$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft File: oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft (raw, json) Hash identifier: g2ptmqY/IpjCiZSv9ajDyjqa1i5cOvSwjRXPGuQg4eU= Subject key identifier: 3A:6B:94:58:DB:AD:B2:3B:6A:4E:74:F5:BA:06:4A:00:16:F1:0B:EA Authority key identifier: A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24 Certificate issuer: /CN=A917F429/serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft Manifest number: 14 Signing time: Tue 19 May 2026 08:53:28 +0000 Manifest this update: Tue 19 May 2026 08:53:27 +0000 Manifest next update: Tue 26 May 2026 08:53:27 +0000 Files and hashes: 1: oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl (hash: kmm2uVWfL5Ckc3NEY5SoX9el959f92ApkLDQ/QVlzak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F429, serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24 Validity Not Before: May 19 08:53:27 2026 GMT Not After : May 26 08:53:27 2026 GMT Subject: CN=6a0c2507-d54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:61:de:a7:95:63:8f:0d:48:d4:48:9d:06: ca:ee:27:a4:f6:38:ba:9e:3c:27:db:52:64:81:5c: 34:d7:0a:31:5b:b8:a6:58:c7:5f:89:74:99:26:9c: 78:bb:f8:c7:ff:b4:7d:7b:44:e7:94:6a:03:a3:e4: cf:20:48:a4:8a:ee:30:12:d3:69:b1:95:3f:ec:eb: fa:24:76:8b:33:48:f5:67:63:c3:d6:74:38:08:fb: 89:7e:fc:95:7e:26:73:dd:d8:1c:26:78:2e:b6:91: fb:b3:59:c6:f4:62:01:14:a6:da:da:f6:44:1d:00: de:bd:93:60:53:1f:12:c9:bd:9e:e2:b7:3b:b8:c3: ec:5f:5c:b2:e8:a1:32:77:8f:7e:58:99:81:d2:d1: ac:50:c4:18:ea:d5:71:cf:7f:d5:d1:95:22:fd:55: 7c:db:5b:1b:b4:cf:91:c0:14:11:e3:b6:77:b0:b4: 2b:48:f6:2a:d8:95:88:20:85:bc:98:a1:74:12:7b: 64:cb:a2:63:b9:26:07:be:cf:78:16:1a:58:11:0b: 2a:c0:2f:db:0e:fb:f2:9d:7c:03:98:b6:15:d5:ac: d2:e5:d7:1f:1b:9b:fd:c7:b9:2f:c2:f8:8e:cb:d6: d3:83:0d:6f:43:8c:e9:65:8a:bd:93:4d:8b:b9:ee: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6B:94:58:DB:AD:B2:3B:6A:4E:74:F5:BA:06:4A:00:16:F1:0B:EA X509v3 Authority Key Identifier: keyid:A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:3a:7c:3c:92:aa:4e:aa:bd:b8:69:5c:c6:8e:e8:98:d6:f6: 21:92:18:00:9e:6a:3f:e3:a5:61:bc:ad:c2:14:d2:2a:3f:81: 15:12:04:34:46:a9:d4:27:5f:83:61:91:65:52:27:13:ae:82: d2:91:fb:08:70:a1:84:f3:80:6c:68:35:9a:a6:77:0c:67:4d: 0e:2f:3e:c6:88:52:45:f2:f7:16:a8:a0:06:1b:4a:ab:50:bb: 3c:7a:a8:d5:a1:6e:ab:3d:95:48:c3:06:ad:24:2f:20:77:cc: fe:58:86:2d:d1:b1:e0:d7:5f:69:e3:37:a8:3c:b0:91:86:7d: bd:69:c2:7b:07:fe:e6:53:98:4d:32:b8:08:f3:22:44:f8:fa: 97:e3:c9:c5:e5:93:33:7e:19:af:5a:ea:9c:3f:e7:5d:f1:87: d6:dd:7e:ef:a9:ea:76:85:80:5c:fe:10:68:50:15:80:c4:8b: 72:4f:44:fd:86:b8:b8:18:b9:e9:6a:e8:e0:c5:ca:a8:99:7c: 56:c6:b2:10:2a:be:bc:5d:44:ac:79:93:6f:67:22:6f:e0:42: 9f:2b:e0:8d:9f:5d:2b:0c:6d:90:03:ef:97:bc:c3:17:cf:4c: ef:44:34:49:ea:cf:b1:5f:92:3e:f5:8a:c7:6a:63:cd:a9:d0: 46:7c:1e:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjQyOTExMC8GA1UEBRMoQTE2MjM3QjE4MzBDRDI0MDI5ODhBQTBCMzBBQTY3NjQz MEY2NUMyNDAeFw0yNjA1MTkwODUzMjdaFw0yNjA1MjYwODUzMjdaMBgxFjAUBgNV BAMTDTZhMGMyNTA3LWQ1NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGXWHep5Vjjw1I1EidBsruJ6T2OLqePCfbUmSBXDTXCjFbuKZYx1+JdJkmnHi7 +Mf/tH17ROeUagOj5M8gSKSK7jAS02mxlT/s6/okdoszSPVnY8PWdDgI+4l+/JV+ JnPd2BwmeC62kfuzWcb0YgEUptra9kQdAN69k2BTHxLJvZ7itzu4w+xfXLLooTJ3 j35YmYHS0axQxBjq1XHPf9XRlSL9VXzbWxu0z5HAFBHjtnewtCtI9irYlYgghbyY oXQSe2TLomO5Jge+z3gWGlgRCyrAL9sO+/KdfAOYthXVrNLl1x8bm/3HuS/C+I7L 1tODDW9DjOllir2TTYu57tS7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOmuUWNut sjtqTnT1ugZKABbxC+owHwYDVR0jBBgwFoAUoWI3sYMM0kApiKoLMKpnZDD2XCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzBCMDAxMUU2Mzcx OTExRjFBNjZCRDlGOEM2ODMzNzczL29XSTNzWU1NMGtBcGlLb0xNS3BuWkREMlhD US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1dJM3NZTU0wa0FwaUtvTE1LcG5aREQyWENRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NDI5LzBCMDAxMUU2MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL29XSTNzWU1NMGtB cGlLb0xNS3BuWkREMlhDUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJOnw8kqpOqr24aVzGjuiY1vYhkhgAnmo/46VhvK3CFNIqP4EVEgQ0RqnUJ1+D YZFlUicTroLSkfsIcKGE84BsaDWapncMZ00OLz7GiFJF8vcWqKAGG0qrULs8eqjV oW6rPZVIwwatJC8gd8z+WIYt0bHg119p4zeoPLCRhn29acJ7B/7mU5hNMrgI8yJE +PqX48nF5ZMzfhmvWuqcP+dd8YfW3X7vqep2hYBc/hBoUBWAxItyT0T9hri4GLnp aujgxcqomXxWxrIQKr68XUSseZNvZyJv4EKfK+CNn10rDG2QA++XvMMXz0zvRDRJ 6s+xX5I+9YrHamPNqdBGfB7W -----END CERTIFICATE-----Generated at Thu May 21 09:34:23 2026 by rpki-client