$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: 4nG1gD1tupAXCI/kn2AqLuArQHzGDWiemv3YmjKoP3s= Subject key identifier: B5:73:28:98:28:AC:5C:ED:00:41:50:55:C0:9F:A5:7F:B9:8E:79:65 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1DD5 Signing time: Sat 04 Apr 2026 16:01:33 +0000 Manifest this update: Sat 04 Apr 2026 16:01:33 +0000 Manifest next update: Sat 11 Apr 2026 16:01:33 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: fN/ZMOQhc0DJi3b2aBdIUkKkFjkd5wQ6L8evCFjgzg0=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: x37ecenCy3jbXj6Gv2z3koAXtHNV/RyDae1qY9A2y4M=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: k6CtfEJwOIjqwI8wE1ffbbr6dcu91HX2CafEBgOBGsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7654 (0x1de6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Apr 4 16:01:33 2026 GMT Not After : Apr 11 16:01:33 2026 GMT Subject: CN=69d135dd-0d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:f0:29:1f:f0:47:bd:31:02:e1:ab:13:af: f7:07:9b:e9:ce:b9:d6:ec:f3:26:7a:87:af:b0:93: 39:90:e7:a7:d4:af:75:3a:fc:a0:95:ee:b7:24:a4: 01:39:b6:fd:8b:34:f9:eb:86:7a:f1:2f:8f:9a:39: 9c:2b:ca:da:65:ad:15:b3:0f:2f:c1:2c:df:3c:17: c4:2e:7d:c9:6b:4a:23:63:a5:c2:50:a2:a9:16:ef: 55:e7:44:ec:54:73:45:8a:7a:b4:51:1a:3a:4e:11: 78:15:a2:0c:5a:24:c5:24:b1:27:28:88:2d:60:19: b9:fd:fb:c4:94:35:1f:9b:b1:8c:e5:1c:0f:7f:f3: 22:8f:33:f0:08:4d:6d:84:c7:da:79:5a:78:d9:90: 62:ba:98:2d:f5:fc:fe:7e:a5:81:13:ab:27:5d:73: 73:d9:36:c9:6e:d8:cb:1c:42:27:a8:e8:c0:91:0f: 25:0d:dd:98:77:a3:89:26:c1:cf:fc:7d:92:a8:df: 99:6c:e3:62:4d:67:7a:7b:d5:71:97:0f:fe:ff:85: 22:da:82:31:df:73:10:c9:62:ab:b8:05:de:66:e3: 9c:d8:f9:e9:fe:e0:07:7f:38:62:8e:01:72:9c:99: 21:1d:c3:7b:65:9a:ad:01:4c:9e:11:1e:54:7d:d3: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:28:98:28:AC:5C:ED:00:41:50:55:C0:9F:A5:7F:B9:8E:79:65 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c0:d2:e9:f3:19:bc:16:59:22:e9:d5:25:96:3c:85:16:24: c6:2f:b4:91:88:89:df:62:26:eb:17:65:c2:1b:44:85:7a:b8: 15:45:64:a9:b7:c8:44:58:59:64:62:d6:65:d7:a6:38:e1:21: 6b:d9:06:38:7a:96:1c:b6:ff:70:1e:28:13:f2:73:91:7f:3c: af:76:23:fa:c6:14:4f:1e:38:98:1e:96:c7:ed:12:2b:44:22: fc:38:1e:5c:93:d4:35:7d:30:58:a3:41:24:7d:bf:fe:b8:c7: db:d3:6b:61:27:74:1d:04:45:f7:cd:8b:ac:af:ac:91:43:2e: c5:16:99:93:f9:e5:2b:6c:0b:d7:b2:ef:3a:56:42:11:00:4a: cc:8e:77:a6:75:e0:ba:96:9a:a3:9f:99:82:c7:8b:7f:2a:38: e4:03:c2:7e:e8:d2:a6:76:a3:30:bb:b5:65:4b:93:79:a7:0d: d4:c8:00:f8:0b:4c:ab:24:95:93:96:88:95:29:60:65:62:90: 18:cd:fc:4c:2a:c1:26:f4:31:09:b9:f6:23:e5:27:61:9f:b3: 5c:4c:12:f5:ea:89:d6:ff:e3:bb:21:98:96:55:13:e0:e3:8f: 79:6a:11:c1:be:05:d7:1a:57:a3:28:40:63:0b:8d:0a:d4:92: ca:b7:a3:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwNDA0MTYwMTMzWhcNMjYwNDExMTYwMTMzWjAYMRYwFAYD VQQDEw02OWQxMzVkZC0wZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqnwKR/wR70xAuGrE6/3B5vpzrnW7PMmeoevsJM5kOen1K91Ovygle63JKQB Obb9izT564Z68S+PmjmcK8raZa0Vsw8vwSzfPBfELn3Ja0ojY6XCUKKpFu9V50Ts VHNFinq0URo6ThF4FaIMWiTFJLEnKIgtYBm5/fvElDUfm7GM5RwPf/MijzPwCE1t hMfaeVp42ZBiupgt9fz+fqWBE6snXXNz2TbJbtjLHEInqOjAkQ8lDd2Yd6OJJsHP /H2SqN+ZbONiTWd6e9Vxlw/+/4Ui2oIx33MQyWKruAXeZuOc2Pnp/uAHfzhijgFy nJkhHcN7ZZqtAUyeER5UfdPs3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVzKJgo rFztAEFQVcCfpX+5jnllMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARMDS6fMZvBZZIunVJZY8hRYkxi+0kYiJ32Im6xdlwhtEhXq4FUVkqbfIRFhZ ZGLWZdemOOEha9kGOHqWHLb/cB4oE/JzkX88r3Yj+sYUTx44mB6Wx+0SK0Qi/Dge XJPUNX0wWKNBJH2//rjH29NrYSd0HQRF982LrK+skUMuxRaZk/nlK2wL17LvOlZC EQBKzI53pnXgupaao5+ZgseLfyo45APCfujSpnajMLu1ZUuTeacN1MgA+AtMqySV k5aIlSlgZWKQGM38TCrBJvQxCbn2I+UnYZ+zXEwS9eqJ1v/juyGYllUT4OOPeWoR wb4F1xpXoyhAYwuNCtSSyrejcA== -----END CERTIFICATE-----Generated at Sun Apr 5 22:25:24 2026 by rpki-client