$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: nSTsngUcpTQKuW1FWQe83ViqSg8Fy2RAES8AEL4KuLE= Subject key identifier: 4D:E8:92:48:5F:94:21:BE:7F:BA:70:B5:4C:C0:84:A2:89:F9:37:52 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 02D3 Signing time: Sun 05 Apr 2026 01:10:24 +0000 Manifest this update: Sun 05 Apr 2026 01:10:24 +0000 Manifest next update: Sun 12 Apr 2026 01:10:24 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: l0VUkC2n7YebNyZCOGzVZ/aAx4e8Iz/kpq60PfGOQSc=) 2: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=) 3: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=) 4: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=) 5: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=) 6: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=) 7: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=) 8: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Apr 5 01:10:24 2026 GMT Not After : Apr 12 01:10:24 2026 GMT Subject: CN=69d1b680-690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:0e:21:cc:83:a1:6d:ef:72:29:fb:2e:8c: b5:eb:60:a8:31:05:c8:de:3f:d4:74:ed:8d:c3:78: 12:42:08:34:36:64:16:6b:a8:c6:13:93:6a:e5:40: b1:89:73:1c:0f:a8:fa:a0:4f:1e:ca:71:4a:7a:27: 13:cc:5d:8a:9e:c2:87:70:e8:fc:3f:5f:f4:95:38: 64:64:fa:8b:79:52:de:54:4f:2b:48:62:d5:4f:05: 37:ea:5f:4b:bf:f6:02:2a:92:dd:df:b0:3b:fa:41: 77:7b:bc:32:4d:fe:85:56:3a:f2:5c:67:1f:35:00: e9:a7:4f:d8:1a:1b:c4:50:62:b2:0e:83:3f:58:56: f3:6d:31:9e:7c:7c:80:d3:68:a7:59:c9:f5:93:2e: 75:63:8e:a6:2e:f7:bb:db:63:46:bc:29:75:4b:8c: 49:8e:13:9f:1d:e6:70:14:34:69:02:27:b7:29:ec: 6d:36:93:d9:3d:56:13:5e:8f:87:2d:05:2a:6f:f3: 4a:61:6a:a3:a0:45:45:91:bf:9a:a5:a0:30:e2:86: 83:90:19:3e:41:a0:ab:16:47:4d:82:f4:d2:49:0a: e1:04:84:9f:c4:10:95:96:58:8b:7d:b2:bd:1b:33: 40:2c:bf:0d:3f:d3:e3:7e:b5:93:b3:cd:79:95:a0: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E8:92:48:5F:94:21:BE:7F:BA:70:B5:4C:C0:84:A2:89:F9:37:52 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3e:d3:e4:a6:a8:74:23:98:a8:8e:5b:95:e0:76:8e:91:57: b8:03:ae:4f:94:4c:0f:fb:bd:f8:6c:ff:33:43:9a:13:90:81: ad:e7:52:83:48:f5:45:2c:27:15:9b:ec:36:fd:25:fb:34:55: e5:e8:dc:97:6d:1a:57:eb:9c:bd:bb:aa:95:f7:8c:a5:6e:2b: 80:d3:ef:8d:26:2e:b4:6e:72:f6:70:c2:4b:7d:d3:36:47:2e: c2:16:97:7a:24:fd:3e:21:64:d5:9e:8e:f6:70:68:ae:42:a5: 76:a2:1c:1e:fe:f3:ec:47:21:3d:05:73:5e:e1:9e:55:33:68: ce:8b:d0:35:0d:ef:68:a6:59:e5:36:37:c9:7b:63:95:24:64: 61:e0:b0:73:69:21:30:ce:5d:5d:f4:67:86:80:16:7d:43:04: 88:3e:9f:d6:db:32:4e:55:f9:bc:3e:68:01:68:d6:22:f9:49: 23:d6:0b:46:3d:7b:cb:26:56:00:07:6c:8c:b6:37:98:0c:14: 49:b2:42:be:b9:8b:43:9e:de:20:a6:d8:4a:48:6d:c2:7d:81: 19:2d:eb:6f:4a:07:f8:77:30:3c:2b:2b:2c:2b:bd:4c:cc:96: cc:6e:21:5e:1d:ee:7c:3a:47:24:0a:6b:50:12:5c:aa:48:8d: 3a:09:da:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYwNDA1MDExMDI0WhcNMjYwNDEyMDExMDI0WjAYMRYwFAYD VQQDEw02OWQxYjY4MC02OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf0OIcyDoW3vcin7Loy162CoMQXI3j/UdO2Nw3gSQgg0NmQWa6jGE5Nq5UCx iXMcD6j6oE8eynFKeicTzF2KnsKHcOj8P1/0lThkZPqLeVLeVE8rSGLVTwU36l9L v/YCKpLd37A7+kF3e7wyTf6FVjryXGcfNQDpp0/YGhvEUGKyDoM/WFbzbTGefHyA 02inWcn1ky51Y46mLve722NGvCl1S4xJjhOfHeZwFDRpAie3KextNpPZPVYTXo+H LQUqb/NKYWqjoEVFkb+apaAw4oaDkBk+QaCrFkdNgvTSSQrhBISfxBCVlliLfbK9 GzNALL8NP9PjfrWTs815laBvQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3okkhf lCG+f7pwtUzAhKKJ+TdSMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbz7T5KaodCOYqI5bleB2jpFXuAOuT5RMD/u9+Gz/M0OaE5CBredSg0j1RSwn FZvsNv0l+zRV5ejcl20aV+ucvbuqlfeMpW4rgNPvjSYutG5y9nDCS33TNkcuwhaX eiT9PiFk1Z6O9nBorkKldqIcHv7z7EchPQVzXuGeVTNozovQNQ3vaKZZ5TY3yXtj lSRkYeCwc2khMM5dXfRnhoAWfUMEiD6f1tsyTlX5vD5oAWjWIvlJI9YLRj17yyZW AAdsjLY3mAwUSbJCvrmLQ57eIKbYSkhtwn2BGS3rb0oH+HcwPCsrLCu9TMyWzG4h Xh3ufDpHJAprUBJcqkiNOgna5w== -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:58 2026 by rpki-client