$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft File: o1EXGLQporBD5kW_sWUO5nd-QXI.mft (raw, json) Hash identifier: Mav3FlpYMsq7dMA3jyoUZhxtCc0G83+Olu4u0gJtXQk= Subject key identifier: 37:C3:2F:53:AB:12:AA:2F:60:93:53:F0:B5:31:1C:AF:94:FA:0C:BB Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft Manifest number: 08A9 Signing time: Sat 04 Apr 2026 20:15:10 +0000 Manifest this update: Sat 04 Apr 2026 20:15:09 +0000 Manifest next update: Sat 11 Apr 2026 20:15:09 +0000 Files and hashes: 1: o1EXGLQporBD5kW_sWUO5nd-QXI.crl (hash: d0UmBmSRe/fIzbdiGhyKoWLAu7CrjBi5aEFQcaoH+Zs=) 2: F48207E6DB8711EAA446B360C4F9AE02.roa (hash: VKLSV9fn0AYGuNs5W6g646lEixU0mZbJvam1SUJ+8wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: Apr 4 20:15:09 2026 GMT Not After : Apr 11 20:15:09 2026 GMT Subject: CN=69d1714e-ed7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:4f:41:d6:84:e9:30:2f:bb:f7:23:5e:8b: 4d:3b:71:dc:eb:46:b4:1f:de:50:60:bf:67:5e:ec: 83:b8:ad:5b:0d:fb:db:6a:6a:9b:c5:c8:8a:1a:de: 66:60:79:51:7f:86:ff:ac:30:73:87:97:b6:30:c5: ff:0e:19:b2:b9:e6:83:cd:ad:28:bb:c5:8d:0d:7f: e4:73:ce:30:25:08:3f:7e:00:b3:e6:1a:71:a6:1f: f9:27:ce:a4:6b:e0:76:62:aa:a9:d1:12:11:72:f1: ab:b3:3e:bc:52:fe:d4:8c:5d:c7:d4:6d:e6:52:dd: fd:d4:03:6f:a8:36:88:66:92:84:44:56:8a:92:cc: d1:75:01:31:30:58:55:4c:2d:9a:f6:78:2a:25:f5: 79:ba:0b:ea:be:ee:55:c7:92:1f:9b:d9:71:95:dc: 11:3c:73:7a:c2:c9:71:14:4b:d0:a4:e2:a1:6c:66: b9:43:6f:0a:2a:2d:d8:5f:2b:ff:9c:9c:c8:8d:bd: fd:9e:cd:8c:dc:37:8f:70:dc:f9:d1:31:c5:78:b5: e8:0a:b0:fd:b0:fe:a5:a9:1e:e8:a7:35:15:e4:3f: ac:70:a2:35:e4:cd:10:b8:a5:8d:95:1f:5f:e2:0a: 5d:4a:41:a9:1d:9f:84:1e:4a:89:72:3d:0c:aa:95: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:2F:53:AB:12:AA:2F:60:93:53:F0:B5:31:1C:AF:94:FA:0C:BB X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a2:68:37:36:d7:5b:84:be:07:4b:89:45:cf:9f:65:9a:7e: 4a:cc:33:17:25:84:10:40:bf:2b:5d:a8:1b:2c:51:e1:46:d9: d8:78:56:66:c4:75:1e:73:e1:9e:87:97:f5:6a:6e:c3:9f:cc: 6b:76:af:8f:08:f8:95:eb:f3:e3:f2:f8:c5:68:06:6a:83:a9: ff:c2:5b:b2:9b:1d:85:d7:8f:2d:da:0f:09:d9:7e:89:af:c6: 53:c9:a0:69:bf:be:0a:df:fb:e8:30:18:49:87:2c:34:25:13: 1e:90:52:c0:39:86:f6:45:17:c8:45:9e:95:55:d1:72:31:c2: ed:65:09:7c:e1:95:ea:a5:d5:0c:5a:e8:0d:01:c4:2c:e5:a3: 4a:43:95:88:47:b4:53:00:52:1f:98:45:dd:6a:97:e0:5e:31: 6a:05:19:29:7a:d3:00:2a:fd:eb:74:8f:73:14:31:7b:e4:e2: dc:69:17:2d:6d:92:3d:a9:ea:d9:a0:f6:50:19:fc:51:dc:3e: f0:a3:14:47:46:c6:0b:ae:71:57:f2:fe:95:fd:a6:df:0b:dc: 90:8b:c4:86:02:7c:fa:a6:13:4b:4b:c2:2f:da:e5:30:7b:f0: 29:5a:19:6c:52:ab:c0:fb:f2:25:b5:6e:22:68:fa:c3:d8:da: 32:0b:98:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjYwNDA0MjAxNTA5WhcNMjYwNDExMjAxNTA5WjAYMRYwFAYD VQQDEw02OWQxNzE0ZS1lZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZdPQdaE6TAvu/cjXotNO3Hc60a0H95QYL9nXuyDuK1bDfvbamqbxciKGt5m YHlRf4b/rDBzh5e2MMX/DhmyueaDza0ou8WNDX/kc84wJQg/fgCz5hpxph/5J86k a+B2Yqqp0RIRcvGrsz68Uv7UjF3H1G3mUt391ANvqDaIZpKERFaKkszRdQExMFhV TC2a9ngqJfV5ugvqvu5Vx5Ifm9lxldwRPHN6wslxFEvQpOKhbGa5Q28KKi3YXyv/ nJzIjb39ns2M3DePcNz50THFeLXoCrD9sP6lqR7opzUV5D+scKI15M0QuKWNlR9f 4gpdSkGpHZ+EHkqJcj0MqpXEZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfDL1Or EqovYJNT8LUxHK+U+gy7MB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUNGNi8zNDk3ODNFRURCODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9y QkQ1a1dfc1dVTzVuZC1RWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArqJoNzbXW4S+B0uJRc+fZZp+SswzFyWEEEC/K12oGyxR4UbZ2HhWZsR1HnPh noeX9Wpuw5/Ma3avjwj4levz4/L4xWgGaoOp/8JbspsdhdePLdoPCdl+ia/GU8mg ab++Ct/76DAYSYcsNCUTHpBSwDmG9kUXyEWelVXRcjHC7WUJfOGV6qXVDFroDQHE LOWjSkOViEe0UwBSH5hF3WqX4F4xagUZKXrTACr963SPcxQxe+Ti3GkXLW2SPanq 2aD2UBn8Udw+8KMUR0bGC65xV/L+lf2m3wvckIvEhgJ8+qYTS0vCL9rlMHvwKVoZ bFKrwPvyJbVuImj6w9jaMguYfA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:47 2026 by rpki-client