$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json) Hash identifier: Fmn6oFzHb//v6cRode2BHrcL91PxNEjsAtbN25tcC3Y= Subject key identifier: CA:5E:03:F2:75:10:EB:3A:50:7F:30:15:1D:99:31:DA:D4:AD:7C:CC Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft Manifest number: 0237 Signing time: Thu 21 May 2026 02:38:23 +0000 Manifest this update: Thu 21 May 2026 02:38:22 +0000 Manifest next update: Thu 28 May 2026 02:38:22 +0000 Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: +wiSPQuneYUHriWEPRTRbNzpI9sypTikpj5m4DLwPmA=) 2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: PQd/8cl7exmw5LNAxBVE8+5SKezKc679UfwN3IJFrBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Validity Not Before: May 21 02:38:22 2026 GMT Not After : May 28 02:38:22 2026 GMT Subject: CN=6a0e701f-0e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:97:8f:c9:dc:f2:04:48:ba:c0:48:7b:2c: fa:d8:f7:e1:7d:e6:46:68:b7:38:44:84:19:20:1e: 29:48:af:d5:eb:fe:fc:25:f1:2a:33:f1:70:72:3d: 28:2b:fb:6b:ef:5a:33:5e:c8:2d:1d:fd:11:70:7a: 38:c9:78:ea:61:34:bf:b9:8a:b8:4a:41:b9:3e:23: 09:6d:14:0c:40:2a:bf:25:c7:f3:9b:b7:44:3c:af: ce:34:9b:c0:fd:aa:25:4e:38:e7:76:3f:b9:3e:31: 57:67:45:81:b7:85:0a:89:2b:b7:c1:4d:0e:2e:db: 4f:c2:38:b6:58:54:7d:a6:db:49:2a:8f:a5:18:17: 5c:87:11:19:67:53:1d:6c:39:08:f7:9b:bb:19:8b: 63:d2:5f:13:27:36:81:3c:1f:83:9f:02:9c:ad:29: 7c:9d:25:9e:af:61:e8:a6:4d:c2:99:5c:3d:56:2c: 60:74:61:26:dd:1a:f6:26:de:65:ad:f5:41:bc:74: b5:4a:0c:71:c4:60:29:da:c8:29:05:94:26:bd:a1: 90:a6:62:70:97:af:2b:5c:60:26:06:f5:47:bb:a8: 29:23:3e:9c:80:24:e6:a6:10:b8:be:20:12:66:f5: 94:33:4e:82:d6:5a:ab:3f:fc:ef:34:4b:87:a3:e9: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:03:F2:75:10:EB:3A:50:7F:30:15:1D:99:31:DA:D4:AD:7C:CC X509v3 Authority Key Identifier: keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4d:e6:f5:83:9e:07:4e:57:1c:93:d1:08:00:d3:4a:7c:8b: 4d:6f:cc:51:03:96:19:f4:19:71:9f:d3:04:64:83:4a:f0:71: 16:5e:4d:03:f0:b0:df:30:ea:0a:07:4c:09:83:49:e7:84:5c: c6:cb:4a:78:07:e6:3e:f9:1e:fd:9a:c8:42:39:83:bf:21:a1: 71:18:eb:df:de:04:63:17:e5:74:77:ca:7a:e0:03:99:8c:95: 9f:ad:1e:b9:43:7e:01:e6:71:e8:72:2d:72:95:2c:4d:92:48: c5:b5:75:45:e4:03:09:bc:2a:5e:d6:f7:4f:60:1e:e5:26:f7: f4:62:33:53:5e:cf:80:c6:36:53:af:49:df:8a:52:e9:39:4d: 5d:a7:44:62:e2:7b:df:25:1e:3d:67:d5:d7:8b:57:e2:23:83: be:2e:09:27:bc:eb:5e:2f:55:b4:19:cb:e0:31:8e:49:d4:a0: eb:8a:a6:80:0a:93:c0:8c:b3:a9:87:05:5f:39:08:f8:08:10: 0b:32:63:64:8d:6f:58:7b:3a:d0:3a:3d:03:68:16:06:5c:3a: ff:a0:7c:fb:f5:ea:47:11:ba:57:dd:e5:8b:6c:fb:da:e2:e0: eb:bc:ce:e1:9f:b7:69:66:16:f0:3e:10:a8:b8:35:3b:9e:53: b9:9c:41:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE ODg3MEUzNzMwHhcNMjYwNTIxMDIzODIyWhcNMjYwNTI4MDIzODIyWjAYMRYwFAYD VQQDEw02YTBlNzAxZi0wZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/aXj8nc8gRIusBIeyz62PfhfeZGaLc4RIQZIB4pSK/V6/78JfEqM/Fwcj0o K/tr71ozXsgtHf0RcHo4yXjqYTS/uYq4SkG5PiMJbRQMQCq/Jcfzm7dEPK/ONJvA /aolTjjndj+5PjFXZ0WBt4UKiSu3wU0OLttPwji2WFR9pttJKo+lGBdchxEZZ1Md bDkI95u7GYtj0l8TJzaBPB+DnwKcrSl8nSWer2Hopk3CmVw9VixgdGEm3Rr2Jt5l rfVBvHS1SgxxxGAp2sgpBZQmvaGQpmJwl68rXGAmBvVHu6gpIz6cgCTmphC4viAS ZvWUM06C1lqrP/zvNEuHo+k9KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpeA/J1 EOs6UH8wFR2ZMdrUrXzMMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4 N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0 M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l UDVJcnU0MnFzZGZZaHc0M00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYU3m9YOeB05XHJPRCADTSnyLTW/MUQOWGfQZcZ/TBGSDSvBxFl5NA/Cw3zDq CgdMCYNJ54RcxstKeAfmPvke/ZrIQjmDvyGhcRjr394EYxfldHfKeuADmYyVn60e uUN+AeZx6HItcpUsTZJIxbV1ReQDCbwqXtb3T2Ae5Sb39GIzU17PgMY2U69J34pS 6TlNXadEYuJ73yUePWfV14tX4iODvi4JJ7zrXi9VtBnL4DGOSdSg64qmgAqTwIyz qYcFXzkI+AgQCzJjZI1vWHs60Do9A2gWBlw6/6B8+/XqRxG6V93li2z72uLg67zO 4Z+3aWYW8D4QqLg1O55TuZxBcA== -----END CERTIFICATE-----Generated at Thu May 21 10:20:51 2026 by rpki-client