$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json) Hash identifier: 8Lfjajd7NoX0ZDe4WSp+bCIlYLajxkSjxwFxinvUD28= Subject key identifier: 05:43:28:C5:6B:3B:C6:C4:C6:6E:40:8B:7B:98:23:E0:91:A5:21:AD Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59 Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft Manifest number: 0C Signing time: Sun 05 Apr 2026 08:26:10 +0000 Manifest this update: Sun 05 Apr 2026 08:26:10 +0000 Manifest next update: Sun 12 Apr 2026 08:26:10 +0000 Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: poEnaSNt32ejBnifcJJt+5czJ6pfWIcgpSSdO8ikBAc=) 2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59 Validity Not Before: Apr 5 08:26:10 2026 GMT Not After : Apr 12 08:26:10 2026 GMT Subject: CN=69d21ca2-bbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:52:15:4f:c7:4c:a9:c6:07:b4:0d:ac:e3: 50:30:ad:63:af:d4:41:80:ab:b8:1c:37:22:b1:3d: 49:5e:8a:76:39:b4:cb:4a:c9:62:44:f9:26:6a:c7: 8f:b2:87:8a:39:1d:b5:60:6a:57:c1:9f:71:1f:35: 08:e2:84:0c:27:b5:e4:af:33:0f:85:cb:56:95:d2: d1:34:12:d8:12:c5:80:e8:22:77:f9:cb:b6:90:52: 6d:1d:a5:b6:2e:db:9e:81:b0:2b:fa:5f:0a:b0:c6: 0d:a1:a4:e1:6c:d8:92:73:4d:2e:45:bd:f3:b6:d8: 7f:5e:0f:83:62:a7:fd:cd:9d:7e:4e:0c:40:df:98: ac:48:41:de:52:d5:e8:eb:b6:de:fe:4c:78:e3:6f: 9f:ad:99:4e:9a:b1:c9:a9:b9:5e:04:a4:45:3d:ab: 71:c2:88:f7:f5:44:5b:9b:54:75:0b:d7:13:5f:ae: 26:37:97:f4:95:0b:bd:8a:c0:85:dc:f8:57:c7:09: 3c:59:6c:21:6f:38:0d:18:b3:c2:00:5c:5c:d9:1b: 7c:00:db:46:83:5a:cb:bf:26:21:e7:48:fe:7e:01: 86:a0:3f:f0:fc:38:ce:86:39:df:d1:84:09:64:93: d1:a1:8c:f3:e9:08:8b:ac:b4:c8:fa:22:ab:0c:83: 3b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:43:28:C5:6B:3B:C6:C4:C6:6E:40:8B:7B:98:23:E0:91:A5:21:AD X509v3 Authority Key Identifier: keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c8:a9:c0:ea:10:5c:eb:d6:2b:89:27:8e:ae:b6:97:ea:1b: c9:51:ee:d6:b9:78:b1:13:f6:f9:1c:70:8b:dc:c5:8c:42:80: c8:7c:01:12:91:73:35:81:70:64:92:9a:14:24:b3:51:9f:51: 70:ee:d8:08:90:8e:ef:e3:00:1c:21:08:1b:91:c5:5e:81:cb: 78:f4:b4:8c:ed:a1:53:76:d6:ae:e1:27:59:82:db:f8:28:e8: d6:5d:99:4a:e1:f7:66:c9:9d:9e:1d:c3:cb:98:36:28:3b:88: 20:c5:bf:81:52:6f:6b:1a:67:0b:f1:24:d1:9c:88:63:62:fe: 01:39:34:ba:d8:02:68:e8:3c:2f:6d:70:b1:f4:0c:fa:6b:36: c2:10:de:d2:4f:44:86:0b:13:54:ff:53:47:1d:1c:13:6a:31: 41:63:43:5e:d5:eb:ce:05:60:2e:2a:ff:33:43:db:74:eb:4a: 68:da:38:26:03:49:8b:5e:b3:b4:be:7d:f3:70:a9:60:93:dc: 8e:19:5c:89:d5:3a:9b:c8:c0:50:70:59:f6:95:18:0a:db:0d: cd:a1:09:b3:06:9f:77:cb:a4:f8:41:7f:52:74:3d:3d:ae:5f: 11:d8:9f:27:7b:5d:26:7f:b6:e3:5d:0c:bb:fe:46:0d:3d:16: 48:d2:2e:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NURENDExMC8GA1UEBRMoMzlCRkZERTYzRDAyNjIwMkJEQ0FCMDNFODA3NTlBQjYy RUE2REM1OTAeFw0yNjA0MDUwODI2MTBaFw0yNjA0MTIwODI2MTBaMBgxFjAUBgNV BAMTDTY5ZDIxY2EyLWJiZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNqFIVT8dMqcYHtA2s41AwrWOv1EGAq7gcNyKxPUleinY5tMtKyWJE+SZqx4+y h4o5HbVgalfBn3EfNQjihAwnteSvMw+Fy1aV0tE0EtgSxYDoInf5y7aQUm0dpbYu 256BsCv6Xwqwxg2hpOFs2JJzTS5FvfO22H9eD4Nip/3NnX5ODEDfmKxIQd5S1ejr tt7+THjjb5+tmU6ascmpuV4EpEU9q3HCiPf1RFubVHUL1xNfriY3l/SVC72KwIXc +FfHCTxZbCFvOA0Ys8IAXFzZG3wA20aDWsu/JiHnSP5+AYagP/D8OM6GOd/RhAlk k9GhjPPpCIustMj6IqsMgzunAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBUMoxWs7 xsTGbkCLe5gj4JGlIa0wHwYDVR0jBBgwFoAUOb/95j0CYgK9yrA+gHWati6m3Fkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1REQ0LzExOUM0QUZFMjIx NzExRjFCMURGMjEwMDM5M0Q4QzY3L09iXzk1ajBDWWdLOXlyQS1nSFdhdGk2bTNG ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2JfOTVqMENZZ0s5eXJBLWdIV2F0aTZtM0ZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 REQ0LzExOUM0QUZFMjIxNzExRjFCMURGMjEwMDM5M0Q4QzY3L09iXzk1ajBDWWdL OXlyQS1nSFdhdGk2bTNGay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4yKnA6hBc69YriSeOrraX6hvJUe7WuXixE/b5HHCL3MWMQoDIfAESkXM1gXBk kpoUJLNRn1Fw7tgIkI7v4wAcIQgbkcVegct49LSM7aFTdtau4SdZgtv4KOjWXZlK 4fdmyZ2eHcPLmDYoO4ggxb+BUm9rGmcL8STRnIhjYv4BOTS62AJo6DwvbXCx9Az6 azbCEN7ST0SGCxNU/1NHHRwTajFBY0Ne1evOBWAuKv8zQ9t060po2jgmA0mLXrO0 vn3zcKlgk9yOGVyJ1TqbyMBQcFn2lRgK2w3NoQmzBp93y6T4QX9SdD09rl8R2J8n e10mf7bjXQy7/kYNPRZI0i5Q -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:49 2026 by rpki-client