$ rpki-client -vvf rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft File: OhNw-SlQCbrO8HHvmlT91w_RV1o.mft (raw, json) Hash identifier: SwKXtJP01rW39KZNqXoqDKjy5+KOIJ9zl1EIsgyf3lE= Subject key identifier: A6:D3:2E:9D:39:7B:95:6E:F9:0C:8F:79:34:AD:77:BA:1A:83:72:6F Authority key identifier: 3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A Certificate issuer: /CN=A916B889/serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft Manifest number: 09 Signing time: Sun 05 Apr 2026 08:30:24 +0000 Manifest this update: Sun 05 Apr 2026 08:30:23 +0000 Manifest next update: Sun 12 Apr 2026 08:30:23 +0000 Files and hashes: 1: OhNw-SlQCbrO8HHvmlT91w_RV1o.crl (hash: lEXOOGv9K6zM1WBEqND3LtQwmJXCSgROHbLA7V4pvc8=) 2: DD9D275A272A11F1AB1203E5AA833773.roa (hash: anG8mjPCe+gcYm3kp5C5iVeJAFEjW4WqpjQcSNgoVCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B889, serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Validity Not Before: Apr 5 08:30:23 2026 GMT Not After : Apr 12 08:30:23 2026 GMT Subject: CN=69d21da0-e6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:60:42:d0:7c:0d:c6:26:49:de:28:81:f1: 9e:2e:ce:4f:84:43:f2:4e:97:91:6a:ea:ec:01:33: 4f:f5:70:a8:63:c5:ab:0c:05:63:5f:5f:46:ca:b6: 3c:84:c8:7c:e3:80:4c:39:68:51:f9:4d:2e:a0:83: 60:9a:11:18:94:39:1a:80:43:3d:a5:26:aa:83:8e: 48:c4:26:db:ef:97:22:10:af:36:bb:db:f6:ad:bd: 72:0b:66:f2:9e:bb:0f:43:16:f2:5c:21:ca:e0:3a: e0:b8:46:62:14:fd:5c:95:eb:38:a2:38:45:c3:56: 06:6d:5e:fe:3f:b8:a0:08:e2:d5:ff:c9:82:e2:3d: ea:17:6a:27:fc:06:59:f7:9a:d7:f9:8b:67:a6:e0: 23:4c:41:be:0f:96:73:35:e0:18:75:06:6c:90:ad: 4b:3e:16:c2:72:05:b9:b9:b7:c4:f7:f2:6d:75:f7: 7f:35:e8:77:66:ff:a8:7f:ec:b9:81:5e:6f:84:b1: b3:db:04:a7:fc:5f:ca:b9:61:2e:8d:19:33:34:a4: d6:a9:cf:a9:fe:85:b6:28:aa:43:e9:0d:ce:7c:c5: 11:45:dd:b7:40:6a:2b:bb:a1:e8:16:57:1d:41:78: 49:76:0e:bb:54:59:07:1b:6f:54:98:26:ca:57:c1: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D3:2E:9D:39:7B:95:6E:F9:0C:8F:79:34:AD:77:BA:1A:83:72:6F X509v3 Authority Key Identifier: keyid:3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cb:6c:bb:f6:3b:d3:9b:d9:2c:07:e6:07:6f:89:34:2b:35: 1c:fb:d3:ca:08:ff:4c:b8:e6:5f:1a:3d:1d:06:a9:43:d2:c0: 58:86:50:a2:c5:a6:b3:34:48:73:66:19:5d:72:51:6c:81:f5: 50:04:f2:69:66:ac:f3:ca:69:fa:28:5b:75:13:94:8e:6c:dc: 5f:38:7f:4f:b1:f4:11:51:9a:c9:f5:4c:f6:72:1a:d3:0d:f8: d2:1f:5a:3e:d3:3a:b5:96:0b:c4:51:7e:56:f6:97:a8:af:9d: 1c:9f:eb:2b:a7:84:16:aa:d6:5e:22:a0:ab:0e:06:fd:b1:53: 3f:e6:47:0c:d1:a1:30:81:52:e7:26:17:54:ae:13:9c:45:c6: 80:ec:50:bc:c8:bb:e9:70:e5:a8:a7:05:51:6d:5f:ee:6f:31: d2:65:ce:c7:83:aa:4f:80:f6:aa:00:6a:34:31:4d:55:2c:02: 4a:94:03:b8:30:c9:5a:be:3f:89:ff:1b:9b:fe:5b:42:50:2b: 16:dc:f5:45:04:0a:69:53:d5:6d:93:4c:69:f8:9e:fb:0b:b0: 64:c3:66:59:5a:bc:b6:23:eb:99:4b:e7:90:5f:c5:01:79:90: df:58:0a:aa:d6:79:e4:31:e0:88:fd:a6:1f:cf:b2:a8:40:df: 6d:f4:d1:82 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjg4OTExMC8GA1UEBRMoM0ExMzcwRjkyOTUwMDlCQUNFRjA3MUVGOUE1NEZERDcw RkQxNTc1QTAeFw0yNjA0MDUwODMwMjNaFw0yNjA0MTIwODMwMjNaMBgxFjAUBgNV BAMTDTY5ZDIxZGEwLWU2YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC40mBC0HwNxiZJ3iiB8Z4uzk+EQ/JOl5Fq6uwBM0/1cKhjxasMBWNfX0bKtjyE yHzjgEw5aFH5TS6gg2CaERiUORqAQz2lJqqDjkjEJtvvlyIQrza72/atvXILZvKe uw9DFvJcIcrgOuC4RmIU/VyV6ziiOEXDVgZtXv4/uKAI4tX/yYLiPeoXaif8Bln3 mtf5i2em4CNMQb4PlnM14Bh1BmyQrUs+FsJyBbm5t8T38m1193816Hdm/6h/7LmB Xm+EsbPbBKf8X8q5YS6NGTM0pNapz6n+hbYoqkPpDc58xRFF3bdAaiu7oegWVx1B eEl2DrtUWQcbb1SYJspXwfrbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUptMunTl7 lW75DI95NK13uhqDcm8wHwYDVR0jBBgwFoAUOhNw+SlQCbrO8HHvmlT91w/RV1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODg5LzlBQjA3QTNBMjcy NzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2JyTzhISHZtbFQ5MXdfUlYx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hOdy1TbFFDYnJPOEhIdm1sVDkxd19SVjFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC ODg5LzlBQjA3QTNBMjcyNzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2Jy TzhISHZtbFQ5MXdfUlYxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4y2y79jvTm9ksB+YHb4k0KzUc+9PKCP9MuOZfGj0dBqlD0sBYhlCixaazNEhz ZhldclFsgfVQBPJpZqzzymn6KFt1E5SObNxfOH9PsfQRUZrJ9Uz2chrTDfjSH1o+ 0zq1lgvEUX5W9peor50cn+srp4QWqtZeIqCrDgb9sVM/5kcM0aEwgVLnJhdUrhOc RcaA7FC8yLvpcOWopwVRbV/ubzHSZc7Hg6pPgPaqAGo0MU1VLAJKlAO4MMlavj+J /xub/ltCUCsW3PVFBAppU9Vtk0xp+J77C7Bkw2ZZWry2I+uZS+eQX8UBeZDfWAqq 1nnkMeCI/aYfz7KoQN9t9NGC -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:19 2026 by rpki-client