$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: I2hx0q8+uWk8AFwL77vHciHos0Iamejtv4P34LC111o= Subject key identifier: 48:5E:B0:85:35:05:3D:F5:F5:6F:6F:9C:74:31:41:86:A3:CC:73:1B Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 024B Signing time: Mon 02 Mar 2026 00:39:17 +0000 Manifest this update: Mon 02 Mar 2026 00:39:15 +0000 Manifest next update: Mon 09 Mar 2026 00:39:15 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: oHi/xeNdE5EISJS8RykSNxvxb8ldOwkm7tDfnoSd6O4=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: +vVLk4sB4I8wB31GUWlvFKxjQFLdu3FFGENTE3piOYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Mar 2 00:39:15 2026 GMT Not After : Mar 9 00:39:15 2026 GMT Subject: CN=69a4dc34-d201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:bc:c1:f9:fd:45:be:24:84:e6:e8:fa:f6: e6:28:7a:1a:f8:9e:17:e9:e7:76:53:63:5d:b5:0c: 1e:e2:43:10:f4:e1:bb:60:d3:6c:de:0d:ff:65:96: 82:b5:21:6f:b2:1a:48:df:0e:cf:f3:a9:37:13:9a: 78:f4:ac:7c:98:05:83:74:90:f7:5f:02:e9:d5:37: 94:1f:3c:7c:34:63:7c:b1:29:9a:94:c5:a8:5f:96: cd:29:d1:2e:10:1c:3d:f6:2a:cd:81:7b:31:73:2c: 2d:a0:49:db:60:f4:1a:47:ca:17:4a:1e:3c:6a:d8: 56:45:61:89:57:65:b7:84:b0:d8:d3:4c:e7:7b:cc: 21:eb:8f:14:ab:f4:b7:ff:5e:46:c3:93:93:95:e7: c9:c0:7b:d1:7f:cb:da:63:a5:0f:fe:d6:59:e5:45: 29:79:80:3d:b9:85:45:3a:52:26:57:d5:ec:13:f9: 94:ee:d8:12:5d:1d:1f:c4:7d:40:62:d8:6f:05:4b: 60:fc:47:a8:2f:da:48:e0:f6:4f:d7:1a:cb:cc:3b: 0e:d9:6e:da:54:94:10:7c:76:d6:f8:24:f0:fc:cc: 22:c4:7c:ca:b1:cf:17:5c:96:5f:bb:ee:ac:92:7f: 6a:6f:cf:25:21:4a:ed:6e:f2:9b:eb:f6:77:5f:7b: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5E:B0:85:35:05:3D:F5:F5:6F:6F:9C:74:31:41:86:A3:CC:73:1B X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:25:c0:44:17:7c:5c:4b:2f:43:f5:d0:d2:4b:de:93:8d:67: f2:1b:39:28:1e:81:d6:41:c1:2e:6e:61:43:55:90:1c:d0:c9: 90:9d:9d:b8:a3:a1:83:06:5c:00:9a:e4:75:02:5c:01:fa:ac: 55:63:32:55:11:65:78:c6:60:e6:9e:2c:ee:4b:90:02:e6:91: 5f:37:1a:05:6c:64:b8:35:ec:39:3e:48:ec:e9:18:e3:cd:14: 7c:ad:4e:9c:b2:67:d2:89:5c:49:ea:19:99:90:8b:6a:ca:d8: 0a:d4:11:83:2e:12:2f:6e:a3:88:a1:7f:70:a9:74:5b:bf:bc: 66:65:73:78:2c:75:cf:71:db:96:9b:f7:ff:ab:8d:86:b2:33: 3b:f9:17:a6:ba:8a:31:81:69:a6:50:d2:77:a0:66:f5:bb:94: d6:22:15:d4:cb:1f:65:4b:9e:4d:c3:2a:4f:ef:3d:89:3b:d4: 0c:ac:8c:c9:50:52:d6:d2:9b:e7:03:31:f1:0e:b2:07:a8:8e: 8a:cb:6a:b7:80:9b:74:f7:a0:7d:fd:f7:67:0b:bb:a7:ae:56: 41:25:6d:29:4c:af:31:5e:11:06:e9:23:06:fd:7f:6e:b2:ac: 8e:5e:c7:ca:fa:ca:e1:fd:72:6a:b9:b6:8f:ee:32:35:80:dd: 96:ca:cb:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwMzAyMDAzOTE1WhcNMjYwMzA5MDAzOTE1WjAYMRYwFAYD VQQDEw02OWE0ZGMzNC1kMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtum8wfn9Rb4khObo+vbmKHoa+J4X6ed2U2NdtQwe4kMQ9OG7YNNs3g3/ZZaC tSFvshpI3w7P86k3E5p49Kx8mAWDdJD3XwLp1TeUHzx8NGN8sSmalMWoX5bNKdEu EBw99irNgXsxcywtoEnbYPQaR8oXSh48athWRWGJV2W3hLDY00zne8wh648Uq/S3 /15Gw5OTlefJwHvRf8vaY6UP/tZZ5UUpeYA9uYVFOlImV9XsE/mU7tgSXR0fxH1A YthvBUtg/EeoL9pI4PZP1xrLzDsO2W7aVJQQfHbW+CTw/MwixHzKsc8XXJZfu+6s kn9qb88lIUrtbvKb6/Z3X3t9iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhesIU1 BT319W9vnHQxQYajzHMbMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaSXARBd8XEsvQ/XQ0kvek41n8hs5KB6B1kHBLm5hQ1WQHNDJkJ2duKOhgwZc AJrkdQJcAfqsVWMyVRFleMZg5p4s7kuQAuaRXzcaBWxkuDXsOT5I7OkY480UfK1O nLJn0olcSeoZmZCLasrYCtQRgy4SL26jiKF/cKl0W7+8ZmVzeCx1z3Hblpv3/6uN hrIzO/kXprqKMYFpplDSd6Bm9buU1iIV1MsfZUueTcMqT+89iTvUDKyMyVBS1tKb 5wMx8Q6yB6iOistqt4CbdPegff33Zwu7p65WQSVtKUyvMV4RBukjBv1/brKsjl7H yvrK4f1yarm2j+4yNYDdlsrLgA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:15 2026 by rpki-client