$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: BYyqMi5geOZf5RWIS/keHIo4AtmY0KOomKUoJPwT9TU= Subject key identifier: BE:DC:69:23:2D:87:4E:9C:47:D5:56:09:3E:AA:20:B3:34:9F:F5:87 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 02C1 Signing time: Mon 02 Mar 2026 01:47:52 +0000 Manifest this update: Mon 02 Mar 2026 01:47:50 +0000 Manifest next update: Mon 09 Mar 2026 01:47:50 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: lrZpbJnAT73/UUxVFn38WMJulh6xupT6TJoQE/1/qlw=) 2: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=) 3: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=) 4: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=) 5: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=) 6: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=) 7: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=) 8: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Mar 2 01:47:50 2026 GMT Not After : Mar 9 01:47:50 2026 GMT Subject: CN=69a4ec47-69aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:e3:54:fb:64:61:cb:f7:90:9a:9a:ae:7b: c8:f0:ef:5a:04:74:50:7f:20:27:ab:46:bf:05:14: 22:73:c9:a7:b8:e1:f6:12:da:ca:6b:bb:23:59:69: 8c:3e:31:72:00:52:96:15:40:27:ba:db:b3:55:d8: 15:1c:06:58:b2:e4:4f:45:c4:d0:03:e0:07:16:a0: 5d:ab:60:5d:ef:35:0e:13:94:a6:cb:c5:38:34:c5: 6d:6a:41:4d:cd:44:b1:13:1d:3b:25:44:c3:2d:d7: 38:b5:2c:90:be:67:2d:04:c4:0c:37:22:d1:93:85: f6:16:e8:96:d1:c8:e8:7b:7a:75:d7:24:7d:56:44: 77:ca:cb:9d:cc:4c:be:41:d2:ef:eb:93:56:83:b0: 3a:7f:48:b3:53:bb:cd:46:ab:4f:08:68:fb:5f:f0: ca:9c:f7:f5:fe:bc:4e:5e:67:b6:82:76:79:9e:ea: a9:99:67:26:85:04:dc:66:fb:1b:87:0a:b8:03:00: 06:d0:9d:e9:7e:d1:6d:ce:f2:9f:91:35:e1:36:95: 8b:c3:e9:9e:af:f4:df:54:55:68:75:e0:b3:3a:4c: eb:86:c1:bc:eb:3d:2c:a5:4f:67:46:1e:14:e8:cb: 14:42:4e:fe:30:12:31:e7:95:4b:f7:ac:c5:fb:3f: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DC:69:23:2D:87:4E:9C:47:D5:56:09:3E:AA:20:B3:34:9F:F5:87 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b5:68:e2:4f:4a:9f:b7:60:83:bf:23:39:75:59:08:9b:1f: 27:68:17:82:f4:0d:d0:1f:87:b2:7f:9f:48:1c:31:91:75:25: bc:69:70:61:b1:04:c8:6e:81:e7:b2:33:c8:36:e4:12:12:a3: 84:b4:c2:60:2f:c6:73:24:b6:55:d7:a0:78:2e:c6:d7:09:b7: f3:e8:67:2e:e0:60:9b:fb:35:70:d7:2d:3b:b1:9b:ea:1c:c0: a6:68:c7:20:47:68:4b:f1:70:59:7c:fc:fb:c9:02:ca:f2:73: ee:6e:f6:4e:27:74:3a:a0:5d:33:73:b5:96:59:66:fb:37:26: 1d:14:9f:a4:b6:5c:1f:4d:aa:19:20:bb:4c:ce:27:7c:dc:f7: 52:92:b0:92:ce:5c:a5:6a:0a:98:3a:50:df:a8:d2:8c:96:42: 1d:36:d7:ec:27:70:ab:c0:41:0c:87:2b:d9:04:02:de:db:6a: 1c:89:6e:61:bc:7a:11:8c:c5:c8:01:f3:57:e0:da:eb:dc:ef: c3:09:66:0f:ca:e9:d2:25:18:0c:d7:e9:41:4c:ed:db:69:6a: 8b:7a:07:4e:ea:d7:74:19:1f:24:8f:77:1f:0f:82:22:c4:a0: 95:82:93:27:da:af:10:80:55:3e:77:df:1a:e0:a0:1e:87:76: d6:53:d7:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYwMzAyMDE0NzUwWhcNMjYwMzA5MDE0NzUwWjAYMRYwFAYD VQQDEw02OWE0ZWM0Ny02OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkSDjVPtkYcv3kJqarnvI8O9aBHRQfyAnq0a/BRQic8mnuOH2EtrKa7sjWWmM PjFyAFKWFUAnutuzVdgVHAZYsuRPRcTQA+AHFqBdq2Bd7zUOE5Smy8U4NMVtakFN zUSxEx07JUTDLdc4tSyQvmctBMQMNyLRk4X2FuiW0cjoe3p11yR9VkR3ysudzEy+ QdLv65NWg7A6f0izU7vNRqtPCGj7X/DKnPf1/rxOXme2gnZ5nuqpmWcmhQTcZvsb hwq4AwAG0J3pftFtzvKfkTXhNpWLw+mer/TfVFVodeCzOkzrhsG86z0spU9nRh4U 6MsUQk7+MBIx55VL96zF+z847QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7caSMt h06cR9VWCT6qILM0n/WHMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYrVo4k9Kn7dgg78jOXVZCJsfJ2gXgvQN0B+Hsn+fSBwxkXUlvGlwYbEEyG6B 57IzyDbkEhKjhLTCYC/GcyS2VdegeC7G1wm38+hnLuBgm/s1cNctO7Gb6hzApmjH IEdoS/FwWXz8+8kCyvJz7m72Tid0OqBdM3O1lllm+zcmHRSfpLZcH02qGSC7TM4n fNz3UpKwks5cpWoKmDpQ36jSjJZCHTbX7Cdwq8BBDIcr2QQC3ttqHIluYbx6EYzF yAHzV+Da69zvwwlmD8rp0iUYDNfpQUzt22lqi3oHTurXdBkfJI93Hw+CIsSglYKT J9qvEIBVPnffGuCgHod21lPXnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:38 2026 by rpki-client