$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json) Hash identifier: DvNsMl9y2HVoyYgpMEp5hAGiVGRQLcxdI6bhyLEaIhA= Subject key identifier: D5:36:32:F0:CF:AA:3D:F8:F4:C8:E5:DE:5E:86:7C:CB:78:6D:1E:58 Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft Manifest number: 0670 Signing time: Sat 04 Apr 2026 22:21:36 +0000 Manifest this update: Sat 04 Apr 2026 22:21:36 +0000 Manifest next update: Sat 11 Apr 2026 22:21:36 +0000 Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: cIU6N90JpXY92SxeABistqUswDx0rLRyW7NKeqiwO7k=) 2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: LkWBUiZRF9C2VJ1E3RZPIAtHdVr7r2jvAKoSLz3FinE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E Validity Not Before: Apr 4 22:21:36 2026 GMT Not After : Apr 11 22:21:36 2026 GMT Subject: CN=69d18ef0-afa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:23:86:e8:bf:13:f5:11:49:c3:0c:4e:ab: 73:51:ce:66:2c:27:eb:dc:b2:42:4b:d5:1a:fb:1d: c0:66:cd:48:85:ee:55:a7:3a:08:7e:62:be:0e:38: cd:46:36:76:92:73:71:8d:18:a9:81:92:86:69:22: 9e:2e:c6:0c:60:aa:4c:36:f8:c9:b9:97:b2:05:17: b4:4d:3a:cf:9b:b3:20:af:38:df:bb:17:ec:00:81: 4b:4a:b2:85:14:70:0b:68:58:19:09:66:5e:fe:fd: 8d:3d:6f:cb:5f:57:06:f6:67:5f:64:d3:b6:9e:1e: dd:20:01:98:07:37:ae:8c:d4:02:ed:22:57:61:ba: 78:dc:95:5e:31:d7:ff:5c:b0:c2:32:2b:af:55:bf: 5c:98:61:4f:20:30:c6:18:c8:f8:92:e4:05:9d:ec: db:69:83:68:18:c9:01:65:b8:08:36:db:f4:59:18: f9:6d:f7:7b:5a:67:81:b5:8a:4d:a2:14:92:23:e6: 6d:c1:1a:44:f2:cd:f6:75:53:b6:84:ee:d3:e3:2b: 77:64:f8:48:68:ec:ab:a1:80:70:2e:72:0d:c0:51: 47:31:d7:ac:62:83:cb:3a:c8:fb:11:2e:e5:83:8c: 5f:bc:4f:12:0b:7c:31:dc:9e:94:0f:c1:db:33:50: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:36:32:F0:CF:AA:3D:F8:F4:C8:E5:DE:5E:86:7C:CB:78:6D:1E:58 X509v3 Authority Key Identifier: keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:88:0e:d0:f5:af:b3:ff:be:95:b8:5d:99:52:81:66:7a:ce: 65:75:34:fc:43:3f:c4:69:aa:19:5c:53:2e:3e:6a:30:40:4f: 24:b2:e5:a7:30:18:16:07:b9:c7:59:f3:65:5b:68:0b:67:3d: f6:6d:c0:c7:d6:cd:91:ff:3d:ce:e0:c2:59:ca:a5:2f:52:cf: f2:3b:22:f9:a2:24:12:83:41:25:0e:c6:ff:ab:24:02:65:36: a9:28:1e:25:e1:88:43:dc:d2:ff:db:11:1b:3e:4e:86:77:da: 90:ce:a6:2a:7e:5e:2c:1d:dd:15:14:f9:8d:07:32:45:a2:ea: 1d:04:5e:27:ee:9f:c7:66:0d:2a:72:f0:a1:a6:69:b4:e0:14: ab:86:82:df:e5:3e:fe:10:1d:7b:2f:2c:d2:d0:84:7e:55:fa: 46:eb:89:4b:fe:3e:91:93:a2:d6:ef:6a:3f:1f:7f:91:f6:99: a5:5b:ec:29:a6:89:e7:f4:bf:bc:f5:a9:d2:96:b5:f4:f0:89: 06:a4:b5:fa:c3:9c:21:4c:6d:1c:63:52:b0:18:72:5c:47:2b: ff:15:72:ee:86:fe:f3:c4:3d:f6:5c:b8:62:65:03:30:2b:c1: af:5d:ee:53:fc:2e:dd:06:10:d7:59:35:2d:6e:22:40:c9:5e: 89:f4:a2:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGQTYxMTAvBgNVBAUTKDM5NThDNzhFREIyQ0JEQTQ2QjY2QTY3RUI5MzRBQTdC RDNDMzg2NUUwHhcNMjYwNDA0MjIyMTM2WhcNMjYwNDExMjIyMTM2WjAYMRYwFAYD VQQDEw02OWQxOGVmMC1hZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRIjhui/E/URScMMTqtzUc5mLCfr3LJCS9Ua+x3AZs1Ihe5VpzoIfmK+DjjN RjZ2knNxjRipgZKGaSKeLsYMYKpMNvjJuZeyBRe0TTrPm7MgrzjfuxfsAIFLSrKF FHALaFgZCWZe/v2NPW/LX1cG9mdfZNO2nh7dIAGYBzeujNQC7SJXYbp43JVeMdf/ XLDCMiuvVb9cmGFPIDDGGMj4kuQFnezbaYNoGMkBZbgINtv0WRj5bfd7WmeBtYpN ohSSI+ZtwRpE8s32dVO2hO7T4yt3ZPhIaOyroYBwLnINwFFHMdesYoPLOsj7ES7l g4xfvE8SC3wx3J6UD8HbM1AN0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNU2MvDP qj349Mjl3l6GfMt4bR5YMB8GA1UdIwQYMBaAFDlYx47bLL2ka2amfrk0qnvTw4Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUZBNi8wNjE2RTg0MkJD OUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3ZhUnJacVotdVRTcWU5UERo bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WakhqdHNzdmFSclpxWi11VFNxZTlQRGhsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUZBNi8wNjE2RTg0MkJDOUIxMUVCOTZGMzVGNkJDNEY5QUUwMi9PVmpIanRzc3Zh UnJacVotdVRTcWU5UERobDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATYgO0PWvs/++lbhdmVKBZnrOZXU0/EM/xGmqGVxTLj5qMEBPJLLlpzAYFge5 x1nzZVtoC2c99m3Ax9bNkf89zuDCWcqlL1LP8jsi+aIkEoNBJQ7G/6skAmU2qSge JeGIQ9zS/9sRGz5OhnfakM6mKn5eLB3dFRT5jQcyRaLqHQReJ+6fx2YNKnLwoaZp tOAUq4aC3+U+/hAdey8s0tCEflX6RuuJS/4+kZOi1u9qPx9/kfaZpVvsKaaJ5/S/ vPWp0pa19PCJBqS1+sOcIUxtHGNSsBhyXEcr/xVy7ob+88Q99ly4YmUDMCvBr13u U/wu3QYQ11k1LW4iQMleifSiLg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:52 2026 by rpki-client