$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json) Hash identifier: p/Q71pvmWslRLkmsj4aW+looClGhQC/cxd4E/X2Jbp0= Subject key identifier: F6:4B:15:FD:BE:6C:94:36:C9:0E:26:7A:D6:0D:D5:05:C9:6E:7A:22 Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft Manifest number: 051E Signing time: Wed 20 May 2026 23:39:45 +0000 Manifest this update: Wed 20 May 2026 23:39:44 +0000 Manifest next update: Wed 27 May 2026 23:39:44 +0000 Files and hashes: 1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: 82YOKsn/zlFdYVl+XdVXulL6RLy3xXdFMtBgz+iNlLM=) 2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: May 20 23:39:44 2026 GMT Not After : May 27 23:39:44 2026 GMT Subject: CN=6a0e4641-f02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:1f:a4:08:7b:86:20:8d:ff:bb:df:f2:11: fb:ce:ce:16:15:ab:85:d7:64:3a:42:98:ed:42:f9: 8f:ed:14:77:0f:3f:ab:96:c7:0b:f3:28:bc:db:e0: 41:a4:0e:4b:cf:41:1c:c1:15:25:77:90:88:02:15: 3c:a2:10:cc:6d:dd:e3:f0:31:ed:c3:9e:bf:d2:ac: 25:2f:cf:6e:46:c7:db:78:85:b1:f2:05:c0:c5:d1: 7a:1f:ae:fb:60:6c:d5:ef:22:81:f3:de:71:66:27: 49:d6:13:84:ba:07:73:1d:0f:9e:94:43:a2:c6:34: 10:1e:e4:e4:68:be:53:f7:33:1f:b7:72:21:1b:02: 07:c8:68:9b:bb:54:1d:e1:9b:1c:18:ba:3a:13:37: dc:92:9f:b3:7a:ae:2f:da:dd:aa:03:3c:e1:20:ef: 13:32:e8:99:94:34:c8:20:b0:37:71:89:31:dc:8f: 75:55:7f:f6:17:14:e9:da:f9:d3:10:95:15:8d:eb: ce:8c:04:ec:b6:b5:77:f0:f3:c3:24:97:42:7c:05: bc:f1:ce:2d:34:5c:76:c0:2a:8e:db:a9:a8:83:46: 66:25:74:cc:69:e8:7c:dd:d5:e6:33:6f:fb:b3:7b: cb:a5:51:72:67:2d:63:3d:12:d7:c9:31:4f:49:f9: c5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:15:FD:BE:6C:94:36:C9:0E:26:7A:D6:0D:D5:05:C9:6E:7A:22 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:60:66:96:0b:0b:8c:7d:d0:96:ef:7d:4c:cd:34:3a:5a:d0: 2c:20:1a:ae:98:ae:62:23:e2:f7:02:21:c5:95:c8:51:15:ea: 36:59:b7:80:0b:2c:33:e9:eb:bf:05:5c:83:23:15:7f:9b:01: a5:63:bc:db:80:fb:9b:65:8a:bf:3f:7c:4a:a1:c9:b3:3f:c2: aa:37:0a:20:2b:6c:66:8f:75:37:71:f7:8c:b6:68:cc:a0:8f: 95:78:2b:67:c8:d2:f1:0e:b2:f9:f8:c6:fb:87:4d:d1:cf:d0: d8:6c:93:fc:63:9e:45:04:2a:28:36:29:0c:90:67:8c:6b:4a: 20:35:18:de:c8:01:04:fe:01:91:c3:1e:9e:0d:36:80:29:d9: 57:8f:21:4b:0f:22:bd:53:fa:17:5c:7c:24:73:f5:e9:2c:d8: 68:6a:c8:b3:03:cc:be:ce:ae:7e:da:1e:1d:00:93:8c:07:7f: 6f:a3:5a:d9:fd:c3:4d:6d:65:82:2e:87:24:6e:b8:a5:aa:d8: d2:a2:90:87:31:9e:72:7d:5b:0f:d3:cb:e4:88:6a:e4:c5:8d: 46:1b:97:62:fa:01:92:b9:b4:b4:d7:51:84:e9:c9:d8:68:7b: 0b:bc:1f:4e:79:0c:04:b7:f5:8e:3f:26:3d:98:c6:2a:41:1a: 11:90:85:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjYwNTIwMjMzOTQ0WhcNMjYwNTI3MjMzOTQ0WjAYMRYwFAYD VQQDEw02YTBlNDY0MS1mMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAMfpAh7hiCN/7vf8hH7zs4WFauF12Q6QpjtQvmP7RR3Dz+rlscL8yi82+BB pA5Lz0EcwRUld5CIAhU8ohDMbd3j8DHtw56/0qwlL89uRsfbeIWx8gXAxdF6H677 YGzV7yKB895xZidJ1hOEugdzHQ+elEOixjQQHuTkaL5T9zMft3IhGwIHyGibu1Qd 4ZscGLo6Ezfckp+zeq4v2t2qAzzhIO8TMuiZlDTIILA3cYkx3I91VX/2FxTp2vnT EJUVjevOjATstrV38PPDJJdCfAW88c4tNFx2wCqO26mog0ZmJXTMaeh83dXmM2/7 s3vLpVFyZy1jPRLXyTFPSfnFfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZLFf2+ bJQ2yQ4metYN1QXJbnoiMB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJH VmRHMXAtTE9hSXctUnZ4VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg2BmlgsLjH3Qlu99TM00OlrQLCAarpiuYiPi9wIhxZXIURXqNlm3gAssM+nr vwVcgyMVf5sBpWO824D7m2WKvz98SqHJsz/CqjcKICtsZo91N3H3jLZozKCPlXgr Z8jS8Q6y+fjG+4dN0c/Q2GyT/GOeRQQqKDYpDJBnjGtKIDUY3sgBBP4BkcMeng02 gCnZV48hSw8ivVP6F1x8JHP16SzYaGrIswPMvs6uftoeHQCTjAd/b6Na2f3DTW1l gi6HJG64parY0qKQhzGecn1bD9PL5Ihq5MWNRhuXYvoBkrm0tNdRhOnJ2Gh7C7wf TnkMBLf1jj8mPZjGKkEaEZCFHg== -----END CERTIFICATE-----Generated at Thu May 21 09:35:58 2026 by rpki-client