$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft File: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json) Hash identifier: KKMDt9HvvR3WmfRWN0DrQ7cqFTy1CNX2VleKqQde9QQ= Subject key identifier: 1B:57:43:79:6D:CF:4C:78:56:0B:D2:08:B2:E9:4E:DB:3A:5B:D0:4D Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 Certificate issuer: /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft Manifest number: 31 Signing time: Mon 01 Jun 2026 09:28:43 +0000 Manifest this update: Mon 01 Jun 2026 09:28:43 +0000 Manifest next update: Mon 08 Jun 2026 09:28:43 +0000 Files and hashes: 1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: dZiJOBDsZNbsfABLew7qCOM9ekQrxHE5IMTpjfX3nOM=) 2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36 Validity Not Before: Jun 1 09:28:43 2026 GMT Not After : Jun 8 09:28:43 2026 GMT Subject: CN=6a1d50cb-f3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:71:2d:d7:7e:02:1f:a0:4c:3e:f2:87:f0: 37:da:cc:4f:18:00:1d:0a:b8:bc:e4:71:45:58:b1: 56:97:e3:13:08:2d:19:47:31:e6:55:83:0e:23:b2: f2:86:1b:3b:06:c7:0f:9d:45:15:28:97:51:4c:11: 86:a3:2a:d9:74:0c:56:11:fe:7e:15:dd:d0:56:71: 62:8c:77:03:43:aa:28:19:61:99:75:9a:ec:79:c8: e1:64:d4:49:b3:74:32:b8:de:c7:22:45:ed:71:08: 4f:40:4e:23:47:c5:aa:b2:53:71:60:5c:c2:07:53: 59:30:3b:56:9d:de:0d:bd:0d:6c:69:b1:1a:3c:1d: 56:e1:31:61:bd:37:1d:b2:2c:83:4e:cb:56:49:7d: 0b:8d:eb:7d:b0:1c:c7:ff:75:5b:25:91:23:3c:84: 7f:ae:1c:28:9c:65:fb:71:fc:b6:3a:7e:10:ae:37: 86:3e:e2:e3:59:76:88:e5:7b:16:e0:55:db:64:b6: 0e:0b:29:48:06:2e:01:5a:b0:04:9f:c4:fc:67:a7: 57:6b:a6:29:ef:fd:18:56:53:c0:3c:68:93:d5:14: 20:f0:b0:17:d4:f6:92:29:16:10:87:dd:8f:e4:6c: ee:3b:eb:81:4b:dd:82:a2:b9:72:6f:e3:21:b6:c2: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:43:79:6D:CF:4C:78:56:0B:D2:08:B2:E9:4E:DB:3A:5B:D0:4D X509v3 Authority Key Identifier: keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:05:e1:d1:96:55:3f:78:f5:2c:a1:73:25:ac:f5:a5:a9:06: 03:8e:e2:cc:7c:55:d3:14:b7:ea:af:f2:06:c7:c8:4e:35:6c: 58:0d:bd:9b:b1:29:58:0b:1c:98:e1:29:32:4c:0d:2a:25:79: a5:13:05:80:e5:4b:fe:52:bd:d2:83:f7:3d:81:e2:43:d5:62: c7:bf:94:f3:5b:77:83:70:a2:35:b6:36:f6:cf:f9:3c:87:a1: 19:b6:0c:4d:38:42:63:9e:05:a9:13:37:8c:69:ca:e9:cf:b9: e5:cf:86:05:95:26:ee:c3:25:6c:3c:35:4c:fe:84:a7:88:e4: 1d:51:c5:f1:a4:71:72:01:be:f1:c0:66:cc:68:64:b1:1f:56: 9e:eb:b1:43:7d:7f:99:2e:48:57:c9:3b:99:b1:0d:7d:e7:2b: 68:27:90:2c:d0:d3:1a:52:fd:52:61:a6:68:4a:54:2a:a1:c4: 2d:76:3d:39:99:70:d9:37:87:8e:38:09:91:86:e7:51:4b:95: b6:12:1e:8b:0e:3a:bf:16:d4:a3:2f:8a:5d:8a:40:8d:cd:8b: e8:d4:b4:81:29:84:65:48:a6:a7:63:47:77:be:5b:e0:19:56: 8d:cc:30:14:5a:e2:df:f1:7e:36:a0:21:90:a1:93:d9:cf:98: 79:73:cc:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjVDNjExMC8GA1UEBRMoQTE2RjE4REMwMTQ0RjI1NjQwNTg4NUY0MEQ4RDkyMjdF QzFCN0IzNjAeFw0yNjA2MDEwOTI4NDNaFw0yNjA2MDgwOTI4NDNaMBgxFjAUBgNV BAMTDTZhMWQ1MGNiLWYzZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK+3Et134CH6BMPvKH8DfazE8YAB0KuLzkcUVYsVaX4xMILRlHMeZVgw4jsvKG GzsGxw+dRRUol1FMEYajKtl0DFYR/n4V3dBWcWKMdwNDqigZYZl1mux5yOFk1Emz dDK43sciRe1xCE9ATiNHxaqyU3FgXMIHU1kwO1ad3g29DWxpsRo8HVbhMWG9Nx2y LINOy1ZJfQuN632wHMf/dVslkSM8hH+uHCicZftx/LY6fhCuN4Y+4uNZdojlexbg Vdtktg4LKUgGLgFasASfxPxnp1drpinv/RhWU8A8aJPVFCDwsBfU9pIpFhCH3Y/k bO4764FL3YKiuXJv4yG2wjNLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG1dDeW3P THhWC9IIsulO2zpb0E0wHwYDVR0jBBgwFoAUoW8Y3AFE8lZAWIX0DY2SJ+wbezYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NUM2LzEyOTM1MEM2MTc4 RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxaQVdJWDBEWTJTSi13YmV6 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1c4WTNBRkU4bFpBV0lYMERZMlNKLXdiZXpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NUM2LzEyOTM1MEM2MTc4RTExRjFCQTNGQTMxOTJCM0Q4QzY3L29XOFkzQUZFOGxa QVdJWDBEWTJTSi13YmV6WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCBeHRllU/ePUsoXMlrPWlqQYDjuLMfFXTFLfqr/IGx8hONWxYDb2bsSlYCxyY 4SkyTA0qJXmlEwWA5Uv+Ur3Sg/c9geJD1WLHv5TzW3eDcKI1tjb2z/k8h6EZtgxN OEJjngWpEzeMacrpz7nlz4YFlSbuwyVsPDVM/oSniOQdUcXxpHFyAb7xwGbMaGSx H1ae67FDfX+ZLkhXyTuZsQ195ytoJ5As0NMaUv1SYaZoSlQqocQtdj05mXDZN4eO OAmRhudRS5W2Eh6LDjq/FtSjL4pdikCNzYvo1LSBKYRlSKanY0d3vlvgGVaNzDAU WuLf8X42oCGQoZPZz5h5c8xJ -----END CERTIFICATE-----Generated at Tue Jun 2 21:33:42 2026 by rpki-client