$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft File: OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json) Hash identifier: YcIDl3p9AgnkbusU1UyMyiHkoZIqOiscUMQMGb+Aem8= Subject key identifier: 02:FC:CA:26:08:55:76:BF:FF:5C:AF:AA:C7:39:51:E6:F7:0C:B6:F2 Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B Certificate issuer: /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft Manifest number: 34 Signing time: Sun 01 Mar 2026 10:14:21 +0000 Manifest this update: Sun 01 Mar 2026 10:14:21 +0000 Manifest next update: Sun 08 Mar 2026 10:14:21 +0000 Files and hashes: 1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: F8i7PTjyiWKOJ1ayP6AqzCcCs1FhCpF9ALM+Z/yL7uI=) 2: 3DD8640AFCEB11F0B08C3CF3726F56BC.roa (hash: XunC+LEInnztcICr53lgZgi2QBeoXXXwTwB4esR0U38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B Validity Not Before: Mar 1 10:14:21 2026 GMT Not After : Mar 8 10:14:21 2026 GMT Subject: CN=69a4117d-493d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:73:f1:9b:5f:34:6d:78:12:4f:a0:50:06: 93:b0:e0:13:3e:43:6c:59:f4:79:e5:05:46:85:8e: d8:95:ae:18:95:39:2c:c4:69:55:50:0c:a3:8f:c5: 7f:57:b8:33:e4:5e:c8:57:65:09:cd:bd:91:20:e5: 63:9c:91:80:c8:c8:f9:b9:88:ab:c2:f6:e0:e3:19: f2:5a:ac:a8:c1:33:e0:3d:5e:00:b9:41:4d:72:aa: 8e:8b:75:d0:ae:b8:e1:c5:41:aa:2a:e6:83:7b:64: 5d:40:22:ac:b0:f4:a4:64:ee:1c:2a:8f:9e:bf:85: bf:b6:8d:70:ce:2e:e8:f9:84:24:ed:0b:c3:fd:62: 07:6d:08:93:c7:4b:aa:dc:d3:de:c0:15:56:9c:ef: 7d:f8:03:a3:db:95:e2:05:7a:0e:02:4a:30:aa:42: fe:79:4b:01:30:dd:47:7e:a6:d6:b1:82:4b:c5:7c: 6a:f0:f8:95:14:fd:a3:94:29:44:ad:e0:29:85:fa: 8b:84:5b:e1:a1:56:5c:e9:b4:d5:2c:16:f3:9e:1a: 43:ef:16:06:4a:dc:e3:5e:ab:36:a3:3f:6c:fd:46: b7:65:1d:15:d8:1f:73:65:83:65:a3:00:e1:d4:8f: 15:17:04:29:bd:96:d2:75:11:31:31:1b:9b:37:22: 26:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:CA:26:08:55:76:BF:FF:5C:AF:AA:C7:39:51:E6:F7:0C:B6:F2 X509v3 Authority Key Identifier: keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:79:e4:d0:f0:27:61:27:ad:66:63:6a:8b:8b:f7:14:cd:a9: fc:ae:d3:1d:62:ca:4c:50:82:9d:27:61:44:d2:c4:61:e0:4d: 7d:df:d2:3e:76:19:58:6a:03:2f:23:7c:95:1c:a4:c0:59:53: 3a:d0:a7:5a:a0:59:c2:c0:7d:9e:46:30:5b:ff:0f:05:3e:31: b9:e2:58:5c:58:24:97:d9:8d:95:f7:c2:b9:0f:2f:3c:03:b6: 3f:64:9a:d5:ef:5d:72:ca:7e:05:6d:42:1f:db:80:9e:42:f1: 48:b1:9d:de:95:49:81:dc:c4:49:11:5d:b9:f7:bb:1d:c3:06: b9:2a:3b:c1:89:7d:50:83:2c:c8:46:1f:a8:01:ad:dc:75:a4: 07:0e:3e:14:44:3e:29:09:2d:a7:f5:07:df:80:d3:51:01:33: 80:4d:6c:5a:6b:b6:d5:90:fb:93:70:b3:6f:65:70:65:06:d5: 90:fc:3f:9e:d3:14:32:f5:b8:e5:08:51:33:03:6a:2c:1a:be: ab:52:d3:6f:16:e4:7a:de:a6:cb:0c:bc:54:1d:c9:41:95:a9: 93:e7:f3:4b:66:45:85:04:bd:cc:a1:82:7c:83:10:8c:17:55: 96:1e:d4:49:0a:c7:fa:d2:6b:fd:ab:fe:8f:d7:28:87:2d:7d: 14:76:76:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzQyNTExMC8GA1UEBRMoM0ExQjA5NDE5MUZFMzQ3NTM3MTlDMUQ0ODFGMjA4ODVB ODA4QzE2QjAeFw0yNjAzMDExMDE0MjFaFw0yNjAzMDgxMDE0MjFaMBgxFjAUBgNV BAMTDTY5YTQxMTdkLTQ5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOxXPxm180bXgST6BQBpOw4BM+Q2xZ9HnlBUaFjtiVrhiVOSzEaVVQDKOPxX9X uDPkXshXZQnNvZEg5WOckYDIyPm5iKvC9uDjGfJarKjBM+A9XgC5QU1yqo6LddCu uOHFQaoq5oN7ZF1AIqyw9KRk7hwqj56/hb+2jXDOLuj5hCTtC8P9YgdtCJPHS6rc 097AFVac7334A6PbleIFeg4CSjCqQv55SwEw3Ud+ptaxgkvFfGrw+JUU/aOUKUSt 4CmF+ouEW+GhVlzptNUsFvOeGkPvFgZK3ONeqzajP2z9RrdlHRXYH3Nlg2WjAOHU jxUXBCm9ltJ1ETExG5s3IiYpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAvzKJghV dr//XK+qxzlR5vcMtvIwHwYDVR0jBBgwFoAUOhsJQZH+NHU3GcHUgfIIhagIwWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNDI1L0RGQkFFRTE0REJF NDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hzSlFaSC1OSFUzR2NIVWdmSUloYWdJd1dzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD NDI1L0RGQkFFRTE0REJFNDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhV M0djSFVnZklJaGFnSXdXcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAeeTQ8CdhJ61mY2qLi/cUzan8rtMdYspMUIKdJ2FE0sRh4E1939I+dhlYagMv I3yVHKTAWVM60KdaoFnCwH2eRjBb/w8FPjG54lhcWCSX2Y2V98K5Dy88A7Y/ZJrV 711yyn4FbUIf24CeQvFIsZ3elUmB3MRJEV2597sdwwa5KjvBiX1QgyzIRh+oAa3c daQHDj4URD4pCS2n9QffgNNRATOATWxaa7bVkPuTcLNvZXBlBtWQ/D+e0xQy9bjl CFEzA2osGr6rUtNvFuR63qbLDLxUHclBlamT5/NLZkWFBL3MoYJ8gxCMF1WWHtRJ Csf60mv9q/6P1yiHLX0UdnYH -----END CERTIFICATE-----Generated at Sun Mar 1 20:30:34 2026 by rpki-client