$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json) Hash identifier: oKMlWex4Y54L3fc+FIrcXKbrYzdSck2IV8V1GuENkgc= Subject key identifier: C9:33:48:85:6D:72:80:3C:58:B3:DF:D6:2B:CD:40:A8:A6:7B:C8:74 Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft Manifest number: 03E3 Signing time: Thu 21 May 2026 00:37:57 +0000 Manifest this update: Thu 21 May 2026 00:37:56 +0000 Manifest next update: Thu 28 May 2026 00:37:56 +0000 Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: vzge4QQFMEpy7pZyafYOy16Lfo32OaIf6GQiI0apA9c=) 2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Validity Not Before: May 21 00:37:56 2026 GMT Not After : May 28 00:37:56 2026 GMT Subject: CN=6a0e53e5-7d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ff:fd:3a:bf:b6:03:7b:e3:63:81:36:f1:16: 69:61:c5:c0:8e:d6:f2:62:05:47:4f:e4:6e:3f:8d: 29:d2:58:48:3a:be:f5:db:35:a8:9e:93:c5:5d:a5: 21:cd:0b:2d:8d:e0:67:fe:4f:7a:98:73:3f:90:96: 34:09:50:46:f6:7b:8a:a5:72:76:da:8a:51:48:af: bd:95:e0:18:2b:96:ca:94:1f:3e:b4:3c:92:8d:eb: b0:61:bf:6d:25:53:ac:f1:e1:01:45:82:43:d8:2f: 2f:0c:1b:04:36:62:a2:c8:71:0a:9f:83:d9:a3:17: 17:36:03:00:ec:85:07:cf:ef:55:94:0c:cd:87:0c: 54:6f:a3:06:c6:a9:8a:66:92:3e:20:ee:c2:a4:4a: 8a:f4:c6:7c:61:ce:18:76:cc:f7:d0:f4:70:c7:72: 8a:53:e1:16:4d:a9:56:72:28:2e:1c:04:78:80:0d: b7:23:5e:e9:61:17:37:dc:52:81:42:24:61:dd:75: 81:73:e7:10:9c:2b:53:f0:35:9c:07:47:62:6c:31: 90:ef:8b:2b:88:c2:06:4d:5f:e5:63:31:35:fa:4a: 4d:90:eb:fc:dc:10:be:ce:c4:6f:d7:10:d8:74:91: af:3a:36:f3:f9:01:2d:85:b9:ab:11:cc:1b:fa:55: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:48:85:6D:72:80:3C:58:B3:DF:D6:2B:CD:40:A8:A6:7B:C8:74 X509v3 Authority Key Identifier: keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:10:4f:62:3e:42:41:23:dd:d2:e3:e7:54:d9:a5:7c:5d:10: c6:d7:dd:71:bd:18:68:7d:5a:9a:54:38:97:51:c1:93:40:a5: a2:69:8d:73:f9:fd:ff:29:03:1b:a7:43:2b:f8:84:41:8f:f1: 10:b1:eb:85:0d:72:63:64:f8:4a:31:1c:fc:bb:1e:16:c5:83: d6:d3:98:f7:e0:c0:57:81:7c:68:b1:68:15:22:0d:2e:0d:e0: 39:fa:97:33:3e:47:73:59:28:57:21:8d:34:8a:b2:0f:52:b2: fd:65:67:1f:d3:17:b0:8f:17:25:cf:ed:43:af:60:f1:f1:9b: 1b:06:53:c4:c5:b1:8f:d9:78:59:e0:7c:11:94:0c:63:d7:b3: 24:84:29:ca:21:b4:eb:de:f5:c6:30:f4:c6:3f:22:72:42:6d: 5a:70:b7:af:53:0d:37:81:fb:24:32:f1:ea:17:3f:c1:4f:73: a6:58:61:d5:21:27:14:40:26:60:71:0c:43:ee:ec:cb:13:b4: 68:e8:89:79:c7:ba:c4:d3:ca:4b:c7:cd:31:e7:1b:7d:f8:43: ab:4b:97:83:93:3b:54:32:3d:e7:c2:e2:b5:22:c9:dd:7d:10: 37:51:62:2f:30:43:14:5f:be:ca:c7:ea:6c:ae:d3:0f:8b:fd: 02:25:96:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCNEIxMTAvBgNVBAUTKEEzNTU2MURBNDVBOTU1RjAyRDEyMkEwRDg4RThDNzYy MzlFREY5MjAwHhcNMjYwNTIxMDAzNzU2WhcNMjYwNTI4MDAzNzU2WjAYMRYwFAYD VQQDEw02YTBlNTNlNS03ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7P/9Or+2A3vjY4E28RZpYcXAjtbyYgVHT+RuP40p0lhIOr712zWonpPFXaUh zQstjeBn/k96mHM/kJY0CVBG9nuKpXJ22opRSK+9leAYK5bKlB8+tDySjeuwYb9t JVOs8eEBRYJD2C8vDBsENmKiyHEKn4PZoxcXNgMA7IUHz+9VlAzNhwxUb6MGxqmK ZpI+IO7CpEqK9MZ8Yc4Ydsz30PRwx3KKU+EWTalWciguHAR4gA23I17pYRc33FKB QiRh3XWBc+cQnCtT8DWcB0dibDGQ74sriMIGTV/lYzE1+kpNkOv83BC+zsRv1xDY dJGvOjbz+QEthbmrEcwb+lW6XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkzSIVt coA8WLPf1ivNQKime8h0MB8GA1UdIwQYMBaAFKNVYdpFqVXwLRIqDYjox2I57fkg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qi84RTE2MjQzMEM3 NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZmQXRFaW9OaU9qSFlqbnQt U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xVmgya1dwVmZBdEVpb05pT2pIWWpudC1TQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI0Qi84RTE2MjQzMEM3NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZm QXRFaW9OaU9qSFlqbnQtU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANRBPYj5CQSPd0uPnVNmlfF0Qxtfdcb0YaH1amlQ4l1HBk0ClommNc/n9/ykD G6dDK/iEQY/xELHrhQ1yY2T4SjEc/LseFsWD1tOY9+DAV4F8aLFoFSINLg3gOfqX Mz5Hc1koVyGNNIqyD1Ky/WVnH9MXsI8XJc/tQ69g8fGbGwZTxMWxj9l4WeB8EZQM Y9ezJIQpyiG06971xjD0xj8ickJtWnC3r1MNN4H7JDLx6hc/wU9zplhh1SEnFEAm YHEMQ+7syxO0aOiJece6xNPKS8fNMecbffhDq0uXg5M7VDI958LitSLJ3X0QN1Fi LzBDFF++ysfqbK7TD4v9AiWWLA== -----END CERTIFICATE-----Generated at Thu May 21 11:59:22 2026 by rpki-client