$ rpki-client -vvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft File: ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json) Hash identifier: 9EobiCvNVbk/YzVj1+gEXzRxKjxEJq12Iuc1iUBxJow= Subject key identifier: 1B:D4:BF:24:4F:A9:BA:FD:E8:BB:C0:8F:35:91:CF:BB:AD:44:4B:C3 Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 Certificate issuer: /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft Manifest number: 018D Signing time: Sun 01 Mar 2026 05:17:18 +0000 Manifest this update: Sun 01 Mar 2026 05:17:17 +0000 Manifest next update: Sun 08 Mar 2026 05:17:17 +0000 Files and hashes: 1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: JuNlGqL0DGYA9sp2I0zqCtfOtv5l9C35O2h24E6q2y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5 Validity Not Before: Mar 1 05:17:17 2026 GMT Not After : Mar 8 05:17:17 2026 GMT Subject: CN=69a3cbdd-1e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:33:d8:f8:10:42:ec:99:18:a7:e1:2b:cd: 45:1f:28:27:8f:63:cd:75:b0:18:5a:81:87:75:e1: 63:03:b0:da:d3:94:48:01:0f:49:5f:e4:d2:70:0f: 33:b7:61:e3:a7:83:e6:53:0e:c6:0e:2f:cb:85:4f: c4:ed:63:39:65:ad:20:c5:13:a4:2b:41:cc:7e:92: 44:7d:b5:db:65:84:86:77:33:91:78:df:ba:05:df: 7c:8d:5b:43:e6:cc:76:8b:6f:a9:41:52:23:18:e6: 9f:d0:ce:e4:2f:22:59:ab:dc:ca:15:97:91:0a:18: d2:6f:39:c1:de:8b:1a:e5:57:10:bd:0a:89:eb:22: e1:25:bd:5f:4f:8a:c4:54:04:41:e8:68:2f:97:e9: f1:ae:e0:c9:17:76:6e:ec:1b:31:32:09:87:50:37: 08:62:da:eb:e6:9d:40:46:18:89:de:85:fd:87:3e: ef:e2:24:7a:f6:71:1f:02:b8:b9:38:0b:c5:12:97: dc:42:b2:92:ba:67:fb:f5:67:14:c6:60:bc:ad:ae: ad:37:d9:50:92:33:1b:d0:0f:2d:f2:88:68:ca:2a: dd:bb:53:8f:d5:a5:65:e8:28:b1:cd:fc:ef:a5:6f: 37:6f:88:40:00:cc:03:eb:94:ac:62:1f:4f:73:29: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D4:BF:24:4F:A9:BA:FD:E8:BB:C0:8F:35:91:CF:BB:AD:44:4B:C3 X509v3 Authority Key Identifier: keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:27:e8:a5:75:a3:f0:57:0c:b4:2c:73:89:73:df:37:30:64: ff:02:e5:a2:35:c4:b1:c9:22:0f:e9:db:d9:76:7c:90:49:dd: 7c:0b:0b:7d:41:e2:d2:8b:1a:8d:52:09:6d:d9:d1:38:f4:12: d5:71:8f:2a:e3:86:9c:09:2d:f7:00:ed:b7:63:56:21:34:2f: 77:ab:34:85:14:0e:25:87:70:9f:66:20:28:c7:3b:ad:e3:42: e4:c1:65:74:fe:d7:64:6f:85:4f:af:6b:f1:d7:6d:2e:15:e6: 97:b4:da:01:35:a0:70:3a:b8:6c:a9:c6:0d:5d:01:d5:05:46: f6:93:21:0e:7b:86:15:54:2e:ea:75:82:4a:3d:8d:de:8a:70: aa:a2:bf:bb:c9:b7:0e:fb:23:57:67:5c:57:ed:f9:3c:f3:77: 5b:d1:95:83:c5:b6:94:f6:16:e0:ae:35:16:86:e0:55:e7:1e: 58:de:e8:d7:75:f6:d7:ad:52:ab:34:3a:19:92:78:dd:5e:07: ff:f8:9c:dd:c4:9b:02:a8:d3:4d:a1:31:34:04:68:a5:fb:e0: 4e:78:44:c1:17:f7:73:0c:0f:45:1c:5c:00:0a:22:b9:5f:90: f1:8c:1f:fd:b5:21:c7:10:6c:7b:3f:f4:af:2c:30:dc:aa:31: 5c:f4:25:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC ODk0MjlFRjUwHhcNMjYwMzAxMDUxNzE3WhcNMjYwMzA4MDUxNzE3WjAYMRYwFAYD VQQDDA02OWEzY2JkZC0xZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB4z2PgQQuyZGKfhK81FHygnj2PNdbAYWoGHdeFjA7Da05RIAQ9JX+TScA8z t2Hjp4PmUw7GDi/LhU/E7WM5Za0gxROkK0HMfpJEfbXbZYSGdzOReN+6Bd98jVtD 5sx2i2+pQVIjGOaf0M7kLyJZq9zKFZeRChjSbznB3osa5VcQvQqJ6yLhJb1fT4rE VARB6Ggvl+nxruDJF3Zu7BsxMgmHUDcIYtrr5p1ARhiJ3oX9hz7v4iR69nEfAri5 OAvFEpfcQrKSumf79WcUxmC8ra6tN9lQkjMb0A8t8ohoyirdu1OP1aVl6Cixzfzv pW83b4hAAMwD65SsYh9PcyluBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvUvyRP qbr96LvAjzWRz7utREvDMB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0 QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY MGxmVkd4VF9YRFc0bENudlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqSfopXWj8FcMtCxziXPfNzBk/wLlojXEsckiD+nb2XZ8kEndfAsLfUHi0osa jVIJbdnROPQS1XGPKuOGnAkt9wDtt2NWITQvd6s0hRQOJYdwn2YgKMc7reNC5MFl dP7XZG+FT69r8ddtLhXml7TaATWgcDq4bKnGDV0B1QVG9pMhDnuGFVQu6nWCSj2N 3opwqqK/u8m3DvsjV2dcV+35PPN3W9GVg8W2lPYW4K41FobgVeceWN7o13X2161S qzQ6GZJ43V4H//ic3cSbAqjTTaExNARopfvgTnhEwRf3cwwPRRxcAAoiuV+Q8Ywf /bUhxxBsez/0ryww3KoxXPQllA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:02 2026 by rpki-client