$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json) Hash identifier: fLOX6DBneoQV3zi0gevmdRPixza7VbToUScP6Wu0V4M= Subject key identifier: 07:72:96:DC:68:4D:9D:11:BB:9D:AD:99:2E:D7:AA:13:7A:EA:02:27 Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft Manifest number: 3A Signing time: Fri 17 Apr 2026 08:14:48 +0000 Manifest this update: Fri 17 Apr 2026 08:14:47 +0000 Manifest next update: Fri 24 Apr 2026 08:14:47 +0000 Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: WYDQWSw4mmtgrYIrjv4zSHAmC14htTtttBfiP/4wC3g=) 2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Apr 17 08:14:47 2026 GMT Not After : Apr 24 08:14:47 2026 GMT Subject: CN=69e1ebf8-3e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:00:99:a0:5d:3f:50:f6:27:04:1c:b7:90: aa:e5:e7:a3:37:0a:03:d4:b2:4b:e9:84:19:15:59: 76:3c:0a:3a:e1:85:4d:7d:02:96:95:33:f2:5f:93: 5a:dc:25:12:b5:e6:f3:2f:02:62:ab:fe:b3:03:05: 7e:14:e8:24:0f:f1:c8:ac:69:fb:cc:4d:90:89:88: 75:6f:a3:16:35:90:4c:e7:03:32:4c:9a:17:a5:99: 72:66:6d:04:24:b9:e5:bd:95:99:eb:5b:24:bd:b1: b8:e9:c8:37:ce:1c:0f:d7:80:62:d3:94:1b:14:b9: 8f:07:2a:94:02:01:cc:c6:0c:7a:4a:ce:32:9f:92: ba:47:d7:80:54:15:4c:b5:3c:16:ed:e5:58:02:98: 51:70:7c:05:34:eb:43:9a:7d:44:bf:69:85:c1:b9: ac:b7:38:ea:b0:c2:1b:ca:a2:ef:a0:ef:1d:db:bd: f9:50:98:24:86:e9:c4:ab:d4:58:c2:e3:2f:b8:41: 5a:03:7a:04:34:20:3b:72:62:95:c3:1b:e5:16:e8: 6c:84:f6:a7:3f:09:74:37:27:80:7b:ff:fd:bb:b3: 5e:61:42:60:9d:3d:f8:4a:44:6d:85:20:4f:b7:89: 6a:e8:05:d8:6b:c7:53:e1:df:2a:91:13:8c:06:d9: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:72:96:DC:68:4D:9D:11:BB:9D:AD:99:2E:D7:AA:13:7A:EA:02:27 X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:94:ec:71:56:71:f4:f4:a3:7f:fb:6f:25:d4:f1:69:47:46: 47:ba:8c:0c:c4:2b:54:81:04:fd:be:99:e0:bb:ed:07:a9:ba: 84:a6:eb:c4:26:43:bf:98:65:df:df:44:e1:43:6f:5f:05:4b: 01:52:a2:f8:76:82:a8:50:8b:f8:c6:9d:43:ee:e7:42:90:68: ff:7b:33:d5:33:9a:72:b3:70:71:dc:f0:dc:36:fc:4f:15:6e: d5:bb:ed:ab:90:2c:88:0e:52:24:2a:56:c9:d7:73:49:3a:2a: ac:45:98:9a:58:74:03:27:38:38:01:3c:76:49:f2:4b:6a:97: bf:e0:3e:fd:e9:bf:35:ea:f5:c3:5a:02:96:61:4d:4e:91:c4: 98:f3:59:58:b6:39:d5:5f:23:3d:eb:ea:6b:c3:1d:4c:f9:c3: e9:76:9e:33:e3:a5:b2:e9:55:9f:fc:90:c1:6c:07:da:b2:81: 86:0f:4b:05:0e:09:ea:78:71:3c:e7:51:7e:9e:49:76:d6:0e: a6:a0:9e:00:14:14:bf:9c:67:a0:53:71:e0:b0:a0:36:75:79: d9:56:80:64:ca:27:42:16:29:9a:b1:0c:32:80:2a:f9:4c:93: 73:fc:50:02:32:90:78:3c:a6:7c:69:aa:af:1e:f9:c2:48:55: 0b:df:ee:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RThGNjExMC8GA1UEBRMoQTFBQTJBMkM1NkU2NEE5RDlCQkFBMzM3QjZENkFCMzYx NzJEMzY4RjAeFw0yNjA0MTcwODE0NDdaFw0yNjA0MjQwODE0NDdaMBgxFjAUBgNV BAMTDTY5ZTFlYmY4LTNlNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjcwCZoF0/UPYnBBy3kKrl56M3CgPUskvphBkVWXY8CjrhhU19ApaVM/Jfk1rc JRK15vMvAmKr/rMDBX4U6CQP8cisafvMTZCJiHVvoxY1kEznAzJMmhelmXJmbQQk ueW9lZnrWyS9sbjpyDfOHA/XgGLTlBsUuY8HKpQCAczGDHpKzjKfkrpH14BUFUy1 PBbt5VgCmFFwfAU060OafUS/aYXBuay3OOqwwhvKou+g7x3bvflQmCSG6cSr1FjC 4y+4QVoDegQ0IDtyYpXDG+UW6GyE9qc/CXQ3J4B7//27s15hQmCdPfhKRG2FIE+3 iWroBdhrx1Ph3yqRE4wG2Ug3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB3KW3GhN nRG7na2ZLteqE3rqAicwHwYDVR0jBBgwFoAUoaoqLFbmSp2buqM3ttarNhctNo8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFOEY2LzNENkQ4RkYwRTdB RjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5v OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2FvcUxGYm1TcDJidXFNM3R0YXJOaGN0Tm84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF OEY2LzNENkQ4RkYwRTdBRjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3Ay YnVxTTN0dGFyTmhjdE5vOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXlOxxVnH09KN/+28l1PFpR0ZHuowMxCtUgQT9vpngu+0HqbqEpuvEJkO/mGXf 30ThQ29fBUsBUqL4doKoUIv4xp1D7udCkGj/ezPVM5pys3Bx3PDcNvxPFW7Vu+2r kCyIDlIkKlbJ13NJOiqsRZiaWHQDJzg4ATx2SfJLape/4D796b816vXDWgKWYU1O kcSY81lYtjnVXyM96+prwx1M+cPpdp4z46Wy6VWf/JDBbAfasoGGD0sFDgnqeHE8 51F+nkl21g6moJ4AFBS/nGegU3HgsKA2dXnZVoBkyidCFimasQwygCr5TJNz/FAC MpB4PKZ8aaqvHvnCSFUL3+6X -----END CERTIFICATE-----Generated at Sat Apr 18 21:07:39 2026 by rpki-client