$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: nHP98cL1Raqv9S1TsXzAtiGM8nKsSh+o7Q8sV7w873U= Subject key identifier: 14:F5:59:63:84:CB:20:B4:D7:B7:23:EE:A1:E2:DB:60:F3:0D:E8:79 Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: F8 Signing time: Sat 18 Apr 2026 14:16:15 +0000 Manifest this update: Sat 18 Apr 2026 14:16:15 +0000 Manifest next update: Sat 25 Apr 2026 14:16:15 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: NPxGmeIXEcRosVyIi9V+9IvjqdogQRcN3R07+VKQDG4=) 2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg=) 3: 8AE793B2E9E311F0A43C19FF656F56BC.roa (hash: iLjsYldebmEc4jQ39cKvj356cAs2Ip03tkyos/Cg+/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Apr 18 14:16:15 2026 GMT Not After : Apr 25 14:16:15 2026 GMT Subject: CN=69e3922f-c213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:00:d5:6d:92:64:94:40:0c:a1:6c:ae:f8: ba:01:3b:e7:86:88:0a:45:c0:6d:33:bc:3f:f9:e6: c5:f1:35:ba:9c:1c:a9:dd:76:e5:9d:ef:1c:b0:a3: f5:45:6f:54:59:b3:d2:52:74:33:37:b9:de:1c:a6: 45:c7:4d:05:60:9e:ad:79:a7:7e:52:91:f8:42:91: dd:fc:4c:4d:65:df:13:bb:1b:07:55:b0:73:a2:71: 3f:7d:d1:92:46:24:40:9c:f1:ab:81:c8:cf:a4:8b: 38:8f:4a:55:65:8f:7a:47:39:07:e6:99:13:37:ac: 91:ad:45:9e:de:8a:67:5d:f3:36:55:f0:46:95:5b: c2:f0:7d:50:07:22:d3:b6:70:01:b1:e2:cc:fe:6d: 5f:1d:c0:bf:c5:48:a9:89:26:98:39:5f:f4:90:c1: 86:70:97:79:5a:69:53:66:03:dc:54:ed:c8:b3:0d: 28:bf:a1:88:2d:64:02:4b:5d:e8:7a:34:5c:a8:92: 6f:53:ed:39:b0:7b:32:04:88:92:88:92:45:90:fd: 7c:d0:75:72:22:fe:35:f3:3b:6e:26:7c:cb:6a:f7: 3f:b5:2e:c4:ed:b4:44:d9:41:d5:54:80:8a:4b:05: b9:7a:87:7f:17:78:93:e7:1c:af:51:b1:fd:1c:d0: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F5:59:63:84:CB:20:B4:D7:B7:23:EE:A1:E2:DB:60:F3:0D:E8:79 X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:43:18:07:af:9a:33:97:38:48:61:a8:6b:55:ac:86:5a: 7c:11:7a:79:e8:14:4a:09:12:a5:43:3f:9f:6b:95:0a:c0:ce: 33:b0:b2:97:e7:aa:74:75:11:fa:0b:bf:07:c1:c6:de:f9:97: e1:5b:61:21:85:70:aa:46:8a:6b:a0:18:40:ee:21:a3:34:cd: 9b:99:69:ff:80:3a:74:cd:02:d0:8a:92:d1:cc:72:0b:f2:83: 52:8e:64:52:8d:8c:03:72:b3:d9:c0:d4:bc:14:9e:39:09:ad: d1:14:4d:d5:65:7e:1f:09:20:bf:9e:4a:14:22:04:78:65:6c: 03:10:f2:79:bd:95:7e:a3:2e:56:47:0d:15:e5:90:cc:10:17: b4:57:a6:a6:e1:ae:c5:61:01:0b:c8:d6:cb:d6:31:e1:30:c8: 67:fe:52:f8:e9:71:4c:71:af:f0:b3:b4:de:76:6e:06:7a:be: 1a:81:62:d6:c0:10:9c:de:9f:8e:e4:0a:17:4b:01:66:85:22: 01:d5:94:06:bd:5e:69:ef:e5:2f:93:b2:33:eb:a7:dd:47:5f: ee:9e:bb:2e:d0:98:a5:a9:cf:f5:e7:9f:5a:14:35:09:53:98: f8:ef:b4:a7:a3:36:91:cd:14:be:b4:3e:5a:37:10:c3:1f:4d: 23:4f:c0:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD MkExMEM5MjMwHhcNMjYwNDE4MTQxNjE1WhcNMjYwNDI1MTQxNjE1WjAYMRYwFAYD VQQDEw02OWUzOTIyZi1jMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LMA1W2SZJRADKFsrvi6ATvnhogKRcBtM7w/+ebF8TW6nByp3Xblne8csKP1 RW9UWbPSUnQzN7neHKZFx00FYJ6tead+UpH4QpHd/ExNZd8TuxsHVbBzonE/fdGS RiRAnPGrgcjPpIs4j0pVZY96RzkH5pkTN6yRrUWe3opnXfM2VfBGlVvC8H1QByLT tnABseLM/m1fHcC/xUipiSaYOV/0kMGGcJd5WmlTZgPcVO3Isw0ov6GILWQCS13o ejRcqJJvU+05sHsyBIiSiJJFkP180HVyIv418ztuJnzLavc/tS7E7bRE2UHVVICK SwW5eod/F3iT5xyvUbH9HNA0mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBT1WWOE yyC017cj7qHi22DzDeh5MB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS8zNUVEQTkyRUNGMEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5 Y21TazFYN3BxZFRDb1F5U00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRJDGAevmjOXOEhhqGtVrIZafBF6eegUSgkSpUM/n2uVCsDOM7Cyl+eqdHUR +gu/B8HG3vmX4VthIYVwqkaKa6AYQO4hozTNm5lp/4A6dM0C0IqS0cxyC/KDUo5k Uo2MA3Kz2cDUvBSeOQmt0RRN1WV+Hwkgv55KFCIEeGVsAxDyeb2VfqMuVkcNFeWQ zBAXtFempuGuxWEBC8jWy9Yx4TDIZ/5S+OlxTHGv8LO03nZuBnq+GoFi1sAQnN6f juQKF0sBZoUiAdWUBr1eae/lL5OyM+un3Udf7p67LtCYpanP9eefWhQ1CVOY+O+0 p6M2kc0UvrQ+WjcQwx9NI0/ARw== -----END CERTIFICATE-----Generated at Sat Apr 18 21:05:33 2026 by rpki-client