$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: HWCew7CYBDIKVO8+a1p4a3pbzjiyUIxOmeNY8e6p6f4= Subject key identifier: 42:1F:FE:60:D6:E8:EC:B9:F5:1D:9D:92:1E:2B:A2:CD:B8:38:D2:63 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D12 Signing time: Sat 28 Feb 2026 18:19:13 +0000 Manifest this update: Sat 28 Feb 2026 18:19:13 +0000 Manifest next update: Sat 07 Mar 2026 18:19:13 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: OA5+97EDiMsRJAzlQ3jAiqIh9AtFKYy6W6LUaLzCqIA=) 2: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: whIj4TZ+yyw/VbL0wLVNZHdMGGpE4Mabv0G6g01cTLE=) 3: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 6avRjwNItYCzxG+yq5MB2LMVNEbgrnYskEIlXomTLWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3393 (0xd41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Feb 28 18:19:13 2026 GMT Not After : Mar 7 18:19:13 2026 GMT Subject: CN=69a331a1-d98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:04:73:2d:a4:9e:9c:a5:30:db:6f:a1:37:74: 1a:e5:d8:ab:c3:0e:dd:09:11:7d:72:76:e5:c6:41: 31:cd:85:7e:0d:ea:8c:29:9f:cd:07:78:90:eb:b8: e7:0f:e9:b8:f4:63:02:db:e7:30:e0:55:e2:e4:ae: 23:60:c8:a1:2c:bf:cb:80:58:5a:7d:f0:ee:be:ea: 3c:ee:93:22:64:18:85:15:e8:72:93:8d:6b:c3:b7: da:c0:dc:fe:6b:dd:ba:7b:b9:f4:2d:d1:fe:25:b9: d5:3d:2d:59:53:3e:97:19:3f:d6:ef:c8:80:a2:b8: 2d:8e:ae:8a:c6:16:fa:7b:10:15:d8:09:5e:5d:ad: b7:57:21:ac:83:df:1b:ba:e5:54:f4:99:b6:8b:46: c4:68:44:4a:05:34:81:70:38:99:f1:d6:05:dd:4b: 75:24:26:ce:2e:8d:c8:cd:b8:56:b9:fc:05:22:87: 71:e8:3a:79:1d:b0:f1:cd:c2:bb:06:48:6d:43:68: 73:9a:4c:23:21:75:70:1f:f9:1c:be:7f:b3:a7:af: 88:58:37:a2:b0:d3:fd:de:d6:d0:42:8b:9f:cc:93: 21:a8:51:0a:fa:46:cc:3f:8a:f2:8e:8a:58:93:33: ea:88:85:f0:a1:29:e7:ec:16:a1:40:26:dd:ee:76: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:FE:60:D6:E8:EC:B9:F5:1D:9D:92:1E:2B:A2:CD:B8:38:D2:63 X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0c:cd:63:cd:65:64:3c:ea:94:f6:24:60:44:e2:32:d8:91: 06:96:e3:fd:7c:5b:24:9f:b9:fa:a8:0d:17:c3:f1:57:ab:5b: e1:cf:97:1f:51:45:5f:f5:97:c7:76:80:d9:98:53:29:2f:ab: b8:46:ab:1b:9a:7c:4d:6c:18:af:5a:46:7e:4d:f9:ca:10:a0: 5d:eb:91:11:ac:c5:47:b6:64:e9:77:1a:8f:da:b2:9b:f1:2d: 15:26:c5:9d:30:33:e3:63:13:ee:12:91:e7:5c:c8:89:05:d4: 08:58:5c:b6:28:4e:1b:fd:d4:ec:a4:84:0f:fd:b5:87:d1:5c: d4:f1:cd:2d:db:49:20:20:a8:84:59:28:56:e7:18:92:96:3c: 86:60:c0:a4:d9:7f:1c:21:af:71:6e:73:47:7b:7f:46:10:fa: 5c:c8:50:66:ab:7d:b5:d1:22:6b:fc:7c:f2:62:ef:c3:e8:f8: 86:4d:a9:6d:ae:19:be:ff:fa:a1:4a:cb:f0:a2:81:ca:78:ee: 0a:6c:88:ae:89:a6:6b:d9:d8:6f:86:4f:ee:32:0c:30:5e:d3: c4:72:52:8d:38:05:63:5a:5f:e6:57:bb:f8:bb:78:10:6d:88: c3:f8:bc:8d:33:ef:ac:13:57:c0:0e:4a:0c:db:ef:a5:bd:0d: e1:51:03:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwMjI4MTgxOTEzWhcNMjYwMzA3MTgxOTEzWjAYMRYwFAYD VQQDDA02OWEzMzFhMS1kOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wRzLaSenKUw22+hN3Qa5dirww7dCRF9cnblxkExzYV+DeqMKZ/NB3iQ67jn D+m49GMC2+cw4FXi5K4jYMihLL/LgFhaffDuvuo87pMiZBiFFehyk41rw7fawNz+ a926e7n0LdH+JbnVPS1ZUz6XGT/W78iAorgtjq6Kxhb6exAV2AleXa23VyGsg98b uuVU9Jm2i0bEaERKBTSBcDiZ8dYF3Ut1JCbOLo3IzbhWufwFIodx6Dp5HbDxzcK7 BkhtQ2hzmkwjIXVwH/kcvn+zp6+IWDeisNP93tbQQoufzJMhqFEK+kbMP4ryjopY kzPqiIXwoSnn7BahQCbd7nYhnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEIf/mDW 6Oy59R2dkh4ros24ONJjMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWAzNY81lZDzqlPYkYETiMtiRBpbj/XxbJJ+5+qgNF8PxV6tb4c+XH1FFX/WX x3aA2ZhTKS+ruEarG5p8TWwYr1pGfk35yhCgXeuREazFR7Zk6Xcaj9qym/EtFSbF nTAz42MT7hKR51zIiQXUCFhctihOG/3U7KSED/21h9Fc1PHNLdtJICCohFkoVucY kpY8hmDApNl/HCGvcW5zR3t/RhD6XMhQZqt9tdEia/x88mLvw+j4hk2pba4Zvv/6 oUrL8KKBynjuCmyIromma9nYb4ZP7jIMMF7TxHJSjTgFY1pf5le7+Lt4EG2Iw/i8 jTPvrBNXwA5KDNvvpb0N4VEDHA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:21 2026 by rpki-client