$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft File: OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json) Hash identifier: jBQTpIBo4jU3MTTbZ7Gr+cb8IPpHrcbqWUAXQ5O64+M= Subject key identifier: 70:38:0E:7F:C1:D4:AE:61:BB:3A:E9:55:75:F6:8E:C3:35:43:A5:CB Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft Manifest number: A5 Signing time: Fri 05 Jun 2026 07:42:36 +0000 Manifest this update: Fri 05 Jun 2026 07:42:35 +0000 Manifest next update: Fri 12 Jun 2026 07:42:35 +0000 Files and hashes: 1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: 8Fw+FZtaPNWmIZJRph4BNM5FpMNsX+KxDoikWAT3dYE=) 2: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: 377aBWt/4YjE0cdxFMi4oiB5yI0io2fUU0WHhpm9ooo=) 3: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: V8o99dNNhmaM2c88PY3odEi8XIfBLs9AedcwcTXfAbs=) 4: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: ysVuW5LnYi59x1lz18NXRjV3JavVPishhatCefOBZLg=) 5: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: PG7OBR6GyNLrIjZOfwPBfDBaGVKv/qZwCkbhTbs1CAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 07:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Jun 5 07:42:35 2026 GMT Not After : Jun 12 07:42:35 2026 GMT Subject: CN=6a227dec-9ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:47:49:6a:68:82:99:36:d6:b5:0d:7d:7c: 41:27:6d:36:08:d7:eb:0d:b2:de:b3:2a:12:13:37: 47:f2:65:1f:78:6c:a7:21:32:07:32:8d:1a:68:fa: 27:e8:5f:60:b5:33:89:c1:b3:e6:73:17:bd:00:66: f0:e0:0e:9b:5f:aa:0b:28:2b:7f:53:2d:f2:bf:0e: 97:91:c0:b9:55:96:49:89:d2:eb:ed:0f:8a:b5:69: be:d9:92:63:9b:c0:c8:df:84:db:4c:fc:dd:eb:de: 29:88:16:84:f8:40:56:1b:cf:9d:19:0d:a7:61:e6: 48:3d:50:fb:38:4e:09:d6:d4:55:eb:c5:26:98:51: 3e:9d:fc:d5:73:7b:fa:6a:da:62:ae:34:87:58:2f: 4d:00:17:d6:87:c8:e7:c6:c3:22:a2:be:f1:66:93: 8d:58:86:16:0f:ea:0a:68:88:b8:6a:ae:b1:02:3d: 90:39:6d:76:ff:56:65:64:18:e8:10:6d:53:ee:6f: 21:da:eb:26:3b:a0:96:be:7d:53:e1:8a:08:d3:54: db:f4:0a:8b:c9:36:26:05:02:ee:94:a8:7f:dd:5b: 7b:f3:f5:92:fb:24:c1:8e:05:b5:81:d3:8f:ad:7f: 36:71:08:55:b6:6f:c0:b3:c1:6a:3f:65:38:27:8e: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:0E:7F:C1:D4:AE:61:BB:3A:E9:55:75:F6:8E:C3:35:43:A5:CB X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:10:c6:b9:0c:81:da:62:92:62:d8:b9:ab:25:67:ab:7f:6f: a8:4a:6d:76:6e:26:be:38:81:2c:96:a2:0c:69:65:ba:15:1b: d7:86:ef:7e:25:59:af:3a:12:33:20:62:03:88:fa:0b:82:91: 00:6a:78:20:d5:3c:3e:b2:de:c0:bd:6a:62:04:44:4c:82:d3: 0c:13:30:78:74:77:1f:35:cd:da:d9:7a:4c:0d:0e:d4:d5:b7: 41:ed:84:e1:93:c2:21:e7:72:e5:a9:99:8e:bb:55:ed:02:34: 9e:01:8b:2f:55:c0:1c:28:ca:49:01:02:d8:ff:f1:07:10:73: 19:e5:d0:f4:54:74:a1:2c:74:90:69:43:80:b1:58:c8:7b:e9: 7e:36:98:44:cc:b8:9d:c7:e7:ab:0e:b4:4f:2e:3f:57:04:4d: f5:b2:19:dd:d2:89:d7:81:11:1a:7e:63:a7:33:e2:a9:ea:83: 42:eb:ba:97:f3:88:95:2c:c9:3b:66:9b:6e:19:3b:a1:27:91: cb:da:25:55:65:e0:ca:11:e5:f9:16:53:40:e6:4f:bd:dd:f3: f4:0a:0e:d1:f2:85:51:99:6b:d7:86:e6:f1:e4:e2:8f:e8:1a: a1:93:0d:c5:1f:37:a0:66:b7:17:8d:8a:dd:7e:51:53:30:50: ec:b6:16:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw MzZCQkY5MDEwHhcNMjYwNjA1MDc0MjM1WhcNMjYwNjEyMDc0MjM1WjAYMRYwFAYD VQQDEw02YTIyN2RlYy05YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXlHSWpogpk21rUNfXxBJ202CNfrDbLesyoSEzdH8mUfeGynITIHMo0aaPon 6F9gtTOJwbPmcxe9AGbw4A6bX6oLKCt/Uy3yvw6XkcC5VZZJidLr7Q+KtWm+2ZJj m8DI34TbTPzd694piBaE+EBWG8+dGQ2nYeZIPVD7OE4J1tRV68UmmFE+nfzVc3v6 atpirjSHWC9NABfWh8jnxsMior7xZpONWIYWD+oKaIi4aq6xAj2QOW12/1ZlZBjo EG1T7m8h2usmO6CWvn1T4YoI01Tb9AqLyTYmBQLulKh/3Vt78/WS+yTBjgW1gdOP rX82cQhVtm/As8FqP2U4J46ARQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHA4Dn/B 1K5huzrpVXX2jsM1Q6XLMB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNn Z1haczJzT19mZDBEYTctUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFhDGuQyB2mKSYti5qyVnq39vqEptdm4mvjiBLJaiDGlluhUb14bvfiVZrzoS MyBiA4j6C4KRAGp4INU8PrLewL1qYgRETILTDBMweHR3HzXN2tl6TA0O1NW3Qe2E 4ZPCIedy5amZjrtV7QI0ngGLL1XAHCjKSQEC2P/xBxBzGeXQ9FR0oSx0kGlDgLFY yHvpfjaYRMy4ncfnqw60Ty4/VwRN9bIZ3dKJ14ERGn5jpzPiqeqDQuu6l/OIlSzJ O2abbhk7oSeRy9olVWXgyhHl+RZTQOZPvd3z9AoO0fKFUZlr14bm8eTij+gaoZMN xR83oGa3F42K3X5RUzBQ7LYWsg== -----END CERTIFICATE-----Generated at Sat Jun 6 12:11:19 2026 by rpki-client