$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: 3jn2QXPli64z9PWYlJQsSsu1GCGed2xR23DTVEz8fSo= Subject key identifier: D6:FF:40:B6:24:BA:53:37:0E:D2:3C:29:B2:75:33:7C:C6:10:70:B1 Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 5A Signing time: Sun 05 Apr 2026 07:25:19 +0000 Manifest this update: Sun 05 Apr 2026 07:25:18 +0000 Manifest next update: Sun 12 Apr 2026 07:25:18 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: hP0jyTjjpMwxfFlFndy9ek27KFbR2wq3mWQSpw1gkdw=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: Apr 5 07:25:18 2026 GMT Not After : Apr 12 07:25:18 2026 GMT Subject: CN=69d20e5e-e76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:42:a7:58:09:9b:9f:b3:68:70:2d:23:b7: 9e:2b:a3:37:34:7d:5b:b4:d8:6f:a6:10:33:75:8c: cd:30:36:2f:0b:63:77:10:a9:43:d5:63:19:8a:6c: 65:48:bc:6b:b2:15:08:3f:55:bc:98:bd:0a:51:59: ad:35:67:08:99:9f:ed:13:b7:4b:96:8a:c2:9a:83: a4:36:36:8e:98:f4:51:9d:bf:59:2f:ad:78:72:4e: 1b:97:3f:21:41:2f:d2:40:45:b8:b4:a8:72:51:31: 7c:35:08:a8:fd:49:89:81:73:18:e4:80:da:bd:71: 2d:aa:d7:1f:c1:0f:3a:e8:38:e2:8d:34:b2:cf:6a: 1c:66:eb:23:9f:d5:2a:d6:ba:da:65:8d:12:69:f3: 95:c7:c5:a9:11:db:f1:95:2b:d3:d5:2c:c2:d3:5b: 7f:b6:73:52:08:3b:e8:c1:d9:32:27:1e:d3:3d:0c: 53:e0:67:45:9f:62:e8:2e:0b:3d:7e:f7:f4:54:c2: 47:47:93:a4:70:6d:dc:2a:bd:a1:f9:36:96:91:6a: c3:af:99:e1:54:aa:3a:66:5b:9b:52:a2:9d:d5:d4: 5e:d1:62:5b:22:32:00:57:6d:01:21:b8:ae:42:0e: 41:56:fd:e2:55:6c:c2:cf:cb:28:74:1f:32:49:03: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FF:40:B6:24:BA:53:37:0E:D2:3C:29:B2:75:33:7C:C6:10:70:B1 X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e2:b7:72:71:c5:7d:fa:de:bd:0a:1d:18:72:02:04:f6:ab: ed:b5:4a:f6:6c:9b:cd:d3:56:1c:98:ef:6b:af:25:15:a6:2c: 5a:e4:78:d9:4f:98:fd:4f:c9:65:85:19:9b:6c:82:26:a7:3b: 35:67:2c:35:93:56:4e:41:a9:cc:4a:cc:24:81:63:32:14:28: a7:7e:94:62:21:93:53:df:11:1b:01:c8:ba:be:28:a7:c6:0d: 20:2d:39:e7:f9:49:71:a3:00:82:6e:bd:e2:fc:f8:d8:16:66: e0:ae:27:bb:d0:b9:40:1c:40:dd:8b:b8:d5:bc:14:a5:2e:38: 4d:a7:ca:7d:e9:80:58:be:68:6c:99:1b:ad:d5:18:52:db:ce: c5:b3:9d:6d:ec:a3:fa:6c:d1:17:ea:2c:3c:21:64:f7:6c:29: b0:3d:c1:8f:be:38:02:fc:f3:ae:58:88:b8:da:cf:16:21:2d: 4d:12:9d:1b:63:33:eb:c1:57:b5:69:e6:70:df:5a:e9:da:5d: 9b:e1:54:10:7f:93:04:d3:52:41:d2:b3:3b:62:b3:c0:3a:d2: 14:f0:4f:e9:18:2f:27:40:04:28:e0:58:9a:46:a6:8c:cb:09: 11:bf:05:c7:d3:f4:78:1c:42:f5:dc:34:36:6f:65:df:93:4a: 64:85:c7:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNjA0MDUwNzI1MThaFw0yNjA0MTIwNzI1MThaMBgxFjAUBgNV BAMTDTY5ZDIwZTVlLWU3NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU1kKnWAmbn7NocC0jt54rozc0fVu02G+mEDN1jM0wNi8LY3cQqUPVYxmKbGVI vGuyFQg/VbyYvQpRWa01ZwiZn+0Tt0uWisKag6Q2No6Y9FGdv1kvrXhyThuXPyFB L9JARbi0qHJRMXw1CKj9SYmBcxjkgNq9cS2q1x/BDzroOOKNNLLPahxm6yOf1SrW utpljRJp85XHxakR2/GVK9PVLMLTW3+2c1IIO+jB2TInHtM9DFPgZ0WfYuguCz1+ 9/RUwkdHk6RwbdwqvaH5NpaRasOvmeFUqjpmW5tSop3V1F7RYlsiMgBXbQEhuK5C DkFW/eJVbMLPyyh0HzJJA26hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1v9AtiS6 UzcO0jwpsnUzfMYQcLEwHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCd4rdyccV9+t69Ch0YcgIE9qvttUr2bJvN01YcmO9rryUVpixa5HjZT5j9T8ll hRmbbIImpzs1Zyw1k1ZOQanMSswkgWMyFCinfpRiIZNT3xEbAci6viinxg0gLTnn +UlxowCCbr3i/PjYFmbgrie70LlAHEDdi7jVvBSlLjhNp8p96YBYvmhsmRut1RhS 287Fs51t7KP6bNEX6iw8IWT3bCmwPcGPvjgC/POuWIi42s8WIS1NEp0bYzPrwVe1 aeZw31rp2l2b4VQQf5ME01JB0rM7YrPAOtIU8E/pGC8nQAQo4FiaRqaMywkRvwXH 0/R4HEL13DQ2b2Xfk0pkhcfB -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:04 2026 by rpki-client