$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: S6lPc6Q42a/WLL0u/0z1wmQQPQD41u7VH3yKS78Mo98= Subject key identifier: 70:6D:B3:23:4C:5B:A3:97:1E:FA:2F:2B:8F:CA:F2:1B:39:93:DC:37 Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 0860 Signing time: Sun 01 Mar 2026 23:58:15 +0000 Manifest this update: Sun 01 Mar 2026 23:58:13 +0000 Manifest next update: Sun 08 Mar 2026 23:58:13 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 27mGtw1MlfloHAm9yyLmn6FysCyd0RBbarZbb47oAS4=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2160 (0x870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Mar 1 23:58:13 2026 GMT Not After : Mar 8 23:58:13 2026 GMT Subject: CN=69a4d297-f94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:a5:d4:89:4c:30:18:68:5e:1e:3e:6a:18: 34:2b:a2:10:83:8d:12:75:e4:be:86:a1:0d:9d:ed: e9:6f:92:94:ef:ef:8a:cd:81:bc:bd:e8:a6:57:fe: 0e:bf:b7:32:06:bf:5e:25:19:02:34:1e:32:5f:4e: 69:d1:a7:f4:ed:51:15:8b:9f:44:b7:92:93:6e:4f: c8:fd:70:91:56:ef:79:23:a6:0c:fc:73:4b:fb:5f: 5a:21:c9:69:77:eb:5b:86:94:7b:54:a1:89:1b:d5: 28:f4:ab:85:4c:9d:76:63:df:d0:2e:55:29:00:81: d6:72:d8:cb:0d:8d:47:67:71:49:de:80:58:41:2c: b4:69:ce:c5:df:4a:17:64:ec:af:2d:46:92:08:0e: f1:ce:9c:01:20:96:65:12:30:de:1b:95:3f:20:92: 99:d9:8a:17:e5:fc:fe:93:18:76:40:c6:f7:b3:8d: eb:eb:86:8c:61:50:98:dd:15:05:5b:73:b5:b4:ae: 02:47:86:7c:29:6a:70:66:7e:76:48:b3:fa:4a:88: c4:f3:b8:cd:9f:5f:0a:91:92:82:0a:97:2a:e4:61: 76:e5:52:c4:e1:b6:7c:5e:64:99:13:9c:2e:18:4c: 46:eb:43:45:a5:3b:89:0e:d0:17:09:33:c5:e5:1d: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6D:B3:23:4C:5B:A3:97:1E:FA:2F:2B:8F:CA:F2:1B:39:93:DC:37 X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6a:40:94:5a:12:5b:43:00:4a:11:b6:46:ce:74:ff:b7:54: 98:a0:93:53:89:10:3c:3e:b8:d1:54:2f:c4:ea:0e:a6:cf:e5: fa:09:f8:9d:a0:07:c0:ee:17:20:a6:31:31:67:f8:ee:1b:af: 67:eb:a7:76:45:2d:10:b7:85:c3:1c:6e:c3:a8:e7:83:0e:d4: c8:c6:69:95:5a:c8:30:51:9c:1e:37:1f:04:79:93:95:87:2a: d2:43:6f:d8:6f:d5:3f:c0:bf:c9:e3:39:57:d3:7c:9f:f9:7a: 68:df:8d:78:f4:eb:30:24:25:92:95:65:70:9f:1f:e4:83:01: 11:f1:f3:61:78:71:8f:41:af:70:47:9d:aa:89:1f:e7:b1:25: 46:56:71:c0:88:75:11:54:6a:37:11:90:4c:3f:0e:48:bc:c8: f4:25:a4:6d:99:45:3b:00:74:50:60:a8:fe:e9:17:6c:30:e3: 28:bb:76:49:4a:b0:10:32:09:6e:51:9c:65:a2:49:c7:9b:79: d8:57:69:33:81:37:24:6c:ca:f3:a7:bb:76:a4:00:ac:f7:f3: 2c:95:05:b5:a0:78:e0:2a:16:bb:75:de:10:4e:bc:ed:00:f4: ac:bb:af:17:e2:38:6e:e1:0c:37:72:5d:96:eb:f3:f8:ec:ad: 70:e9:d2:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjYwMzAxMjM1ODEzWhcNMjYwMzA4MjM1ODEzWjAYMRYwFAYD VQQDEw02OWE0ZDI5Ny1mOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjal1IlMMBhoXh4+ahg0K6IQg40SdeS+hqENne3pb5KU7++KzYG8veimV/4O v7cyBr9eJRkCNB4yX05p0af07VEVi59Et5KTbk/I/XCRVu95I6YM/HNL+19aIclp d+tbhpR7VKGJG9Uo9KuFTJ12Y9/QLlUpAIHWctjLDY1HZ3FJ3oBYQSy0ac7F30oX ZOyvLUaSCA7xzpwBIJZlEjDeG5U/IJKZ2YoX5fz+kxh2QMb3s43r64aMYVCY3RUF W3O1tK4CR4Z8KWpwZn52SLP6SojE87jNn18KkZKCCpcq5GF25VLE4bZ8XmSZE5wu GExG60NFpTuJDtAXCTPF5R0+6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBtsyNM W6OXHvovK4/K8hs5k9w3MB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmmpAlFoSW0MAShG2Rs50/7dUmKCTU4kQPD640VQvxOoOps/l+gn4naAHwO4X IKYxMWf47huvZ+undkUtELeFwxxuw6jngw7UyMZplVrIMFGcHjcfBHmTlYcq0kNv 2G/VP8C/yeM5V9N8n/l6aN+NePTrMCQlkpVlcJ8f5IMBEfHzYXhxj0GvcEedqokf 57ElRlZxwIh1EVRqNxGQTD8OSLzI9CWkbZlFOwB0UGCo/ukXbDDjKLt2SUqwEDIJ blGcZaJJx5t52FdpM4E3JGzK86e7dqQArPfzLJUFtaB44CoWu3XeEE687QD0rLuv F+I4buEMN3Jdluvz+OytcOnS6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:58 2026 by rpki-client