$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json) Hash identifier: PqoxnSG8dyO/MbVvq8rjnj9Cd1mncYZH859yTkjTOFE= Subject key identifier: 90:34:82:A1:87:AB:EC:F6:8F:F2:46:75:28:33:02:85:34:7C:AD:5E Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft Manifest number: 0458 Signing time: Sat 04 Apr 2026 23:57:58 +0000 Manifest this update: Sat 04 Apr 2026 23:57:57 +0000 Manifest next update: Sat 11 Apr 2026 23:57:57 +0000 Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: fpgCWrhUaGC59dacy4Te7dZOVG9iyptCr3BKDDh+Kro=) 2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: 24R9bP8FZGrYS8hzQsfu5XaVnVqMRb0ojEdqSMQzy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778D4, serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD Validity Not Before: Apr 4 23:57:57 2026 GMT Not After : Apr 11 23:57:57 2026 GMT Subject: CN=69d1a586-c58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:79:eb:e5:b2:e0:a6:2e:34:4b:9f:01:ed: dc:f2:26:6a:76:9e:dc:1c:d5:0f:1a:63:8c:07:a5: 24:ca:90:83:44:11:76:f7:c2:38:21:08:04:9c:a2: 61:f7:de:ed:ae:04:33:c7:01:b8:8d:f5:40:f0:fb: 2b:34:e4:09:0b:3d:10:58:83:2a:d4:3c:77:01:79: fd:ed:63:9d:2b:95:b4:38:09:26:fe:67:62:38:ad: 73:52:93:2b:eb:f7:e8:7a:5e:89:4c:db:62:bb:df: 0e:7e:90:02:c6:76:71:13:d5:f4:82:53:99:43:63: fd:73:f7:65:9d:8f:a5:53:3a:38:8e:31:94:78:fa: 3a:87:5e:ee:88:90:2c:5a:11:4f:80:2f:e6:e6:08: 71:15:3b:17:2d:fd:31:e7:34:9b:6f:b3:e4:a5:01: 71:59:d4:e2:0b:72:a7:8f:95:ce:1c:a4:25:b7:47: 54:e9:bc:c3:da:ec:e8:9c:26:7c:4e:5e:d1:68:58: 5f:1f:64:80:bf:74:b9:f2:fc:e5:f2:58:6e:77:7a: 81:97:db:d2:88:97:4b:1a:13:24:28:ee:93:d0:94: e1:8c:16:67:54:36:48:d0:cb:f9:80:64:e2:5f:b7: 79:ee:c7:d2:aa:c7:cf:31:3d:18:8f:5a:fb:3e:2f: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:82:A1:87:AB:EC:F6:8F:F2:46:75:28:33:02:85:34:7C:AD:5E X509v3 Authority Key Identifier: keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3f:91:9c:7c:7b:2d:27:31:65:8c:e9:20:4d:0e:a5:c4:c0: 3f:a7:1c:3f:12:7b:39:22:6c:ec:c2:d8:21:0c:81:33:e6:0d: d7:89:98:94:76:93:bc:e8:96:64:6b:30:3c:ab:04:44:fc:8f: 63:af:b7:89:1c:64:b0:ba:0e:b2:c2:70:9d:8d:38:c1:63:67: 28:e5:bd:db:c1:4b:9d:c2:1e:fc:43:c3:04:14:5a:a7:0f:9a: 15:4a:f9:34:42:e0:92:20:48:c2:fb:04:fa:33:99:05:3c:7f: 80:ff:6f:24:6b:f8:6e:ef:f6:b3:93:a3:0b:d5:9c:8d:33:de: f6:9f:48:9a:f0:ee:87:bf:20:b5:1f:68:7f:f5:6f:99:fa:e6: 57:ae:72:ed:f9:6e:87:69:a4:fa:35:f4:70:57:71:e2:16:04: 94:a8:71:8f:e2:d4:a9:00:38:b9:5c:3d:4f:a7:d5:a3:b3:36: 17:a5:63:26:57:56:b2:f1:b2:c8:bf:5d:0a:f5:8e:7c:43:ea: f7:60:90:eb:80:27:45:33:26:99:e6:f8:b1:98:f2:b9:d1:4b: 3b:7f:aa:81:ac:d6:39:7a:e7:9b:ec:cb:a9:73:57:b7:f6:03: b1:05:9f:42:40:03:30:98:93:d2:8f:6d:a6:64:3e:62:ec:58: 5b:42:ee:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4RDQxMTAvBgNVBAUTKDM4ODdBQ0RERjcxQ0JFRjRBNzUyMUQ4NDUxRUVDQkFF QjI1MTlFRkQwHhcNMjYwNDA0MjM1NzU3WhcNMjYwNDExMjM1NzU3WjAYMRYwFAYD VQQDEw02OWQxYTU4Ni1jNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx156+Wy4KYuNEufAe3c8iZqdp7cHNUPGmOMB6UkypCDRBF298I4IQgEnKJh 997trgQzxwG4jfVA8PsrNOQJCz0QWIMq1Dx3AXn97WOdK5W0OAkm/mdiOK1zUpMr 6/foel6JTNtiu98OfpACxnZxE9X0glOZQ2P9c/dlnY+lUzo4jjGUePo6h17uiJAs WhFPgC/m5ghxFTsXLf0x5zSbb7PkpQFxWdTiC3Knj5XOHKQlt0dU6bzD2uzonCZ8 Tl7RaFhfH2SAv3S58vzl8lhud3qBl9vSiJdLGhMkKO6T0JThjBZnVDZI0Mv5gGTi X7d57sfSqsfPMT0Yj1r7Pi/bHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJA0gqGH q+z2j/JGdSgzAoU0fK1eMB8GA1UdIwQYMBaAFDiHrN33HL70p1IdhFHuy66yUZ79 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhENC9EOUQ1NjkzQTkw NTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2U25VaDJFVWU3THJySlJu djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZXMzZmNjdnZTblVoMkVVZTdMcnJKUm52MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhENC9EOUQ1NjkzQTkwNTExMUVDQTM2OTk2MTVDNEY5QUUwMi9PSWVzM2ZjY3Z2 U25VaDJFVWU3THJySlJudjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXz+RnHx7LScxZYzpIE0OpcTAP6ccPxJ7OSJs7MLYIQyBM+YN14mYlHaTvOiW ZGswPKsERPyPY6+3iRxksLoOssJwnY04wWNnKOW928FLncIe/EPDBBRapw+aFUr5 NELgkiBIwvsE+jOZBTx/gP9vJGv4bu/2s5OjC9WcjTPe9p9ImvDuh78gtR9of/Vv mfrmV65y7fluh2mk+jX0cFdx4hYElKhxj+LUqQA4uVw9T6fVo7M2F6VjJldWsvGy yL9dCvWOfEPq92CQ64AnRTMmmeb4sZjyudFLO3+qgazWOXrnm+zLqXNXt/YDsQWf QkADMJiT0o9tpmQ+YuxYW0Lu5g== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:26 2026 by rpki-client