$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft File: omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json) Hash identifier: 8VaU3C7TfzdHGzkrY/PkwyKSiGqs9KZ1Vv5rLrPiEEE= Subject key identifier: A0:8B:43:85:81:7D:EE:8D:A2:FF:8B:1C:BD:77:7A:57:15:82:14:A7 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft Manifest number: FC Signing time: Sun 05 Apr 2026 05:38:55 +0000 Manifest this update: Sun 05 Apr 2026 05:38:54 +0000 Manifest next update: Sun 12 Apr 2026 05:38:54 +0000 Files and hashes: 1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: GZ6wkTIoOFj6HSPy7xdSAjpnmXbbyYtMRwZZOSjY5sw=) 2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: +19MD4zmg5S2MgEx4GQH/Dwh2+OxNyFWgGwQrcUjjYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Apr 5 05:38:54 2026 GMT Not After : Apr 12 05:38:54 2026 GMT Subject: CN=69d1f56f-d581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:a7:8e:51:d6:8f:5e:7b:84:67:8b:10:67: 37:d6:f4:b2:fc:6a:90:82:9d:0e:40:13:7c:71:83: f0:de:7b:27:57:be:e0:37:75:96:b2:eb:9e:74:c1: 84:0a:4d:04:85:1c:9d:06:ca:7a:29:de:24:9c:45: a4:8f:17:da:28:76:95:b4:4b:c9:24:10:23:56:3d: 58:55:dd:b2:5f:97:1d:92:22:49:2f:f3:0d:f3:d1: 90:9d:19:61:b1:28:18:7d:82:52:c9:72:a7:f8:94: 52:fc:0f:47:f0:69:83:70:ba:d8:4c:0f:ad:43:21: 17:48:53:14:6b:ec:81:25:9d:a8:40:41:07:ba:4e: 40:52:7b:b3:09:04:60:d5:37:2f:68:53:6f:a7:ab: 86:f3:f1:74:37:75:49:ac:63:05:57:03:5a:f6:4b: dc:57:7c:67:b9:e1:ec:5b:2f:3c:a6:04:d8:40:ac: 5b:3d:87:c3:ee:51:2e:fa:d3:cd:1f:70:e4:52:64: d4:89:41:63:14:3f:b6:34:4b:37:55:e4:f4:fa:c5: 7c:bc:ce:22:19:37:d7:aa:37:5a:ac:66:37:ef:a9: a1:d5:17:2c:07:94:e0:3a:6a:61:e7:9f:0b:6e:4c: 4d:0f:37:0d:62:24:4d:53:45:a5:ed:53:f2:b1:27: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:43:85:81:7D:EE:8D:A2:FF:8B:1C:BD:77:7A:57:15:82:14:A7 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:67:6c:41:27:80:33:b9:2d:f1:86:dd:b7:2b:35:39:56:10: 54:29:6e:53:13:9d:7d:8c:f7:0c:8c:f8:7f:80:5d:2d:20:bf: e3:6b:8e:a2:ad:0f:76:15:92:91:25:63:2a:aa:f9:c5:40:f0: 14:10:13:c8:60:75:07:a4:22:ff:46:84:c0:ac:39:30:98:18: 99:54:f2:fe:5c:41:ae:41:90:00:6a:6b:3b:97:52:71:e1:35: 10:6d:e5:0e:37:66:0c:3f:fd:80:f2:c8:0c:92:9e:58:6d:b8: b0:32:8a:47:57:8a:eb:a0:ee:e0:3b:eb:ab:8c:81:63:a7:b4: 02:e2:d6:a8:9c:66:51:0d:c4:cd:22:8d:ed:ae:c5:dc:e9:e7: d0:5f:a0:40:d1:b1:98:f8:6d:44:9e:e4:20:74:fc:72:d6:2a: 93:f6:5b:0d:b3:a7:9b:77:86:69:e7:97:a2:24:b0:d2:71:61: f0:ac:85:c9:9e:df:12:28:c7:99:56:16:94:91:a7:a2:70:e8: 80:68:da:80:3d:12:37:51:66:a2:9f:2c:76:84:b1:36:32:63: 7b:ab:a3:6e:ec:50:8f:f4:23:53:2d:cc:a4:40:00:b7:3a:64: ad:5c:0e:58:93:ca:2f:42:1f:cc:21:ad:49:08:15:00:4c:2e: 19:83:a2:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EwQzAxMTAvBgNVBAUTKEEyNjYxNjdBMDRGQUZFRTVBRTFBNTBFMDQ1NzBBRDVG RDQ0RUQ2OTIwHhcNMjYwNDA1MDUzODU0WhcNMjYwNDEyMDUzODU0WjAYMRYwFAYD VQQDEw02OWQxZjU2Zi1kNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRqnjlHWj157hGeLEGc31vSy/GqQgp0OQBN8cYPw3nsnV77gN3WWsuuedMGE Ck0EhRydBsp6Kd4knEWkjxfaKHaVtEvJJBAjVj1YVd2yX5cdkiJJL/MN89GQnRlh sSgYfYJSyXKn+JRS/A9H8GmDcLrYTA+tQyEXSFMUa+yBJZ2oQEEHuk5AUnuzCQRg 1TcvaFNvp6uG8/F0N3VJrGMFVwNa9kvcV3xnueHsWy88pgTYQKxbPYfD7lEu+tPN H3DkUmTUiUFjFD+2NEs3VeT0+sV8vM4iGTfXqjdarGY376mh1RcsB5TgOmph558L bkxNDzcNYiRNU0Wl7VPysSd3jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCLQ4WB fe6Nov+LHL13elcVghSnMB8GA1UdIwQYMBaAFKJmFnoE+v7lrhpQ4EVwrV/UTtaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTBDMC80QTJFREM4MEI1 RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91V3VHbERnUlhDdFg5Uk8x cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91 V3VHbERnUlhDdFg5Uk8xcEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd2dsQSeAM7kt8Ybdtys1OVYQVCluUxOdfYz3DIz4f4BdLSC/42uOoq0PdhWS kSVjKqr5xUDwFBATyGB1B6Qi/0aEwKw5MJgYmVTy/lxBrkGQAGprO5dSceE1EG3l DjdmDD/9gPLIDJKeWG24sDKKR1eK66Du4Dvrq4yBY6e0AuLWqJxmUQ3EzSKN7a7F 3Onn0F+gQNGxmPhtRJ7kIHT8ctYqk/ZbDbOnm3eGaeeXoiSw0nFh8KyFyZ7fEijH mVYWlJGnonDogGjagD0SN1Fmop8sdoSxNjJje6ujbuxQj/QjUy3MpEAAtzpkrVwO WJPKL0IfzCGtSQgVAEwuGYOiDg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:47 2026 by rpki-client