$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: rrvx8I2OxeaHcYtlQ8BnTpHXptgCebAJaXTrADdhu3U= Subject key identifier: 9E:20:D6:45:A2:AC:C2:1B:3D:9F:44:46:9B:D2:50:FE:B7:60:DB:3A Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1DEC Signing time: Wed 20 May 2026 16:05:42 +0000 Manifest this update: Wed 20 May 2026 16:05:41 +0000 Manifest next update: Wed 27 May 2026 16:05:41 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: XX39vMx2s7VZgHmm46QZjTWPeLhDXOEBXoMwaepJMnU=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: x37ecenCy3jbXj6Gv2z3koAXtHNV/RyDae1qY9A2y4M=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: k6CtfEJwOIjqwI8wE1ffbbr6dcu91HX2CafEBgOBGsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7677 (0x1dfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: May 20 16:05:41 2026 GMT Not After : May 27 16:05:41 2026 GMT Subject: CN=6a0ddbd5-8615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:dc:0d:87:f0:43:4f:2c:d9:58:6d:5b:6f: b4:6d:e6:95:5d:25:b6:0e:ef:07:51:66:fd:dd:39: 9f:bb:c4:26:f1:f7:72:fa:61:f0:08:31:f3:b2:ad: c7:bd:e8:c8:36:bc:95:13:8d:66:6c:d9:51:1a:91: 4d:ea:84:f9:fc:83:a0:85:d7:35:d8:3e:29:0f:37: 6c:64:0a:85:9d:2a:ba:d5:da:8c:7a:92:84:19:ab: a2:73:04:13:b8:30:76:8e:34:e8:fb:4c:2e:82:f1: 6c:b2:79:93:ce:cc:c7:52:39:cd:bb:6a:17:b7:2c: 6e:43:30:4e:d2:fd:ae:84:68:95:21:8d:e0:24:86: 90:dd:a8:cc:18:6e:0e:0e:3b:a6:f2:7b:30:04:86: b8:31:d4:09:13:ef:46:f9:ed:63:ef:b4:90:4e:71: 83:ed:df:f5:92:40:61:c2:61:fa:d1:a7:a9:73:5f: ae:04:98:dc:46:7f:26:80:be:b7:6c:4f:1b:aa:f1: 40:69:05:f1:a2:27:2f:57:dc:88:c7:24:93:28:5a: dd:0c:34:56:60:9b:68:dd:7d:cd:fb:1d:5f:e6:d6: 6b:ef:26:26:29:b1:f3:57:67:d3:c1:aa:1f:f2:ef: 31:4f:e3:da:92:c8:76:7b:db:8c:6f:7a:0f:2a:2f: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:20:D6:45:A2:AC:C2:1B:3D:9F:44:46:9B:D2:50:FE:B7:60:DB:3A X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:57:fd:31:41:ef:e3:1b:2b:01:93:5b:a4:52:21:19:3e:a8: 30:52:93:3d:4b:db:39:6b:5a:4a:80:5d:68:f9:cc:c2:ee:f9: 74:70:fe:bd:d3:3a:fd:63:7c:1e:7a:fc:fa:e9:b4:ad:ae:37: ca:da:45:cf:35:6d:8b:04:69:d5:7e:bd:da:aa:f2:2f:0f:19: 9d:8b:e6:81:59:ae:bb:a2:a3:ae:3f:87:ab:3c:0a:93:ea:b6: 09:c1:76:05:d6:05:9e:df:7f:22:45:ac:97:95:e8:03:bd:9b: 14:c2:ef:a5:b8:84:3d:dc:c6:52:e2:47:97:df:12:f4:82:f3: 31:bc:8d:d7:45:99:60:20:57:45:17:b2:22:72:98:b2:46:6e: 2b:cc:c7:06:1c:72:c5:23:39:7d:93:24:e1:35:de:73:01:69: d7:3f:fc:8f:49:6e:85:89:2f:87:b1:61:34:c4:c3:6e:8b:48: 38:2e:11:11:1b:f1:56:c8:0e:4c:b1:33:27:98:6c:8f:69:c9: 18:60:58:10:b2:de:6a:83:c3:7b:35:ea:a5:f3:88:ef:3f:b7: c4:69:79:92:74:ff:3b:b8:cc:ff:32:55:47:2c:02:75:17:4d: 9e:c9:a4:6f:e2:7a:92:2c:67:3f:9e:6d:68:73:0e:2f:f5:2e: c7:d5:a5:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwNTIwMTYwNTQxWhcNMjYwNTI3MTYwNTQxWjAYMRYwFAYD VQQDEw02YTBkZGJkNS04NjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTLcDYfwQ08s2VhtW2+0beaVXSW2Du8HUWb93Tmfu8Qm8fdy+mHwCDHzsq3H vejINryVE41mbNlRGpFN6oT5/IOghdc12D4pDzdsZAqFnSq61dqMepKEGauicwQT uDB2jjTo+0wugvFssnmTzszHUjnNu2oXtyxuQzBO0v2uhGiVIY3gJIaQ3ajMGG4O Djum8nswBIa4MdQJE+9G+e1j77SQTnGD7d/1kkBhwmH60aepc1+uBJjcRn8mgL63 bE8bqvFAaQXxoicvV9yIxySTKFrdDDRWYJto3X3N+x1f5tZr7yYmKbHzV2fTwaof 8u8xT+Paksh2e9uMb3oPKi+FDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4g1kWi rMIbPZ9ERpvSUP63YNs6MB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeVf9MUHv4xsrAZNbpFIhGT6oMFKTPUvbOWtaSoBdaPnMwu75dHD+vdM6/WN8 Hnr8+um0ra43ytpFzzVtiwRp1X692qryLw8ZnYvmgVmuu6Kjrj+HqzwKk+q2CcF2 BdYFnt9/IkWsl5XoA72bFMLvpbiEPdzGUuJHl98S9ILzMbyN10WZYCBXRReyInKY skZuK8zHBhxyxSM5fZMk4TXecwFp1z/8j0luhYkvh7FhNMTDbotIOC4RERvxVsgO TLEzJ5hsj2nJGGBYELLeaoPDezXqpfOI7z+3xGl5knT/O7jM/zJVRywCdRdNnsmk b+J6kixnP55taHMOL/Uux9WluA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:09 2026 by rpki-client