$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json) Hash identifier: KoZN+sS0cFaR2Idqo4wcWWgMmWz7IbEzA7wnfQtHUyk= Subject key identifier: 17:D0:37:15:12:68:38:B3:71:99:5A:B3:86:F8:8D:B3:16:64:AB:87 Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft Manifest number: 4C Signing time: Sun 01 Mar 2026 09:41:18 +0000 Manifest this update: Sun 01 Mar 2026 09:41:18 +0000 Manifest next update: Sun 08 Mar 2026 09:41:18 +0000 Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: 16zDisHn2nXX08seVCGZAXdUM4ZIx6Au4Yt3obEBtdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Validity Not Before: Mar 1 09:41:18 2026 GMT Not After : Mar 8 09:41:18 2026 GMT Subject: CN=69a409be-01cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:53:95:98:ed:67:8c:80:44:87:e3:a2:1d:fd: 5e:c2:80:09:bd:66:0c:67:cc:e8:6f:52:04:fe:05: 71:e4:fd:ea:b3:dd:32:be:6f:52:6e:08:c8:d1:bb: 92:bb:1f:63:d5:a6:bd:9e:67:2f:af:14:3b:0b:64: 37:95:e7:06:d1:b9:f3:18:62:ad:69:a1:55:f2:5f: 8d:53:ae:5e:83:84:d4:41:01:56:b5:72:52:2e:84: 13:34:ab:af:b9:29:0b:79:92:f3:f3:3c:81:3e:61: 90:2b:b6:2a:fd:80:a1:e1:0a:34:79:fd:f3:f4:86: fd:da:f0:4c:63:f1:95:d3:17:36:cd:b6:10:67:a0: 4d:0e:e6:ae:80:e8:02:b8:d1:1a:c6:9a:e7:cd:57: 2a:62:28:2d:45:e9:96:48:32:cc:4d:e5:1f:52:5c: f3:41:5a:99:db:47:0a:a8:b2:d6:8e:40:d8:a4:94: d8:75:84:21:0a:02:18:e1:10:6e:ff:dc:ed:16:50: f1:10:04:7d:b0:76:ed:27:f4:67:be:85:72:b9:8f: 0c:3e:41:28:a8:24:ba:ef:5b:7f:84:1a:66:03:05: d0:24:77:89:13:fc:4a:31:59:4e:1c:cb:cc:35:22: 1b:aa:ce:6b:60:e8:22:65:54:49:8c:60:3b:12:0b: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:37:15:12:68:38:B3:71:99:5A:B3:86:F8:8D:B3:16:64:AB:87 X509v3 Authority Key Identifier: keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:be:aa:75:2d:aa:42:3d:c5:de:08:67:36:1a:d0:d9:0b:06: 12:25:1d:cf:50:90:0a:a0:30:d8:6e:ac:32:2b:4e:5a:9c:14: c3:75:4e:9a:fd:e7:cd:15:ad:c7:b4:82:ca:36:50:b9:85:c4: c7:5b:73:7f:60:e7:f1:9f:19:80:81:3f:f3:7c:99:6c:56:34: ec:f4:72:a9:20:fb:e5:f3:f8:39:ea:c5:d5:6f:f0:95:29:cc: e6:f9:be:71:33:12:50:e6:6e:76:12:3c:c1:7a:2c:d2:4f:7c: 03:47:32:5a:0f:4a:59:77:ac:c6:39:77:b2:67:a9:df:ab:30: a1:b6:29:d8:e6:47:c4:60:88:3d:9f:eb:81:76:83:05:11:df: 69:9d:a4:64:52:68:42:f8:94:1a:4e:8e:58:b9:85:c0:0f:d3: 00:8e:bd:9d:86:10:62:2d:68:af:5f:dd:69:30:99:a4:ce:37: b8:1f:a2:46:b2:c2:0f:53:71:86:90:f3:16:3a:0d:c6:2d:cd: 30:83:7e:46:6b:d5:35:54:61:43:4e:65:18:03:cd:a6:f8:5f: bf:1a:46:93:db:59:6d:55:80:5e:d9:18:47:eb:b6:3c:20:51: 5c:9d:44:bc:0b:7f:fb:36:89:31:21:90:3e:e4:0d:16:20:51: 6b:70:e9:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2 RDE0MkJFQTAeFw0yNjAzMDEwOTQxMThaFw0yNjAzMDgwOTQxMThaMBgxFjAUBgNV BAMTDTY5YTQwOWJlLTAxY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoU5WY7WeMgESH46Id/V7CgAm9ZgxnzOhvUgT+BXHk/eqz3TK+b1JuCMjRu5K7 H2PVpr2eZy+vFDsLZDeV5wbRufMYYq1poVXyX41Trl6DhNRBAVa1clIuhBM0q6+5 KQt5kvPzPIE+YZArtir9gKHhCjR5/fP0hv3a8Exj8ZXTFzbNthBnoE0O5q6A6AK4 0RrGmufNVypiKC1F6ZZIMsxN5R9SXPNBWpnbRwqostaOQNiklNh1hCEKAhjhEG7/ 3O0WUPEQBH2wdu0n9Ge+hXK5jww+QSioJLrvW3+EGmYDBdAkd4kT/EoxWU4cy8w1 Ihuqzmtg6CJlVEmMYDsSC28hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF9A3FRJo OLNxmVqzhviNsxZkq4cwHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv R3lYa3YxUENGRTIwVUstby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC+vqp1LapCPcXeCGc2GtDZCwYSJR3PUJAKoDDYbqwyK05anBTDdU6a/efNFa3H tILKNlC5hcTHW3N/YOfxnxmAgT/zfJlsVjTs9HKpIPvl8/g56sXVb/CVKczm+b5x MxJQ5m52EjzBeizST3wDRzJaD0pZd6zGOXeyZ6nfqzChtinY5kfEYIg9n+uBdoMF Ed9pnaRkUmhC+JQaTo5YuYXAD9MAjr2dhhBiLWivX91pMJmkzje4H6JGssIPU3GG kPMWOg3GLc0wg35Ga9U1VGFDTmUYA82m+F+/GkaT21ltVYBe2RhH67Y8IFFcnUS8 C3/7NokxIZA+5A0WIFFrcOkf -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:54 2026 by rpki-client