$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json) Hash identifier: WK02dhL+vZ/PJ0KD9Fvthps2MAY20+i85SJZwWmglfM= Subject key identifier: 7A:B2:F8:BE:D4:2C:34:C8:3C:F3:01:D0:4F:41:7F:10:EF:1D:22:26 Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft Manifest number: 0401 Signing time: Thu 21 May 2026 00:30:31 +0000 Manifest this update: Thu 21 May 2026 00:30:30 +0000 Manifest next update: Thu 28 May 2026 00:30:30 +0000 Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: JZQVpRDjDwjamSnmBSgF8yCHaAMi+AKqTcVkYKdiM1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830 Validity Not Before: May 21 00:30:30 2026 GMT Not After : May 28 00:30:30 2026 GMT Subject: CN=6a0e5226-f642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:e7:4d:6f:f7:db:3c:aa:f1:24:c2:ad:08: 33:91:c2:91:50:78:9d:7b:14:6d:eb:e6:12:dd:84: ea:18:68:d5:0d:79:84:bb:36:ba:11:a2:6b:9b:5b: b0:d1:af:dd:7c:80:14:fe:25:9b:7c:1f:ec:17:13: 69:00:ca:81:05:92:23:34:aa:52:5f:18:87:a8:09: 1a:c0:75:72:76:80:2f:4f:ab:66:40:ba:9a:0c:69: 2e:a3:8d:ad:7c:d1:f5:ef:84:8b:07:bb:3a:c9:0b: 80:1a:49:f5:0b:a4:30:a8:12:28:b7:96:c5:81:4f: 84:af:a9:27:0e:00:4f:18:cb:29:9f:10:8f:0e:be: 0b:1a:71:38:61:dc:25:b3:78:c9:58:dd:cf:18:15: a2:ac:81:e0:ae:bd:1b:1a:21:31:f6:10:9a:c4:a3: c3:74:c3:06:24:7e:8e:90:9f:b4:56:f6:63:6b:0d: 9a:90:47:f8:3a:fb:b7:4a:f7:5b:52:84:f9:b3:c8: 8c:c4:34:8e:ca:1b:b4:55:59:77:1f:75:04:79:ec: 9e:1b:f4:37:9c:54:79:eb:20:bc:3a:ee:c8:71:fa: 28:d2:99:e3:71:fc:3b:18:b8:1f:a7:b6:9b:35:3c: 14:25:6b:93:31:1d:d4:51:0b:db:e7:22:45:5a:bb: 98:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:F8:BE:D4:2C:34:C8:3C:F3:01:D0:4F:41:7F:10:EF:1D:22:26 X509v3 Authority Key Identifier: keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2c:91:48:60:e0:7a:aa:02:0e:d0:be:d0:5b:76:75:c3:d2: b1:f4:bb:6a:75:ea:17:ba:f0:c6:21:97:7d:6a:41:03:02:dd: 4f:57:57:c4:52:1c:38:a0:93:a5:91:81:94:c9:bd:5a:f4:82: 9c:ea:3f:9a:23:13:c1:3a:2a:b2:ae:77:cf:3e:5a:ad:a0:a3: ae:f1:3f:dd:38:67:50:d3:4f:65:24:f8:3e:13:fd:39:45:f9: ee:14:29:d0:47:86:50:cd:4f:c0:a8:c7:ef:f1:41:d0:b2:14: ce:75:7e:c0:4f:b0:6b:20:af:98:54:6c:57:db:92:24:f2:42: 80:32:5f:6b:f2:be:1d:89:ea:46:92:b9:67:02:8c:f8:11:d5: 52:06:d2:2a:6e:e1:d8:8c:30:ad:a8:de:87:5c:34:41:4e:73: d5:9d:75:b1:0a:22:21:5c:76:ba:5d:48:1d:64:44:b2:b6:b2: ad:ce:00:c2:47:46:49:b3:42:8b:a2:10:04:6a:02:b1:ca:17: 24:4f:40:6d:2b:73:d3:0b:12:28:98:06:c6:fa:27:9a:a9:b1: 7a:43:b9:c5:a0:03:3b:2f:96:80:4f:2c:79:11:79:26:1c:33: 43:b5:f1:9f:58:b3:42:c3:5b:71:4d:53:3d:aa:84:f9:1d:66: b1:33:8d:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjREQUE0QjdFQjFG MENERjY4MzAwHhcNMjYwNTIxMDAzMDMwWhcNMjYwNTI4MDAzMDMwWjAYMRYwFAYD VQQDEw02YTBlNTIyNi1mNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2nnTW/32zyq8STCrQgzkcKRUHidexRt6+YS3YTqGGjVDXmEuza6EaJrm1uw 0a/dfIAU/iWbfB/sFxNpAMqBBZIjNKpSXxiHqAkawHVydoAvT6tmQLqaDGkuo42t fNH174SLB7s6yQuAGkn1C6QwqBIot5bFgU+Er6knDgBPGMspnxCPDr4LGnE4Ydwl s3jJWN3PGBWirIHgrr0bGiEx9hCaxKPDdMMGJH6OkJ+0VvZjaw2akEf4Ovu3Svdb UoT5s8iMxDSOyhu0VVl3H3UEeeyeG/Q3nFR56yC8Ou7Icfoo0pnjcfw7GLgfp7ab NTwUJWuTMR3UUQvb5yJFWruYtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqy+L7U LDTIPPMB0E9BfxDvHSImMB8GA1UdIwQYMBaAFDmFQGCy9Y1MkZxk2qS36x8M32gw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUE1MS9BRjY5MEY2MEI5 MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpVeVJuR1RhcExmckh3emZh REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ZVkFZTEwxalV5Um5HVGFwTGZySHd6ZmFEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxMMWpV eVJuR1RhcExmckh3emZhREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlCyRSGDgeqoCDtC+0Ft2dcPSsfS7anXqF7rwxiGXfWpBAwLdT1dXxFIcOKCT pZGBlMm9WvSCnOo/miMTwToqsq53zz5araCjrvE/3ThnUNNPZST4PhP9OUX57hQp 0EeGUM1PwKjH7/FB0LIUznV+wE+wayCvmFRsV9uSJPJCgDJfa/K+HYnqRpK5ZwKM +BHVUgbSKm7h2Iwwrajeh1w0QU5z1Z11sQoiIVx2ul1IHWREsrayrc4AwkdGSbNC i6IQBGoCscoXJE9AbStz0wsSKJgGxvonmqmxekO5xaADOy+WgE8seRF5JhwzQ7Xx n1izQsNbcU1TPaqE+R1msTONNg== -----END CERTIFICATE-----Generated at Thu May 21 09:36:38 2026 by rpki-client