$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft File: Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json) Hash identifier: FIRXk/1yp3WX0kAWoG0M00zAt4EJEANSm3jCLAmZDy4= Subject key identifier: 77:88:0B:6E:82:62:58:65:C4:EA:FD:0D:C9:4A:8A:55:45:37:7A:EB Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 33DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft Manifest number: 336B Signing time: Sat 04 Apr 2026 15:22:11 +0000 Manifest this update: Sat 04 Apr 2026 15:22:10 +0000 Manifest next update: Sat 11 Apr 2026 15:22:10 +0000 Files and hashes: 1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 2iBxFJQqcHPDfWYZpaKc85YkfBz56N5l89qTSwziD90=) 2: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=) 3: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=) 4: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=) 5: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (hash: sVfjMKk5gEscjf/+ggoyWUQbHrSEKZRSttzymuAtyFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13277 (0x33dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Apr 4 15:22:10 2026 GMT Not After : Apr 11 15:22:10 2026 GMT Subject: CN=69d12ca3-e9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:c8:0c:c6:50:25:cc:4a:bb:a5:9d:b1:0f: 00:56:bb:39:c9:e4:15:4f:95:9c:b7:da:d6:c4:41: cf:82:ff:07:5a:a1:07:ca:93:73:d8:9d:7b:aa:7a: 4a:64:d2:7f:18:f9:0d:53:db:f9:45:82:0a:7c:3d: de:1e:22:92:de:5a:08:1a:fc:da:96:28:6c:91:19: 43:df:52:c2:4d:e3:6f:a1:27:fb:b4:ed:7f:3e:a5: 40:a5:95:78:88:93:0e:58:74:dd:e9:51:f9:86:cc: 8b:0e:14:99:e6:2e:4e:05:db:72:11:7f:67:d5:26: 1b:fc:31:92:30:df:c6:85:93:f2:86:65:c0:cf:c4: 08:cc:00:08:3b:2f:6b:3f:c9:cc:cc:cd:b5:88:b5: 03:55:28:f2:7d:10:52:ed:cc:66:23:05:72:b4:b1: bb:f5:5f:49:5a:3d:3b:a3:2d:50:51:b3:35:99:f7: 62:2e:24:38:e7:38:c8:7d:15:41:d2:0a:e8:0c:05: e8:70:04:ef:c2:8c:21:d2:13:76:01:fe:ce:95:17: c4:48:fd:f9:86:72:45:68:df:b5:81:eb:25:8e:6a: e7:97:61:61:33:70:96:45:ee:19:4e:91:cc:1f:dd: e0:c4:29:ca:b7:df:ec:f0:d8:38:98:9b:c8:e7:0b: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:88:0B:6E:82:62:58:65:C4:EA:FD:0D:C9:4A:8A:55:45:37:7A:EB X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d8:a4:8d:bf:c5:52:58:a1:da:7e:17:fe:86:46:e8:19:3c: 3b:16:e6:2d:d6:8a:4e:72:79:2b:a1:12:cc:27:64:89:56:7c: 37:ab:2b:1d:ef:c6:a2:5b:4e:f3:30:18:cb:f3:f7:dd:91:76: 39:59:e9:60:50:b7:59:39:b2:ae:33:d0:ff:54:00:34:cd:4c: d8:99:f7:ef:55:62:3b:63:10:84:16:c3:be:e4:d3:fd:b5:49: a8:41:ab:ff:bf:66:6e:fc:13:1f:ca:9f:38:be:57:c2:ab:04: 51:12:56:ea:30:8e:2d:32:2f:b7:d3:4e:c4:86:63:76:fc:84: b1:fe:cf:66:f6:21:fb:a6:98:73:c1:c7:ee:a4:e9:6b:9d:53: 01:53:3f:7c:86:ce:13:1a:4a:df:9a:9d:87:7f:47:7a:61:9d: 4f:09:82:91:68:a9:9d:ba:46:e4:c9:30:34:df:c5:0b:c9:e7: b1:64:74:6d:c6:60:4c:d9:a7:a2:9f:d3:17:dc:cd:51:75:45: 93:19:e5:01:80:df:a0:c4:02:2c:f0:50:30:e1:96:30:fc:81: e8:fa:6b:a4:4b:9e:37:cb:e9:09:10:1b:ba:96:1b:94:21:30: 0b:2d:da:ca:bf:b0:98:96:f6:e1:45:08:8f:cf:82:d8:d7:5a: 2a:9f:7f:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICM90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjYwNDA0MTUyMjEwWhcNMjYwNDExMTUyMjEwWjAYMRYwFAYD VQQDEw02OWQxMmNhMy1lOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YfIDMZQJcxKu6WdsQ8AVrs5yeQVT5Wct9rWxEHPgv8HWqEHypNz2J17qnpK ZNJ/GPkNU9v5RYIKfD3eHiKS3loIGvzalihskRlD31LCTeNvoSf7tO1/PqVApZV4 iJMOWHTd6VH5hsyLDhSZ5i5OBdtyEX9n1SYb/DGSMN/GhZPyhmXAz8QIzAAIOy9r P8nMzM21iLUDVSjyfRBS7cxmIwVytLG79V9JWj07oy1QUbM1mfdiLiQ45zjIfRVB 0groDAXocATvwowh0hN2Af7OlRfESP35hnJFaN+1gesljmrnl2FhM3CWRe4ZTpHM H93gxCnKt9/s8Ng4mJvI5wtDOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHeIC26C YlhlxOr9DclKilVFN3rrMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg2My9CRkU1NEE2ODgxNUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1p TEs3bVRnejR1akgxcHJrMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq9ikjb/FUlih2n4X/oZG6Bk8OxbmLdaKTnJ5K6ESzCdkiVZ8N6srHe/GoltO 8zAYy/P33ZF2OVnpYFC3WTmyrjPQ/1QANM1M2Jn371ViO2MQhBbDvuTT/bVJqEGr /79mbvwTH8qfOL5XwqsEURJW6jCOLTIvt9NOxIZjdvyEsf7PZvYh+6aYc8HH7qTp a51TAVM/fIbOExpK35qdh39HemGdTwmCkWipnbpG5MkwNN/FC8nnsWR0bcZgTNmn op/TF9zNUXVFkxnlAYDfoMQCLPBQMOGWMPyB6PprpEueN8vpCRAbupYblCEwCy3a yr+wmJb24UUIj8+C2NdaKp9/ng== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:28 2026 by rpki-client