$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft File: OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json) Hash identifier: K3eL4fRgvQlreh/7r1VG3W7vITCCJBdyYxNCLKdfe4c= Subject key identifier: 67:74:71:D5:5D:F6:4B:E2:78:E5:39:23:6A:9C:63:08:F0:C0:89:3A Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 355F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft Manifest number: 3552 Signing time: Wed 20 May 2026 14:31:39 +0000 Manifest this update: Wed 20 May 2026 14:31:38 +0000 Manifest next update: Wed 27 May 2026 14:31:38 +0000 Files and hashes: 1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: boEzJ6c9FyQFIqddGhKlGWPhqU1KZGJaApaf9Fnwz6o=) 2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: onsBo5Bz4rkJbVswoyhTU6gtfIuIlfG0ZfPWcTezyxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13663 (0x355f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: May 20 14:31:38 2026 GMT Not After : May 27 14:31:38 2026 GMT Subject: CN=6a0dc5cb-f189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:95:99:b9:3d:97:a2:51:b9:3c:da:51:b5: d2:79:4f:4b:f4:ec:ae:24:9b:41:a3:75:75:d0:bf: 48:87:88:0b:98:26:f7:a5:c4:73:8e:97:c0:36:bc: 11:83:a2:39:be:3a:94:9e:d8:51:f4:05:41:e8:05: a5:4f:f0:c0:ec:84:af:24:7b:62:d4:80:8b:10:2f: 0e:bd:d1:55:f5:02:54:f1:45:4c:eb:7f:e1:8d:0b: 2a:dc:e6:03:57:9e:fa:d0:db:61:e7:db:ae:53:2a: 44:5a:64:67:87:a4:9c:2b:56:e1:49:f0:57:4c:b9: 30:4d:09:6e:ca:c5:97:73:02:cd:6b:ec:66:8d:c8: dc:1a:0b:13:2a:59:98:0c:5f:43:6b:07:6b:f8:87: 94:74:ed:6a:94:74:d7:ae:bf:95:20:48:83:f7:83: 0e:df:72:b5:14:82:05:71:38:82:7c:ad:31:3e:01: 9a:32:44:ed:19:d4:00:75:e2:4c:61:ae:8d:8b:97: 68:66:f6:b4:6b:54:67:b8:19:e2:1f:f1:ea:ef:76: 27:01:bf:f3:d3:66:3a:26:5b:7b:3f:79:3c:67:e7: 9e:d4:fe:d7:c5:f7:64:38:b9:e3:c3:4e:61:b4:69: 23:0c:28:b2:0b:78:0b:c6:fd:8d:d6:8f:0f:b4:7c: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:74:71:D5:5D:F6:4B:E2:78:E5:39:23:6A:9C:63:08:F0:C0:89:3A X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9e:7f:ac:8a:11:e2:23:f3:cd:00:7b:87:cf:e0:ea:fd:b7: 8c:25:50:dd:ff:cf:fe:ca:7f:10:f5:fa:0f:96:69:ef:63:10: ed:ab:30:b3:82:82:36:ae:51:79:a4:01:ec:41:56:fa:a1:b7: 0c:46:a5:58:90:55:25:18:64:fb:f8:b4:75:60:5b:43:2d:32: 24:7b:75:6a:07:42:91:65:af:50:f2:7c:2e:b8:91:0c:9e:a0: 8c:32:b9:d1:1e:b0:00:af:df:f9:98:a4:e4:4d:21:07:89:4e: 49:fe:8f:e0:0d:90:92:e1:67:88:b3:f2:58:2c:33:3b:de:e2: e4:1d:cf:5c:f7:fa:69:c1:0e:4a:99:ec:8c:f0:5a:bf:07:7c: 83:43:01:d3:85:2c:37:18:2a:f2:07:22:bd:39:e0:d5:a6:6f: e2:b5:cc:a7:ed:97:7d:a6:0a:a6:59:0a:c0:36:fd:58:1f:d2: 78:60:dc:a3:17:db:0b:e5:81:ce:90:e3:4d:54:7e:fd:9d:9f: b8:0f:a2:39:fd:50:fb:68:de:8a:0c:ed:fe:82:42:d5:39:5d: ad:9a:5f:6c:59:99:d1:9a:75:02:06:fa:bd:60:32:41:f4:f6: 5c:6f:09:07:6c:8a:26:f0:d1:10:c1:65:a4:96:5d:3f:03:82: 83:19:da:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjYwNTIwMTQzMTM4WhcNMjYwNTI3MTQzMTM4WjAYMRYwFAYD VQQDEw02YTBkYzVjYi1mMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPqVmbk9l6JRuTzaUbXSeU9L9OyuJJtBo3V10L9Ih4gLmCb3pcRzjpfANrwR g6I5vjqUnthR9AVB6AWlT/DA7ISvJHti1ICLEC8OvdFV9QJU8UVM63/hjQsq3OYD V5760Nth59uuUypEWmRnh6ScK1bhSfBXTLkwTQluysWXcwLNa+xmjcjcGgsTKlmY DF9Dawdr+IeUdO1qlHTXrr+VIEiD94MO33K1FIIFcTiCfK0xPgGaMkTtGdQAdeJM Ya6Ni5doZva0a1RnuBniH/Hq73YnAb/z02Y6Jlt7P3k8Z+ee1P7XxfdkOLnjw05h tGkjDCiyC3gLxv2N1o8PtHxN/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGd0cdVd 9kvieOU5I2qcYwjwwIk6MB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3 QXVaVWdZUHZLb0lBQlFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZ5/rIoR4iPzzQB7h8/g6v23jCVQ3f/P/sp/EPX6D5Zp72MQ7asws4KCNq5R eaQB7EFW+qG3DEalWJBVJRhk+/i0dWBbQy0yJHt1agdCkWWvUPJ8LriRDJ6gjDK5 0R6wAK/f+Zik5E0hB4lOSf6P4A2QkuFniLPyWCwzO97i5B3PXPf6acEOSpnsjPBa vwd8g0MB04UsNxgq8gcivTng1aZv4rXMp+2XfaYKplkKwDb9WB/SeGDcoxfbC+WB zpDjTVR+/Z2fuA+iOf1Q+2jeigzt/oJC1TldrZpfbFmZ0Zp1Agb6vWAyQfT2XG8J B2yKJvDREMFlpJZdPwOCgxnaVg== -----END CERTIFICATE-----Generated at Thu May 21 11:14:53 2026 by rpki-client