$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: 0h9UDMKZEAPGhVGXSz2dHTH/gN+H8sKBe/IKwT82tMc= Subject key identifier: CE:50:A8:A3:4E:24:E7:9C:AB:EE:C0:9D:5D:8C:22:83:EA:6F:D4:AD Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 262D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 261E Signing time: Sat 04 Apr 2026 15:39:38 +0000 Manifest this update: Sat 04 Apr 2026 15:39:38 +0000 Manifest next update: Sat 11 Apr 2026 15:39:38 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: /Tlur7c3aeiL4BXI3+mOdOLJfYjG7wkF5RPzXWsKrXs=) 2: 86D7036A0E1011F1BB4320E6093D8C67.roa (hash: T9SIi9mDgUlqLoammnb7erYFDZJKyrEKSkygd0pgH9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9773 (0x262d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Apr 4 15:39:38 2026 GMT Not After : Apr 11 15:39:38 2026 GMT Subject: CN=69d130ba-f3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:54:ae:e5:22:c1:74:c2:4e:d5:c3:e9:fe: fd:34:e9:36:95:f9:8f:97:21:fb:d4:07:52:fa:fb: 61:1c:dd:0f:91:12:4c:07:78:de:89:bf:1f:f5:b6: c0:5c:c6:39:9d:0d:be:0b:1e:41:de:17:34:a5:73: b1:e9:d8:f2:97:33:0a:f5:bc:44:f5:a6:a3:3a:82: 81:6f:f5:ba:cd:e2:aa:e4:2c:78:f6:4f:aa:c5:23: 10:c1:5d:57:a1:f1:b9:8c:f0:4f:56:47:f2:19:4b: 92:cf:0b:68:3f:c8:e7:67:e8:31:ea:82:cf:49:d8: f5:a3:20:dd:b3:8b:cc:e1:ae:65:b5:55:cc:44:be: 5e:d1:6e:b1:27:7f:4d:ad:1b:53:de:20:7a:dd:77: 37:1d:98:d8:4e:13:cb:d2:69:5e:2b:26:ff:ae:d9: 45:b0:e3:36:b7:92:64:ec:56:83:9f:a1:43:22:29: d1:e0:bb:6a:80:ba:67:9a:75:0c:53:9f:28:92:d7: 19:3c:8f:cd:95:3f:e5:a7:d5:9c:6d:80:34:94:aa: 15:38:c9:48:d2:2d:fa:0f:d9:fd:c0:45:9a:e6:68: 86:05:d9:ed:2b:2f:24:1e:d3:f0:c8:bc:d1:92:82: 23:76:68:6c:4f:30:03:9d:8c:8e:9b:86:f6:75:b2: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:A8:A3:4E:24:E7:9C:AB:EE:C0:9D:5D:8C:22:83:EA:6F:D4:AD X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:41:35:a9:c2:c7:86:99:88:27:09:e5:27:3a:5b:9b:28:d5: ae:da:b2:e7:e2:b2:63:03:a8:18:44:b9:e1:b5:82:72:9b:ef: 91:6d:f9:a0:94:7e:be:40:67:27:54:1e:f0:27:82:94:3e:45: 68:43:e8:55:00:33:d4:b1:4c:a9:b1:d2:10:de:b9:75:57:d9: 6a:c9:c3:45:ec:6e:d9:96:05:0f:7b:67:bb:02:81:c3:7c:21: 26:fb:20:7d:d5:e9:c0:81:8f:92:02:a7:66:66:44:4c:b4:a5: 15:10:f5:4d:00:6a:88:fe:6b:2d:dd:d2:8e:09:8b:67:cc:b7: c9:0b:9e:3e:53:64:d3:44:6b:06:6f:f0:98:d7:77:cf:3c:61: aa:3e:96:df:65:29:03:97:d1:f8:b4:51:03:46:4f:10:48:28: 51:4e:98:ec:3d:fc:30:ea:fa:5d:39:9a:19:1a:be:64:47:8a: 49:e1:eb:c4:d3:67:08:1d:d1:48:d6:dd:fe:00:7f:1c:c4:d6: a1:03:ce:dd:8b:00:5f:6d:98:fe:69:4e:0a:82:82:44:d3:42: ff:84:06:cb:70:66:80:fc:e6:84:93:ef:c1:72:eb:47:93:96: 49:b3:c2:5b:64:55:04:18:d5:e2:21:ea:37:48:63:1e:86:51: 45:ab:e1:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwNDA0MTUzOTM4WhcNMjYwNDExMTUzOTM4WjAYMRYwFAYD VQQDEw02OWQxMzBiYS1mM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DJUruUiwXTCTtXD6f79NOk2lfmPlyH71AdS+vthHN0PkRJMB3jeib8f9bbA XMY5nQ2+Cx5B3hc0pXOx6djylzMK9bxE9aajOoKBb/W6zeKq5Cx49k+qxSMQwV1X ofG5jPBPVkfyGUuSzwtoP8jnZ+gx6oLPSdj1oyDds4vM4a5ltVXMRL5e0W6xJ39N rRtT3iB63Xc3HZjYThPL0mleKyb/rtlFsOM2t5Jk7FaDn6FDIinR4LtqgLpnmnUM U58oktcZPI/NlT/lp9WcbYA0lKoVOMlI0i36D9n9wEWa5miGBdntKy8kHtPwyLzR koIjdmhsTzADnYyOm4b2dbI5gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5QqKNO JOecq+7AnV2MIoPqb9StMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA10E1qcLHhpmIJwnlJzpbmyjVrtqy5+KyYwOoGES54bWCcpvvkW35oJR+vkBn J1Qe8CeClD5FaEPoVQAz1LFMqbHSEN65dVfZasnDRexu2ZYFD3tnuwKBw3whJvsg fdXpwIGPkgKnZmZETLSlFRD1TQBqiP5rLd3SjgmLZ8y3yQuePlNk00RrBm/wmNd3 zzxhqj6W32UpA5fR+LRRA0ZPEEgoUU6Y7D38MOr6XTmaGRq+ZEeKSeHrxNNnCB3R SNbd/gB/HMTWoQPO3YsAX22Y/mlOCoKCRNNC/4QGy3BmgPzmhJPvwXLrR5OWSbPC W2RVBBjV4iHqN0hjHoZRRavhsg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:30 2026 by rpki-client