$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft File: oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json) Hash identifier: gEgBs9URNHBW0l5iCSkhZZRy/8/RLqSNTV6hrWXdDFM= Subject key identifier: 24:39:A0:60:DB:9F:51:78:BD:03:BD:0F:1C:FA:6D:97:D9:CA:3F:66 Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft Manifest number: 01AD Signing time: Sun 01 Mar 2026 05:03:45 +0000 Manifest this update: Sun 01 Mar 2026 05:03:44 +0000 Manifest next update: Sun 08 Mar 2026 05:03:44 +0000 Files and hashes: 1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: IHUahWRkFaNN0dO280SWPG/dThcjdXPRUl6rMrSaAEw=) 2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: JtIhXGAWkzgayXs+NwavZWcl/FfRGvmLWt7QneAbREc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Mar 1 05:03:44 2026 GMT Not After : Mar 8 05:03:44 2026 GMT Subject: CN=69a3c8b1-e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:73:11:e7:12:34:e9:10:d7:69:30:a4:af: 0b:bb:43:ff:7c:c5:42:b5:d1:4e:d4:9e:f8:67:23: ef:06:10:62:4e:62:96:40:c6:db:70:c3:3e:bb:7c: 7d:17:66:f4:1a:7d:9a:ea:6e:21:27:83:19:ca:ef: df:e5:30:80:6b:9d:34:94:35:60:c2:7c:f7:68:3d: 15:64:41:8b:88:bd:53:5d:8f:5f:96:02:c5:ae:99: 6e:0a:6e:24:d5:ab:be:44:a3:59:78:c0:fe:a8:b4: cf:d8:fa:6a:b3:fa:33:57:ed:4b:55:f9:a1:bf:90: 69:8e:c0:39:fd:bb:ec:0a:8f:41:26:a4:00:6a:0f: e6:60:9f:bf:0b:e0:2a:6f:38:21:3e:c8:52:a0:9b: 34:88:2b:5d:ba:f8:88:22:ad:5c:07:2c:c1:13:33: 5b:1d:06:53:7c:39:c7:3c:c5:42:5c:b9:3e:45:76: 61:6d:27:5f:f1:df:f6:fb:f9:83:a4:3b:67:38:4f: ab:03:60:84:e6:51:09:41:9d:a4:3d:75:81:e9:72: 46:a7:82:2a:6e:b5:16:54:8b:0b:1f:46:62:51:68: c3:ff:37:b5:4a:03:46:9f:b3:f2:3c:d5:97:57:be: 7d:b5:1d:e4:9d:a7:26:8c:0c:d0:c5:d7:e9:af:7a: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:39:A0:60:DB:9F:51:78:BD:03:BD:0F:1C:FA:6D:97:D9:CA:3F:66 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c4:79:e8:96:f9:68:e8:3d:01:8a:7a:5a:66:d5:53:9a:ad: 4e:2e:7a:6c:b7:aa:ac:b4:ee:9a:3a:c3:26:a4:26:ec:34:2e: a3:2b:3f:c2:cb:4e:8f:e0:ae:76:f9:d1:bd:16:e5:81:23:53: 0c:3f:e7:a5:1d:48:ae:22:c9:13:76:f0:f7:a1:ab:fc:8f:26: 17:80:41:18:b7:d2:e8:01:64:13:c9:0f:1a:b9:fc:cc:e8:5d: 60:e3:cb:e5:0f:f4:0e:6a:c1:5d:c7:ed:cd:4b:3c:60:35:e8: be:35:d4:7a:2f:8f:b5:7e:97:5d:c8:8b:7a:a6:c9:4d:f9:fb: eb:6c:4b:91:39:1b:d1:9f:bc:36:b9:6f:d5:8a:ce:f5:23:1a: e8:ec:40:5d:f1:3c:96:00:25:e6:e0:3d:43:30:f4:82:b5:86: 0c:3c:70:44:da:3d:65:3b:f6:3d:30:19:5a:12:74:3e:2f:f9: 74:bd:c4:2f:0f:86:5c:d2:43:44:81:69:5a:61:e3:62:af:38: 15:1f:8c:8a:f5:61:19:55:b4:48:78:9b:f7:37:81:3c:95:0d: 88:95:02:88:d9:d2:1a:dd:21:b3:8e:be:33:d1:12:6a:15:35: 52:e5:27:d5:13:75:3d:09:78:3f:b7:04:3a:3a:bd:63:78:5e: cf:08:61:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYwMzAxMDUwMzQ0WhcNMjYwMzA4MDUwMzQ0WjAYMRYwFAYD VQQDDA02OWEzYzhiMS1lM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjdzEecSNOkQ12kwpK8Lu0P/fMVCtdFO1J74ZyPvBhBiTmKWQMbbcMM+u3x9 F2b0Gn2a6m4hJ4MZyu/f5TCAa500lDVgwnz3aD0VZEGLiL1TXY9flgLFrpluCm4k 1au+RKNZeMD+qLTP2Ppqs/ozV+1LVfmhv5BpjsA5/bvsCo9BJqQAag/mYJ+/C+Aq bzghPshSoJs0iCtduviIIq1cByzBEzNbHQZTfDnHPMVCXLk+RXZhbSdf8d/2+/mD pDtnOE+rA2CE5lEJQZ2kPXWB6XJGp4IqbrUWVIsLH0ZiUWjD/ze1SgNGn7PyPNWX V759tR3knacmjAzQxdfpr3p+ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQ5oGDb n1F4vQO9Dxz6bZfZyj9mMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0x T1BYSkdqU3piT2NZZWQyMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfcR56Jb5aOg9AYp6WmbVU5qtTi56bLeqrLTumjrDJqQm7DQuoys/wstOj+Cu dvnRvRblgSNTDD/npR1IriLJE3bw96Gr/I8mF4BBGLfS6AFkE8kPGrn8zOhdYOPL 5Q/0DmrBXcftzUs8YDXovjXUei+PtX6XXciLeqbJTfn762xLkTkb0Z+8Nrlv1YrO 9SMa6OxAXfE8lgAl5uA9QzD0grWGDDxwRNo9ZTv2PTAZWhJ0Pi/5dL3ELw+GXNJD RIFpWmHjYq84FR+MivVhGVW0SHib9zeBPJUNiJUCiNnSGt0hs46+M9ESahU1UuUn 1RN1PQl4P7cEOjq9Y3hezwhhNg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:36:10 2026 by rpki-client