$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: qABlr6icFg6lkt/bM4wQZRBktIeJmQbzOzEfogMIuU4= Subject key identifier: 6E:84:F0:2C:F0:5E:4C:29:67:5B:DC:74:F6:39:C2:AB:4E:1F:37:10 Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 08B9 Signing time: Mon 04 May 2026 20:31:13 +0000 Manifest this update: Mon 04 May 2026 20:31:13 +0000 Manifest next update: Mon 11 May 2026 20:31:13 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: 8NqQ1yOyfm+HUIto1DlGPzf3ZYHGg/X3TpWSNbMjkrY=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: IYSmLvKDDFybIzJE/k0J2LFQgVw7pM2NwhpUrLtH0AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: May 4 20:31:13 2026 GMT Not After : May 11 20:31:13 2026 GMT Subject: CN=69f90211-d7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:7a:14:86:a3:72:e1:6b:d0:e3:4e:b4:fa: 9e:1f:1a:28:d2:30:a0:35:ac:f2:0a:1b:92:b8:d0: 4c:b7:54:53:0a:60:5d:91:f0:ee:96:b7:86:76:d0: 6d:ba:a8:88:a8:71:76:d3:2e:ed:57:70:07:a2:4b: f7:a5:8e:6a:23:8e:f8:aa:b9:4e:f1:ea:9b:d1:89: 1d:51:15:0f:37:ac:5f:48:f3:a2:95:5d:2f:0c:d0: 21:7c:9a:b0:f9:89:cc:d6:d1:b9:a7:46:8f:31:4c: 9c:c2:4f:45:6d:c8:81:18:e8:45:4b:1d:95:1d:8a: ff:d3:6d:ff:c3:d6:fa:69:6c:7e:38:ff:fb:98:5f: 41:08:d6:b3:72:84:aa:57:e0:cf:f3:7d:6d:a8:f2: 77:70:5f:41:32:de:34:df:1d:d3:bd:ef:19:49:65: d3:9d:63:9b:07:ae:46:5d:98:08:32:07:39:cb:4e: 05:0c:a1:52:87:ca:2b:0e:1a:f5:75:76:e7:b2:0c: e7:55:49:ae:34:e0:d2:9a:36:ea:7e:ff:df:9a:c0: e2:d0:fa:58:73:0d:f0:aa:12:45:c7:60:68:49:4d: 80:a7:f8:7d:c7:53:34:0b:3e:83:85:2e:ca:ca:e0: 48:36:bc:dd:51:88:28:32:12:f5:93:85:e3:37:33: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:84:F0:2C:F0:5E:4C:29:67:5B:DC:74:F6:39:C2:AB:4E:1F:37:10 X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:6d:09:7d:0a:32:0f:68:f3:0a:06:de:0c:bb:76:13:d5: 9b:f6:49:46:c3:d0:57:16:87:02:aa:61:94:60:09:a6:a7:bd: 38:51:18:2d:50:5d:e7:11:3f:8e:6d:bf:5c:50:8a:66:ed:63: 46:79:28:80:19:65:f2:c1:0c:c6:8c:ef:1a:17:be:2f:a7:78: 2e:b9:00:04:ac:80:86:38:1e:2a:a0:b4:05:8d:85:c0:08:a0: a9:1f:ba:17:bb:85:b1:ee:ec:0d:84:52:df:7d:7a:69:70:51: 09:d2:55:5a:ce:bf:e3:e3:f2:27:0f:38:57:79:71:f9:25:4a: 2f:3b:bb:6e:4b:46:63:bd:66:52:f3:97:37:6f:f0:e3:98:99: bc:c6:8b:95:41:cc:6a:95:0f:86:9d:37:9c:d3:99:a2:ef:92: ac:7f:65:38:53:c4:84:33:f0:d7:d1:57:69:90:00:b2:56:91: cd:e3:2e:c7:80:42:22:a5:dd:68:05:86:03:84:6c:27:68:a2: 46:e8:59:b5:21:65:95:d4:35:d1:2b:09:fa:de:26:b4:af:f7: 6b:24:ec:4e:94:41:af:8f:34:12:ee:3d:8f:c5:2d:7c:67:b2: 30:7e:43:da:b6:b0:2b:75:bb:fc:5c:2a:49:f3:12:46:eb:9b: 76:5b:25:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYwNTA0MjAzMTEzWhcNMjYwNTExMjAzMTEzWjAYMRYwFAYD VQQDEw02OWY5MDIxMS1kN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKB6FIajcuFr0ONOtPqeHxoo0jCgNazyChuSuNBMt1RTCmBdkfDulreGdtBt uqiIqHF20y7tV3AHokv3pY5qI474qrlO8eqb0YkdURUPN6xfSPOilV0vDNAhfJqw +YnM1tG5p0aPMUycwk9FbciBGOhFSx2VHYr/023/w9b6aWx+OP/7mF9BCNazcoSq V+DP831tqPJ3cF9BMt403x3Tve8ZSWXTnWObB65GXZgIMgc5y04FDKFSh8orDhr1 dXbnsgznVUmuNODSmjbqfv/fmsDi0PpYcw3wqhJFx2BoSU2Ap/h9x1M0Cz6DhS7K yuBINrzdUYgoMhL1k4XjNzNAoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6E8Czw XkwpZ1vcdPY5wqtOHzcQMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZeptCX0KMg9o8woG3gy7dhPVm/ZJRsPQVxaHAqphlGAJpqe9OFEYLVBd5xE/ jm2/XFCKZu1jRnkogBll8sEMxozvGhe+L6d4LrkABKyAhjgeKqC0BY2FwAigqR+6 F7uFse7sDYRS3316aXBRCdJVWs6/4+PyJw84V3lx+SVKLzu7bktGY71mUvOXN2/w 45iZvMaLlUHMapUPhp03nNOZou+SrH9lOFPEhDPw19FXaZAAslaRzeMux4BCIqXd aAWGA4RsJ2iiRuhZtSFlldQ10SsJ+t4mtK/3ayTsTpRBr480Eu49j8UtfGeyMH5D 2rawK3W7/FwqSfMSRuubdlslbw== -----END CERTIFICATE-----Generated at Tue May 5 10:05:24 2026 by rpki-client