$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: bomXUgBtaIhM795JNmh2aAYdAGQfdOylleMmhH4CPhQ= Subject key identifier: A4:F5:25:FE:64:A9:FB:57:9F:F6:07:66:6D:BF:54:A6:7F:F3:D9:F6 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 038D Signing time: Mon 02 Mar 2026 00:20:38 +0000 Manifest this update: Mon 02 Mar 2026 00:20:34 +0000 Manifest next update: Mon 09 Mar 2026 00:20:34 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: c0Efag0bd9uUmboJfbmUp+Y3eUqSomgHTWehF85kUtk=) 2: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=) 3: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=) 4: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=) 5: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=) 6: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=) 7: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=) 8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=) 9: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=) 10: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=) 11: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=) 12: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=) 13: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=) 14: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Mar 2 00:20:34 2026 GMT Not After : Mar 9 00:20:34 2026 GMT Subject: CN=69a4d7d5-7ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:f4:f4:64:44:98:47:4c:80:bc:ed:ec:6c: 25:f0:15:7f:05:14:82:b1:2d:b3:f5:04:dd:af:cd: d9:51:34:6f:b7:2a:c0:ae:55:35:d1:41:79:ff:1b: 52:fa:54:ae:8c:f4:2f:79:2d:d1:a0:77:84:e4:f0: bb:0b:cc:3c:39:a2:a3:94:90:59:d3:a4:60:44:be: 3f:93:1e:cc:3b:71:7e:04:4b:3a:93:4f:f4:22:ea: dd:44:ad:51:c6:d7:f7:2f:3a:61:a2:cb:0a:f1:08: bd:c1:0a:97:d0:b4:15:d0:1e:61:0b:ee:1a:30:c2: 2c:88:52:f2:cc:84:21:3a:3c:ae:db:42:54:05:5e: a9:17:01:fb:48:c0:c5:35:66:3b:56:5f:37:b3:c6: be:fd:e3:d1:ad:47:01:8a:df:48:61:60:dd:57:84: 74:d6:13:2a:6e:57:8e:04:8b:23:ad:10:8c:88:32: 32:e1:2a:07:d0:fc:4d:ac:b1:7d:79:e0:39:71:80: 7b:46:16:5e:07:80:ab:a5:76:88:ff:0b:0a:26:06: a5:5e:b9:d9:1a:67:4b:f3:b0:da:40:48:1c:aa:37: ae:64:5a:e2:46:f2:8c:c3:d1:41:46:ce:1a:b5:ef: 48:f0:95:30:e6:97:e7:a8:d6:b1:5c:1b:1d:1d:7b: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F5:25:FE:64:A9:FB:57:9F:F6:07:66:6D:BF:54:A6:7F:F3:D9:F6 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7f:76:c0:97:e0:e8:36:74:b3:c0:fe:48:90:62:f4:0b:7c: 62:21:03:a2:de:2e:3c:e2:07:fe:93:a3:88:53:31:df:20:22: 76:6f:9f:16:37:7e:6b:df:bb:72:9d:74:b1:45:2d:de:41:6c: 2e:98:b2:74:e8:e5:32:f9:f4:da:8f:45:e5:b1:97:b8:2c:c2: 0e:d2:57:24:0d:e7:98:96:db:38:4b:c5:34:8d:89:10:66:6d: 58:dc:1c:cf:b6:0e:6d:0a:2f:69:34:02:58:74:e2:e0:3f:44: 30:25:cc:c6:ec:b0:3d:9c:9b:c5:16:bc:a6:1b:fe:0b:23:7a: e7:f1:ac:aa:2b:35:c1:7d:07:51:6f:ab:77:1b:17:7a:93:92: 5b:0c:a2:8e:51:7b:c9:85:7c:7a:25:c2:03:57:cf:f4:a7:9f: 33:7c:92:f0:7b:cf:ab:0d:1c:bd:34:fd:34:bf:42:54:2c:30: 8e:b2:18:76:00:ac:ea:4b:d5:3e:91:e3:3a:6c:01:c9:e8:55: 63:68:df:c9:c5:b3:72:50:95:e0:a1:9b:e5:39:c1:1f:c6:76: 30:39:66:cc:4b:73:5d:fc:d5:0d:21:7c:82:28:84:d1:9d:67: 5d:4c:8b:01:a7:cb:83:cc:84:a5:29:c2:13:a0:c9:26:9c:39: 4f:40:bc:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjYwMzAyMDAyMDM0WhcNMjYwMzA5MDAyMDM0WjAYMRYwFAYD VQQDEw02OWE0ZDdkNS03Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAH09GREmEdMgLzt7Gwl8BV/BRSCsS2z9QTdr83ZUTRvtyrArlU10UF5/xtS +lSujPQveS3RoHeE5PC7C8w8OaKjlJBZ06RgRL4/kx7MO3F+BEs6k0/0IurdRK1R xtf3LzphossK8Qi9wQqX0LQV0B5hC+4aMMIsiFLyzIQhOjyu20JUBV6pFwH7SMDF NWY7Vl83s8a+/ePRrUcBit9IYWDdV4R01hMqbleOBIsjrRCMiDIy4SoH0PxNrLF9 eeA5cYB7RhZeB4CrpXaI/wsKJgalXrnZGmdL87DaQEgcqjeuZFriRvKMw9FBRs4a te9I8JUw5pfnqNaxXBsdHXvzBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKT1Jf5k qftXn/YHZm2/VKZ/89n2MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkn92wJfg6DZ0s8D+SJBi9At8YiEDot4uPOIH/pOjiFMx3yAidm+fFjd+a9+7 cp10sUUt3kFsLpiydOjlMvn02o9F5bGXuCzCDtJXJA3nmJbbOEvFNI2JEGZtWNwc z7YObQovaTQCWHTi4D9EMCXMxuywPZybxRa8phv+CyN65/Gsqis1wX0HUW+rdxsX epOSWwyijlF7yYV8eiXCA1fP9KefM3yS8HvPqw0cvTT9NL9CVCwwjrIYdgCs6kvV PpHjOmwByehVY2jfycWzclCV4KGb5TnBH8Z2MDlmzEtzXfzVDSF8giiE0Z1nXUyL AafLg8yEpSnCE6DJJpw5T0C8kw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:09 2026 by rpki-client