$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft File: oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json) Hash identifier: ExpckIrXU4vDEam16FiEgLoEmG3Wjlzx6/zXwNlsZlE= Subject key identifier: 3B:DE:F2:41:1E:86:8D:09:7C:6E:F9:11:E6:1E:08:33:21:9D:D3:B5 Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 Certificate issuer: /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft Manifest number: 48 Signing time: Sun 01 Mar 2026 09:43:25 +0000 Manifest this update: Sun 01 Mar 2026 09:43:24 +0000 Manifest next update: Sun 08 Mar 2026 09:43:24 +0000 Files and hashes: 1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: gS7r3umUlKLKdu/SHBnWMf5MmDMkxhjRxhlGkpl1uxo=) 2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1 Validity Not Before: Mar 1 09:43:24 2026 GMT Not After : Mar 8 09:43:24 2026 GMT Subject: CN=69a40a3c-595d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:f3:b7:39:5e:df:6e:c6:c6:3d:f9:00:69: f5:54:64:73:62:40:91:4e:8c:97:3c:64:af:18:ba: ab:56:b4:4f:0c:b9:0f:a8:80:28:ee:b4:87:94:b8: 4e:52:ac:da:85:6b:db:37:fd:b5:68:53:22:f5:a4: df:6f:7f:f9:ff:b6:8d:a4:6d:47:41:7f:dd:b7:c7: 7a:29:68:ba:fc:fb:1e:53:81:98:51:07:9f:a5:9c: a4:3a:3e:0a:57:71:a2:bd:b9:03:85:cd:0b:2b:5d: b3:4a:4c:05:7e:41:e1:54:40:36:d7:6a:f1:6a:6b: c3:be:3c:81:48:15:51:e8:6e:8e:9c:30:0f:13:51: cc:d7:76:3d:5a:39:d0:07:68:0c:25:c6:95:88:7c: cf:c2:5c:b5:6a:93:3c:4a:00:16:8b:f1:36:71:df: 3b:7f:ee:13:35:b0:d0:bf:40:5f:e3:0d:5f:c2:f2: 67:f8:83:97:4c:de:d4:86:6f:d4:8c:d3:b6:ee:d6: f8:85:f3:6b:3d:ae:8a:f6:7c:71:2a:9d:d5:13:fa: b9:24:99:5d:f6:73:77:a4:9a:5d:89:ac:3a:47:35: 4f:12:15:32:31:46:06:6c:90:d5:4e:4d:b8:1a:a0: 56:24:4e:d0:08:7d:b6:34:fb:a0:29:8f:0c:3e:1d: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:F2:41:1E:86:8D:09:7C:6E:F9:11:E6:1E:08:33:21:9D:D3:B5 X509v3 Authority Key Identifier: keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7d:09:a7:d7:20:38:3a:ee:0e:84:22:1c:f8:b9:f1:36:a9: 82:29:d6:68:ba:a8:42:cc:11:74:9a:cb:6e:25:50:73:8a:b2: 5b:ce:32:3a:83:6e:c4:0d:21:d2:58:83:05:f4:6d:00:94:65: 12:2f:38:29:62:cd:f1:9f:57:22:ab:76:61:42:ec:f0:f3:81: 7a:d3:c3:19:20:4f:0f:9b:66:e1:99:b0:7d:25:0d:b5:69:0d: 46:8d:75:c9:09:e8:66:20:88:a5:30:04:73:42:4b:5e:3c:a1: a2:92:ab:1f:39:53:9e:45:3e:32:d8:83:99:07:02:0f:8c:39: db:fc:3e:e7:1b:3b:5e:03:4d:77:5e:70:89:33:41:fe:8a:47: 06:e7:16:ee:ec:93:2c:f9:e4:4d:b7:2d:94:d8:f2:a0:1e:f3: f7:d2:c8:51:c4:fb:4a:0a:7b:4a:5e:0b:cd:0b:30:e6:e0:44: ba:08:8d:9d:0b:e8:84:d4:b0:18:00:64:6e:9f:ac:b3:8a:cc: ba:99:b9:c8:40:d0:37:3d:64:bb:1e:35:f6:d5:d5:9a:78:24: 8d:a6:dd:93:0a:0a:95:6e:6d:4c:29:d5:5e:b6:58:e6:2e:87: e7:1b:38:17:59:79:05:a6:31:d2:73:e1:8f:f7:af:09:13:2b: 6b:ca:77:de -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1 NDhDMDFCMTAeFw0yNjAzMDEwOTQzMjRaFw0yNjAzMDgwOTQzMjRaMBgxFjAUBgNV BAMTDTY5YTQwYTNjLTU5NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8CfO3OV7fbsbGPfkAafVUZHNiQJFOjJc8ZK8YuqtWtE8MuQ+ogCjutIeUuE5S rNqFa9s3/bVoUyL1pN9vf/n/to2kbUdBf923x3opaLr8+x5TgZhRB5+lnKQ6PgpX caK9uQOFzQsrXbNKTAV+QeFUQDbXavFqa8O+PIFIFVHobo6cMA8TUczXdj1aOdAH aAwlxpWIfM/CXLVqkzxKABaL8TZx3zt/7hM1sNC/QF/jDV/C8mf4g5dM3tSGb9SM 07bu1viF82s9ror2fHEqndUT+rkkmV32c3ekml2JrDpHNU8SFTIxRgZskNVOTbga oFYkTtAIfbY0+6Apjww+HRXrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO97yQR6G jQl8bvkR5h4IMyGd07UwHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st N2p3OG1hVW5pa0ZTTUFiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBQfQmn1yA4Ou4OhCIc+LnxNqmCKdZouqhCzBF0mstuJVBzirJbzjI6g27EDSHS WIMF9G0AlGUSLzgpYs3xn1ciq3ZhQuzw84F608MZIE8Pm2bhmbB9JQ21aQ1GjXXJ CehmIIilMARzQktePKGikqsfOVOeRT4y2IOZBwIPjDnb/D7nGzteA013XnCJM0H+ ikcG5xbu7JMs+eRNty2U2PKgHvP30shRxPtKCntKXgvNCzDm4ES6CI2dC+iE1LAY AGRun6yzisy6mbnIQNA3PWS7HjX21dWaeCSNpt2TCgqVbm1MKdVetljmLofnGzgX WXkFpjHSc+GP968JEytrynfe -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:06 2026 by rpki-client