$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: dBD4LMEBF6ttgjQuoBOkk6NlkL+PoaADYSAQnsivYBY= Subject key identifier: 1C:E1:0E:57:84:94:C4:8B:C0:3A:5A:29:24:27:B4:70:82:64:29:84 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 025D Signing time: Sun 05 Apr 2026 01:46:56 +0000 Manifest this update: Sun 05 Apr 2026 01:46:55 +0000 Manifest next update: Sun 12 Apr 2026 01:46:55 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: En2/pltOUPCpAvgoYXjt3oXDZoe2TdmtEiQ1Pb6p9jg=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: +vVLk4sB4I8wB31GUWlvFKxjQFLdu3FFGENTE3piOYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Apr 5 01:46:55 2026 GMT Not After : Apr 12 01:46:55 2026 GMT Subject: CN=69d1bf10-2960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:3f:0f:f8:c0:30:e8:f2:84:e7:85:bd:8c: 90:b7:d1:69:a5:6d:7c:34:2a:c0:ec:65:19:e0:9e: 96:26:03:85:13:ed:49:dd:63:41:b8:96:8d:7c:33: 44:09:1e:ab:43:28:63:29:a5:d3:91:be:35:39:64: 2f:a0:15:b7:26:78:50:6f:a4:15:ef:75:97:aa:44: cf:e4:dc:08:36:d3:e6:04:0b:5f:25:d3:6f:fc:96: b6:55:07:a5:31:f3:3f:6d:56:46:2d:6a:08:59:73: 13:bd:d5:f1:f1:4f:d2:1b:60:e8:43:4d:21:36:7d: 71:93:8f:1b:37:8f:0e:97:c7:27:ec:7b:0b:f2:0d: 2d:aa:58:5b:3b:07:69:2f:8e:b6:a2:f8:07:84:1b: 82:b2:91:17:fc:d0:66:fe:59:17:ea:58:ad:e9:0b: e6:dd:41:2d:26:ad:f1:c5:d4:9e:10:19:fa:19:1f: 01:6b:78:69:7f:86:94:25:d4:33:ba:b1:ef:57:c4: bb:b3:64:56:15:a0:94:d8:11:34:4d:8d:ec:e2:cc: 2e:72:64:2a:76:9c:6e:b0:14:7a:e3:e2:8c:0d:91: 75:f5:f5:58:56:fe:ec:cf:50:7c:3e:a0:5c:27:92: ad:c2:de:32:09:3c:fb:24:79:d5:c7:d4:a3:7e:66: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:0E:57:84:94:C4:8B:C0:3A:5A:29:24:27:B4:70:82:64:29:84 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:34:01:e9:0d:b8:d1:a9:df:d3:86:fc:6a:6b:96:14:2b: 1d:94:5a:f9:2d:a7:57:90:5f:d6:e9:e1:7e:1a:97:44:94:00: 9b:02:61:cc:b3:46:a2:d4:ee:da:06:b5:29:25:13:45:80:06: 6c:ec:10:3c:5f:39:17:46:29:73:7d:28:24:0d:58:a5:79:b6: a5:18:fa:5f:8b:85:df:fc:4e:c7:53:c2:3c:c6:df:89:fe:39: ee:c7:93:de:ba:da:ae:ed:fb:15:a0:ab:19:fe:ca:70:ed:31: 3d:cf:d2:26:99:26:cd:6d:1b:ca:e5:1c:ea:78:46:ab:ca:d0: 09:06:0d:c5:25:d7:94:11:26:2c:cc:42:95:f2:cb:f1:a8:42: 2d:72:4c:7c:62:7f:33:d8:9c:fc:e4:be:34:86:35:0e:c6:3d: a4:13:b5:a0:b2:6f:3d:9b:1a:93:a0:b9:b2:69:b9:af:f2:ef: 29:20:cc:23:1c:09:7a:10:da:c7:bd:13:8e:65:8e:26:89:52: fa:31:48:c8:d0:33:e5:de:b9:a0:88:4a:5d:c5:28:61:f6:32: e7:18:9b:6b:98:82:95:38:b5:cf:77:bb:62:b8:41:01:2f:c2: 75:ab:36:15:14:be:34:42:3f:9c:be:d5:ff:9d:b8:dd:ed:a0: c6:ac:da:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwNDA1MDE0NjU1WhcNMjYwNDEyMDE0NjU1WjAYMRYwFAYD VQQDEw02OWQxYmYxMC0yOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hs/D/jAMOjyhOeFvYyQt9FppW18NCrA7GUZ4J6WJgOFE+1J3WNBuJaNfDNE CR6rQyhjKaXTkb41OWQvoBW3JnhQb6QV73WXqkTP5NwINtPmBAtfJdNv/Ja2VQel MfM/bVZGLWoIWXMTvdXx8U/SG2DoQ00hNn1xk48bN48Ol8cn7HsL8g0tqlhbOwdp L462ovgHhBuCspEX/NBm/lkX6lit6Qvm3UEtJq3xxdSeEBn6GR8Ba3hpf4aUJdQz urHvV8S7s2RWFaCU2BE0TY3s4swucmQqdpxusBR64+KMDZF19fVYVv7sz1B8PqBc J5Ktwt4yCTz7JHnVx9SjfmZhhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzhDleE lMSLwDpaKSQntHCCZCmEMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXNY0AekNuNGp39OG/GprlhQrHZRa+S2nV5Bf1unhfhqXRJQAmwJhzLNGotTu 2ga1KSUTRYAGbOwQPF85F0Ypc30oJA1YpXm2pRj6X4uF3/xOx1PCPMbfif457seT 3rraru37FaCrGf7KcO0xPc/SJpkmzW0byuUc6nhGq8rQCQYNxSXXlBEmLMxClfLL 8ahCLXJMfGJ/M9ic/OS+NIY1DsY9pBO1oLJvPZsak6C5smm5r/LvKSDMIxwJehDa x70TjmWOJolS+jFIyNAz5d65oIhKXcUoYfYy5xiba5iClTi1z3e7YrhBAS/Cdas2 FRS+NEI/nL7V/5243e2gxqza6Q== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:39 2026 by rpki-client