$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json) Hash identifier: geVcs3712qG6x+u1Hbj63/x///1Csvh6svr2RI5sdAo= Subject key identifier: 96:F4:87:72:DB:B6:ED:54:68:97:20:9C:6F:7F:D8:04:02:93:E8:C5 Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft Manifest number: 22 Signing time: Sun 01 Mar 2026 10:19:27 +0000 Manifest this update: Sun 01 Mar 2026 10:19:26 +0000 Manifest next update: Sun 08 Mar 2026 10:19:26 +0000 Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: vsC5BC72ewG8mu+MQ83gSgrQemc1eN3Tdv+ktR74by4=) 2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Mar 1 10:19:26 2026 GMT Not After : Mar 8 10:19:26 2026 GMT Subject: CN=69a412af-79d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:92:24:08:8f:83:6b:ca:43:fc:d4:8f:d8:02: 2e:e5:4f:93:cf:f5:80:f2:a0:44:da:cb:cf:9e:ca: 59:e5:2e:3d:56:88:46:da:26:f7:77:ef:c0:45:61: c8:9a:37:41:22:84:6e:45:d1:30:a1:53:61:db:00: 79:52:44:f2:6e:e9:d4:20:49:b3:0a:4d:9e:d6:6e: 69:b8:35:88:b0:18:12:f4:2b:c9:bc:15:6d:23:7d: 2c:35:43:33:50:a2:6b:9a:b8:9b:9b:23:4a:95:1d: 7f:fd:cb:f5:78:90:51:9e:e9:d1:a6:a3:23:e5:a0: 4c:41:98:dd:0d:89:4c:8d:ab:b7:4f:eb:91:18:a3: c9:ae:5c:67:ce:45:21:c6:52:2d:01:0a:31:35:e9: 95:a0:be:b1:ef:13:2e:8b:01:bd:7c:82:2e:f8:e1: 10:ce:8d:f5:d5:23:4a:c8:94:fc:0f:71:4d:2a:26: fb:1b:bb:2a:00:db:db:41:2a:22:96:5c:88:55:e2: 16:59:3b:ae:b7:04:36:4f:79:b8:8a:50:96:76:05: fc:09:b6:e3:a8:76:cc:da:3b:22:8c:fc:e0:c7:bb: 99:4d:18:af:22:8d:e9:6a:77:63:bb:11:1c:1f:cc: 41:c1:bc:1c:40:32:ef:53:cc:00:92:ba:b9:0b:0d: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F4:87:72:DB:B6:ED:54:68:97:20:9C:6F:7F:D8:04:02:93:E8:C5 X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d1:c3:b8:2c:e9:a4:92:4a:d8:00:b0:05:27:ea:fb:12:b3: 86:7e:77:a3:35:b2:fd:2a:ab:40:65:95:09:41:38:db:77:18: d0:16:6d:33:f4:45:e4:ea:1e:0d:3a:b7:be:75:a8:54:40:02: 1b:ec:c4:9a:7e:96:90:a1:1c:2c:50:ad:5b:9c:3a:02:30:72: e0:0f:c0:ff:a1:d0:77:f3:4a:f6:32:88:6e:64:33:92:79:a7: ce:73:af:d3:6b:80:64:b0:11:cc:93:d5:76:e2:c3:69:87:f6: f1:4d:fa:79:39:96:a2:d2:d6:94:b3:92:60:fd:35:95:f0:5e: 05:90:58:f9:66:09:6d:a6:69:48:a4:3d:b8:d7:84:a5:80:99: dd:76:d5:f9:19:aa:c0:95:6d:8d:2d:ef:6e:83:ef:d4:8a:a4: 4d:53:51:b7:77:28:e9:73:34:f2:38:00:19:c3:41:be:dd:84: 9b:70:36:8a:06:d7:9f:9d:3d:77:40:7e:c5:c8:54:68:4c:4f: 15:a3:bd:87:95:dc:4b:42:68:94:89:17:e1:0b:48:62:91:68: 75:7a:b6:b1:7c:dd:90:29:64:8d:63:e3:39:48:cb:71:fe:11: 78:dc:ec:c1:8c:e8:0d:21:c2:8a:f6:06:4e:68:17:15:ea:5c: f4:84:27:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RThGNjExMC8GA1UEBRMoQTFBQTJBMkM1NkU2NEE5RDlCQkFBMzM3QjZENkFCMzYx NzJEMzY4RjAeFw0yNjAzMDExMDE5MjZaFw0yNjAzMDgxMDE5MjZaMBgxFjAUBgNV BAMTDTY5YTQxMmFmLTc5ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVkiQIj4NrykP81I/YAi7lT5PP9YDyoETay8+eylnlLj1WiEbaJvd378BFYcia N0EihG5F0TChU2HbAHlSRPJu6dQgSbMKTZ7Wbmm4NYiwGBL0K8m8FW0jfSw1QzNQ omuauJubI0qVHX/9y/V4kFGe6dGmoyPloExBmN0NiUyNq7dP65EYo8muXGfORSHG Ui0BCjE16ZWgvrHvEy6LAb18gi744RDOjfXVI0rIlPwPcU0qJvsbuyoA29tBKiKW XIhV4hZZO663BDZPebiKUJZ2BfwJtuOodszaOyKM/ODHu5lNGK8ijelqd2O7ERwf zEHBvBxAMu9TzACSurkLDUzJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlvSHctu2 7VRolyCcb3/YBAKT6MUwHwYDVR0jBBgwFoAUoaoqLFbmSp2buqM3ttarNhctNo8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFOEY2LzNENkQ4RkYwRTdB RjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5v OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2FvcUxGYm1TcDJidXFNM3R0YXJOaGN0Tm84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF OEY2LzNENkQ4RkYwRTdBRjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3Ay YnVxTTN0dGFyTmhjdE5vOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAd0cO4LOmkkkrYALAFJ+r7ErOGfnejNbL9KqtAZZUJQTjbdxjQFm0z9EXk6h4N Ore+dahUQAIb7MSafpaQoRwsUK1bnDoCMHLgD8D/odB380r2MohuZDOSeafOc6/T a4BksBHMk9V24sNph/bxTfp5OZai0taUs5Jg/TWV8F4FkFj5ZgltpmlIpD2414Sl gJnddtX5GarAlW2NLe9ug+/UiqRNU1G3dyjpczTyOAAZw0G+3YSbcDaKBtefnT13 QH7FyFRoTE8Vo72HldxLQmiUiRfhC0hikWh1eraxfN2QKWSNY+M5SMtx/hF43OzB jOgNIcKK9gZOaBcV6lz0hCeP -----END CERTIFICATE-----Generated at Mon Mar 2 01:07:11 2026 by rpki-client