$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft File: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json) Hash identifier: vrLa0v/Ygn7jjeb+59l4BCKPzhlTnKW59GhZZdpzDT8= Subject key identifier: B1:60:E5:7D:B5:AB:81:54:0C:52:D7:6C:75:65:FA:79:D0:0A:B1:7C Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F Certificate issuer: /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft Manifest number: 08 Signing time: Tue 19 May 2026 09:04:34 +0000 Manifest this update: Tue 19 May 2026 09:04:34 +0000 Manifest next update: Tue 26 May 2026 09:04:34 +0000 Files and hashes: 1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: skq/vjzYZFZz+CybtAogonoEGkWTLEm66OGeC6nf1sQ=) 2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: f7QabRTI7sk2IZG0kdDs+LNBsIzZTK1/4WtgGby64wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F Validity Not Before: May 19 09:04:34 2026 GMT Not After : May 26 09:04:34 2026 GMT Subject: CN=6a0c27a2-4e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:79:63:bb:bc:f7:45:1d:a8:60:0a:af:28: 34:6a:f4:4e:b8:ba:fd:69:a1:75:ed:b0:f9:f5:88: a5:17:68:b3:e6:fe:d7:1c:8e:0d:07:1f:cb:54:79: 50:5d:f9:ca:a4:bf:d4:95:59:7d:85:32:bb:e5:c2: f2:20:50:1f:00:1e:2f:80:6d:af:fe:c8:b6:e7:64: 31:b3:3c:89:54:f0:b4:85:9f:f5:96:97:e4:54:c8: 46:51:42:80:48:cf:c4:db:48:9d:2d:ab:07:9e:d8: 98:29:9c:2d:d8:c7:30:0c:5e:91:d3:07:25:eb:59: 20:48:3f:5c:bc:06:43:8a:ab:f7:7a:92:a1:2b:99: e1:03:75:2d:9d:b9:80:47:ee:ff:fb:a0:da:3b:43: ff:06:e2:77:e0:b6:b7:99:55:3d:70:31:3a:d7:15: 50:7f:dc:03:36:7c:a1:04:8d:20:8f:97:9b:4e:50: f2:53:25:6f:69:81:a6:5e:41:30:16:54:f6:4b:48: 93:65:05:4d:2d:f0:4d:56:6b:31:b1:43:9e:e4:7f: d0:db:77:80:4b:78:58:0d:82:ad:46:74:39:36:84: 49:68:e9:cd:33:ef:e4:c5:c1:4c:d0:ad:9d:f5:8b: be:c7:fb:12:c2:a7:55:8f:27:16:9b:69:ae:c6:07: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:E5:7D:B5:AB:81:54:0C:52:D7:6C:75:65:FA:79:D0:0A:B1:7C X509v3 Authority Key Identifier: keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4c:cd:96:2f:15:fb:3b:f5:55:ad:ac:8c:f5:12:d6:e3:0e: d4:52:7d:7b:b1:2a:f0:e2:87:e1:c8:7b:1e:8e:ee:99:0c:47: 87:c1:92:cc:6a:41:c3:22:fe:bf:85:dc:5a:33:8d:d4:33:23: 60:e6:3b:02:e4:56:d8:a2:7c:69:55:95:91:7b:bf:82:8a:8e: e7:82:20:8c:25:b9:79:33:7e:d6:44:a5:10:f4:18:02:75:42: 61:12:bf:f7:f5:8f:f8:fd:da:a7:cd:7b:31:ce:b3:fd:7d:95: ed:4f:e9:b1:9f:1b:8f:14:74:05:db:62:fa:f4:f3:e8:b2:57: 29:88:01:9f:ba:c7:ef:35:3b:6e:2a:71:86:b9:3a:c7:49:eb: 1c:f4:ee:14:b0:ad:24:ab:28:95:57:a1:6d:52:cf:73:33:eb: e9:4d:d0:54:a1:72:6e:56:79:bc:b8:ee:3c:70:fe:59:93:b5: be:cc:d3:ce:31:77:14:ef:c2:61:77:52:cc:5d:b6:72:0d:61: 44:ff:0f:75:49:9d:f7:f1:f6:b1:1c:2b:0f:ed:bf:30:3d:49: 5c:2a:d0:9c:b5:1b:06:e4:ab:fa:2d:6a:75:16:1d:91:a6:90: 83:7e:7a:bb:6b:19:7c:7d:be:df:5f:c6:a1:96:df:98:c3:2d: f7:fb:e8:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx Qzk4RTY4RjAeFw0yNjA1MTkwOTA0MzRaFw0yNjA1MjYwOTA0MzRaMBgxFjAUBgNV BAMTDTZhMGMyN2EyLTRlMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPD3lju7z3RR2oYAqvKDRq9E64uv1poXXtsPn1iKUXaLPm/tccjg0HH8tUeVBd +cqkv9SVWX2FMrvlwvIgUB8AHi+Aba/+yLbnZDGzPIlU8LSFn/WWl+RUyEZRQoBI z8TbSJ0tqwee2JgpnC3YxzAMXpHTByXrWSBIP1y8BkOKq/d6kqErmeEDdS2duYBH 7v/7oNo7Q/8G4nfgtreZVT1wMTrXFVB/3AM2fKEEjSCPl5tOUPJTJW9pgaZeQTAW VPZLSJNlBU0t8E1WazGxQ57kf9Dbd4BLeFgNgq1GdDk2hElo6c0z7+TFwUzQrZ31 i77H+xLCp1WPJxabaa7GB/wlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsWDlfbWr gVQMUtdsdWX6edAKsXwwHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKTM2WLxX7O/VVrayM9RLW4w7UUn17sSrw4ofhyHseju6ZDEeHwZLMakHDIv6/ hdxaM43UMyNg5jsC5FbYonxpVZWRe7+Cio7ngiCMJbl5M37WRKUQ9BgCdUJhEr/3 9Y/4/dqnzXsxzrP9fZXtT+mxnxuPFHQF22L69PPoslcpiAGfusfvNTtuKnGGuTrH Sesc9O4UsK0kqyiVV6FtUs9zM+vpTdBUoXJuVnm8uO48cP5Zk7W+zNPOMXcU78Jh d1LMXbZyDWFE/w91SZ338faxHCsP7b8wPUlcKtCctRsG5Kv6LWp1Fh2RppCDfnq7 axl8fb7fX8ahlt+Ywy33++i8 -----END CERTIFICATE-----Generated at Thu May 21 09:39:28 2026 by rpki-client