$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft File: OvnsvEXk4pfSm6bEEfGgXIudqeM.mft (raw, json) Hash identifier: iDUdxU8ixPlKM0q3Q7E6AZCspp7B50L4HQlPlZsu9GQ= Subject key identifier: 6E:10:E0:DA:9E:D8:DB:B8:45:00:B0:11:98:F6:EB:71:7C:1F:82:C3 Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 Certificate issuer: /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft Manifest number: 0237 Signing time: Sun 01 Mar 2026 23:47:37 +0000 Manifest this update: Sun 01 Mar 2026 23:47:36 +0000 Manifest next update: Sun 08 Mar 2026 23:47:36 +0000 Files and hashes: 1: OvnsvEXk4pfSm6bEEfGgXIudqeM.crl (hash: b6he/oy5e51tLoJHu+NSX4eZizB8DhN7LeUWd3OFrFU=) 2: 82E99F5A10FC11EF95048154C4F9AE02.roa (hash: ZtOkuMM+EHj+VUHpQOGmaOS+kH62gVG6jQcOwqy7zTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA18, serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3 Validity Not Before: Mar 1 23:47:36 2026 GMT Not After : Mar 8 23:47:36 2026 GMT Subject: CN=69a4d019-7f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:1e:e1:db:1b:86:42:3a:48:f4:07:7e:c5: 2c:ec:96:6d:87:71:c4:68:da:31:57:59:2d:40:eb: d3:17:9c:c5:51:23:a8:1d:9f:8a:8c:fd:bf:96:af: 4d:6d:35:28:d2:3a:96:f0:c4:0b:5d:e0:11:22:e7: ca:a1:c5:31:22:ad:5d:97:73:ad:3d:f9:06:fb:2f: 6d:fa:5f:dd:81:ea:7a:20:b9:7a:19:b1:4a:85:ae: fd:62:ee:69:41:74:c2:9f:d6:fb:ed:0d:39:d2:88: 15:c6:c8:7d:bb:a6:54:09:fd:7f:25:95:b6:a1:86: a2:a4:e4:de:f5:99:25:b6:e7:27:29:de:a8:69:cd: 03:11:f0:f8:44:1c:f1:17:77:c6:24:1c:d7:47:3a: 99:56:cc:71:61:99:1f:3b:0c:2e:a6:59:14:54:73: 56:b6:d7:1f:59:4e:56:e3:a4:3b:14:62:93:73:ed: b3:59:1b:78:f9:dc:59:45:ec:9d:fd:c4:8e:61:00: 9f:fc:d8:aa:5d:7d:be:fe:2d:02:56:6f:c3:92:9d: 25:6d:9c:39:3e:f7:e8:38:71:6b:5b:69:51:69:42: 4e:a8:74:a4:e1:24:5a:74:ac:9c:21:99:34:1a:78: fc:56:d1:36:7c:1a:15:8b:f6:42:2d:bd:5c:42:fb: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:10:E0:DA:9E:D8:DB:B8:45:00:B0:11:98:F6:EB:71:7C:1F:82:C3 X509v3 Authority Key Identifier: keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a6:14:dd:51:34:8b:7c:5f:cc:50:b6:66:65:33:61:57:98: fa:67:d1:7d:3b:7a:f8:ac:c7:e0:1c:d5:52:0f:59:ca:6a:34: 5b:1d:73:2b:b9:ea:5d:5f:4c:2e:81:ae:7e:b3:dc:fe:69:e7: a1:36:f3:f9:b8:fb:b7:be:9e:0c:e6:95:21:4a:44:9c:72:f8: aa:af:1a:d6:27:ef:6c:85:4a:e2:c3:84:52:87:74:16:48:59: 28:3d:fd:36:3c:95:2d:86:53:68:23:05:ed:0e:97:bd:0b:2c: d6:54:e1:cb:e0:fc:04:57:41:78:46:04:5f:cf:5b:b7:86:62: d0:33:6f:7d:b0:bd:a7:cd:a6:67:f8:16:0e:82:13:18:ce:d5: d2:30:02:f0:9a:9f:b3:2c:70:3b:e1:72:a3:1a:7b:86:fe:c9: db:c2:cf:3f:28:8f:04:33:4a:f0:8a:86:82:1a:0d:14:94:b4: 33:a1:d2:e7:0f:5e:62:28:85:61:95:6e:af:13:c3:24:0c:ba: 40:83:de:14:99:9e:7a:25:0d:0d:84:b3:0b:d2:a1:f7:44:69: d1:3d:b0:fe:11:83:4d:84:10:a5:f6:52:d2:43:53:aa:2d:d7: 12:4f:17:e5:cf:de:a3:de:41:6e:9e:0d:1a:ee:e6:67:23:87: c0:74:0d:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMTgxMTAvBgNVBAUTKDNBRjlFQ0JDNDVFNEUyOTdEMjlCQTZDNDExRjFBMDVD OEI5REE5RTMwHhcNMjYwMzAxMjM0NzM2WhcNMjYwMzA4MjM0NzM2WjAYMRYwFAYD VQQDEw02OWE0ZDAxOS03ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/Ue4dsbhkI6SPQHfsUs7JZth3HEaNoxV1ktQOvTF5zFUSOoHZ+KjP2/lq9N bTUo0jqW8MQLXeARIufKocUxIq1dl3OtPfkG+y9t+l/dgep6ILl6GbFKha79Yu5p QXTCn9b77Q050ogVxsh9u6ZUCf1/JZW2oYaipOTe9ZkltucnKd6oac0DEfD4RBzx F3fGJBzXRzqZVsxxYZkfOwwuplkUVHNWttcfWU5W46Q7FGKTc+2zWRt4+dxZReyd /cSOYQCf/NiqXX2+/i0CVm/Dkp0lbZw5PvfoOHFrW2lRaUJOqHSk4SRadKycIZk0 Gnj8VtE2fBoVi/ZCLb1cQvt86wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4Q4Nqe 2Nu4RQCwEZj263F8H4LDMB8GA1UdIwQYMBaAFDr57LxF5OKX0pumxBHxoFyLnanj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExOC82RDA1OUJCQ0Ix QjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRwZlNtNmJFRWZHZ1hJdWRx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL092bnN2RVhrNHBmU202YkVFZkdnWEl1ZHFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExOC82RDA1OUJCQ0IxQjIxMUVEOEQ3QzJGMkJDNEY5QUUwMi9Pdm5zdkVYazRw ZlNtNmJFRWZHZ1hJdWRxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq6YU3VE0i3xfzFC2ZmUzYVeY+mfRfTt6+KzH4BzVUg9Zymo0Wx1zK7nqXV9M LoGufrPc/mnnoTbz+bj7t76eDOaVIUpEnHL4qq8a1ifvbIVK4sOEUod0FkhZKD39 NjyVLYZTaCMF7Q6XvQss1lThy+D8BFdBeEYEX89bt4Zi0DNvfbC9p82mZ/gWDoIT GM7V0jAC8JqfsyxwO+Fyoxp7hv7J28LPPyiPBDNK8IqGghoNFJS0M6HS5w9eYiiF YZVurxPDJAy6QIPeFJmeeiUNDYSzC9Kh90Rp0T2w/hGDTYQQpfZS0kNTqi3XEk8X 5c/eo95Bbp4NGu7mZyOHwHQNKw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:25:48 2026 by rpki-client