$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: fqG5R3mSncQHNP2yOs/ORg6kCz0yEJmRJ1Nf+5o47Zc= Subject key identifier: E6:CD:FA:26:B7:28:AD:F6:E8:72:36:53:A6:82:36:E7:C7:95:33:B1 Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0CD5 Signing time: Thu 28 May 2026 18:18:03 +0000 Manifest this update: Thu 28 May 2026 18:18:02 +0000 Manifest next update: Thu 04 Jun 2026 18:18:02 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: Kja5476g1HfgaYfC9u7hLmxlrF5u/gWUV7S7vRdHoR0=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) 3: FD5EB4204DA711F1ACB8DF32A6833773.roa (hash: GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=) 4: 1315AE3C38C611F1B2610B139C833773.roa (hash: BY9HT2k5F73R8AwyoTindw46peifhV5zJVGNG0+m5PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 18:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: May 28 18:18:02 2026 GMT Not After : Jun 4 18:18:02 2026 GMT Subject: CN=6a1886db-3922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:aa:60:c6:43:13:4c:e4:8f:c8:37:28:1f: 01:f2:5e:d6:91:58:6b:f2:19:cb:53:21:7e:31:24: 68:7b:e4:90:33:3d:5e:09:71:89:c8:93:8c:c0:e1: a7:d0:a5:7a:aa:b2:af:d1:15:a2:28:4d:81:e6:1b: 14:fa:9e:43:0b:ef:99:53:a9:f5:6c:91:6d:a4:ef: a8:12:26:28:90:43:b0:5b:26:9c:e1:6b:55:ff:66: 16:0d:96:a5:2a:ad:43:e6:01:47:f7:cc:09:4d:f3: 03:e9:a8:f2:61:9b:9d:8a:5a:20:f3:04:3c:18:e3: ca:88:9b:9a:83:8e:54:9d:7f:d2:ba:61:c4:1c:cc: c4:df:bf:80:9e:a3:e8:c2:03:98:62:83:00:0a:06: d3:c6:51:1f:6b:1c:29:7f:2c:63:35:6c:1d:b1:6a: 3e:ea:d2:7e:0f:77:e4:51:2d:4a:4a:ad:d1:d8:d6: ad:56:eb:01:e6:e5:28:69:5a:92:62:6f:49:b8:f3: fe:15:a2:53:e7:28:45:9e:ec:6c:6a:29:be:92:91: 43:01:27:5b:f9:1f:8b:90:66:fe:61:eb:65:78:61: 75:33:79:69:5d:3d:ba:a0:2b:09:bd:67:8a:cb:93: f0:a4:93:9a:6d:7f:5d:2f:a2:3f:2d:dd:e8:c0:dc: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:FA:26:B7:28:AD:F6:E8:72:36:53:A6:82:36:E7:C7:95:33:B1 X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5e:8a:62:44:ec:b5:3c:93:71:09:25:76:55:41:80:33:f6: 92:21:7a:cb:58:cd:a5:3f:60:d1:f3:19:0f:53:7d:b3:bc:c0: ca:fc:18:2a:ba:19:51:10:27:fc:c8:24:07:67:09:41:8b:29: fa:bd:62:a2:5b:a4:6a:f9:99:15:ce:9f:2a:14:d1:aa:0b:8c: 79:f8:40:b9:5a:e1:65:fc:95:c7:51:b0:b3:eb:3f:c3:69:32: 17:c7:51:e2:d9:f9:ae:cd:ab:4b:c1:68:ec:b7:74:e4:39:8a: 3b:9b:a4:06:d3:9b:f9:a1:7d:41:af:b1:50:bb:88:a8:05:61: 41:ad:5c:56:5d:19:bf:bf:2b:68:e5:00:2e:1f:03:80:b2:bf: 6c:15:c1:78:8e:f1:63:5b:47:5a:22:b1:08:aa:e6:2f:67:04: 9c:ab:e2:bd:a0:93:21:f1:ca:68:5e:3f:44:16:e0:c7:17:25: 73:38:47:8c:e8:2e:95:6c:d3:66:76:ac:a2:88:8c:96:ed:7f: ae:13:a9:df:35:c9:59:57:b0:10:9e:65:bf:4d:4f:98:e3:fa: fc:93:68:f2:1d:4c:97:86:9a:76:ca:3d:a4:52:0d:be:7f:3d: c3:d1:e2:0e:5f:db:d0:a2:43:6b:c7:df:da:1e:b7:e7:46:9f: 80:57:d8:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYwNTI4MTgxODAyWhcNMjYwNjA0MTgxODAyWjAYMRYwFAYD VQQDEw02YTE4ODZkYi0zOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6GqYMZDE0zkj8g3KB8B8l7WkVhr8hnLUyF+MSRoe+SQMz1eCXGJyJOMwOGn 0KV6qrKv0RWiKE2B5hsU+p5DC++ZU6n1bJFtpO+oEiYokEOwWyac4WtV/2YWDZal Kq1D5gFH98wJTfMD6ajyYZudilog8wQ8GOPKiJuag45UnX/SumHEHMzE37+AnqPo wgOYYoMACgbTxlEfaxwpfyxjNWwdsWo+6tJ+D3fkUS1KSq3R2NatVusB5uUoaVqS Ym9JuPP+FaJT5yhFnuxsaim+kpFDASdb+R+LkGb+YetleGF1M3lpXT26oCsJvWeK y5PwpJOabX9dL6I/Ld3owNy8wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObN+ia3 KK326HI2U6aCNufHlTOxMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADF6KYkTstTyTcQkldlVBgDP2kiF6y1jNpT9g0fMZD1N9s7zAyvwYKroZURAn /MgkB2cJQYsp+r1iolukavmZFc6fKhTRqguMefhAuVrhZfyVx1Gws+s/w2kyF8dR 4tn5rs2rS8Fo7Ld05DmKO5ukBtOb+aF9Qa+xULuIqAVhQa1cVl0Zv78raOUALh8D gLK/bBXBeI7xY1tHWiKxCKrmL2cEnKvivaCTIfHKaF4/RBbgxxclczhHjOgulWzT ZnasooiMlu1/rhOp3zXJWVewEJ5lv01PmOP6/JNo8h1Ml4aadso9pFINvn89w9Hi Dl/b0KJDa8ff2h6350afgFfY+w== -----END CERTIFICATE-----Generated at Sat May 30 02:24:43 2026 by rpki-client