$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: Flcn1/WhRyVb6CJep0CeeaHx2LEE/uj8ORSyMJoefDc= Subject key identifier: DD:B0:03:DD:9B:37:0F:95:76:2C:3D:51:3A:8C:1F:D2:53:7A:5C:E3 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 0335 Signing time: Sun 05 Apr 2026 00:48:46 +0000 Manifest this update: Sun 05 Apr 2026 00:48:46 +0000 Manifest next update: Sun 12 Apr 2026 00:48:46 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: gjs25pYT+C8jy6zHTaLFlQdF6VHk7epKok4Oc2Se5qQ=) 2: 41F88F22042111ED888BB024C4F9AE02.roa (hash: P8/5kr8bHdI9BV8115gmvyOf1Tob/Bbi8osi5OVZzfc=) 3: 42D236F0042111ED888BB024C4F9AE02.roa (hash: H+Evm+yHnBSmOexYo7titYsM/D4dZ2Sj/np2eWPGmNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Apr 5 00:48:46 2026 GMT Not After : Apr 12 00:48:46 2026 GMT Subject: CN=69d1b16e-5ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:65:32:48:3e:40:90:23:ff:3b:b8:f6:33: ab:f0:92:e2:dd:05:a0:aa:31:34:7a:f5:d9:65:3b: 5d:6c:62:58:64:7f:07:d2:82:10:8a:c6:ad:aa:24: aa:18:1f:20:cb:a8:ec:ff:a0:9e:d7:27:8b:8b:15: 32:be:8a:06:3e:bf:93:21:94:3c:1f:b7:f4:b6:51: a2:69:4b:2c:cc:8c:64:28:3e:b8:fc:6c:29:35:f0: d7:8b:f4:9a:bd:7e:59:23:95:36:d9:f2:7b:a6:5f: 7a:81:ce:f1:23:26:a4:a0:cf:84:10:85:01:3c:b6: a5:ce:64:00:f4:87:e4:30:49:d7:a4:9c:44:4f:19: 16:5f:ba:60:aa:22:3f:0b:ab:71:ce:f8:5f:d4:d7: 6f:16:44:44:a8:2b:38:c6:bc:16:74:ab:d3:0e:35: d2:95:fa:d7:73:9d:f6:67:cd:12:1e:69:4d:32:8f: f7:0d:cd:ea:23:5a:7d:c4:80:08:1a:9b:d6:92:5f: 82:74:8e:b0:5d:a4:36:fb:f4:e5:2f:9a:26:5d:09: 8e:0f:db:5c:38:b8:de:0f:99:b2:34:35:fd:02:76: 3d:0f:72:16:32:78:c0:03:53:4a:fb:ec:b9:3d:09: dc:63:52:44:36:42:32:0d:fc:1a:c7:5e:58:85:da: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B0:03:DD:9B:37:0F:95:76:2C:3D:51:3A:8C:1F:D2:53:7A:5C:E3 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3d:33:6d:c5:a1:8d:f2:43:48:38:44:2b:32:ec:50:7d:76: 12:65:48:12:4e:a9:79:a8:ba:03:ec:81:b2:cb:f3:de:ec:f4: 5a:38:a2:15:99:cd:bd:49:c7:33:9e:0d:dd:e5:7a:87:75:98: d6:cd:db:ca:10:08:9b:06:34:c4:28:97:8c:fe:01:7a:39:90: 63:8f:27:91:a9:fb:31:d2:3d:06:45:d4:cd:c9:4f:67:c8:15: bc:f3:ca:47:ca:b0:f8:24:7d:07:62:87:d6:2e:4a:51:09:99: 26:7e:4f:c8:8e:6d:26:77:18:eb:25:9d:32:a0:96:bc:9b:21: 35:22:2d:ba:64:6e:fd:f2:c2:74:2f:e8:cc:08:de:4b:ee:8f: a4:a5:da:31:ca:43:26:e9:cf:da:31:59:10:f9:26:2f:b3:60: 5a:52:3b:0f:01:01:e2:f9:c3:e0:a1:29:b7:74:1a:72:24:16: 8c:c1:58:f1:8f:66:81:18:b1:28:6a:ad:bf:41:21:ff:a0:f1: d3:2c:0b:51:66:e2:39:ac:54:77:35:6b:8b:51:8f:02:da:c6: 36:9c:5a:94:a4:64:53:92:95:2f:3e:0b:ff:7d:ef:30:b3:f3: 77:1e:e2:8e:0f:31:80:4f:5c:a0:97:37:79:b0:c3:d1:fa:ee: ee:a1:63:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjYwNDA1MDA0ODQ2WhcNMjYwNDEyMDA0ODQ2WjAYMRYwFAYD VQQDEw02OWQxYjE2ZS01ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/JlMkg+QJAj/zu49jOr8JLi3QWgqjE0evXZZTtdbGJYZH8H0oIQisatqiSq GB8gy6js/6Ce1yeLixUyvooGPr+TIZQ8H7f0tlGiaUsszIxkKD64/GwpNfDXi/Sa vX5ZI5U22fJ7pl96gc7xIyakoM+EEIUBPLalzmQA9IfkMEnXpJxETxkWX7pgqiI/ C6txzvhf1NdvFkREqCs4xrwWdKvTDjXSlfrXc532Z80SHmlNMo/3Dc3qI1p9xIAI GpvWkl+CdI6wXaQ2+/TlL5omXQmOD9tcOLjeD5myNDX9AnY9D3IWMnjAA1NK++y5 PQncY1JENkIyDfwax15YhdodGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2wA92b Nw+Vdiw9UTqMH9JTelzjMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArD0zbcWhjfJDSDhEKzLsUH12EmVIEk6peai6A+yBssvz3uz0WjiiFZnNvUnH M54N3eV6h3WY1s3byhAImwY0xCiXjP4BejmQY48nkan7MdI9BkXUzclPZ8gVvPPK R8qw+CR9B2KH1i5KUQmZJn5PyI5tJncY6yWdMqCWvJshNSItumRu/fLCdC/ozAje S+6PpKXaMcpDJunP2jFZEPkmL7NgWlI7DwEB4vnD4KEpt3QaciQWjMFY8Y9mgRix KGqtv0Eh/6Dx0ywLUWbiOaxUdzVri1GPAtrGNpxalKRkU5KVLz4L/33vMLPzdx7i jg8xgE9coJc3ebDD0fru7qFjVQ== -----END CERTIFICATE-----Generated at Mon Apr 6 15:11:28 2026 by rpki-client