$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: GCNd6exw5cNtVsqzgiRn270XPDeGIkOuL+8+p/s4jAs= Subject key identifier: 62:44:D0:FE:A8:D0:56:3B:E9:BF:39:B2:92:4D:51:F6:B1:67:C9:43 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 229C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 2242 Signing time: Sat 04 Apr 2026 15:48:27 +0000 Manifest this update: Sat 04 Apr 2026 15:48:27 +0000 Manifest next update: Sat 11 Apr 2026 15:48:27 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: NpuC/J2JnDMYpx5MK5Aakz+GeirHKjolJnIWTbyGQmg=) 2: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=) 3: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=) 4: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=) 5: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=) 6: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=) 7: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=) 8: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8860 (0x229c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Apr 4 15:48:27 2026 GMT Not After : Apr 11 15:48:27 2026 GMT Subject: CN=69d132cb-ae47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:09:c3:71:de:53:58:35:e4:f7:bc:cd:48: d1:01:49:78:9e:19:fa:dc:6b:67:2d:41:cc:0c:66: 27:4b:bd:4a:00:4d:bd:11:8b:ae:96:07:68:35:12: 85:63:84:4d:84:61:5f:c8:d9:86:6b:64:0c:32:71: 8e:56:0a:e0:f7:d4:c3:f4:12:a3:3b:55:3a:b4:c0: 30:6a:7d:75:7d:29:e6:c1:5b:0b:21:39:63:d1:72: 60:1c:be:88:74:e8:aa:8e:05:bd:d9:99:ef:b4:d4: cb:b4:3b:96:4e:d8:8e:ef:a4:66:8b:08:64:fb:11: 42:02:4f:45:28:54:01:2f:c7:0a:30:92:88:24:fe: 85:b4:d9:78:9f:8a:1e:15:9e:7c:e1:5c:72:e4:77: c4:fc:28:e6:48:06:44:98:91:ac:a4:34:05:46:66: d6:d4:0e:45:8d:11:7b:4c:31:ba:70:05:6f:f7:87: 83:44:1b:86:5f:1a:fa:26:c8:f5:00:5f:3a:02:87: 5a:07:0a:4e:16:80:53:20:dd:2a:06:98:bb:0a:8e: 2c:23:74:6d:ed:d1:8d:43:75:d9:e5:1f:99:b6:30: 54:72:59:f6:7f:f6:49:5b:e7:8e:eb:06:e9:32:42: d9:3c:75:8a:c1:8c:71:ab:f9:ef:c4:da:c7:03:8e: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:44:D0:FE:A8:D0:56:3B:E9:BF:39:B2:92:4D:51:F6:B1:67:C9:43 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:85:c9:9b:34:59:a5:54:e2:d5:0a:72:ff:75:a9:9e:57:39: 51:b5:27:21:b0:b2:f6:68:b5:6d:2d:ae:b3:0e:55:a5:8c:b8: 2f:df:1b:b5:49:5c:40:90:28:bd:bb:94:5d:b7:f0:13:4a:90: 64:23:74:c6:07:2a:f9:b5:d1:0e:82:87:b4:08:7c:f9:0c:de: 7c:ef:af:00:9b:ef:f7:b3:0a:ea:73:be:4a:32:79:86:7f:8c: d0:d9:bb:82:aa:1f:6f:6a:5b:60:1d:c5:eb:8c:5c:5c:09:61: 0a:71:61:dc:4f:58:0f:a4:8a:78:5a:e3:64:08:79:c2:27:39: a4:06:39:22:10:f4:74:3e:11:b3:9f:c0:eb:2d:6c:38:a3:9d: 1d:9b:71:6e:20:a2:8a:43:b0:ad:a0:f6:93:2a:ea:03:05:bc: a1:09:5b:c6:b8:c3:ec:3b:ec:48:f1:dd:d6:87:7e:8b:70:f9: 7a:4a:7d:fb:a2:9c:3d:68:4e:df:7f:e5:14:86:3e:4d:eb:19: 3c:07:90:92:1e:bb:cc:c8:df:ea:c8:ce:bd:71:50:93:5c:c1: 56:12:b1:3b:c3:c0:99:c1:b0:6a:2b:b4:09:ee:12:b1:99:3b: 00:6b:60:90:ae:1f:d9:31:76:94:60:1b:67:e6:c5:98:8c:30: d4:2e:69:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwNDA0MTU0ODI3WhcNMjYwNDExMTU0ODI3WjAYMRYwFAYD VQQDEw02OWQxMzJjYi1hZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00kJw3HeU1g15Pe8zUjRAUl4nhn63GtnLUHMDGYnS71KAE29EYuulgdoNRKF Y4RNhGFfyNmGa2QMMnGOVgrg99TD9BKjO1U6tMAwan11fSnmwVsLITlj0XJgHL6I dOiqjgW92ZnvtNTLtDuWTtiO76Rmiwhk+xFCAk9FKFQBL8cKMJKIJP6FtNl4n4oe FZ584Vxy5HfE/CjmSAZEmJGspDQFRmbW1A5FjRF7TDG6cAVv94eDRBuGXxr6Jsj1 AF86AodaBwpOFoBTIN0qBpi7Co4sI3Rt7dGNQ3XZ5R+ZtjBUcln2f/ZJW+eO6wbp MkLZPHWKwYxxq/nvxNrHA46HjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJE0P6o 0FY76b85spJNUfaxZ8lDMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaYXJmzRZpVTi1Qpy/3Wpnlc5UbUnIbCy9mi1bS2usw5VpYy4L98btUlcQJAo vbuUXbfwE0qQZCN0xgcq+bXRDoKHtAh8+QzefO+vAJvv97MK6nO+SjJ5hn+M0Nm7 gqofb2pbYB3F64xcXAlhCnFh3E9YD6SKeFrjZAh5wic5pAY5IhD0dD4Rs5/A6y1s OKOdHZtxbiCiikOwraD2kyrqAwW8oQlbxrjD7DvsSPHd1od+i3D5ekp9+6KcPWhO 33/lFIY+TesZPAeQkh67zMjf6sjOvXFQk1zBVhKxO8PAmcGwaiu0Ce4SsZk7AGtg kK4f2TF2lGAbZ+bFmIww1C5pjw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:39 2026 by rpki-client