$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: 604qvs3qkvfNRvCVIgBkapD7HjwIwNz2JjDVe2zbURY= Subject key identifier: A3:34:20:9A:FC:F6:F6:37:6C:47:71:22:92:FD:F7:93:7F:F0:08:7A Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 038B Signing time: Sun 01 Mar 2026 01:54:21 +0000 Manifest this update: Sun 01 Mar 2026 01:54:21 +0000 Manifest next update: Sun 08 Mar 2026 01:54:21 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: jMjFNNWPb9vKvYMQuge7sMaFbC0DTJVV2Byw3q76Yy4=) 2: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc=) 3: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: VitD9nfvSlKWRXb0qJCXTZOKT5a6K8qw8uO3GVdwbyk=) 4: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: emdOoNHeNPd2I/1TXnCpTax46mU70PVq1qcXN4YL9To=) 5: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: IpxcD4cHmOeodB8ybIfLf30tVWg9Lc/8x7ghIc66rAM=) 6: F2F59366E93211F0977E0D6F386F56BC.roa (hash: NdmZODI+NoDjZcaCQRDq/mC6N+4esweLJGp3j7Wx15I=) 7: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: CJ9YN6FLH2mWQGJEIYwUy4MU0VtOp9beQcxD+Nz5y9o=) 8: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: xzXCmIOI4n+hu8G1iGIEEK3bKhUG/IqbdaJcLrGUz0s=) 9: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: DFlr8Tn/hG96eJuSS2hv0WiijRfajfy1iDPzEugU79I=) 10: B111111288B411EF80480527C4F9AE02.roa (hash: qLIDrHWS/i6A8fwW8H8k+xkymy4Akbi61wq5s13V2Ww=) 11: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: oa1DI9U4A4Nx6Hk3PHDp1mXpYhzRJyPS5jmqfG2Om0Y=) 12: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: dSfere7QhRvtorz+gmreSnCGYZIH1WofndwPCRU2nxo=) 13: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=) 14: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: 2idrkUiE1glbbdM/t25K//0O3gKsqe5+guvE9Yfyva4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Mar 1 01:54:21 2026 GMT Not After : Mar 8 01:54:21 2026 GMT Subject: CN=69a39c4d-6fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fb:a4:5c:52:e0:dd:d6:08:40:bf:f0:97:35: 2a:a1:3e:f7:39:16:d2:e8:e1:78:66:b5:90:fe:26: 87:b5:6d:6e:eb:e1:62:c1:2a:dc:78:c2:69:28:71: d0:f1:c8:30:88:56:d4:58:a7:06:41:15:a3:ed:2b: ed:20:42:7d:b8:24:52:c2:2b:01:56:fe:80:c0:59: cf:a2:39:a6:f1:b9:75:be:37:8a:a0:4c:09:a8:3f: f9:8a:6f:50:ce:60:68:89:6c:39:a7:8f:1a:57:80: 41:df:4e:2b:bd:1a:b0:a1:07:27:7c:0d:27:93:7b: 27:62:b8:0b:4c:97:ab:56:a9:e8:62:09:90:6f:93: 4b:5f:5f:28:c2:c7:11:48:08:4e:93:3a:cb:15:66: d9:3e:f6:cd:45:2f:43:22:3f:13:81:4f:0f:ff:d0: 08:94:f0:1a:3e:ac:27:38:65:7b:cc:7a:a9:f5:03: 3f:88:fa:61:c0:3c:7e:4f:c7:8c:ae:3d:91:95:6f: d7:a2:51:d9:f1:de:d7:4b:72:ff:8b:d4:c7:0d:7e: f7:42:23:a1:02:93:2e:ba:df:8a:76:8a:ab:1d:03: f2:52:2f:fc:c8:ef:1c:ab:a8:98:d8:eb:17:1e:98: 72:89:24:a6:2d:65:f6:6c:48:55:e7:0e:02:c7:6f: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:20:9A:FC:F6:F6:37:6C:47:71:22:92:FD:F7:93:7F:F0:08:7A X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ec:55:25:d4:14:a3:4a:3c:ba:8b:08:92:23:ac:54:cd:4c: b8:a2:b0:dc:9c:17:c6:ae:ce:fb:d3:74:86:0b:47:11:70:1d: b2:bf:e2:3e:1e:84:e4:f0:73:fc:f2:ec:41:df:5c:13:65:32: fb:d3:13:7b:1e:85:67:e7:24:0e:e3:29:6c:13:4f:23:37:6f: 8f:0a:5b:5c:f8:f7:87:3d:2e:74:80:79:36:6e:22:ea:f0:b4: 09:4d:e8:5b:b8:cb:4d:16:47:c2:8a:9a:47:42:4e:5c:3d:51: d5:29:3f:a4:5b:27:93:18:ae:5b:83:74:da:6f:74:24:85:6c: d9:92:ba:39:b9:f2:9d:33:13:70:8e:4e:13:a2:c6:39:d0:b5: 59:d1:b1:b5:05:11:0d:2c:12:29:ba:dc:75:1e:d8:75:67:7c: 01:9b:ec:df:15:a4:51:f3:6c:a5:c8:81:a9:96:88:9a:77:1a: ec:e9:4b:3e:a0:7a:e1:59:04:00:e1:25:f2:13:c7:6a:fb:45: 36:b7:a5:17:53:f2:61:d4:bf:fd:14:d2:d4:59:9d:03:3f:6d: 21:ba:68:e8:8a:e5:42:72:8b:76:05:11:da:1f:67:56:1a:43: d9:4e:7b:26:6b:25:ed:ed:63:6a:d9:b5:3b:36:b9:8d:f0:6e: a6:d3:fa:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjYwMzAxMDE1NDIxWhcNMjYwMzA4MDE1NDIxWjAYMRYwFAYD VQQDDA02OWEzOWM0ZC02ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvukXFLg3dYIQL/wlzUqoT73ORbS6OF4ZrWQ/iaHtW1u6+FiwSrceMJpKHHQ 8cgwiFbUWKcGQRWj7SvtIEJ9uCRSwisBVv6AwFnPojmm8bl1vjeKoEwJqD/5im9Q zmBoiWw5p48aV4BB304rvRqwoQcnfA0nk3snYrgLTJerVqnoYgmQb5NLX18owscR SAhOkzrLFWbZPvbNRS9DIj8TgU8P/9AIlPAaPqwnOGV7zHqp9QM/iPphwDx+T8eM rj2RlW/XolHZ8d7XS3L/i9THDX73QiOhApMuut+KdoqrHQPyUi/8yO8cq6iY2OsX HphyiSSmLWX2bEhV5w4Cx2/W5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKM0IJr8 9vY3bEdxIpL995N/8Ah6MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiOxVJdQUo0o8uosIkiOsVM1MuKKw3JwXxq7O+9N0hgtHEXAdsr/iPh6E5PBz /PLsQd9cE2Uy+9MTex6FZ+ckDuMpbBNPIzdvjwpbXPj3hz0udIB5Nm4i6vC0CU3o W7jLTRZHwoqaR0JOXD1R1Sk/pFsnkxiuW4N02m90JIVs2ZK6ObnynTMTcI5OE6LG OdC1WdGxtQURDSwSKbrcdR7YdWd8AZvs3xWkUfNspciBqZaImnca7OlLPqB64VkE AOEl8hPHavtFNrelF1PyYdS//RTS1FmdAz9tIbpo6IrlQnKLdgUR2h9nVhpD2U57 Jmsl7e1jatm1Oza5jfBuptP6fw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:29:28 2026 by rpki-client