$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: eIKvNkGeDmdjsjKJNop8gAF7G+U57tSfhUWsCiBG5fo= Subject key identifier: F3:95:CF:05:00:68:43:8C:B7:58:D7:AC:AA:E6:2E:5F:BD:8C:08:D3 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 0687 Signing time: Wed 20 May 2026 23:50:04 +0000 Manifest this update: Wed 20 May 2026 23:50:03 +0000 Manifest next update: Wed 27 May 2026 23:50:03 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: 5KGBMqW3FeuxOB73pvfLCQDu4BXF3q7Ql7gtzs1PcFw=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: May 20 23:50:03 2026 GMT Not After : May 27 23:50:03 2026 GMT Subject: CN=6a0e48ac-fc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:43:0c:f5:cf:49:67:b6:46:f2:6c:ce:5d:b1: b4:03:9c:80:9e:a2:50:ec:2f:61:af:bd:ca:a1:5e: 88:4e:d8:97:e4:62:d8:d7:e5:90:e5:75:60:d6:e4: 24:48:9b:ed:5b:4e:2f:f7:67:96:c4:6f:8b:5c:0a: 61:9a:01:db:65:42:37:f0:28:c3:ab:bf:df:87:59: 41:48:df:f4:f5:8a:ef:29:c2:90:dd:13:12:ce:f7: c6:90:c0:18:f4:37:63:47:1d:ad:77:00:8c:7c:0f: f0:6c:a3:94:c6:d3:89:9b:49:79:ca:2b:15:11:35: e6:42:fd:5d:97:ed:6d:f4:88:d5:e8:14:a4:66:20: e6:03:da:63:ca:f4:96:9f:de:58:04:db:d6:91:ef: 83:b2:49:cb:ee:a8:f3:8b:ef:3b:f2:eb:ac:31:2d: ac:6b:77:3f:22:cb:d3:35:09:e0:d2:5e:91:19:65: dc:26:cc:c5:8f:26:d6:3d:2a:26:41:77:f3:f1:43: cd:ec:89:53:54:3c:db:a0:c1:e1:db:9f:0a:c4:35: fd:fc:45:f5:b1:0c:84:a2:ab:b3:49:de:c1:76:6a: 1b:84:2f:61:ae:55:38:de:eb:ec:9e:80:33:2b:ba: 70:71:d4:dd:27:88:10:2c:8d:3f:45:8d:4a:ad:8d: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:95:CF:05:00:68:43:8C:B7:58:D7:AC:AA:E6:2E:5F:BD:8C:08:D3 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9f:3b:1c:e6:c2:c1:b1:85:87:99:82:dc:d7:25:24:c5:e0: fa:ca:60:3d:7c:20:51:c6:18:23:b5:65:45:a6:a7:70:fe:05: 5c:db:96:d1:dc:0a:83:92:59:f5:22:04:da:ae:8a:49:7c:fd: 24:ba:bb:db:cf:a6:42:9f:bf:be:64:00:7f:9f:7a:61:2a:07: 16:19:98:b7:7e:57:93:ae:0a:7f:9e:f3:5c:1c:a9:18:31:f2: 5b:80:01:e5:88:9e:80:77:b0:f4:ac:3d:17:ed:85:10:ac:ef: 7f:18:be:ac:0e:7d:60:5e:15:8f:1c:65:9d:68:00:9c:45:2e: 09:82:d0:da:4c:50:5b:0b:04:dc:da:dd:b3:5f:66:47:8d:bb: 39:a6:59:1e:f0:69:06:a6:ae:86:39:c0:f5:42:ae:47:f9:48: 8f:4a:36:e8:db:27:08:e9:2b:ab:59:48:4c:5e:b2:b8:dc:b0: 2d:06:22:7b:78:0e:b8:38:80:81:64:3f:57:be:77:30:58:e9: 53:8e:43:78:94:15:f9:35:a9:9a:9c:61:e5:17:2f:84:c2:50: c6:15:7e:91:30:cb:79:dd:8a:98:17:b4:5f:97:6c:b6:e9:21: f1:f2:81:06:62:d2:06:5b:13:53:24:0c:9f:2f:28:f8:23:b6: 8e:eb:20:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjYwNTIwMjM1MDAzWhcNMjYwNTI3MjM1MDAzWjAYMRYwFAYD VQQDEw02YTBlNDhhYy1mYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20MM9c9JZ7ZG8mzOXbG0A5yAnqJQ7C9hr73KoV6ITtiX5GLY1+WQ5XVg1uQk SJvtW04v92eWxG+LXAphmgHbZUI38CjDq7/fh1lBSN/09YrvKcKQ3RMSzvfGkMAY 9DdjRx2tdwCMfA/wbKOUxtOJm0l5yisVETXmQv1dl+1t9IjV6BSkZiDmA9pjyvSW n95YBNvWke+DsknL7qjzi+878uusMS2sa3c/IsvTNQng0l6RGWXcJszFjybWPSom QXfz8UPN7IlTVDzboMHh258KxDX9/EX1sQyEoquzSd7BdmobhC9hrlU43uvsnoAz K7pwcdTdJ4gQLI0/RY1KrY154wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOVzwUA aEOMt1jXrKrmLl+9jAjTMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJ87HObCwbGFh5mC3NclJMXg+spgPXwgUcYYI7VlRaancP4FXNuW0dwKg5JZ 9SIE2q6KSXz9JLq728+mQp+/vmQAf596YSoHFhmYt35Xk64Kf57zXBypGDHyW4AB 5YiegHew9Kw9F+2FEKzvfxi+rA59YF4VjxxlnWgAnEUuCYLQ2kxQWwsE3Nrds19m R427OaZZHvBpBqauhjnA9UKuR/lIj0o26NsnCOkrq1lITF6yuNywLQYie3gOuDiA gWQ/V753MFjpU45DeJQV+TWpmpxh5RcvhMJQxhV+kTDLed2KmBe0X5dstukh8fKB BmLSBlsTUyQMny8o+CO2jusgQw== -----END CERTIFICATE-----Generated at Thu May 21 11:04:23 2026 by rpki-client