$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: XnSUpei7gcDwq522x+e+1QMt0pBY6vAxfcB0FXiyz6c= Subject key identifier: F3:FE:EC:36:20:80:6D:B0:25:E8:37:D7:F5:C4:75:60:02:F1:95:93 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 0108 Signing time: Sun 01 Mar 2026 07:08:13 +0000 Manifest this update: Sun 01 Mar 2026 07:08:12 +0000 Manifest next update: Sun 08 Mar 2026 07:08:12 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: FJ0LOdqhcsP95WOX4FhLvVGIn0Uo/AmWW8wkf6QUNaM=) 2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: jJmFWeK8DxzcyCmNzQTOimZpBnvjDB61t5aPUy56grE=) 3: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: q2PsmBaPUlGvEput/dvI1P9mbtnk1siucrhRcpQcM5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Mar 1 07:08:12 2026 GMT Not After : Mar 8 07:08:12 2026 GMT Subject: CN=69a3e5dc-22ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:94:a1:39:f2:3e:20:8d:85:98:c5:6d:40: 56:38:d3:91:7b:d5:4a:c2:f3:35:5a:f2:08:d1:e0: ce:54:e1:fb:d9:29:c9:cf:77:5e:04:6e:a7:67:63: b6:b5:69:7b:0b:a4:16:51:7d:05:76:0e:ce:27:61: 5e:55:11:fd:ee:39:26:76:9b:a9:7d:e6:92:7e:49: 0f:b8:cd:7f:8f:b6:96:88:f0:e5:00:a8:d6:e6:11: d3:87:b8:f0:ea:5a:a3:fe:2a:27:37:bb:f7:11:9e: 45:40:85:2e:e1:e0:a5:aa:8e:aa:15:9f:71:e7:6d: 6d:f2:e5:de:23:35:c3:6a:bd:e1:b8:fb:3f:e5:59: 48:27:32:34:47:b4:f7:3c:81:1e:cc:84:59:91:d5: db:36:07:cb:16:d6:17:78:a8:c1:a0:6a:f1:8c:cc: b4:6f:b0:26:ff:b8:42:0d:c5:cd:b8:93:2c:cb:e7: 1d:25:7c:f0:3c:54:39:03:db:6f:13:8b:7b:59:56: 1c:13:f1:b1:3b:79:0c:ce:e3:8c:29:4d:fb:3b:0b: d0:dc:42:42:06:cf:71:eb:17:3d:43:1b:6e:87:2f: 28:cd:11:ec:a1:c8:8b:b5:21:f7:2e:1c:7f:90:1d: 46:12:26:6c:a6:42:67:d7:2b:a7:70:d9:c8:f5:29: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FE:EC:36:20:80:6D:B0:25:E8:37:D7:F5:C4:75:60:02:F1:95:93 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:bb:db:fc:95:72:36:64:e6:7d:76:a8:4e:51:1a:b3:95:dc: 55:3a:77:1a:9b:d4:6d:fc:5e:e6:8b:ba:b6:68:93:2a:a4:bf: ab:7c:89:4b:6e:74:5e:0a:e9:6e:07:1d:06:71:6d:c3:9e:3e: 72:84:a0:d0:a9:2b:de:65:b3:cf:d8:2c:6f:04:52:c6:b8:34: e4:df:67:2f:d6:dd:e2:d8:62:da:7a:a1:6e:25:54:02:5f:9c: 5e:1e:73:54:b1:ab:58:44:ae:7d:d7:bc:ce:46:ab:07:41:5a: 7e:43:bf:4c:58:89:73:a6:b0:b3:74:99:0f:5a:9d:bf:7b:76: 95:b8:f9:6d:97:74:30:2f:6d:3e:09:93:58:c7:83:29:09:21: 83:9c:d6:ae:67:4f:c6:b1:c3:94:fb:84:b8:ea:b8:7c:9c:6b: fb:6c:27:5d:c2:71:45:7d:0d:6c:61:44:5d:1e:e2:7f:07:83: e1:79:45:16:c1:4f:41:d7:a8:15:3a:77:95:f3:b4:5b:35:96: 2b:e9:e7:1a:84:0a:34:92:01:87:e9:35:ad:f9:18:1b:a0:0b: 12:1b:5a:6b:6e:cd:2b:ad:61:e6:d4:83:ac:2e:ca:56:f0:28: 9a:1a:10:cb:ee:52:7c:1d:8c:60:43:9f:07:32:d7:d6:d0:86: 05:6e:98:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjYwMzAxMDcwODEyWhcNMjYwMzA4MDcwODEyWjAYMRYwFAYD VQQDEw02OWEzZTVkYy0yMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdCUoTnyPiCNhZjFbUBWONORe9VKwvM1WvII0eDOVOH72SnJz3deBG6nZ2O2 tWl7C6QWUX0Fdg7OJ2FeVRH97jkmdpupfeaSfkkPuM1/j7aWiPDlAKjW5hHTh7jw 6lqj/ionN7v3EZ5FQIUu4eClqo6qFZ9x521t8uXeIzXDar3huPs/5VlIJzI0R7T3 PIEezIRZkdXbNgfLFtYXeKjBoGrxjMy0b7Am/7hCDcXNuJMsy+cdJXzwPFQ5A9tv E4t7WVYcE/GxO3kMzuOMKU37OwvQ3EJCBs9x6xc9Qxtuhy8ozRHsociLtSH3Lhx/ kB1GEiZspkJn1yuncNnI9SnhRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP+7DYg gG2wJeg31/XEdWAC8ZWTMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYLvb/JVyNmTmfXaoTlEas5XcVTp3GpvUbfxe5ou6tmiTKqS/q3yJS250Xgrp bgcdBnFtw54+coSg0Kkr3mWzz9gsbwRSxrg05N9nL9bd4thi2nqhbiVUAl+cXh5z VLGrWESufde8zkarB0FafkO/TFiJc6aws3SZD1qdv3t2lbj5bZd0MC9tPgmTWMeD KQkhg5zWrmdPxrHDlPuEuOq4fJxr+2wnXcJxRX0NbGFEXR7ifweD4XlFFsFPQdeo FTp3lfO0WzWWK+nnGoQKNJIBh+k1rfkYG6ALEhtaa27NK61h5tSDrC7KVvAomhoQ y+5SfB2MYEOfBzLX1tCGBW6Y8Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:24 2026 by rpki-client