$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json) Hash identifier: FSVsLp7x7kTcG5fM37UcOmU9GhYUtClMGHCdeLrKOGc= Subject key identifier: EE:62:5D:0B:53:D5:0E:2F:2F:E5:3A:30:02:D8:B1:DB:60:6E:1A:F5 Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft Manifest number: 0974 Signing time: Sat 28 Feb 2026 20:22:06 +0000 Manifest this update: Sat 28 Feb 2026 20:22:05 +0000 Manifest next update: Sat 07 Mar 2026 20:22:05 +0000 Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: JhAP/KeGoZxQlsJ9y//bKxpkDQ9FG3DAlMtjo0lmCMY=) 2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: /W7jNuOZe0YfOd8yIagbqgnCN+PhgeGc0tSQIMsMPPI=) 3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: jBS/1Hlfhun69e6e4ZHEVPi7ipp4H+jsjI8X7M9ZNQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943 Validity Not Before: Feb 28 20:22:05 2026 GMT Not After : Mar 7 20:22:05 2026 GMT Subject: CN=69a34e6e-d6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:e3:4e:53:e3:6f:1f:18:f3:68:42:5a:73: 1d:5b:87:93:df:93:48:b1:f9:a6:09:4a:b7:b9:04: 76:83:f5:bc:50:45:7c:09:fe:fd:28:f9:96:e6:62: 39:52:95:b7:59:bb:d6:12:ee:1f:e1:48:23:97:da: 01:26:ac:ad:b7:1b:5d:9d:d0:56:6a:15:2d:a1:20: b6:34:ee:a2:a8:ee:7b:55:88:08:7f:ac:4c:9d:ef: a7:b1:8f:d5:50:f5:73:49:98:d2:a2:9c:49:87:79: 00:a1:bf:29:67:1c:c3:f4:4c:ec:ee:7c:03:0f:9c: b8:15:00:f2:96:da:02:d9:76:55:23:95:94:6c:9a: 18:87:8d:0e:e4:76:3d:92:7a:55:7d:7e:9c:cb:88: ab:3b:eb:d6:14:89:93:96:36:58:de:8b:29:75:b3: 6a:77:e4:0b:5a:f7:d3:9f:03:92:6f:9a:14:5d:5b: a3:69:04:18:22:e8:fb:fb:40:bf:75:41:4c:a3:fc: a8:4c:34:d4:4a:c4:24:2f:4d:cc:31:a8:e5:42:7d: 31:10:9d:e3:69:50:09:d8:9f:03:0d:76:6c:bf:24: a5:81:89:9d:f2:59:55:25:fc:c2:db:62:0e:95:b6: 11:6b:6f:95:14:15:58:ac:f6:ec:f8:f2:73:0e:d4: 61:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:62:5D:0B:53:D5:0E:2F:2F:E5:3A:30:02:D8:B1:DB:60:6E:1A:F5 X509v3 Authority Key Identifier: keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:71:07:61:c4:2b:c4:7c:de:16:98:4d:30:b1:4f:0c:8c:b5: 5f:49:c6:1e:d3:a4:b5:84:61:8f:5c:fe:81:c0:9d:73:b0:db: 3d:00:dd:87:40:82:95:0c:6a:9f:73:d9:e3:70:9b:a7:32:2c: 3f:40:8e:8b:aa:0b:25:1a:30:b7:47:4e:c0:5b:77:60:70:b4: 6d:31:74:01:f5:1e:96:b5:af:1f:9f:72:b1:bf:85:55:a6:da: fe:2a:1c:58:b5:74:ad:b6:86:70:dd:75:55:8c:83:66:48:19: f3:c0:37:97:83:f2:f5:57:e4:76:2c:15:df:4d:f2:d5:28:8a: cd:22:a6:35:b8:7e:3a:ab:0d:ea:4c:b4:a6:70:16:e0:96:09: 8a:93:7c:1b:13:47:b2:7f:5f:8a:df:b4:a7:56:35:27:7c:00: 1d:ee:59:44:6c:fe:2f:22:fa:86:11:7e:85:32:c0:c8:c9:29: 55:96:b5:f7:42:56:50:4e:3a:e4:bd:bf:2a:4c:04:f7:68:12: 61:be:ab:d9:e0:47:6a:bb:1a:a7:f4:ee:42:e4:23:fe:d4:62: 40:4a:78:78:f3:bc:ef:75:4e:c7:6f:45:29:db:dd:55:1c:b6: 99:2b:b8:e9:4d:3f:56:26:aa:7c:29:f9:5c:ca:13:8f:08:86: e3:bc:71:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2 NTAzN0I5NDMwHhcNMjYwMjI4MjAyMjA1WhcNMjYwMzA3MjAyMjA1WjAYMRYwFAYD VQQDDA02OWEzNGU2ZS1kNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsejjTlPjbx8Y82hCWnMdW4eT35NIsfmmCUq3uQR2g/W8UEV8Cf79KPmW5mI5 UpW3WbvWEu4f4Ugjl9oBJqyttxtdndBWahUtoSC2NO6iqO57VYgIf6xMne+nsY/V UPVzSZjSopxJh3kAob8pZxzD9Ezs7nwDD5y4FQDyltoC2XZVI5WUbJoYh40O5HY9 knpVfX6cy4irO+vWFImTljZY3ospdbNqd+QLWvfTnwOSb5oUXVujaQQYIuj7+0C/ dUFMo/yoTDTUSsQkL03MMajlQn0xEJ3jaVAJ2J8DDXZsvySlgYmd8llVJfzC22IO lbYRa2+VFBVYrPbs+PJzDtRhHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5iXQtT 1Q4vL+U6MALYsdtgbhr1MB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3 VHJUVThzNWY0MDVsQTN1VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIXEHYcQrxHzeFphNMLFPDIy1X0nGHtOktYRhj1z+gcCdc7DbPQDdh0CClQxq n3PZ43CbpzIsP0COi6oLJRowt0dOwFt3YHC0bTF0AfUelrWvH59ysb+FVaba/ioc WLV0rbaGcN11VYyDZkgZ88A3l4Py9VfkdiwV303y1SiKzSKmNbh+OqsN6ky0pnAW 4JYJipN8GxNHsn9fit+0p1Y1J3wAHe5ZRGz+LyL6hhF+hTLAyMkpVZa190JWUE46 5L2/KkwE92gSYb6r2eBHarsap/TuQuQj/tRiQEp4ePO873VOx29FKdvdVRy2mSu4 6U0/ViaqfCn5XMoTjwiG47xxkw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:55:02 2026 by rpki-client