$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json) Hash identifier: q0U1A8GMVAyqhcakoF6QjZys24YpOq1OxAKUa19lRtU= Subject key identifier: 0E:A2:13:2E:1C:5A:C3:68:72:4C:40:01:71:96:26:29:5B:FF:FB:BB Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft Manifest number: 45 Signing time: Fri 17 Apr 2026 03:50:49 +0000 Manifest this update: Fri 17 Apr 2026 03:50:48 +0000 Manifest next update: Fri 24 Apr 2026 03:50:48 +0000 Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: NIUQYhUM/a1iHm9KpWFiuZUudSV9h+2GkDasiOmvmK4=) 2: 7D6CF15E299511F1AB285139C2833773.roa (hash: zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Validity Not Before: Apr 17 03:50:48 2026 GMT Not After : Apr 24 03:50:48 2026 GMT Subject: CN=69e1ae19-24eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:58:c8:b7:b1:21:01:31:0a:3d:6a:f8:ce: 22:79:60:64:9f:b9:4c:ab:b4:e6:b5:ad:5e:12:d2: d7:6a:e8:59:c7:e5:3d:00:10:a7:d5:50:d6:3e:20: f6:e6:73:aa:45:dd:12:aa:fa:e1:58:91:b6:ee:ff: d1:5c:3c:f6:db:b3:54:f7:90:7b:76:1e:59:ea:ff: 2f:c3:fe:74:aa:71:54:ec:67:76:7a:77:3a:58:13: 9c:89:ba:da:0c:cd:8a:0c:62:2f:c3:30:d0:42:57: 76:c3:16:e6:3d:cb:f4:db:72:c2:d5:26:20:b3:e6: 44:fe:42:5b:65:1e:a8:8c:ac:81:54:64:71:2f:ad: a3:10:b0:9f:06:30:1b:40:97:bf:92:8c:1e:40:be: b8:6e:b6:cb:a0:70:d0:c0:d1:ec:10:12:82:d0:7c: 45:fb:f5:93:fd:2e:6d:d1:60:3a:ef:b9:31:3f:38: 58:f8:71:02:5c:6e:73:af:d2:23:f5:64:f4:e2:08: f7:47:48:fb:05:f2:e6:ad:1d:a6:00:1e:be:7d:cb: bf:77:10:4f:7f:64:09:b9:78:46:f8:2b:c1:f7:58: 81:1c:56:9c:f7:00:97:ac:66:dc:06:ec:79:ca:bd: 57:0b:8d:c0:53:af:09:49:c9:90:76:5f:62:8d:6e: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A2:13:2E:1C:5A:C3:68:72:4C:40:01:71:96:26:29:5B:FF:FB:BB X509v3 Authority Key Identifier: keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:01:23:50:f6:75:f7:30:c0:5d:ed:c4:7f:0d:6f:6d:07:e1: 57:90:27:47:56:e4:00:a2:f7:9e:9e:32:e9:fa:25:4b:d9:c0: 95:8f:9f:d8:cd:7b:62:b3:40:8e:8c:e5:af:d2:01:aa:e3:f6: b4:49:cd:f3:97:f3:2b:57:02:d1:d2:9c:35:f5:45:f3:72:7e: c9:58:24:35:a9:e0:33:74:4d:99:92:39:53:08:d2:df:f2:80: 29:66:7c:e1:8b:5b:f8:f2:b4:54:21:ed:24:d3:75:4c:a3:90: 91:a1:89:d1:4f:3b:89:f2:f4:0a:26:7e:48:1f:5a:d5:70:2e: d3:97:42:f1:3f:33:ee:4c:84:93:0f:c9:44:58:1d:47:97:94: fa:be:14:41:96:c7:b8:65:62:21:9a:95:ab:75:4d:08:f3:d6: 69:07:47:5a:ba:f4:18:15:99:04:64:fa:66:58:e1:67:e5:0b: e5:60:64:72:9b:28:57:2a:68:20:e1:e4:aa:cc:43:3f:3a:58: 11:64:e9:65:5a:9b:db:79:5f:83:36:a8:e7:88:66:f5:e6:ee: e2:0f:ef:af:3b:2d:09:f3:2c:9a:7c:19:99:17:26:7a:bd:fb: f5:70:20:df:8b:3b:56:82:8f:45:f2:2a:91:8f:70:aa:66:63: b8:a2:37:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjI5NzExMC8GA1UEBRMoQTBGQ0JFOUJDQjQzMjhBOUU4QkNDQTFGNUUxNDk2QUND MkNFMkVEOTAeFw0yNjA0MTcwMzUwNDhaFw0yNjA0MjQwMzUwNDhaMBgxFjAUBgNV BAMTDTY5ZTFhZTE5LTI0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsUVjIt7EhATEKPWr4ziJ5YGSfuUyrtOa1rV4S0tdq6FnH5T0AEKfVUNY+IPbm c6pF3RKq+uFYkbbu/9FcPPbbs1T3kHt2Hlnq/y/D/nSqcVTsZ3Z6dzpYE5yJutoM zYoMYi/DMNBCV3bDFuY9y/TbcsLVJiCz5kT+QltlHqiMrIFUZHEvraMQsJ8GMBtA l7+SjB5AvrhutsugcNDA0ewQEoLQfEX79ZP9Lm3RYDrvuTE/OFj4cQJcbnOv0iP1 ZPTiCPdHSPsF8uatHaYAHr59y793EE9/ZAm5eEb4K8H3WIEcVpz3AJesZtwG7HnK vVcLjcBTrwlJyZB2X2KNbqnJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDqITLhxa w2hyTEABcZYmKVv/+7swHwYDVR0jBBgwFoAUoPy+m8tDKKnovMofXhSWrMLOLtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3L0JCRjI4RERBRDk5 NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1B5LW04dERLS25vdk1vZlhoU1dyTUxPTHRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Mjk3L0JCRjI4RERBRDk5NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tu b3ZNb2ZYaFNXck1MT0x0ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzASNQ9nX3MMBd7cR/DW9tB+FXkCdHVuQAoveenjLp+iVL2cCVj5/YzXtis0CO jOWv0gGq4/a0Sc3zl/MrVwLR0pw19UXzcn7JWCQ1qeAzdE2ZkjlTCNLf8oApZnzh i1v48rRUIe0k03VMo5CRoYnRTzuJ8vQKJn5IH1rVcC7Tl0LxPzPuTISTD8lEWB1H l5T6vhRBlse4ZWIhmpWrdU0I89ZpB0dauvQYFZkEZPpmWOFn5QvlYGRymyhXKmgg 4eSqzEM/OlgRZOllWpvbeV+DNqjniGb15u7iD++vOy0J8yyafBmZFyZ6vfv1cCDf iztWgo9F8iqRj3CqZmO4ojdu -----END CERTIFICATE-----Generated at Sat Apr 18 21:04:43 2026 by rpki-client