$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft File: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft (raw, json) Hash identifier: hPeGXOYJ0twL3c1mgWOCfsLPoHFOSDH4JHVgXobD4LA= Subject key identifier: 5A:FC:CD:8F:32:C0:D5:39:92:85:49:E3:3A:9F:DF:8A:30:4C:A8:44 Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft Manifest number: 01F4 Signing time: Sat 18 Apr 2026 17:32:06 +0000 Manifest this update: Sat 18 Apr 2026 17:32:05 +0000 Manifest next update: Sat 25 Apr 2026 17:32:05 +0000 Files and hashes: 1: OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl (hash: 8U1Br3VFYy9B0Kv9Ad5J3bX+mNYLd3pYiwkznEIYhD0=) 2: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (hash: oB4kxasRgRq+GKJ70NUc/sJMH3q5nYfTRjnemmCHnis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Apr 18 17:32:05 2026 GMT Not After : Apr 25 17:32:05 2026 GMT Subject: CN=69e3c015-33b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:f5:56:00:3d:2f:b9:e2:46:2a:6d:28:11: 8f:38:91:75:93:af:14:88:71:f7:ae:52:07:31:d0: 01:3e:f0:f1:03:9d:38:ff:df:7c:00:a2:28:21:94: 45:ab:63:a3:5e:79:de:5c:22:72:97:92:91:b0:8c: 10:fa:d3:99:49:37:81:1a:60:bb:33:8e:aa:8a:d4: 6c:c6:84:d3:8c:74:f2:08:7f:e5:9e:56:a6:91:af: cc:d9:66:4e:21:68:7e:63:d9:2b:ce:f2:c7:f3:dd: 2c:db:2d:ed:a9:28:7c:c3:0e:68:b2:dc:63:9e:f9: 4b:91:84:13:d8:8c:9d:6c:1c:f6:53:b3:fb:a5:f9: b4:3b:86:08:99:18:7b:ae:2e:64:b5:84:24:0e:00: ca:e7:9b:1f:90:e4:04:b6:e1:63:b4:29:a8:72:c2: 31:8f:35:46:fa:f4:85:52:51:ac:2c:99:3d:2c:a0: 62:ed:23:aa:bd:48:12:86:8e:f0:4f:c1:43:b0:b4: d9:75:36:7f:e0:d7:a9:bb:db:d2:0a:df:3a:de:95: 76:90:e2:64:32:6f:24:fc:f1:c2:f6:3d:91:02:2f: eb:f3:99:17:60:29:17:4d:59:23:33:3e:86:0e:e9: e1:f6:cc:a8:ec:ea:1e:f0:37:37:2a:22:28:1b:32: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FC:CD:8F:32:C0:D5:39:92:85:49:E3:3A:9F:DF:8A:30:4C:A8:44 X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:18:4f:7a:37:a9:2e:70:0c:fc:52:d5:6b:19:d2:8e:ad:db: 85:31:d5:39:92:06:70:e5:2a:42:02:35:df:5e:6e:0c:f9:4c: bc:31:45:f8:9f:f2:78:87:7a:53:26:8b:7c:1e:55:53:71:23: 8f:fb:e4:54:53:44:98:a0:61:9a:63:27:00:bf:0c:c4:d5:e0: 4a:95:49:79:9a:46:22:5c:5f:4c:2a:e4:9d:08:d9:9d:f7:00: b3:7f:10:86:f8:c3:7a:11:38:f5:dc:af:8c:06:a9:cc:e3:bc: 79:13:dd:6f:97:c7:db:ef:f6:dc:6d:ce:78:75:5c:3f:e8:40: 05:5f:57:3a:2d:b4:c2:98:70:d3:73:94:1c:4b:32:c5:01:0e: f6:f5:82:56:37:21:ac:07:26:80:a3:dc:c1:d0:ed:c1:7b:3c: d2:ce:59:d9:a5:23:33:b1:f7:e1:f6:2b:09:33:17:46:7c:0d: 80:57:c7:02:8b:16:1c:ea:d4:35:1a:2a:61:f7:73:76:b4:e3: 0d:48:f1:2d:b8:47:d5:c3:6a:9d:16:70:59:68:91:a7:12:2d: 49:c3:6b:03:ac:54:fb:2b:ff:b6:43:7f:48:73:4a:89:1c:20: c5:9d:3f:9a:64:43:61:69:b3:f2:87:61:04:1d:1a:19:cb:e9: dc:70:a1:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwNDE4MTczMjA1WhcNMjYwNDI1MTczMjA1WjAYMRYwFAYD VQQDEw02OWUzYzAxNS0zM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmM/1VgA9L7niRiptKBGPOJF1k68UiHH3rlIHMdABPvDxA504/998AKIoIZRF q2OjXnneXCJyl5KRsIwQ+tOZSTeBGmC7M46qitRsxoTTjHTyCH/lnlamka/M2WZO IWh+Y9krzvLH890s2y3tqSh8ww5ostxjnvlLkYQT2IydbBz2U7P7pfm0O4YImRh7 ri5ktYQkDgDK55sfkOQEtuFjtCmocsIxjzVG+vSFUlGsLJk9LKBi7SOqvUgSho7w T8FDsLTZdTZ/4Nepu9vSCt863pV2kOJkMm8k/PHC9j2RAi/r85kXYCkXTVkjMz6G Dunh9syo7Ooe8Dc3KiIoGzKw4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFr8zY8y wNU5koVJ4zqf34owTKhEMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yRERCNDI2RTQ4NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2 eWtCbzB6bUVSUE5rRUlWSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArhhPejepLnAM/FLVaxnSjq3bhTHVOZIGcOUqQgI1315uDPlMvDFF+J/yeId6 UyaLfB5VU3Ejj/vkVFNEmKBhmmMnAL8MxNXgSpVJeZpGIlxfTCrknQjZnfcAs38Q hvjDehE49dyvjAapzOO8eRPdb5fH2+/23G3OeHVcP+hABV9XOi20wphw03OUHEsy xQEO9vWCVjchrAcmgKPcwdDtwXs80s5Z2aUjM7H34fYrCTMXRnwNgFfHAosWHOrU NRoqYfdzdrTjDUjxLbhH1cNqnRZwWWiRpxItScNrA6xU+yv/tkN/SHNKiRwgxZ0/ mmRDYWmz8odhBB0aGcvp3HChCg== -----END CERTIFICATE-----Generated at Sat Apr 18 21:07:46 2026 by rpki-client