$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: TKWuyVqXbhqTFIVCpWmcCXoC9pXL1roA+aS3IfbnPAY= Subject key identifier: 87:0B:95:00:E3:07:62:2B:E5:78:AE:D3:F3:E0:4E:01:C7:23:8B:AF Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 02EF Signing time: Mon 01 Jun 2026 02:03:27 +0000 Manifest this update: Mon 01 Jun 2026 02:03:26 +0000 Manifest next update: Mon 08 Jun 2026 02:03:26 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: ENaFJ2182OgrTffFxZnSj4OT4H2/cPeGlQDO3xlVLlU=) 2: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=) 3: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=) 4: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=) 5: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=) 6: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=) 7: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=) 8: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 02:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Jun 1 02:03:26 2026 GMT Not After : Jun 8 02:03:26 2026 GMT Subject: CN=6a1ce86f-5a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:14:1c:cd:7c:f6:c6:5c:55:ac:fd:57:22: 6d:51:d7:76:22:a3:37:9d:f9:2c:ef:9f:26:21:9f: 9f:88:12:c2:53:c5:e1:71:ae:05:15:d4:d4:8a:c5: 31:d8:68:b1:09:ce:02:e3:0d:8d:ea:38:a7:72:50: be:f0:ca:0a:36:0f:b5:ec:ac:73:ad:72:1c:54:7c: a8:5e:b5:94:9d:61:4f:98:38:d2:e0:73:37:86:ce: 0c:2a:95:ed:c8:17:12:c9:d4:9d:da:ea:c9:09:6b: 8c:f5:99:54:58:8f:99:db:e9:a5:df:da:76:49:cb: c2:9c:85:0a:78:18:c3:d7:ab:65:a1:06:74:db:72: 21:22:3d:0a:46:5a:b7:4a:ec:57:a9:6f:51:57:7c: ec:fd:1e:e2:6e:05:89:c5:2b:03:bf:dc:c2:ff:b2: e4:fb:6d:7a:5c:97:ee:54:ac:e1:06:e1:84:ce:6f: 66:6c:c5:31:52:60:32:24:39:1d:49:42:27:e1:4c: 24:1c:f1:0c:96:6c:5a:b6:58:35:b7:54:1f:66:9c: 3a:54:d6:c0:ad:e7:8d:01:9a:ca:c3:2c:3a:79:c5: 39:aa:88:5b:a3:3d:89:7e:ba:e3:73:d5:5e:89:fc: 06:97:66:d0:65:ab:10:4e:50:02:bc:0b:44:fd:2e: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0B:95:00:E3:07:62:2B:E5:78:AE:D3:F3:E0:4E:01:C7:23:8B:AF X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:17:bd:09:98:15:67:9c:98:6f:b1:c9:de:55:ac:5c:9b:3e: 62:e3:f8:d2:26:bc:f7:6f:85:c2:fc:39:be:c6:0d:7f:b1:a7: 75:cf:9d:5d:25:81:a1:0c:fc:b9:5d:f8:43:62:fa:37:aa:ad: b8:2e:a0:b4:28:c6:31:8a:82:18:de:e3:1a:c5:43:34:2a:67: bf:33:09:c4:94:53:04:4d:6b:01:87:36:c1:c8:da:a1:7c:71: 71:2a:f8:c0:c9:c0:90:03:43:fe:10:a0:ed:4f:74:24:83:d3: 0e:a0:24:7c:ae:35:be:78:57:67:9c:6a:47:74:a4:b5:b3:6b: ee:56:ac:81:20:a0:22:a0:7f:8a:65:57:ae:b8:00:49:1a:47: 6d:f9:85:c2:1b:75:c2:6e:67:ec:24:7c:78:af:ae:2b:6b:a2: f6:ab:85:35:63:14:63:c3:8c:f3:23:00:e5:75:86:52:16:3a: de:b1:07:2d:3d:db:a3:20:7f:f5:69:ee:da:c3:1c:e2:e4:56: 3a:a7:4c:83:6a:e7:85:a1:51:9f:ea:45:13:06:a2:8e:dd:12: fe:15:63:49:e8:b8:fb:37:02:7b:9e:10:3f:82:dd:53:9f:30: e7:c2:38:9b:5d:6a:75:07:88:02:e1:1c:c2:a7:30:97:53:6d: b1:d5:e0:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYwNjAxMDIwMzI2WhcNMjYwNjA4MDIwMzI2WjAYMRYwFAYD VQQDEw02YTFjZTg2Zi01YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2IUHM189sZcVaz9VyJtUdd2IqM3nfks758mIZ+fiBLCU8Xhca4FFdTUisUx 2GixCc4C4w2N6jinclC+8MoKNg+17KxzrXIcVHyoXrWUnWFPmDjS4HM3hs4MKpXt yBcSydSd2urJCWuM9ZlUWI+Z2+ml39p2ScvCnIUKeBjD16tloQZ023IhIj0KRlq3 SuxXqW9RV3zs/R7ibgWJxSsDv9zC/7Lk+216XJfuVKzhBuGEzm9mbMUxUmAyJDkd SUIn4UwkHPEMlmxatlg1t1QfZpw6VNbAreeNAZrKwyw6ecU5qohboz2Jfrrjc9Ve ifwGl2bQZasQTlACvAtE/S6tuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcLlQDj B2Ir5Xiu0/PgTgHHI4uvMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVRe9CZgVZ5yYb7HJ3lWsXJs+YuP40ia892+Fwvw5vsYNf7Gndc+dXSWBoQz8 uV34Q2L6N6qtuC6gtCjGMYqCGN7jGsVDNCpnvzMJxJRTBE1rAYc2wcjaoXxxcSr4 wMnAkAND/hCg7U90JIPTDqAkfK41vnhXZ5xqR3SktbNr7lasgSCgIqB/imVXrrgA SRpHbfmFwht1wm5n7CR8eK+uK2ui9quFNWMUY8OM8yMA5XWGUhY63rEHLT3boyB/ 9Wnu2sMc4uRWOqdMg2rnhaFRn+pFEwaijt0S/hVjSei4+zcCe54QP4LdU58w58I4 m11qdQeIAuEcwqcwl1NtsdXgnw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:02:50 2026 by rpki-client