$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json) Hash identifier: VZ/m1zOiA3tpT0J7bi67pbAIXFK7ZvSWWlpCBGbmfeo= Subject key identifier: C3:09:C8:55:38:F2:85:E9:7C:D8:D3:7D:31:52:65:39:39:B5:5F:7B Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 Certificate issuer: /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft Manifest number: 025F Signing time: Thu 21 May 2026 02:22:56 +0000 Manifest this update: Thu 21 May 2026 02:22:56 +0000 Manifest next update: Thu 28 May 2026 02:22:56 +0000 Files and hashes: 1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: V/zo1slIthKZQMO3TePXtraKaPhSiaticRtivH/qNYM=) 2: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: i7fPg095F7w1Gp8Ev4N5gXFYKYbqtFZ/mtpgHv4F5ww=) 3: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: xhoAB8F3nbGTu7WfpGnVkOCBQJhj/jWvO8tM9P0b/FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2 Validity Not Before: May 21 02:22:56 2026 GMT Not After : May 28 02:22:56 2026 GMT Subject: CN=6a0e6c80-2c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:89:23:d7:2e:d1:1b:7c:02:b6:bb:79:72: 8a:49:ae:9b:9d:2c:44:c1:6e:e8:f4:a5:ee:67:c7: 51:c0:ab:0b:d4:fa:45:7a:64:87:b9:fd:ed:80:72: 28:8e:a5:02:81:0c:01:32:4c:90:7a:d0:b8:e3:85: d0:11:e7:ab:e1:96:5f:4b:92:8e:c5:05:6d:5c:1a: c0:41:36:c3:9b:24:b3:cc:e7:97:fa:da:4b:55:b9: 16:cb:98:47:5a:2e:14:be:b2:39:8d:fe:f2:5f:c4: 42:eb:c0:26:cb:c2:42:9f:43:8f:fe:84:19:b7:dc: 03:9b:07:1c:54:9a:91:91:7b:1c:67:b8:64:46:54: 50:8d:43:58:55:ab:8b:92:f0:58:fe:3a:ff:9c:ff: 3b:86:e9:49:76:82:26:56:32:63:98:b3:1c:38:6b: 05:7e:c1:b5:63:6b:91:a8:93:b4:bc:7a:2a:dd:3d: 6d:68:c9:6c:27:8d:d0:2c:4d:11:43:1e:81:4c:3e: 54:01:cd:39:8c:36:5e:0b:dd:1e:24:82:5a:3a:36: 75:4d:de:cd:bd:fd:68:75:ec:ae:30:65:c0:6c:7c: 43:0a:53:ce:ab:5d:eb:fd:a8:ab:2c:3a:40:c1:35: b1:8f:8b:2c:87:0a:c3:ad:9b:28:5f:cd:69:b1:ae: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:09:C8:55:38:F2:85:E9:7C:D8:D3:7D:31:52:65:39:39:B5:5F:7B X509v3 Authority Key Identifier: keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:22:58:a0:9b:df:4a:80:17:ef:b9:4f:f3:41:1a:e1:69:a5: 31:11:30:86:0d:54:75:3f:67:7a:18:a3:3a:ab:af:2b:9c:bd: 0c:7a:f6:7b:d8:9e:20:65:ed:64:ad:e2:e4:d8:76:a4:dc:5b: 2c:f9:7b:be:73:64:7c:d6:5f:d8:0d:70:34:33:f8:0a:03:d0: 30:ec:d5:01:48:26:fe:bf:ef:cb:fc:4e:f7:7e:6e:4a:58:13: f0:18:6e:7b:06:d1:7b:e5:b8:f1:9e:12:50:d6:64:54:42:c0: 7c:92:22:90:8b:fa:f8:c8:b1:e9:b7:c0:6d:0a:ed:e3:9c:4f: e7:1b:17:2c:01:55:40:fc:81:42:b5:2c:2b:1a:8e:9a:84:17: e8:03:b9:be:65:74:40:b5:7d:1a:fc:69:4a:94:07:c6:1b:fb: d4:cd:db:54:53:63:ce:a1:01:95:cb:d9:12:fe:b5:25:a0:52: 82:cf:99:a4:f1:87:e4:9c:93:d9:52:d5:f0:9a:cb:95:3c:00: 99:6e:1e:8a:be:c0:7f:eb:bc:11:fd:6d:df:6c:df:56:f5:45: c4:22:42:44:f4:a1:0e:ec:42:fc:c6:19:be:58:a6:c1:5f:60: f4:84:c6:09:90:d5:89:0d:e5:f3:be:ce:da:75:12:e8:31:e9: 51:b7:aa:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMDAxMTAvBgNVBAUTKDM4QzBCMUM1OEQwMERFM0Y3M0FENUI1ODg3RDQyNDlC REVFN0JCQTIwHhcNMjYwNTIxMDIyMjU2WhcNMjYwNTI4MDIyMjU2WjAYMRYwFAYD VQQDEw02YTBlNmM4MC0yYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBuJI9cu0Rt8Ara7eXKKSa6bnSxEwW7o9KXuZ8dRwKsL1PpFemSHuf3tgHIo jqUCgQwBMkyQetC444XQEeer4ZZfS5KOxQVtXBrAQTbDmySzzOeX+tpLVbkWy5hH Wi4UvrI5jf7yX8RC68Amy8JCn0OP/oQZt9wDmwccVJqRkXscZ7hkRlRQjUNYVauL kvBY/jr/nP87hulJdoImVjJjmLMcOGsFfsG1Y2uRqJO0vHoq3T1taMlsJ43QLE0R Qx6BTD5UAc05jDZeC90eJIJaOjZ1Td7Nvf1odeyuMGXAbHxDClPOq13r/airLDpA wTWxj4sshwrDrZsoX81psa6w0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMJyFU4 8oXpfNjTfTFSZTk5tV97MB8GA1UdIwQYMBaAFDjAscWNAN4/c61bWIfUJJve57ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwMC9GNUE5NTJFMEND MDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNqOXpyVnRZaDlRa205N251 NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09NQ3h4WTBBM2o5enJWdFloOVFrbTk3bnU2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwMC9GNUE5NTJFMENDMDMxMUVEQTk3QUNBNURDNEY5QUUwMi9PTUN4eFkwQTNq OXpyVnRZaDlRa205N251NkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATyJYoJvfSoAX77lP80Ea4WmlMREwhg1UdT9nehijOquvK5y9DHr2e9ieIGXt ZK3i5Nh2pNxbLPl7vnNkfNZf2A1wNDP4CgPQMOzVAUgm/r/vy/xO935uSlgT8Bhu ewbRe+W48Z4SUNZkVELAfJIikIv6+Mix6bfAbQrt45xP5xsXLAFVQPyBQrUsKxqO moQX6AO5vmV0QLV9GvxpSpQHxhv71M3bVFNjzqEBlcvZEv61JaBSgs+ZpPGH5JyT 2VLV8JrLlTwAmW4eir7Af+u8Ef1t32zfVvVFxCJCRPShDuxC/MYZvlimwV9g9ITG CZDViQ3l877O2nUS6DHpUbeqPQ== -----END CERTIFICATE-----Generated at Thu May 21 13:24:33 2026 by rpki-client