$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json) Hash identifier: aYb9I0DtLQgKyTJkLIZ08lFRnJCEBkd8edHK91u/Z2Q= Subject key identifier: 0D:C2:1E:E6:39:41:F0:CE:FB:30:3B:69:E8:5A:25:6A:B2:45:26:6A Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft Manifest number: 0632 Signing time: Sun 01 Mar 2026 00:32:02 +0000 Manifest this update: Sun 01 Mar 2026 00:32:01 +0000 Manifest next update: Sun 08 Mar 2026 00:32:01 +0000 Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: 9VQhYxFMtk6BULR+15m5NL+cTVyte1kSMoenWMcQ4gw=) 2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: dfPqBXiRpDvhClfs1CwvKkxPhMNPV6qZtiOuHI4j7UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466 Validity Not Before: Mar 1 00:32:01 2026 GMT Not After : Mar 8 00:32:01 2026 GMT Subject: CN=69a38902-cabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:fc:58:c9:56:92:c2:00:0c:ad:08:11:5b: 31:db:58:a8:c5:cf:d9:e5:c3:5a:8e:51:fd:0e:35: 3f:82:b5:ff:65:fd:7c:1e:22:03:13:b6:29:1f:7c: 56:c6:cb:59:1c:6b:b4:0e:2a:c5:41:77:7f:ea:2e: 7a:2b:5a:59:c2:98:74:c8:82:27:f9:4c:04:9d:0c: 5b:16:2f:0c:e7:fd:06:95:a2:b8:ab:6f:83:d0:1d: df:c9:58:d3:d1:74:5e:69:83:d8:d0:d0:da:dc:be: 1f:42:cb:ae:37:01:81:1c:b1:67:d8:a2:75:68:a8: 36:08:50:f0:d3:05:bc:4e:4c:f3:7c:60:74:81:a0: be:5d:83:b7:14:d2:be:36:c5:b2:dd:d8:91:8e:93: 59:45:dd:a7:ab:e9:c8:1d:43:a8:a9:dd:02:3b:9f: 6f:15:d0:77:ce:09:0d:54:5f:7b:13:d4:a6:40:04: ae:f2:c1:f0:e3:5d:0a:88:74:f4:48:d5:05:73:7f: 2f:a2:41:39:10:fa:b9:95:07:57:f1:1d:84:2a:5b: 95:52:46:0f:24:56:00:98:24:cb:69:70:54:c5:aa: c0:cb:be:eb:88:b1:28:a7:22:1d:9e:53:fb:33:87: 5c:b4:bc:94:16:1d:56:35:bc:7a:5e:f0:28:54:13: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C2:1E:E6:39:41:F0:CE:FB:30:3B:69:E8:5A:25:6A:B2:45:26:6A X509v3 Authority Key Identifier: keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7f:e1:d2:39:90:97:23:53:bd:1b:a7:45:ef:b9:e0:bf:f5: 39:78:ba:a3:14:de:09:4c:55:81:80:54:e3:cd:ac:78:d9:de: f9:c2:03:9d:88:92:f0:ee:21:66:88:f1:41:a6:3c:b2:31:09: 13:aa:f5:f3:1f:05:de:85:36:1f:d1:7b:5d:d0:9e:4c:52:76: 91:e2:0f:7a:93:dd:22:86:40:f6:cc:4a:87:2c:12:e9:96:8c: 81:14:b2:14:ad:34:6f:54:7e:cd:28:a0:60:8d:86:04:32:a9: 1a:d5:ff:5f:59:73:d8:a6:c3:04:a6:6d:5d:c6:4a:d5:06:56: 43:59:1b:94:86:09:ea:f8:1b:f1:90:aa:25:b5:d4:bb:d9:5a: d0:8b:66:a7:9d:d5:50:4c:2d:64:7e:58:7e:3c:d3:36:27:36: 59:f7:3c:0b:11:6b:48:b2:e6:99:40:1d:a4:4c:25:1d:45:85: b1:dd:6f:d3:56:27:07:5b:18:1d:79:60:56:01:ac:92:79:f6: a0:25:e8:c6:8f:12:10:8a:4c:90:58:14:88:84:b8:24:38:b9: eb:97:6a:5f:3d:23:82:c9:af:e7:7e:40:9e:db:79:00:92:46: 27:7d:55:a4:8f:7a:e8:0e:72:cb:d7:55:c0:89:77:a4:82:93: a1:6c:66:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0 N0FCNUM0NjYwHhcNMjYwMzAxMDAzMjAxWhcNMjYwMzA4MDAzMjAxWjAYMRYwFAYD VQQDDA02OWEzODkwMi1jYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTP8WMlWksIADK0IEVsx21ioxc/Z5cNajlH9DjU/grX/Zf18HiIDE7YpH3xW xstZHGu0DirFQXd/6i56K1pZwph0yIIn+UwEnQxbFi8M5/0GlaK4q2+D0B3fyVjT 0XReaYPY0NDa3L4fQsuuNwGBHLFn2KJ1aKg2CFDw0wW8TkzzfGB0gaC+XYO3FNK+ NsWy3diRjpNZRd2nq+nIHUOoqd0CO59vFdB3zgkNVF97E9SmQASu8sHw410KiHT0 SNUFc38vokE5EPq5lQdX8R2EKluVUkYPJFYAmCTLaXBUxarAy77riLEopyIdnlP7 M4dctLyUFh1WNbx6XvAoVBOauwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3CHuY5 QfDO+zA7aehaJWqyRSZqMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01 cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALH/h0jmQlyNTvRunRe+54L/1OXi6oxTeCUxVgYBU482seNne+cIDnYiS8O4h ZojxQaY8sjEJE6r18x8F3oU2H9F7XdCeTFJ2keIPepPdIoZA9sxKhywS6ZaMgRSy FK00b1R+zSigYI2GBDKpGtX/X1lz2KbDBKZtXcZK1QZWQ1kblIYJ6vgb8ZCqJbXU u9la0Itmp53VUEwtZH5YfjzTNic2Wfc8CxFrSLLmmUAdpEwlHUWFsd1v01YnB1sY HXlgVgGsknn2oCXoxo8SEIpMkFgUiIS4JDi565dqXz0jgsmv535Antt5AJJGJ31V pI966A5yy9dVwIl3pIKToWxmOQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:12 2026 by rpki-client