$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: ww1CmnRhUrpktu5z+F7T58CTsozyDNgyVSfGh/t33CA= Subject key identifier: 00:90:C5:B1:13:38:BB:CA:CF:BD:93:89:B6:CC:00:97:60:43:35:70 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 0507 Signing time: Sat 04 Apr 2026 23:27:10 +0000 Manifest this update: Sat 04 Apr 2026 23:27:09 +0000 Manifest next update: Sat 11 Apr 2026 23:27:09 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: KTKXueLs0PRPHYOKNoGpmAhGPpvM4GLPqpL4GViamSk=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Apr 4 23:27:09 2026 GMT Not After : Apr 11 23:27:09 2026 GMT Subject: CN=69d19e4e-65cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:3c:fa:8b:6d:0b:ba:11:fe:0c:ca:1b:f0: f5:e9:56:8c:a1:6e:3f:8c:bb:a3:b7:ee:a7:89:c9: 96:bf:8b:d9:92:20:22:d6:dd:25:62:bc:f2:3b:ef: 69:dc:86:c7:4c:85:9b:4e:bd:a6:0f:46:2b:ea:07: ed:1a:bc:6c:2d:d7:44:9d:74:87:33:e0:e4:33:e1: 16:bc:d0:19:c8:aa:85:85:fe:b6:85:a4:bb:0a:84: 29:7c:07:83:e2:e1:a8:b1:da:9a:e3:c9:13:51:cc: 9f:5a:f4:e1:7f:1c:63:c6:f6:c9:6f:7e:b5:b5:e2: 0a:a4:85:5d:70:7c:fc:bd:c1:d9:ff:eb:fa:41:cd: dd:b8:bc:4b:86:c7:a8:b0:d3:a6:2e:26:65:1b:bf: 86:62:17:14:eb:a2:6d:88:34:0c:5d:70:77:6d:5c: dd:24:ad:66:c4:f5:2b:dc:ab:89:05:64:29:3b:a6: 48:04:87:d3:e2:8a:fb:2a:fc:55:04:b5:80:51:51: 4b:e4:c7:cd:b7:58:f2:ed:f3:08:8b:bc:e3:d3:80: 0e:71:e8:d8:bf:39:ff:d6:35:13:39:78:22:a2:9c: 7f:1e:f6:9f:51:10:27:e3:76:15:db:06:8b:26:84: 11:cc:37:23:87:5d:f9:f9:9f:34:59:4b:29:33:28: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:C5:B1:13:38:BB:CA:CF:BD:93:89:B6:CC:00:97:60:43:35:70 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e6:c6:2a:16:7b:db:30:98:aa:5a:69:6d:e0:27:f6:d6:0b: 60:16:71:38:e9:f8:5e:f1:a2:87:84:fa:c0:2d:f2:95:4d:d1: ef:51:e0:da:93:a4:c0:63:6a:8a:0c:a0:19:2c:52:f3:4c:e7: e6:a4:bf:d9:12:19:d1:8d:3b:2b:e7:af:52:38:c2:92:a8:72: 22:9a:e0:8c:c0:a8:11:47:c1:48:f4:c9:3e:6a:4e:32:1a:0b: ce:d7:56:51:56:da:21:a2:c3:05:9a:90:bb:df:bc:12:b9:d5: 0d:6a:48:f5:fb:f4:96:25:c3:fb:d8:9e:40:90:36:13:d0:cf: 82:76:9e:3b:45:a4:71:ff:d7:05:fe:d9:06:f3:d7:db:89:51: 9b:a3:1f:66:ed:5c:e4:29:f6:6a:01:06:20:86:e6:36:e9:50: a5:41:4c:58:86:0d:9f:20:6b:04:bf:07:e9:bb:36:7c:bf:dd: 9e:ad:f7:f3:48:11:20:17:18:a8:25:6b:c8:2b:c9:8f:8d:34: 69:98:8d:0e:ad:58:b5:59:32:53:ef:32:dd:57:22:c5:07:27: 87:65:c0:ab:be:62:39:03:f6:97:65:1b:9b:f4:04:90:3d:f3: 7a:31:06:83:06:20:b2:bc:7e:3c:e5:e8:c9:ba:8e:0a:f1:2e: cd:18:87:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjYwNDA0MjMyNzA5WhcNMjYwNDExMjMyNzA5WjAYMRYwFAYD VQQDEw02OWQxOWU0ZS02NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbc8+ottC7oR/gzKG/D16VaMoW4/jLujt+6nicmWv4vZkiAi1t0lYrzyO+9p 3IbHTIWbTr2mD0Yr6gftGrxsLddEnXSHM+DkM+EWvNAZyKqFhf62haS7CoQpfAeD 4uGosdqa48kTUcyfWvThfxxjxvbJb361teIKpIVdcHz8vcHZ/+v6Qc3duLxLhseo sNOmLiZlG7+GYhcU66JtiDQMXXB3bVzdJK1mxPUr3KuJBWQpO6ZIBIfT4or7KvxV BLWAUVFL5MfNt1jy7fMIi7zj04AOcejYvzn/1jUTOXgiopx/HvafURAn43YV2waL JoQRzDcjh135+Z80WUspMygI2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACQxbET OLvKz72TibbMAJdgQzVwMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqObGKhZ72zCYqlppbeAn9tYLYBZxOOn4XvGih4T6wC3ylU3R71Hg2pOkwGNq igygGSxS80zn5qS/2RIZ0Y07K+evUjjCkqhyIprgjMCoEUfBSPTJPmpOMhoLztdW UVbaIaLDBZqQu9+8ErnVDWpI9fv0liXD+9ieQJA2E9DPgnaeO0Wkcf/XBf7ZBvPX 24lRm6MfZu1c5Cn2agEGIIbmNulQpUFMWIYNnyBrBL8H6bs2fL/dnq3380gRIBcY qCVryCvJj400aZiNDq1YtVkyU+8y3VcixQcnh2XAq75iOQP2l2Ubm/QEkD3zejEG gwYgsrx+POXoybqOCvEuzRiHfQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:25:42 2026 by rpki-client