$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft File: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json) Hash identifier: IVwaSv8frbrVBrV6Y6MS9bCzp2QUyRgiLzow25yHFL0= Subject key identifier: DE:B8:84:C2:91:26:EA:A7:DC:1B:BE:29:D5:0C:6D:36:DE:E5:C2:E3 Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft Manifest number: 021D Signing time: Sun 05 Apr 2026 02:20:06 +0000 Manifest this update: Sun 05 Apr 2026 02:20:06 +0000 Manifest next update: Sun 12 Apr 2026 02:20:06 +0000 Files and hashes: 1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: TBByr4Zo3cm1Tuw70e0VfCYclxzROVdQtTbOnro59cQ=) 2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: v4Qu7n+fWBWXJKInz5nkseGm1QdnUq7lHUeNDDgFhss=) 3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: 19Rc441u91Y2HL2+FlU8nzr70BJos1ukfHPyv3DBp5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3 Validity Not Before: Apr 5 02:20:06 2026 GMT Not After : Apr 12 02:20:06 2026 GMT Subject: CN=69d1c6d6-1bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:ef:f0:d0:5b:97:84:c7:60:1a:e6:33:f2: ff:d4:a8:5e:e9:e0:a5:9e:1f:08:78:80:f6:a2:e2: ce:68:38:b2:ce:4c:a8:7f:3a:d4:9a:a0:bb:4c:28: 37:4d:bf:20:c7:d9:dc:f1:e6:41:56:3d:e7:08:0c: 6a:ce:98:db:55:bc:c1:59:b5:9c:d9:e3:f9:b9:15: 09:6b:63:f2:e5:f5:86:eb:ef:1d:3c:60:48:13:e1: 49:8c:85:aa:6d:98:7a:74:09:38:73:0f:6d:c6:7a: 91:48:4c:c7:f5:6a:8a:59:47:f9:4b:ee:27:93:8d: e0:e3:c1:0f:67:4b:5c:53:b1:01:06:7c:03:f7:44: 24:c9:0e:7f:c7:4a:c3:1c:6a:02:77:17:72:d8:74: 4e:fc:cb:cd:27:24:36:ef:52:09:61:56:58:28:c4: 89:16:8e:7d:1a:16:5e:d5:56:c9:ea:a1:c7:4e:f2: f1:f4:9b:3c:9d:ec:07:49:80:e2:94:d7:9c:a1:fa: f7:52:e4:18:ad:9e:7d:f9:32:09:a4:bc:18:1b:7c: 58:e8:c6:82:81:09:6d:cb:c9:6a:0f:ee:c0:90:8e: ff:b6:32:7c:15:a6:8b:c0:90:52:ac:8e:50:05:d4: 05:62:7d:38:0b:ec:97:c8:49:52:51:4c:9f:b1:20: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:84:C2:91:26:EA:A7:DC:1B:BE:29:D5:0C:6D:36:DE:E5:C2:E3 X509v3 Authority Key Identifier: keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:43:91:61:6a:55:18:d1:aa:a7:a6:28:10:f2:f2:7f:fb:96: b2:6a:3b:1c:dd:cb:fd:9d:65:ff:a9:e2:9c:ed:08:2a:e4:63: f5:3a:26:1f:b4:ca:45:89:40:b8:8b:6f:82:75:0b:e8:6a:cb: 86:14:53:40:83:16:b7:e1:50:f2:3d:1d:43:e0:bc:e9:f0:02: bc:f3:23:1f:5c:fd:ee:d1:0f:73:8b:2b:cb:7c:2b:4e:cc:7f: 56:a1:77:4b:97:85:bf:f7:f1:c2:3c:55:ba:04:51:18:22:64: 3b:ab:04:4a:95:9f:1b:f0:e2:53:bf:5b:1c:fd:35:18:73:9d: d2:6b:24:9a:5f:40:04:40:21:66:2b:ce:f1:87:5e:62:fc:6d: 9e:d6:e2:19:5b:24:55:58:ba:2b:3e:cc:95:e4:53:64:b3:97: 9c:fc:3b:0f:79:62:7f:8d:00:23:59:7f:66:cb:8c:56:8c:82: 11:9c:14:27:8d:b4:91:da:ac:02:90:2c:5c:38:10:d5:b1:a1: 2f:c4:56:3b:59:69:d5:a6:32:6b:05:c7:98:cb:e1:ef:47:88: 55:56:14:d8:4e:6e:03:69:6d:2d:1b:0a:61:a4:2e:cf:84:c8: 76:04:f8:19:e8:92:4d:82:12:16:53:c2:48:ba:d3:ab:39:f2: d4:46:13:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz QTYxMzMwQjMwHhcNMjYwNDA1MDIyMDA2WhcNMjYwNDEyMDIyMDA2WjAYMRYwFAYD VQQDEw02OWQxYzZkNi0xYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ3v8NBbl4THYBrmM/L/1Khe6eClnh8IeID2ouLOaDiyzkyofzrUmqC7TCg3 Tb8gx9nc8eZBVj3nCAxqzpjbVbzBWbWc2eP5uRUJa2Py5fWG6+8dPGBIE+FJjIWq bZh6dAk4cw9txnqRSEzH9WqKWUf5S+4nk43g48EPZ0tcU7EBBnwD90QkyQ5/x0rD HGoCdxdy2HRO/MvNJyQ271IJYVZYKMSJFo59GhZe1VbJ6qHHTvLx9Js8newHSYDi lNecofr3UuQYrZ59+TIJpLwYG3xY6MaCgQlty8lqD+7AkI7/tjJ8FaaLwJBSrI5Q BdQFYn04C+yXyElSUUyfsSAeOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN64hMKR Juqn3Bu+KdUMbTbe5cLjMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzlFMi83M0FGMkY3QUYyQjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlD LUFrT0xBMkdfU3c2WVRNTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnEORYWpVGNGqp6YoEPLyf/uWsmo7HN3L/Z1l/6ninO0IKuRj9TomH7TKRYlA uItvgnUL6GrLhhRTQIMWt+FQ8j0dQ+C86fACvPMjH1z97tEPc4sry3wrTsx/VqF3 S5eFv/fxwjxVugRRGCJkO6sESpWfG/DiU79bHP01GHOd0mskml9ABEAhZivO8Yde YvxtntbiGVskVVi6Kz7MleRTZLOXnPw7D3lif40AI1l/ZsuMVoyCEZwUJ420kdqs ApAsXDgQ1bGhL8RWO1lp1aYyawXHmMvh70eIVVYU2E5uA2ltLRsKYaQuz4TIdgT4 GeiSTYISFlPCSLrTqzny1EYTdA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:43 2026 by rpki-client