$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json) Hash identifier: VsD2z8Yq518xfz9T85m6sF23bL3uZcysMRs1AsIiD8M= Subject key identifier: DF:3E:A7:F5:20:E0:D5:B5:F6:13:19:91:43:0D:EF:E8:74:A8:A9:44 Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft Manifest number: 0316 Signing time: Thu 21 May 2026 01:15:46 +0000 Manifest this update: Thu 21 May 2026 01:15:45 +0000 Manifest next update: Thu 28 May 2026 01:15:45 +0000 Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: 91q4rqiADWw+1b3Q4koGJAgOXlsnDPsWC0Q2g0/4Xdo=) 2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: F9Rj/XqATn1zywLlT+11oxByZBWlqSz3GPhD+W7p31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B Validity Not Before: May 21 01:15:45 2026 GMT Not After : May 28 01:15:45 2026 GMT Subject: CN=6a0e5cc2-fa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:7d:64:9f:3b:1d:a2:05:2c:aa:04:60:bb: 94:e1:04:b6:ab:d8:66:7c:7a:f7:45:d8:81:ae:f1: 68:c5:f5:97:18:09:e8:f1:95:1a:f9:8a:1b:2c:d2: 1a:85:85:64:b6:a1:0a:66:9d:c4:36:d8:5f:8d:2f: 4d:bb:c6:ab:3d:d2:d2:1b:dc:46:68:24:e7:96:5c: 1d:00:c4:6c:99:88:63:68:2b:77:e9:5c:46:32:dc: 18:8d:f9:ef:ba:e7:df:f1:cd:60:45:a0:c0:fb:6a: bd:ff:ab:1e:fc:7f:36:27:13:c7:41:3a:b2:dd:f7: 47:0f:87:ad:01:6a:fe:fb:78:41:d5:e4:b1:26:fb: 8f:e0:c6:93:eb:17:10:ad:0f:9b:67:87:56:28:ee: fa:83:c2:5a:1b:22:bd:df:2f:f6:58:03:f8:f7:bc: 44:9f:36:75:ae:8b:51:f4:14:ce:87:15:37:2c:b8: 95:05:8e:18:72:59:d1:09:fd:e8:43:90:b6:90:79: c4:f9:82:e2:e7:7e:93:a5:b1:61:0d:a7:21:8c:0b: 21:f8:f1:18:66:5f:06:15:f6:ef:1a:7d:dd:64:47: fc:ad:12:38:5a:b8:5b:60:93:85:f0:83:43:7d:a4: ff:db:15:28:31:d6:ea:43:e6:a7:e1:db:c4:0a:f8: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:A7:F5:20:E0:D5:B5:F6:13:19:91:43:0D:EF:E8:74:A8:A9:44 X509v3 Authority Key Identifier: keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cd:85:e0:77:ef:a8:21:6f:4f:88:dd:b8:11:7b:6f:f4:e3: 07:8b:80:bc:24:d8:4b:8f:2c:55:c2:c1:57:11:8b:e4:17:aa: 18:d7:8f:33:1f:e3:97:68:c8:87:96:33:33:46:a4:ea:58:f3: 29:fe:cd:5b:b4:a8:e9:99:b4:e0:ab:2c:17:6d:a7:1f:17:90: 4c:17:b5:7b:e5:db:4d:1e:fd:2d:02:14:fe:72:c6:f4:01:e4: 44:12:59:7a:fd:1e:92:0d:3b:69:67:b3:7a:32:4c:bd:a0:77: a4:58:e9:f7:d4:c6:30:ba:36:1e:ec:98:da:91:c7:b1:05:36: 0a:b3:61:95:08:c4:d7:b2:50:f5:d2:a1:85:e8:51:45:ca:3d: 67:52:cf:e4:ed:6a:92:43:f9:4e:92:23:25:89:db:46:48:87: 56:20:d3:12:b9:6a:92:91:70:91:86:ba:10:6b:95:b1:c1:28: 30:d2:c6:48:4b:de:c8:70:ff:a9:12:cc:6d:74:da:12:2b:43: 28:92:db:47:e0:eb:b8:fe:cb:87:24:36:18:09:bd:54:e6:c2: b4:83:12:a9:26:5c:39:42:1a:62:8b:e7:7d:6e:b4:24:d4:07: ed:71:1a:79:83:51:de:3c:ed:2e:d9:cb:0d:bd:71:b3:bc:58: 55:48:da:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx QzM1NDkzNEIwHhcNMjYwNTIxMDExNTQ1WhcNMjYwNTI4MDExNTQ1WjAYMRYwFAYD VQQDEw02YTBlNWNjMi1mYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZh9ZJ87HaIFLKoEYLuU4QS2q9hmfHr3RdiBrvFoxfWXGAno8ZUa+YobLNIa hYVktqEKZp3ENthfjS9Nu8arPdLSG9xGaCTnllwdAMRsmYhjaCt36VxGMtwYjfnv uuff8c1gRaDA+2q9/6se/H82JxPHQTqy3fdHD4etAWr++3hB1eSxJvuP4MaT6xcQ rQ+bZ4dWKO76g8JaGyK93y/2WAP497xEnzZ1rotR9BTOhxU3LLiVBY4YclnRCf3o Q5C2kHnE+YLi536TpbFhDachjAsh+PEYZl8GFfbvGn3dZEf8rRI4WrhbYJOF8IND faT/2xUoMdbqQ+an4dvECvh71wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8+p/Ug 4NW19hMZkUMN7+h0qKlEMB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2 QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ1NS8yQkE3Mzk1RTE2QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZ QThId3NUTGEyRDBjTlVrMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWc2F4HfvqCFvT4jduBF7b/TjB4uAvCTYS48sVcLBVxGL5BeqGNePMx/jl2jI h5YzM0ak6ljzKf7NW7So6Zm04KssF22nHxeQTBe1e+XbTR79LQIU/nLG9AHkRBJZ ev0ekg07aWezejJMvaB3pFjp99TGMLo2HuyY2pHHsQU2CrNhlQjE17JQ9dKhhehR Rco9Z1LP5O1qkkP5TpIjJYnbRkiHViDTErlqkpFwkYa6EGuVscEoMNLGSEveyHD/ qRLMbXTaEitDKJLbR+DruP7LhyQ2GAm9VObCtIMSqSZcOUIaYovnfW60JNQH7XEa eYNR3jztLtnLDb1xs7xYVUjaOQ== -----END CERTIFICATE-----Generated at Thu May 21 10:23:55 2026 by rpki-client