$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json) Hash identifier: 0lHKRp3zsPlk/SC04+IDHbb1ModoySwF/1xyj5K2whs= Subject key identifier: EA:2A:C3:EB:B5:C0:F9:3D:C1:53:98:22:4E:5C:D2:07:4C:5B:0F:EE Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Certificate serial: 06D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft Manifest number: 06D0 Signing time: Sat 04 Apr 2026 22:03:46 +0000 Manifest this update: Sat 04 Apr 2026 22:03:45 +0000 Manifest next update: Sat 11 Apr 2026 22:03:45 +0000 Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: mO7hlO90M+C790ViHB909UKn9WiTNrVjo4tc8Faqdbc=) 2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: WVWNzExGWbC/850iQ3V7WKxm3eZchCkhjUcLXVIVAMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C Validity Not Before: Apr 4 22:03:45 2026 GMT Not After : Apr 11 22:03:45 2026 GMT Subject: CN=69d18ac2-1e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:89:d3:a0:61:8d:d1:21:d4:90:48:d8:0f: 0e:e4:db:14:1c:92:9f:68:6a:49:11:60:64:2b:dd: c8:b4:06:03:48:43:05:9a:ef:20:fd:b2:41:0d:3f: d2:55:1c:19:e3:c0:6f:74:0a:f7:af:87:c8:f2:f8: 32:e5:27:77:db:8c:3e:53:0d:be:13:ce:4f:ed:f2: 82:9e:c6:d9:3e:7f:bd:7b:92:a2:02:7c:5d:26:0a: 41:74:d9:31:73:92:5d:19:0e:9e:1a:6b:45:64:2c: 80:16:a6:27:3d:10:15:0a:93:b9:3c:ce:be:1f:5d: b7:89:a9:d0:df:f5:8f:14:ba:37:e6:d2:66:6b:91: ba:dd:27:d4:74:db:5d:d3:d5:39:97:33:95:2b:56: ba:5d:53:2c:70:cc:7b:73:c1:48:b1:d5:15:67:e1: 0a:d7:25:bd:2f:25:72:f2:04:37:69:50:da:23:17: e1:af:8f:4e:73:cf:a3:f5:de:c5:e8:4f:15:ff:10: 3d:c3:63:59:87:62:b1:f9:9c:87:a3:88:a2:6d:0a: 2e:37:31:bb:98:d3:51:6a:ad:a7:a5:2b:cc:10:17: b6:7e:28:71:f8:38:be:ba:09:db:53:47:be:71:80: 07:71:15:19:92:68:04:6d:fd:6c:4d:18:5f:b7:7b: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:C3:EB:B5:C0:F9:3D:C1:53:98:22:4E:5C:D2:07:4C:5B:0F:EE X509v3 Authority Key Identifier: keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:03:07:00:82:04:27:fb:13:03:bb:42:4a:32:69:cb:98:b7: 6d:90:12:2e:d7:15:3b:66:aa:5e:78:f6:bd:71:52:c5:c8:e7: 1c:49:c3:21:d4:2c:34:b5:67:f2:30:43:65:fe:60:22:fd:29: 8a:7f:c3:11:41:0e:b6:b7:2b:3c:32:a9:fd:93:bd:aa:0c:9c: 19:ff:a8:21:23:cf:59:66:15:4f:b2:f8:eb:59:ab:74:2d:b5: 2e:2d:14:3d:b6:01:01:32:fd:55:31:93:25:42:f4:4f:fc:a9: be:e4:5f:52:02:0b:76:c0:2a:7c:2f:53:dd:82:8f:b3:c9:24: de:0b:42:1d:e3:bb:ec:75:db:b2:9c:2e:a9:88:f0:c2:45:7c: 76:01:6a:f6:4a:0e:28:0c:1c:df:72:67:c5:a3:84:91:d2:3a: f4:40:55:47:ec:30:19:69:69:55:b7:4d:21:c0:63:9b:61:ea: 35:8f:4f:cf:18:71:b2:d6:19:e1:7d:f3:48:70:8d:22:3a:11: e2:f3:55:b5:20:20:db:a8:d7:ff:b1:8a:eb:36:21:c1:8a:d3: f7:5a:b5:92:31:e6:e7:17:79:58:91:e8:00:47:66:9e:3a:04: d2:fa:be:3f:76:e5:ec:b4:45:5d:e2:4e:75:47:d0:3b:d3:30: 4c:5d:82:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE RkRFNThGOEMwHhcNMjYwNDA0MjIwMzQ1WhcNMjYwNDExMjIwMzQ1WjAYMRYwFAYD VQQDEw02OWQxOGFjMi0xZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrKJ06BhjdEh1JBI2A8O5NsUHJKfaGpJEWBkK93ItAYDSEMFmu8g/bJBDT/S VRwZ48BvdAr3r4fI8vgy5Sd324w+Uw2+E85P7fKCnsbZPn+9e5KiAnxdJgpBdNkx c5JdGQ6eGmtFZCyAFqYnPRAVCpO5PM6+H123ianQ3/WPFLo35tJma5G63SfUdNtd 09U5lzOVK1a6XVMscMx7c8FIsdUVZ+EK1yW9LyVy8gQ3aVDaIxfhr49Oc8+j9d7F 6E8V/xA9w2NZh2Kx+ZyHo4iibQouNzG7mNNRaq2npSvMEBe2fihx+Di+ugnbU0e+ cYAHcRUZkmgEbf1sTRhft3sbPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoqw+u1 wPk9wVOYIk5c0gdMWw/uMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4 NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANQMHAIIEJ/sTA7tCSjJpy5i3bZASLtcVO2aqXnj2vXFSxcjnHEnDIdQsNLVn 8jBDZf5gIv0pin/DEUEOtrcrPDKp/ZO9qgycGf+oISPPWWYVT7L461mrdC21Li0U PbYBATL9VTGTJUL0T/ypvuRfUgILdsAqfC9T3YKPs8kk3gtCHeO77HXbspwuqYjw wkV8dgFq9koOKAwc33JnxaOEkdI69EBVR+wwGWlpVbdNIcBjm2HqNY9PzxhxstYZ 4X3zSHCNIjoR4vNVtSAg26jX/7GK6zYhwYrT91q1kjHm5xd5WJHoAEdmnjoE0vq+ P3bl7LRFXeJOdUfQO9MwTF2CeQ== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:37 2026 by rpki-client