBnMb4neJ pMyrkPSkc73nHnbj0jQHLkUN1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHA9XOQ USNOTYIwxqMNXF1xzBEuMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUmn5YP7pNwA9uZkp+rW0bEEPkQoWS3iV1djIEiSTF1/gbrfyrWZDj2CyBQq ha7CpJrICSeVmEVnko4sbOt15o0CEqOY7PJO8RqPg6sGxtTTM3AfoyxN8g5Regqa mnjGOiX75BicXi+1Oz36wprcVv9ZufKCVLtB532+cu3eoWzjeqI4FHWnHA2um4WS /cBez2dP3xwVjZSHTUqkVFMfPOmv9wOquYq9FyIfcAZFH5GHYxuFZvf7Jl3t5d+H WZI0jhh/9CwQS8cKypXkupCaQUL6ggoqHJj3TXYdqX31vsM2cFgYayuP0/rTsQzK fI0dNk8elQfZlgmMcxIghLAByg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:08:03 2026 by rpki-client