$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json) Hash identifier: TDYKw9k63BeJm95qiUFV5+Er59FX4Y336Wquw6PgM9s= Subject key identifier: 39:C4:FF:C8:13:08:8B:AB:9F:C2:01:0E:89:4D:85:7F:3C:63:85:03 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft Manifest number: D3 Signing time: Fri 17 Apr 2026 06:29:12 +0000 Manifest this update: Fri 17 Apr 2026 06:29:12 +0000 Manifest next update: Fri 24 Apr 2026 06:29:12 +0000 Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: uPeS8UeY0sAMRPMKhgnZvFR/WZwiamulDkXUvHs6H+I=) 2: 16105334922D11F087917886C4F9AE02.roa (hash: lLa9VdnNBi9qJR+yNMK/JxH7vhifQ07CmyT/XRGUM8w=) 3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: mnJ72rvKHUmTGUOwcoFQkAtnAgX3cweJBvydxFE9nQM=) 4: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: 5PxBGQIXsJPnr5AM5NEgJvoHi+ZzvnXx1CMn2iVhK2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Apr 17 06:29:12 2026 GMT Not After : Apr 24 06:29:12 2026 GMT Subject: CN=69e1d338-e4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:00:28:75:48:22:05:6f:71:39:a4:51:ff: 91:ed:3b:a1:4c:66:8e:7d:6d:d3:d0:7f:e4:fa:68: ba:ff:c4:9f:a8:f4:3e:56:8a:3d:1a:6e:2b:d5:ce: 69:d6:61:e9:d8:9a:5c:97:1e:a8:56:51:a6:5c:3c: eb:a5:54:6e:11:20:24:42:73:f5:f8:e3:83:b1:5d: aa:a0:62:44:a3:3c:fc:e0:82:e1:a4:62:a6:39:95: 88:2f:32:71:48:41:f9:03:bc:4c:b6:7f:97:b0:67: 54:74:f3:c5:73:2f:99:90:bc:4e:02:18:87:5d:aa: 66:fa:09:26:9c:40:8a:3a:a9:a7:a1:80:8a:e7:bb: b2:fd:3b:74:31:e3:6b:34:e8:33:48:03:0c:00:0e: c2:31:8a:8a:70:5f:3e:12:03:8f:5c:92:f1:a1:f9: cc:a3:56:d3:fd:ec:32:33:81:6b:d9:09:6a:56:1a: 26:2f:6f:60:b4:74:f6:18:c0:58:da:bc:b5:49:07: 38:5c:af:f8:1b:6e:4f:ca:52:f3:98:d7:a7:70:ca: 00:a7:7c:c2:6d:7b:1a:52:c0:5f:d7:13:22:75:24: 15:0f:3c:09:0c:36:0e:5d:60:5f:a7:c1:0e:79:61: 0e:67:2a:60:83:f3:10:9a:57:42:40:51:7e:43:ec: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C4:FF:C8:13:08:8B:AB:9F:C2:01:0E:89:4D:85:7F:3C:63:85:03 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:76:fa:97:ca:f9:ec:66:f2:a5:c0:d4:d6:f8:9c:79:6b:29: e9:bc:1f:d6:06:fa:3c:82:04:85:f4:65:e3:9b:c2:33:b1:12: b8:08:3d:86:71:8e:e3:b3:c2:a1:75:f1:05:cb:7f:3c:5a:a8: b9:12:98:c2:f0:13:ba:fc:c9:bc:08:58:d6:a9:9b:37:d5:5d: e3:bc:bd:ce:f9:52:7b:64:17:d2:4c:6f:bd:f5:d5:9c:56:7e: 84:9e:af:95:4d:91:42:7f:b6:85:bb:03:6c:a7:af:7c:84:ed: 74:78:4d:f8:6c:99:86:b6:6d:6c:d1:fd:f9:98:72:b0:84:e6: 45:59:8a:ef:97:57:c4:86:20:50:3d:70:32:8a:5a:01:27:d2: 7d:3c:89:00:ab:53:87:c1:21:a4:80:43:34:39:bb:81:5f:23: bc:36:4e:15:e3:8a:a4:fc:70:0b:27:71:87:e2:69:fb:a5:e4: 05:8e:3d:3e:5c:f0:b2:0d:7f:ad:54:b4:6a:d1:ce:84:35:49: a8:db:85:b8:db:0f:03:53:3b:60:a6:6f:ff:4c:4b:99:7f:32: f4:6f:29:72:84:11:56:3f:02:06:f1:31:68:c0:08:d9:cb:c7: 3f:4a:e1:a3:39:92:9c:4d:96:e8:7a:ba:dc:c8:c7:de:5b:03: 0a:8e:bc:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF NDBGN0I2QkQwHhcNMjYwNDE3MDYyOTEyWhcNMjYwNDI0MDYyOTEyWjAYMRYwFAYD VQQDEw02OWUxZDMzOC1lNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviQAKHVIIgVvcTmkUf+R7TuhTGaOfW3T0H/k+mi6/8SfqPQ+Voo9Gm4r1c5p 1mHp2Jpclx6oVlGmXDzrpVRuESAkQnP1+OODsV2qoGJEozz84ILhpGKmOZWILzJx SEH5A7xMtn+XsGdUdPPFcy+ZkLxOAhiHXapm+gkmnECKOqmnoYCK57uy/Tt0MeNr NOgzSAMMAA7CMYqKcF8+EgOPXJLxofnMo1bT/ewyM4Fr2QlqVhomL29gtHT2GMBY 2ry1SQc4XK/4G25PylLzmNencMoAp3zCbXsaUsBf1xMidSQVDzwJDDYOXWBfp8EO eWEOZypgg/MQmldCQFF+Q+ziAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnE/8gT CIurn8IBDolNhX88Y4UDMB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1 cl9tQzJiUUlENHZrRDN0cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXnb6l8r57GbypcDU1viceWsp6bwf1gb6PIIEhfRl45vCM7ESuAg9hnGO47PC oXXxBct/PFqouRKYwvATuvzJvAhY1qmbN9Vd47y9zvlSe2QX0kxvvfXVnFZ+hJ6v lU2RQn+2hbsDbKevfITtdHhN+GyZhrZtbNH9+ZhysITmRVmK75dXxIYgUD1wMopa ASfSfTyJAKtTh8EhpIBDNDm7gV8jvDZOFeOKpPxwCydxh+Jp+6XkBY49Plzwsg1/ rVS0atHOhDVJqNuFuNsPA1M7YKZv/0xLmX8y9G8pcoQRVj8CBvExaMAI2cvHP0rh ozmSnE2W6Hq63MjH3lsDCo68GQ== -----END CERTIFICATE-----Generated at Sat Apr 18 18:25:15 2026 by rpki-client