$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: asHz4vC21HT9W0O9rPLl70EemvY4pWtyTVp5glhIHPs= Subject key identifier: 70:E5:F3:C0:9F:12:C8:00:24:93:AE:46:E6:64:9F:82:9B:44:20:95 Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 71 Signing time: Thu 21 May 2026 07:53:49 +0000 Manifest this update: Thu 21 May 2026 07:53:48 +0000 Manifest next update: Thu 28 May 2026 07:53:48 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: YIDpVxuRmDRWRPG3krzi1ZoIvOsn08E+0BzAAKz6UVM=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: May 21 07:53:48 2026 GMT Not After : May 28 07:53:48 2026 GMT Subject: CN=6a0eba0d-e2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:d9:fc:f0:e2:35:46:de:ac:d3:53:d9:1e: eb:c8:c2:9c:ab:7f:79:81:6c:af:3f:a2:9f:05:a9: 4a:3e:3f:dc:cd:72:27:be:ea:4b:4b:c0:ea:fd:9b: 77:43:37:c7:36:c0:b3:1f:61:f7:fc:4d:d9:a2:d9: 6f:f1:33:29:c8:a7:85:78:d8:cc:54:77:bc:34:3a: 92:67:58:03:0d:67:33:a2:95:38:d0:63:7e:15:1b: 28:be:57:bd:2a:8a:54:63:a3:d5:e2:5d:e6:c1:30: 23:78:e5:32:0d:27:c2:5c:f2:fd:f6:ff:ff:b2:7d: 46:db:a3:23:e2:6c:7c:02:de:1b:48:b0:42:ce:20: 57:65:79:4f:81:27:b0:f1:19:b1:5e:f3:23:93:74: 45:ab:86:f0:45:2d:3d:f5:22:8b:a3:2c:22:56:30: 72:29:c7:f6:a7:62:a4:1e:61:4f:af:67:04:9d:2d: 10:4e:c6:05:aa:ce:c3:ef:ff:47:a9:f5:e3:0e:10: 4a:19:9d:32:c1:8c:82:18:77:b5:ea:b3:e5:4f:7d: b3:e9:61:f7:d0:22:24:35:a8:e3:84:a1:12:b7:60: 6b:4e:e6:c4:3d:e7:c8:71:12:10:d7:84:1c:f8:6e: 3d:06:78:90:3d:95:f1:3e:56:b9:fb:d7:23:17:b6: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E5:F3:C0:9F:12:C8:00:24:93:AE:46:E6:64:9F:82:9B:44:20:95 X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6e:fa:d7:1e:96:3c:2f:bb:16:4e:84:d5:10:ec:eb:6c:e8: 0c:0f:e0:46:6d:85:7e:af:86:4d:8f:5f:60:23:ba:5e:2c:94: 10:46:a7:ab:49:4e:96:2f:4c:93:b8:23:85:48:6e:08:b6:42: a4:0c:da:ac:00:5f:f2:83:f5:e9:55:7d:54:73:b3:9e:45:86: 32:01:96:e0:92:a0:b6:9f:fe:54:8f:c0:40:93:72:31:85:14: 30:d8:2f:5a:f2:6b:36:95:33:58:80:77:47:88:b5:8a:42:eb: dd:12:35:69:b3:5d:b7:d7:b8:7a:e8:55:78:db:aa:8f:10:c0: ac:2c:e6:63:75:ff:7a:a3:57:8d:8d:6e:13:13:e4:7f:3e:4d: 17:fe:91:0a:db:cc:b6:3c:a7:5f:2d:e4:28:50:2b:b1:7c:cd: 97:25:9a:df:de:03:95:4c:7b:9d:08:75:8c:41:57:97:33:22: 87:da:f1:7a:72:e0:57:7e:64:9c:c4:04:3b:a4:27:ce:02:17: 0f:af:2c:55:2f:81:91:57:81:94:99:de:64:35:05:18:b6:60: a0:c0:35:64:9a:33:24:c1:d3:f3:f2:52:02:13:a2:27:9f:55: 05:22:59:98:fb:33:64:03:e1:0d:c9:7e:46:53:63:6c:4d:04: 00:04:c7:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNjA1MjEwNzUzNDhaFw0yNjA1MjgwNzUzNDhaMBgxFjAUBgNV BAMTDTZhMGViYTBkLWUyY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrAdn88OI1Rt6s01PZHuvIwpyrf3mBbK8/op8FqUo+P9zNcie+6ktLwOr9m3dD N8c2wLMfYff8Tdmi2W/xMynIp4V42MxUd7w0OpJnWAMNZzOilTjQY34VGyi+V70q ilRjo9XiXebBMCN45TINJ8Jc8v32//+yfUbboyPibHwC3htIsELOIFdleU+BJ7Dx GbFe8yOTdEWrhvBFLT31IoujLCJWMHIpx/anYqQeYU+vZwSdLRBOxgWqzsPv/0ep 9eMOEEoZnTLBjIIYd7Xqs+VPfbPpYffQIiQ1qOOEoRK3YGtO5sQ958hxEhDXhBz4 bj0GeJA9lfE+Vrn71yMXtghHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcOXzwJ8S yAAkk65G5mSfgptEIJUwHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0bvrXHpY8L7sWToTVEOzrbOgMD+BGbYV+r4ZNj19gI7peLJQQRqerSU6WL0yT uCOFSG4ItkKkDNqsAF/yg/XpVX1Uc7OeRYYyAZbgkqC2n/5Uj8BAk3IxhRQw2C9a 8ms2lTNYgHdHiLWKQuvdEjVps12317h66FV426qPEMCsLOZjdf96o1eNjW4TE+R/ Pk0X/pEK28y2PKdfLeQoUCuxfM2XJZrf3gOVTHudCHWMQVeXMyKH2vF6cuBXfmSc xAQ7pCfOAhcPryxVL4GRV4GUmd5kNQUYtmCgwDVkmjMkwdPz8lICE6Inn1UFIlmY +zNkA+ENyX5GU2NsTQQABMeM -----END CERTIFICATE-----Generated at Thu May 21 14:13:38 2026 by rpki-client