$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: nmD8MiuloxtjdMWNznDG703eU4+FzdfEwfus7asYEwA= Subject key identifier: 0A:8E:C7:DC:82:6F:B2:44:79:E8:7E:EA:B1:FB:AC:E3:44:7E:B9:F8 Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 3548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 353B Signing time: Sat 04 Apr 2026 14:31:41 +0000 Manifest this update: Sat 04 Apr 2026 14:31:41 +0000 Manifest next update: Sat 11 Apr 2026 14:31:41 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: 4mWxlJ8nLvzuw2ComQdUta52VTaAv+VssVcqicRGKxI=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: onsBo5Bz4rkJbVswoyhTU6gtfIuIlfG0ZfPWcTezyxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13640 (0x3548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Apr 4 14:31:41 2026 GMT Not After : Apr 11 14:31:41 2026 GMT Subject: CN=69d120cd-1c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:52:36:67:bf:37:d4:4a:6c:7b:c8:06:8f: 28:07:35:d9:8c:cd:b6:d4:74:f0:21:b5:f6:b7:87: 42:87:99:36:00:58:59:86:85:34:9d:96:c9:0f:d9: 29:60:eb:04:ed:2f:60:c2:4c:26:8b:13:b4:ba:41: 8d:62:af:0d:63:65:aa:d9:90:7b:62:0c:fd:4e:ac: 8a:57:2b:21:da:79:24:e6:51:a7:a3:75:d6:76:ff: 94:53:77:ce:77:3a:cf:8e:64:2d:fe:d7:81:92:cb: d2:0c:e4:df:4d:6c:f0:c8:90:44:7f:d6:82:94:94: ff:67:83:f2:fc:93:71:a8:c6:61:1d:ca:ee:54:9a: f7:87:b1:85:1b:9e:56:49:37:27:5e:9a:fc:8b:90: 6c:8d:1e:9e:a3:2d:0e:6b:2f:5f:1d:b0:fb:af:04: 6b:0f:10:0e:7e:4d:26:5b:f6:8b:53:5f:74:26:ce: 18:5a:0c:6e:ec:ef:20:04:7e:14:a3:73:9e:08:d9: 70:58:6d:36:eb:c5:5d:ce:b1:83:04:1f:e9:23:82: 83:6b:c1:3e:b5:f4:d0:ed:d6:71:6f:d8:d9:90:50: 58:80:75:99:b7:8c:32:11:a6:bd:8e:9f:82:6f:35: 06:fc:ed:2e:28:3f:bf:49:16:d2:82:c6:3c:57:9d: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:C7:DC:82:6F:B2:44:79:E8:7E:EA:B1:FB:AC:E3:44:7E:B9:F8 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d4:9d:96:7d:90:b2:a1:e7:e2:ae:0d:a1:46:e4:b9:51:2e: 5c:a8:b7:5f:f6:40:96:b2:91:cb:09:58:0c:86:2e:fe:ea:d4: 0c:28:17:40:cd:11:fc:95:53:78:0a:32:b1:76:57:61:1e:97: 0f:88:27:be:a0:78:93:94:95:4e:c5:13:d7:62:a3:41:29:17: 87:d1:ac:42:22:80:f8:50:6e:d7:fd:d0:c2:c8:a9:53:e8:8a: f8:e0:79:4c:08:ba:1c:03:7b:5a:fb:39:9a:b9:74:83:80:ef: 19:5e:21:78:7e:60:55:d8:fe:28:f1:e7:b9:f6:cb:41:bd:a7: 2b:10:ec:cd:7e:fc:15:d6:d4:c6:75:46:e9:12:ef:98:a5:b8: b8:a1:e7:71:e9:99:23:ee:cf:4b:b8:97:5b:6b:cd:96:7b:ed: 9e:05:b5:c6:80:55:43:e8:ce:6d:83:67:fa:f5:d6:73:6a:64: 5c:22:fb:53:42:9e:42:2c:98:52:c0:d3:1f:10:b7:0b:ba:4b: 83:92:cc:42:bc:27:99:08:12:73:f1:71:a9:d9:05:15:20:f4: 33:8a:0c:41:68:32:48:b6:f0:fd:d0:1f:aa:65:f4:8a:c6:e1: a0:1c:a4:4e:e4:6f:11:ce:69:4e:83:db:0a:20:c7:5a:ea:01: 01:f7:6d:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjYwNDA0MTQzMTQxWhcNMjYwNDExMTQzMTQxWjAYMRYwFAYD VQQDEw02OWQxMjBjZC0xYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dNSNme/N9RKbHvIBo8oBzXZjM221HTwIbX2t4dCh5k2AFhZhoU0nZbJD9kp YOsE7S9gwkwmixO0ukGNYq8NY2Wq2ZB7Ygz9TqyKVysh2nkk5lGno3XWdv+UU3fO dzrPjmQt/teBksvSDOTfTWzwyJBEf9aClJT/Z4Py/JNxqMZhHcruVJr3h7GFG55W STcnXpr8i5BsjR6eoy0Oay9fHbD7rwRrDxAOfk0mW/aLU190Js4YWgxu7O8gBH4U o3OeCNlwWG0268VdzrGDBB/pI4KDa8E+tfTQ7dZxb9jZkFBYgHWZt4wyEaa9jp+C bzUG/O0uKD+/SRbSgsY8V50ZkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqOx9yC b7JEeeh+6rH7rONEfrn4MB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAztSdln2QsqHn4q4NoUbkuVEuXKi3X/ZAlrKRywlYDIYu/urUDCgXQM0R/JVT eAoysXZXYR6XD4gnvqB4k5SVTsUT12KjQSkXh9GsQiKA+FBu1/3QwsipU+iK+OB5 TAi6HAN7Wvs5mrl0g4DvGV4heH5gVdj+KPHnufbLQb2nKxDszX78FdbUxnVG6RLv mKW4uKHncemZI+7PS7iXW2vNlnvtngW1xoBVQ+jObYNn+vXWc2pkXCL7U0KeQiyY UsDTHxC3C7pLg5LMQrwnmQgSc/FxqdkFFSD0M4oMQWgySLbw/dAfqmX0isbhoByk TuRvEc5pToPbCiDHWuoBAfdtnw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:42 2026 by rpki-client