$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: aLNoCK4aWrkvRx6dhZ1eirhKxhl5rw8MYw3gsTFww98= Subject key identifier: 16:DB:45:07:A8:EC:5B:6D:D8:B6:F5:7A:6F:E7:40:82:8A:F0:1D:C3 Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0C77 Signing time: Sat 04 Apr 2026 18:26:11 +0000 Manifest this update: Sat 04 Apr 2026 18:26:11 +0000 Manifest next update: Sat 11 Apr 2026 18:26:11 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: 2C64cTK50tSweYXiyQRtWOWMRsfP8OC+uDBDt+s7fJg=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: gdFcJrPQtvbCIqeSBLzpbCtAXnKIWEBcSmlGfLFP1iM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: Apr 4 18:26:11 2026 GMT Not After : Apr 11 18:26:11 2026 GMT Subject: CN=69d157c3-c3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:02:f6:9c:7f:16:ae:ea:b6:be:c9:65:a9: 85:d3:8c:f4:53:4f:1b:02:17:af:cb:11:0f:c6:71: ef:fc:84:d2:55:62:3a:f8:f5:c1:9d:c2:8f:e8:7d: e2:8b:8b:80:6a:21:af:ea:c7:64:4d:58:a1:61:bd: 01:65:70:f0:a4:7f:fe:68:7e:f3:86:fe:f0:d5:7e: 94:05:af:2c:bc:52:5f:8e:16:4d:2a:63:b3:95:3b: ff:e1:27:1f:e1:5c:9f:3c:bc:e8:f9:a3:7d:3c:cd: c3:c2:91:a4:2c:14:af:1f:bc:4f:22:c6:a4:6c:38: 3c:dc:e0:42:86:60:f8:13:c9:1d:04:90:0e:1b:b5: 31:3a:fc:bb:8c:52:7b:40:9c:53:79:8e:fb:26:87: 86:6f:0d:40:3f:d1:cc:20:45:a0:f7:33:b3:ef:8b: ec:88:fb:58:78:f5:20:e7:c9:cc:a9:59:c0:2a:c5: 00:15:e2:8b:3f:a2:ba:4c:2e:72:a4:47:1b:f3:d1: 0f:ba:4b:67:39:d0:62:36:4a:cd:ac:dc:1f:97:d2: 72:42:49:3b:7a:d7:cd:d7:f3:81:6b:2d:b1:68:88: d7:2b:79:a7:35:58:ca:99:5b:8b:8a:b3:4a:d9:9d: c1:4a:f9:d4:74:2d:73:bf:1d:17:45:29:76:22:9c: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:45:07:A8:EC:5B:6D:D8:B6:F5:7A:6F:E7:40:82:8A:F0:1D:C3 X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b6:6e:64:f2:6b:59:18:2a:6e:d7:08:c1:ab:c1:63:ff:a6: cd:fe:04:8c:3e:7e:52:d2:95:73:d3:92:a6:92:cf:d6:be:01: 4a:2d:a3:45:5e:88:8e:b5:06:2d:61:6c:df:7d:d2:cb:71:e2: e4:53:93:3e:22:ca:d2:a0:97:86:2d:fd:4f:0c:b8:95:55:ca: e3:5d:26:64:37:c2:ef:8c:44:c9:0f:96:b9:63:c9:24:ac:64: c0:89:bd:7a:a7:32:76:ef:ef:58:b0:61:9f:83:6d:a2:17:ae: d8:b8:f6:e4:cd:01:f9:ab:34:dc:9b:39:3a:3f:75:e9:a7:88: 54:38:b5:02:a1:36:44:5b:f9:b9:e7:16:2e:15:8f:cb:72:bc: 74:c5:4e:91:f0:55:ae:67:ad:99:a1:65:c9:ca:30:2a:5b:da: 5e:e3:c6:9f:9c:51:24:0f:80:db:05:d8:56:8e:71:d6:3b:42: 31:74:90:6e:f9:37:16:a4:63:9e:76:1a:5e:54:82:29:22:84: e4:8a:2b:b9:7e:e3:c3:ef:3d:c7:37:f1:2a:d7:d8:9a:bd:7d: cd:48:6a:2e:28:d8:52:b1:eb:54:c7:30:e9:23:f7:c5:20:02: ba:e7:3b:4f:6e:5f:94:a1:ac:85:5d:6c:39:39:aa:9e:d8:d7: 19:f4:5b:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjYwNDA0MTgyNjExWhcNMjYwNDExMTgyNjExWjAYMRYwFAYD VQQDEw02OWQxNTdjMy1jM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAimUC9px/Fq7qtr7JZamF04z0U08bAhevyxEPxnHv/ITSVWI6+PXBncKP6H3i i4uAaiGv6sdkTVihYb0BZXDwpH/+aH7zhv7w1X6UBa8svFJfjhZNKmOzlTv/4Scf 4VyfPLzo+aN9PM3DwpGkLBSvH7xPIsakbDg83OBChmD4E8kdBJAOG7UxOvy7jFJ7 QJxTeY77JoeGbw1AP9HMIEWg9zOz74vsiPtYePUg58nMqVnAKsUAFeKLP6K6TC5y pEcb89EPuktnOdBiNkrNrNwfl9JyQkk7etfN1/OBay2xaIjXK3mnNVjKmVuLirNK 2Z3BSvnUdC1zvx0XRSl2Ipx3LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbbRQeo 7Ftt2Lb1em/nQIKK8B3DMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn7ZuZPJrWRgqbtcIwavBY/+mzf4EjD5+UtKVc9OSppLP1r4BSi2jRV6IjrUG LWFs333Sy3Hi5FOTPiLK0qCXhi39Twy4lVXK410mZDfC74xEyQ+WuWPJJKxkwIm9 eqcydu/vWLBhn4Ntoheu2Lj25M0B+as03Js5Oj916aeIVDi1AqE2RFv5uecWLhWP y3K8dMVOkfBVrmetmaFlycowKlvaXuPGn5xRJA+A2wXYVo5x1jtCMXSQbvk3FqRj nnYaXlSCKSKE5IoruX7jw+89xzfxKtfYmr19zUhqLijYUrHrVMcw6SP3xSACuuc7 T25flKGshV1sOTmqntjXGfRbxg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:03 2026 by rpki-client