$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: n2AyPe84cz6ASk/5X1KTCP/5NlEE/e0bTTy4ScKw8ig= Subject key identifier: CF:E1:AE:2A:19:08:21:E7:37:28:89:0F:63:6D:29:72:1F:C0:BE:76 Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 0659 Signing time: Sat 04 Apr 2026 23:36:30 +0000 Manifest this update: Sat 04 Apr 2026 23:36:30 +0000 Manifest next update: Sat 11 Apr 2026 23:36:30 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: rLEmQ0dQEzZ0LoxvN3FaJgA5CVPS7NWiMaE7Tced8LE=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Apr 4 23:36:30 2026 GMT Not After : Apr 11 23:36:30 2026 GMT Subject: CN=69d1a07e-5381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:6e:7e:20:01:93:93:aa:85:c6:8c:0e:20: b5:f3:9b:62:a8:93:c1:86:be:e3:60:39:c1:9f:93: 3f:a3:da:1d:6d:71:d5:c7:3f:d1:14:c2:70:e9:1d: 78:8a:e1:96:16:d5:5f:07:35:10:b8:cf:cf:40:eb: b3:59:3a:00:31:f2:5f:64:c7:03:51:33:3e:64:7d: a5:ac:c3:13:cf:9f:80:f2:b4:9f:4d:07:8e:56:a3: 69:a8:3f:b5:a6:f1:0a:b9:90:fa:78:94:ff:f8:63: f0:bf:d7:1b:a9:e9:28:fd:76:15:5a:d0:a7:12:28: 1d:f3:5d:39:99:31:8e:1a:4f:da:b7:05:31:fb:c6: cd:0b:06:20:6f:52:c8:16:a4:1a:99:6e:33:50:31: ae:f7:2e:58:4b:d8:14:24:d2:40:7d:f8:d5:6b:2a: 07:8a:d8:c9:1b:a9:45:e7:69:a9:ca:d3:d7:9f:be: 7c:bb:a2:78:28:5d:de:70:dd:2e:9b:f6:15:f0:dd: 03:63:45:ef:f6:08:78:68:7f:2f:b6:3b:2c:99:57: 80:7e:8f:d2:17:7e:2d:1c:f8:23:bf:e3:f8:06:9b: ce:b8:e9:74:00:59:51:1c:11:c5:59:24:35:32:1d: 57:68:ae:8c:af:ae:f5:14:64:1d:21:dd:29:ce:e6: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E1:AE:2A:19:08:21:E7:37:28:89:0F:63:6D:29:72:1F:C0:BE:76 X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:62:0f:68:ff:90:2a:c3:00:00:37:31:61:98:ca:50:d8:99: 46:66:c5:e6:e6:81:a2:44:61:1b:8e:e6:d4:8c:52:4f:43:dc: d0:1f:90:3f:4a:82:10:b8:3c:38:95:d8:47:cc:a6:57:ba:aa: 74:1f:38:56:7c:dc:4b:18:f0:a0:0a:d8:d9:0e:37:fc:d2:e9: fb:58:8e:39:41:43:7a:f4:ad:cf:6e:41:8d:16:54:a9:eb:b9: 88:0d:d2:87:06:0e:e5:a8:b1:06:ff:13:fb:71:df:99:7c:a1: 42:3a:82:22:99:d0:97:d4:e5:33:bb:9b:96:b2:d4:3c:2b:9c: bc:c3:78:f7:95:03:6b:91:fd:a5:1b:07:89:ce:e8:2e:d1:3a: 6e:80:74:e4:2b:ec:37:eb:60:e1:bd:cb:0e:fc:37:18:bf:bb: 68:84:07:aa:0f:c6:04:0d:dd:4c:78:e8:1d:bb:4b:7b:97:7b: b0:58:3e:05:ac:30:a7:39:57:b3:74:63:a7:75:f1:23:c8:db: 63:5e:68:ca:c5:43:c4:4d:b9:a0:28:2d:d4:6c:25:6b:33:b0: 9c:8b:0e:1d:13:b1:17:f1:4a:eb:49:9e:2c:6e:e5:bc:bd:d3: 31:15:e0:b5:f3:cf:38:3f:65:98:54:ec:b6:88:0b:57:01:44: 70:ff:a7:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjYwNDA0MjMzNjMwWhcNMjYwNDExMjMzNjMwWjAYMRYwFAYD VQQDEw02OWQxYTA3ZS01MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG5ufiABk5OqhcaMDiC185tiqJPBhr7jYDnBn5M/o9odbXHVxz/RFMJw6R14 iuGWFtVfBzUQuM/PQOuzWToAMfJfZMcDUTM+ZH2lrMMTz5+A8rSfTQeOVqNpqD+1 pvEKuZD6eJT/+GPwv9cbqeko/XYVWtCnEigd8105mTGOGk/atwUx+8bNCwYgb1LI FqQamW4zUDGu9y5YS9gUJNJAffjVayoHitjJG6lF52mpytPXn758u6J4KF3ecN0u m/YV8N0DY0Xv9gh4aH8vtjssmVeAfo/SF34tHPgjv+P4BpvOuOl0AFlRHBHFWSQ1 Mh1XaK6Mr671FGQdId0pzuY8jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/hrioZ CCHnNyiJD2NtKXIfwL52MB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmIPaP+QKsMAADcxYZjKUNiZRmbF5uaBokRhG47m1IxST0Pc0B+QP0qCELg8 OJXYR8ymV7qqdB84VnzcSxjwoArY2Q43/NLp+1iOOUFDevStz25BjRZUqeu5iA3S hwYO5aixBv8T+3HfmXyhQjqCIpnQl9TlM7ublrLUPCucvMN495UDa5H9pRsHic7o LtE6boB05CvsN+tg4b3LDvw3GL+7aIQHqg/GBA3dTHjoHbtLe5d7sFg+BawwpzlX s3Rjp3XxI8jbY15oysVDxE25oCgt1GwlazOwnIsOHROxF/FK60meLG7lvL3TMRXg tfPPOD9lmFTstogLVwFEcP+nvQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:37 2026 by rpki-client