$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: l84q4ld1LdVFEbgZUNLVvHxAHSbGBHEqKhJqMU4mArA= Subject key identifier: 68:BD:B2:84:06:B7:F9:44:03:2D:DA:B6:B4:39:AA:2E:73:84:E3:E1 Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 0812 Signing time: Wed 20 May 2026 21:11:11 +0000 Manifest this update: Wed 20 May 2026 21:11:10 +0000 Manifest next update: Wed 27 May 2026 21:11:10 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: XHn5AmSP/QhkuqeN+1b4P+cJZdlajn8VkPUDIXrvbO4=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: xBMELOpqJ4lnqq47hcS7bDXF3hPxxlzBtOSvLVgcPrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: May 20 21:11:10 2026 GMT Not After : May 27 21:11:10 2026 GMT Subject: CN=6a0e236e-068a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:b4:ec:a4:7d:d0:54:4e:01:87:71:ef:9a: 67:66:88:55:b4:a3:0c:bb:db:28:87:78:10:b1:10: 56:40:4e:bd:07:16:0a:4a:30:f6:28:fc:f1:15:42: 7e:13:88:9d:bc:91:07:04:3a:50:78:cf:39:2b:89: e4:06:e2:b9:ba:8a:6e:93:38:e7:ad:46:41:74:d9: 77:b9:ce:2c:06:c5:ac:f1:bd:cf:90:94:77:0e:3d: 69:27:1c:e9:b3:55:62:79:73:c0:d9:1e:d9:78:4b: e9:0e:05:4a:9b:da:cc:8d:fa:96:84:b5:b1:42:15: 75:70:d3:6e:54:9e:34:a6:96:48:5d:9f:a7:57:d1: a4:61:7d:70:21:f4:de:13:c3:48:8a:79:2e:0d:25: 49:7a:25:73:7b:5d:bc:74:fb:a4:1e:96:b6:d7:23: f0:c2:34:b2:c9:e0:f8:fd:4e:c9:fb:69:51:c9:77: f8:55:09:1d:9e:89:1e:89:2b:4b:18:a0:6f:7a:55: 28:90:78:1a:97:5a:c5:35:d1:43:8d:ad:23:41:dd: 3f:63:04:af:6c:2e:be:7c:1d:27:86:d7:1f:de:6d: 66:73:a9:f7:23:3e:e3:6c:55:db:66:0c:18:95:76: d8:58:6c:45:b4:f6:58:24:6d:a2:7b:08:3d:1c:90: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BD:B2:84:06:B7:F9:44:03:2D:DA:B6:B4:39:AA:2E:73:84:E3:E1 X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:19:e2:2f:d1:e9:fa:98:b7:84:65:c1:22:bc:66:13:a4:be: 6d:b3:c8:79:aa:d1:39:72:d7:25:64:c5:14:71:87:4d:8a:ef: d6:29:a2:ef:61:0f:34:2f:b4:d0:c3:ff:5b:09:3a:f3:b8:da: b3:f6:3e:c5:38:d2:25:dd:0d:25:fb:99:24:f9:51:f0:a5:c5: 1b:c9:81:48:0c:1d:a3:c3:97:cc:8c:df:ba:06:cc:f5:41:9b: 02:42:dc:f7:e9:da:b2:37:53:4b:35:67:b8:b3:e0:f2:98:a0: aa:42:1f:47:63:b8:31:7e:7f:5e:41:a5:20:5f:b4:58:fe:16: fd:b6:68:3e:99:8e:be:eb:a3:af:b5:ae:f4:6a:a5:ba:54:b2: 95:e3:3d:a0:7d:5e:e4:63:d0:9a:e0:80:7b:3f:61:02:13:87: 4e:03:3f:21:5f:d1:87:63:ed:be:3f:f6:85:12:96:d2:c8:fe: 52:92:ba:42:1d:35:0f:5c:e7:b2:b1:7c:35:95:b8:a0:2c:a9: ab:b4:01:95:f4:3f:2e:c2:b2:5d:b9:10:86:a5:39:30:28:5d: fa:39:f6:4d:52:2a:dd:03:b0:45:d7:b1:dd:1e:8b:6c:85:47: 10:03:d7:1f:9f:c8:d4:5f:0e:a0:51:3d:ec:d3:74:79:7b:c7: 9d:c8:14:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjYwNTIwMjExMTEwWhcNMjYwNTI3MjExMTEwWjAYMRYwFAYD VQQDEw02YTBlMjM2ZS0wNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArei07KR90FROAYdx75pnZohVtKMMu9soh3gQsRBWQE69BxYKSjD2KPzxFUJ+ E4idvJEHBDpQeM85K4nkBuK5uopukzjnrUZBdNl3uc4sBsWs8b3PkJR3Dj1pJxzp s1VieXPA2R7ZeEvpDgVKm9rMjfqWhLWxQhV1cNNuVJ40ppZIXZ+nV9GkYX1wIfTe E8NIinkuDSVJeiVze128dPukHpa21yPwwjSyyeD4/U7J+2lRyXf4VQkdnokeiStL GKBvelUokHgal1rFNdFDja0jQd0/YwSvbC6+fB0nhtcf3m1mc6n3Iz7jbFXbZgwY lXbYWGxFtPZYJG2iewg9HJCYUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGi9soQG t/lEAy3atrQ5qi5zhOPhMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBniL9Hp+pi3hGXBIrxmE6S+bbPIearROXLXJWTFFHGHTYrv1imi72EPNC+0 0MP/Wwk687jas/Y+xTjSJd0NJfuZJPlR8KXFG8mBSAwdo8OXzIzfugbM9UGbAkLc 9+nasjdTSzVnuLPg8pigqkIfR2O4MX5/XkGlIF+0WP4W/bZoPpmOvuujr7Wu9Gql ulSyleM9oH1e5GPQmuCAez9hAhOHTgM/IV/Rh2Ptvj/2hRKW0sj+UpK6Qh01D1zn srF8NZW4oCypq7QBlfQ/LsKyXbkQhqU5MChd+jn2TVIq3QOwRdex3R6LbIVHEAPX H5/I1F8OoFE97NN0eXvHncgUfQ== -----END CERTIFICATE-----Generated at Thu May 21 09:36:46 2026 by rpki-client