$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json) Hash identifier: JgUSx/MO2AeHbS1Psjse2lbhxvbtjNqO1vxpxlIs1e8= Subject key identifier: 43:ED:47:91:71:51:33:EA:80:4B:0F:D4:F2:80:C7:18:22:E4:D9:AE Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft Manifest number: 1A Signing time: Fri 17 Apr 2026 08:39:37 +0000 Manifest this update: Fri 17 Apr 2026 08:39:36 +0000 Manifest next update: Fri 24 Apr 2026 08:39:36 +0000 Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: eAYWZw5NrnnfsbZVzIpqChCX8/JmT+Ixtl5TCBiDqA4=) 2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Validity Not Before: Apr 17 08:39:36 2026 GMT Not After : Apr 24 08:39:36 2026 GMT Subject: CN=69e1f1c9-e087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:9a:8e:a8:b0:19:13:41:61:84:33:d7:2c: ff:52:87:f3:cf:d4:0c:86:a3:00:4d:5d:3d:bb:3b: 04:22:f0:cf:f4:ba:55:77:84:ca:c3:07:25:a9:fb: bd:42:a2:88:b1:99:6c:48:d5:cf:16:a4:f0:7f:bd: 85:4c:39:c2:3e:0f:b7:f7:50:cb:8e:7d:7e:51:46: 7c:a2:6a:c2:67:f4:d8:28:c4:c1:40:06:bc:bc:12: 55:9d:d8:3c:73:d8:6c:d5:b1:43:58:0f:86:9d:a0: e3:7c:ec:f9:4d:4e:e0:35:d8:de:56:be:87:a7:6a: 75:86:77:89:4d:e1:e4:93:bc:1a:e0:9d:d6:c3:f0: 61:24:84:2b:5c:a7:62:42:b2:45:fe:f5:49:4b:61: c6:4e:01:00:58:f5:a6:18:0c:58:9a:51:ae:f5:f8: d2:69:a5:2e:7b:55:e3:93:47:6c:5c:d1:aa:d9:df: aa:0f:20:b5:c6:75:a3:0b:1a:0d:f5:69:99:61:f9: e0:05:6d:ee:0c:97:9d:96:ac:46:da:4e:d6:c6:23: 91:a5:99:c8:25:4b:9c:b6:8b:aa:3b:5b:76:3f:24: a0:a0:55:55:4b:64:de:cd:b6:3d:6b:cc:c1:58:60: 40:41:d0:1c:57:0f:b9:46:c4:eb:e3:4d:8b:dc:6b: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:ED:47:91:71:51:33:EA:80:4B:0F:D4:F2:80:C7:18:22:E4:D9:AE X509v3 Authority Key Identifier: keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b4:33:73:23:02:32:b5:67:a0:dd:fd:10:6f:cb:9a:48:aa: a0:12:23:19:59:33:2d:44:c2:a3:d1:82:47:20:d9:58:d9:cd: 21:de:c5:d9:20:12:25:e1:2c:fe:aa:31:67:e2:a3:4e:ed:97: ec:12:40:fd:8c:3c:ee:d4:2a:e5:03:f7:34:d0:c7:2b:6e:33: 03:89:68:b7:32:76:f3:e1:14:ef:5e:97:ee:db:51:9a:aa:a3: c3:36:63:cc:5b:af:c5:d8:c9:13:7d:76:3d:d5:20:c6:e2:05: 07:ae:cc:ac:b3:39:ca:dc:c2:63:dd:6f:4f:4e:82:2c:2a:40: 17:96:96:96:5c:f7:b0:87:24:f2:5c:a7:89:2a:0f:26:9d:db: 8a:9d:34:ab:95:d6:5f:32:2b:4b:53:47:01:4e:23:4b:20:a7: 62:d3:ca:3e:49:9d:4c:ae:92:cd:bb:61:3e:2e:e4:5d:a2:b1: 33:0b:db:4f:85:62:4c:85:07:c3:1d:ad:e1:ba:4e:82:b3:a0: f9:95:ff:f6:48:25:2f:dc:98:87:4e:ea:b0:4f:c5:22:47:b8: b5:b5:f8:46:60:fa:da:48:40:db:df:97:a9:1a:44:13:ce:36: e6:aa:f6:f7:e1:08:e1:f6:55:a3:ea:cd:2d:33:b1:f7:44:4c: 28:a5:d9:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjVDNjExMC8GA1UEBRMoQTE2RjE4REMwMTQ0RjI1NjQwNTg4NUY0MEQ4RDkyMjdF QzFCN0IzNjAeFw0yNjA0MTcwODM5MzZaFw0yNjA0MjQwODM5MzZaMBgxFjAUBgNV BAMTDTY5ZTFmMWM5LWUwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIQpqOqLAZE0FhhDPXLP9Sh/PP1AyGowBNXT27OwQi8M/0ulV3hMrDByWp+71C ooixmWxI1c8WpPB/vYVMOcI+D7f3UMuOfX5RRnyiasJn9NgoxMFABry8ElWd2Dxz 2GzVsUNYD4adoON87PlNTuA12N5WvoenanWGd4lN4eSTvBrgndbD8GEkhCtcp2JC skX+9UlLYcZOAQBY9aYYDFiaUa71+NJppS57VeOTR2xc0arZ36oPILXGdaMLGg31 aZlh+eAFbe4Ml52WrEbaTtbGI5GlmcglS5y2i6o7W3Y/JKCgVVVLZN7Ntj1rzMFY YEBB0BxXD7lGxOvjTYvca2IJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQ+1HkXFR M+qASw/U8oDHGCLk2a4wHwYDVR0jBBgwFoAUoW8Y3AFE8lZAWIX0DY2SJ+wbezYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NUM2LzEyOTM1MEM2MTc4 RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxaQVdJWDBEWTJTSi13YmV6 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1c4WTNBRkU4bFpBV0lYMERZMlNKLXdiZXpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NUM2LzEyOTM1MEM2MTc4RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxa QVdJWDBEWTJTSi13YmV6WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+tDNzIwIytWeg3f0Qb8uaSKqgEiMZWTMtRMKj0YJHINlY2c0h3sXZIBIl4Sz+ qjFn4qNO7ZfsEkD9jDzu1CrlA/c00McrbjMDiWi3Mnbz4RTvXpfu21GaqqPDNmPM W6/F2MkTfXY91SDG4gUHrsyssznK3MJj3W9PToIsKkAXlpaWXPewhyTyXKeJKg8m nduKnTSrldZfMitLU0cBTiNLIKdi08o+SZ1MrpLNu2E+LuRdorEzC9tPhWJMhQfD Ha3huk6Cs6D5lf/2SCUv3JiHTuqwT8UiR7i1tfhGYPraSEDb35epGkQTzjbmqvb3 4Qjh9lWj6s0tM7H3REwopdke -----END CERTIFICATE-----Generated at Sat Apr 18 20:58:44 2026 by rpki-client