$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: bH551g1s6A0g22N8dMcE12z0KNsV8CHct2J8XHaPFgE= Subject key identifier: 6B:2C:99:87:40:1E:99:1E:28:92:14:F3:EA:C0:F0:37:4F:14:5D:67 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 01B7 Signing time: Sun 05 Apr 2026 03:25:18 +0000 Manifest this update: Sun 05 Apr 2026 03:25:17 +0000 Manifest next update: Sun 12 Apr 2026 03:25:17 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: VZfBgVoPf/V02/5k92pyYI7RdJixprYR+2OyaTXDk1Y=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: GM/TYAUFUCny0Saz92cbiRCqbmb1aqzepH4OiX/MKnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Apr 5 03:25:17 2026 GMT Not After : Apr 12 03:25:17 2026 GMT Subject: CN=69d1d61e-081d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:74:01:54:e1:4c:8c:f7:2f:9d:04:12:db: a5:e5:d8:f0:3c:3f:5e:54:6d:8b:03:a3:c2:ad:06: 19:43:4b:38:39:a0:98:12:15:db:82:f4:64:18:27: a4:c7:db:a9:5b:f6:ed:21:61:e9:8c:bc:a7:b4:e3: 59:e2:68:62:97:e9:b5:59:c0:e8:90:5f:82:00:03: fe:7b:53:f0:a0:4e:27:c8:b9:e0:d7:6a:fe:a8:5b: 54:c7:18:c7:91:bd:9f:fc:c5:ff:8a:f0:49:a1:d9: 57:32:b0:d7:fa:f6:93:c0:a5:d2:70:c2:58:a0:f7: 28:eb:ca:45:b4:6f:79:fd:ae:53:be:e2:d4:2b:ba: 57:a1:0b:8f:00:7e:8d:ae:4c:96:aa:2f:fb:b4:2b: 03:f3:c8:fb:84:1d:ef:11:a7:f8:1b:35:1b:ac:86: 0d:a3:a3:ec:24:cc:3f:5c:32:10:8c:ec:6f:32:38: 28:5e:3a:64:a4:13:8b:9b:e4:bd:1f:97:63:4d:3c: d6:3f:df:cd:97:fc:87:c2:1e:4f:78:ad:e5:6c:41: fa:99:3b:9d:28:50:72:a1:f3:13:75:84:e4:dd:60: 48:0d:0c:4a:4e:38:97:88:41:40:c4:d7:5c:0c:12: d1:5b:0d:7f:88:c7:18:a3:6d:76:69:73:b7:42:6d: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:99:87:40:1E:99:1E:28:92:14:F3:EA:C0:F0:37:4F:14:5D:67 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:9a:3e:04:45:0d:00:55:70:00:3c:bd:c6:7b:dc:51:63: 88:16:10:b7:2c:d9:2a:4f:17:49:2d:e5:9c:c1:56:02:04:72: 98:5d:f0:77:30:8b:8a:f3:73:a8:4a:f6:ee:7a:4a:16:a3:e9: 33:53:28:04:bf:ce:ff:16:44:87:60:d2:f4:81:97:c2:b4:13: bf:f4:5b:c5:68:a1:11:6b:21:b0:92:2e:fd:09:f3:e2:e3:cb: 31:2c:e2:b4:b1:30:5a:27:ea:9c:33:a6:ea:6e:16:71:e0:8a: f7:0a:f3:68:42:d7:eb:c2:8a:ec:13:b3:37:ab:dd:a3:98:73: 58:5b:6b:51:c1:39:d0:86:81:86:d5:2f:5c:c7:5e:44:0b:39: 67:65:6b:d8:69:fa:50:7d:d9:42:20:89:15:2e:e6:e8:e5:b4: 59:dc:f2:e7:da:0a:fc:59:89:e2:c0:71:0c:ff:99:aa:ed:64: 96:ac:0b:bf:58:9e:f5:61:57:68:76:83:b0:1e:dd:2c:23:d9: 9b:18:b2:59:0a:7b:cd:cf:1d:20:c4:fd:75:33:2c:e7:63:6f: 62:79:d6:07:41:41:f1:76:1e:04:f4:01:a4:94:b1:e3:6a:c0: cf:8e:a6:35:13:48:b6:98:e9:df:0e:d0:8d:87:9c:37:3f:63: 5b:82:4b:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjYwNDA1MDMyNTE3WhcNMjYwNDEyMDMyNTE3WjAYMRYwFAYD VQQDEw02OWQxZDYxZS0wODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdF0AVThTIz3L50EEtul5djwPD9eVG2LA6PCrQYZQ0s4OaCYEhXbgvRkGCek x9upW/btIWHpjLyntONZ4mhil+m1WcDokF+CAAP+e1PwoE4nyLng12r+qFtUxxjH kb2f/MX/ivBJodlXMrDX+vaTwKXScMJYoPco68pFtG95/a5TvuLUK7pXoQuPAH6N rkyWqi/7tCsD88j7hB3vEaf4GzUbrIYNo6PsJMw/XDIQjOxvMjgoXjpkpBOLm+S9 H5djTTzWP9/Nl/yHwh5PeK3lbEH6mTudKFByofMTdYTk3WBIDQxKTjiXiEFAxNdc DBLRWw1/iMcYo212aXO3Qm1RHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGssmYdA HpkeKJIU8+rA8DdPFF1nMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAri+aPgRFDQBVcAA8vcZ73FFjiBYQtyzZKk8XSS3lnMFWAgRymF3wdzCLivNz qEr27npKFqPpM1MoBL/O/xZEh2DS9IGXwrQTv/RbxWihEWshsJIu/Qnz4uPLMSzi tLEwWifqnDOm6m4WceCK9wrzaELX68KK7BOzN6vdo5hzWFtrUcE50IaBhtUvXMde RAs5Z2Vr2Gn6UH3ZQiCJFS7m6OW0Wdzy59oK/FmJ4sBxDP+Zqu1klqwLv1ie9WFX aHaDsB7dLCPZmxiyWQp7zc8dIMT9dTMs52NvYnnWB0FB8XYeBPQBpJSx42rAz46m NRNItpjp3w7QjYecNz9jW4JLlA== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:37 2026 by rpki-client