$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: b5CWWYvuXDCDfvT28yqc8EDY6oamQ4k/f18mfNhlbAk= Subject key identifier: 7F:51:6C:67:45:93:09:95:37:48:9D:8E:61:7B:D9:1D:5D:9B:8B:33 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0D39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0CFF Signing time: Wed 20 May 2026 18:24:51 +0000 Manifest this update: Wed 20 May 2026 18:24:50 +0000 Manifest next update: Wed 27 May 2026 18:24:50 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: uPRyf2j19q09uLHfAp4e70ITY+3oPLnuANuALLzqIr4=) 2: F315E40E545811F1A4AA7BC6AE833773.roa (hash: mQCN8GGTKlZamLj2u8NmpeyO8hy09UCVcvX6A9tbhCk=) 3: A0C1D666451911F1A50ED04697833773.roa (hash: vRJyMNJ4KrDOIdOdKlShLmonDHmEMHH8Xt3hyYOcOF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: May 20 18:24:50 2026 GMT Not After : May 27 18:24:50 2026 GMT Subject: CN=6a0dfc72-9dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:0d:d9:0f:f5:9f:c6:dc:65:91:bd:6a:8e: 5c:15:44:3e:67:de:11:38:c7:26:89:14:9d:73:34: cc:02:5a:8a:01:6a:85:dc:f6:20:1b:cb:c6:f4:88: 84:58:d0:27:62:ca:9b:93:62:ca:76:d9:9c:eb:44: e5:b2:ef:b7:20:54:ac:4a:f9:0e:f5:04:7c:ac:f4: 6b:f3:d2:d2:2d:62:33:cc:a3:8a:12:1a:6c:a6:10: 7a:a3:a9:14:69:db:e5:a2:c5:8a:c7:c0:00:d8:f0: 61:ca:f7:b6:38:49:4c:a0:bd:36:96:c5:19:a7:11: 76:d6:37:dd:87:1a:e5:2f:24:6e:40:76:a9:30:e3: 9c:6f:b3:b3:06:c1:04:ad:9e:f2:b7:29:6d:c3:a7: 92:e4:ff:2a:c7:61:70:c4:d4:7f:cc:bd:92:77:7b: 87:50:1f:c2:87:5c:75:78:da:5e:1d:05:e2:87:fd: 3a:5e:8f:42:b2:d3:20:0e:32:ce:90:a2:a5:91:79: fe:30:54:e1:85:2f:dd:25:29:d3:87:8f:60:88:86: c2:61:48:50:da:29:21:82:e3:84:30:f1:ce:af:a0: e8:10:fd:d4:89:23:3f:dc:1b:88:11:38:0e:0f:a1: 5f:6d:f4:70:df:bb:a7:6f:b9:31:96:92:8d:db:8c: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:51:6C:67:45:93:09:95:37:48:9D:8E:61:7B:D9:1D:5D:9B:8B:33 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:68:87:14:30:26:f2:a8:92:bc:b0:37:cd:d6:e9:70:db: 9f:9c:ac:d0:f0:50:2d:8f:34:06:3d:49:41:d5:09:8d:a1:a5: c4:c7:fb:51:df:29:5b:0b:fe:54:6b:a4:79:9b:23:8a:4a:fc: 0b:3c:e1:e5:6c:27:6c:b7:19:4d:4b:b1:49:45:0a:52:33:1d: 0c:d7:1c:b9:95:b6:ff:70:bc:01:a8:09:3d:43:01:0d:07:55: c0:ad:fe:1b:fd:ec:b6:25:4a:8e:50:1c:1e:7a:0f:36:2f:16: f0:37:b2:ca:e4:06:0f:9a:06:eb:7c:c6:54:7c:28:ab:79:b9: 58:c6:70:e4:d8:65:c6:42:3b:82:4f:74:7d:4e:0f:43:63:59: 67:5d:81:ec:ee:be:47:fc:1f:11:03:6e:da:8d:7d:e1:73:41: e3:4e:56:7b:49:08:b7:bb:07:a8:c7:10:e3:0f:3e:63:6b:f4: a5:10:d9:81:b3:d2:ad:a9:fb:a1:29:f7:6d:b5:e9:03:60:28: e3:67:26:93:cf:2d:d4:41:82:7f:83:e1:c8:ca:de:15:10:1b: 53:e6:7a:c2:76:79:5a:26:95:f2:65:23:ac:6a:4e:3d:4d:c0: f0:ba:fd:af:e4:66:6d:02:b8:79:db:5f:13:f0:64:1c:e2:35: 37:0a:1f:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjYwNTIwMTgyNDUwWhcNMjYwNTI3MTgyNDUwWjAYMRYwFAYD VQQDEw02YTBkZmM3Mi05ZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYcN2Q/1n8bcZZG9ao5cFUQ+Z94ROMcmiRSdczTMAlqKAWqF3PYgG8vG9IiE WNAnYsqbk2LKdtmc60Tlsu+3IFSsSvkO9QR8rPRr89LSLWIzzKOKEhpsphB6o6kU advlosWKx8AA2PBhyve2OElMoL02lsUZpxF21jfdhxrlLyRuQHapMOOcb7OzBsEE rZ7ytyltw6eS5P8qx2FwxNR/zL2Sd3uHUB/Ch1x1eNpeHQXih/06Xo9CstMgDjLO kKKlkXn+MFThhS/dJSnTh49giIbCYUhQ2ikhguOEMPHOr6DoEP3UiSM/3BuIETgO D6FfbfRw37unb7kxlpKN24wTYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9RbGdF kwmVN0idjmF72R1dm4szMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9hohxQwJvKokrywN83W6XDbn5ys0PBQLY80Bj1JQdUJjaGlxMf7Ud8pWwv+ VGukeZsjikr8Czzh5WwnbLcZTUuxSUUKUjMdDNccuZW2/3C8AagJPUMBDQdVwK3+ G/3stiVKjlAcHnoPNi8W8DeyyuQGD5oG63zGVHwoq3m5WMZw5NhlxkI7gk90fU4P Q2NZZ12B7O6+R/wfEQNu2o194XNB405We0kIt7sHqMcQ4w8+Y2v0pRDZgbPSran7 oSn3bbXpA2Ao42cmk88t1EGCf4PhyMreFRAbU+Z6wnZ5WiaV8mUjrGpOPU3A8Lr9 r+RmbQK4edtfE/BkHOI1NwofOw== -----END CERTIFICATE-----Generated at Thu May 21 09:39:19 2026 by rpki-client