$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json) Hash identifier: Ylb+IsSx4Ed++DSJFyoZNRv8k5zsq3EE/TdZdjS46Gc= Subject key identifier: 9E:E8:ED:87:3F:55:62:1E:EC:EB:C3:77:73:6B:5C:B0:12:A0:38:31 Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft Manifest number: 01E4 Signing time: Sun 05 Apr 2026 02:57:05 +0000 Manifest this update: Sun 05 Apr 2026 02:57:04 +0000 Manifest next update: Sun 12 Apr 2026 02:57:04 +0000 Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: eRahEw/K3WqelX/ODdNW3Ln2spKAlPVF94j5KBNMQLw=) 2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: r8/9peTSjQhr0FyyL8WXDBdFlkEwEDLfGXbQKn3ob18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Apr 5 02:57:04 2026 GMT Not After : Apr 12 02:57:04 2026 GMT Subject: CN=69d1cf81-f889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:87:f5:04:c9:4b:ac:9c:af:6a:f1:82:44: 61:56:3d:68:cc:6d:20:c2:cd:3e:37:e3:e1:2c:15: 45:66:1b:66:a7:29:71:72:66:0e:ea:d8:2b:12:e2: 62:83:f6:f6:c5:99:89:b6:37:cf:66:e2:83:68:6a: 3d:65:be:73:37:48:50:7b:bf:8b:b4:10:d6:24:07: f7:09:fe:e2:c3:57:02:52:40:c4:ab:21:f7:ae:ad: ee:a5:be:db:1b:48:12:07:06:12:cb:6e:76:b7:95: 6d:e7:ed:cc:98:a3:58:b9:b3:b4:b5:40:cf:9b:04: c6:4f:d1:0c:7e:a0:fe:cb:cd:85:51:d0:f4:b1:a5: d1:a1:84:39:2f:48:e1:f5:e5:bf:a7:8f:c3:f2:29: f3:c8:53:5e:48:5f:65:0b:7f:00:13:87:98:02:00: 07:89:8b:9f:8b:62:48:29:9c:b2:a3:64:61:d5:d7: c5:15:40:53:b4:1f:7d:91:6e:69:ed:29:b7:e3:23: e6:27:13:18:34:f8:fd:61:de:56:54:1a:b8:80:38: 4c:be:52:42:91:09:ea:23:8b:c6:e8:b2:42:5b:d0: 48:9b:25:41:7f:ac:12:71:87:4a:fe:c1:bb:7d:ea: 57:5b:34:75:eb:e0:bb:60:8d:78:06:3f:52:04:9a: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:ED:87:3F:55:62:1E:EC:EB:C3:77:73:6B:5C:B0:12:A0:38:31 X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5c:61:d8:c4:8a:ff:a1:8b:70:1d:72:7a:c4:4e:34:ff:55: 55:c4:8e:2b:f8:d8:7e:1d:2e:d0:e9:e6:b0:59:b0:6e:2c:33: 3b:91:bf:02:72:01:8e:10:23:1b:34:47:d6:f5:e8:a8:e8:be: f7:1b:fc:39:67:82:c4:7a:71:e8:1f:4b:82:8f:01:f6:35:da: d2:2c:5d:cd:b6:a2:4b:25:04:35:5e:ab:95:f6:5c:f7:49:dd: d4:50:bc:f6:31:eb:0e:94:02:9b:0c:c2:da:d4:b3:49:fc:fb: b5:35:ce:84:75:b9:30:ea:71:fe:01:30:7e:e3:29:16:fd:68: 42:16:51:6c:f6:eb:85:07:bd:a2:d4:39:a6:4e:94:db:b6:f8: 20:44:5b:d6:bf:82:eb:e9:f8:62:57:34:b0:46:d2:c1:2f:3b: b5:6c:62:47:ff:8a:d6:91:bb:a2:65:db:d4:c4:62:9a:da:b3: 3d:fb:6e:5b:f9:ec:9f:6c:f4:55:04:36:ce:3a:c0:e8:bf:da: 8c:ea:08:1e:ac:2d:4a:3d:a9:2f:2c:4a:46:1a:81:00:cf:0f: 31:5f:3d:7e:a2:4e:7f:d4:c4:0c:ac:cd:fe:d2:76:fd:f6:56: 23:cc:16:76:84:6b:5d:58:79:08:13:b5:6a:52:18:d1:2e:ed: 73:e3:a1:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjYwNDA1MDI1NzA0WhcNMjYwNDEyMDI1NzA0WjAYMRYwFAYD VQQDEw02OWQxY2Y4MS1mODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXmH9QTJS6ycr2rxgkRhVj1ozG0gws0+N+PhLBVFZhtmpylxcmYO6tgrEuJi g/b2xZmJtjfPZuKDaGo9Zb5zN0hQe7+LtBDWJAf3Cf7iw1cCUkDEqyH3rq3upb7b G0gSBwYSy252t5Vt5+3MmKNYubO0tUDPmwTGT9EMfqD+y82FUdD0saXRoYQ5L0jh 9eW/p4/D8inzyFNeSF9lC38AE4eYAgAHiYufi2JIKZyyo2Rh1dfFFUBTtB99kW5p 7Sm34yPmJxMYNPj9Yd5WVBq4gDhMvlJCkQnqI4vG6LJCW9BImyVBf6wScYdK/sG7 fepXWzR16+C7YI14Bj9SBJpAOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7o7Yc/ VWIe7OvDd3NrXLASoDgxMB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgwNC9DMjEzOEQ0MDUyQkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29v RS1HaDhBYzVXUXhqVjlRTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMVxh2MSK/6GLcB1yesRONP9VVcSOK/jYfh0u0OnmsFmwbiwzO5G/AnIBjhAj GzRH1vXoqOi+9xv8OWeCxHpx6B9Lgo8B9jXa0ixdzbaiSyUENV6rlfZc90nd1FC8 9jHrDpQCmwzC2tSzSfz7tTXOhHW5MOpx/gEwfuMpFv1oQhZRbPbrhQe9otQ5pk6U 27b4IERb1r+C6+n4Ylc0sEbSwS87tWxiR/+K1pG7omXb1MRimtqzPftuW/nsn2z0 VQQ2zjrA6L/ajOoIHqwtSj2pLyxKRhqBAM8PMV89fqJOf9TEDKzN/tJ2/fZWI8wW doRrXVh5CBO1alIY0S7tc+Ohog== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:06 2026 by rpki-client