$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft File: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json) Hash identifier: 7dzR/nC4TPs/MlIKaIdon6evoLiAMvvnYV7GheWKu+M= Subject key identifier: 59:1E:38:42:27:94:53:C1:AD:97:D7:26:01:14:64:F0:67:2A:1E:D8 Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft Manifest number: 8A Signing time: Sun 01 Mar 2026 23:23:25 +0000 Manifest this update: Sun 01 Mar 2026 23:23:23 +0000 Manifest next update: Sun 08 Mar 2026 23:23:23 +0000 Files and hashes: 1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: zwjTIesnVTYxVVQa4gkrnvndsEwJpx3FGeDj5u//ghQ=) 2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=) 3: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=) 4: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624 Validity Not Before: Mar 1 23:23:23 2026 GMT Not After : Mar 8 23:23:23 2026 GMT Subject: CN=69a4ca6c-9010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:e3:d0:21:92:7b:ad:49:61:73:65:a6:1d: bc:ea:6e:0c:dc:5a:e3:6a:19:2b:52:75:51:82:fb: fc:0c:e5:68:d4:fc:76:99:14:65:76:03:ac:aa:06: 13:0f:dd:0e:b3:95:e4:c1:e8:1a:c8:d0:10:59:3d: 2d:5e:d8:b0:de:37:0b:22:a1:02:4e:3d:ca:31:12: d6:c4:39:3e:90:72:4c:cc:1e:38:a4:69:aa:34:91: 3b:b3:27:bd:e9:72:c3:f4:06:2a:0e:4a:7f:d9:04: f9:05:09:bc:39:6c:c5:12:31:9b:2a:73:c6:89:62: 40:de:a5:52:34:f0:9b:64:57:98:87:cd:cf:d5:e5: 88:4b:f4:a6:11:45:19:ae:3f:37:e1:69:79:bc:1e: fd:9f:fd:df:45:e2:74:89:a7:8f:b1:63:11:1a:de: 21:b8:7c:c1:bf:78:a6:e2:16:35:92:d8:60:5a:3f: e6:24:b7:78:56:20:c4:d2:db:7d:7d:69:a0:f9:9c: a7:4b:cd:8d:b2:6e:90:d9:b1:bc:95:a0:df:a5:8e: 5c:7f:a6:f8:d6:d5:1c:26:49:5e:86:b1:30:58:5d: dc:2a:85:a6:bc:f8:50:91:c5:6e:41:95:c9:c6:d2: ff:ab:83:71:fb:59:24:20:a4:30:d2:aa:a3:85:26: 0d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1E:38:42:27:94:53:C1:AD:97:D7:26:01:14:64:F0:67:2A:1E:D8 X509v3 Authority Key Identifier: keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b4:5c:77:19:69:02:f6:b7:d7:16:ea:8c:d5:42:d4:a2:66: ad:46:9c:6d:b3:a5:00:c8:42:22:4d:b9:f6:23:e9:7a:1c:4a: 7a:3c:a7:6c:78:65:95:29:99:23:5c:00:ed:7d:cf:d3:3f:41: 84:4b:8e:62:2b:7d:be:fc:91:68:47:7a:6e:5c:16:b0:be:ce: d7:54:e4:75:b5:0b:69:93:d2:dc:e1:1b:b6:92:c9:89:7b:aa: af:b0:eb:f7:08:0c:58:ec:cf:e5:cd:54:47:29:00:be:28:4c: e6:5a:43:c6:99:56:8f:03:06:37:f3:40:e7:a8:7b:e5:c2:a4: e2:bf:e2:3f:07:0a:fd:38:39:c8:b5:ef:f0:4a:45:9d:a1:ec: da:ca:39:28:96:d3:43:fe:7a:e1:75:cd:3b:4a:df:43:df:34: 4f:8e:fe:0a:f1:93:83:d3:fc:ac:0a:b4:08:c0:50:35:3b:7d: bb:c0:ca:a5:0e:bb:a9:2c:c6:fb:45:ea:64:29:bd:e6:0c:32: 1c:f0:1e:52:7d:b2:36:f1:3a:b2:89:e7:17:23:69:4c:81:c1: 9c:c1:ce:db:a9:b0:77:a2:75:23:a0:dd:8a:9b:c7:e7:85:b5: b0:11:b9:6b:7d:1b:77:2d:d0:f0:17:38:1d:d2:60:98:e9:4d: ff:72:cf:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZBMDExMTAvBgNVBAUTKEEwNUVDMjY2QjNDMEJGRDZDRUI1MTcxMDBCRTA1QzUw NUI5NDM2MjQwHhcNMjYwMzAxMjMyMzIzWhcNMjYwMzA4MjMyMzIzWjAYMRYwFAYD VQQDEw02OWE0Y2E2Yy05MDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD7j0CGSe61JYXNlph286m4M3FrjahkrUnVRgvv8DOVo1Px2mRRldgOsqgYT D90Os5XkwegayNAQWT0tXtiw3jcLIqECTj3KMRLWxDk+kHJMzB44pGmqNJE7sye9 6XLD9AYqDkp/2QT5BQm8OWzFEjGbKnPGiWJA3qVSNPCbZFeYh83P1eWIS/SmEUUZ rj834Wl5vB79n/3fReJ0iaePsWMRGt4huHzBv3im4hY1kthgWj/mJLd4ViDE0tt9 fWmg+ZynS82Nsm6Q2bG8laDfpY5cf6b41tUcJklehrEwWF3cKoWmvPhQkcVuQZXJ xtL/q4Nx+1kkIKQw0qqjhSYN0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkeOEIn lFPBrZfXJgEUZPBnKh7YMB8GA1UdIwQYMBaAFKBewmazwL/WzrUXEAvgXFBblDYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkEwMS9GNjREM0IyNDU3 QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5Yk90UmNRQy1CY1VGdVVO aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkEwMS9GNjREM0IyNDU3QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5 Yk90UmNRQy1CY1VGdVVOaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvLRcdxlpAva31xbqjNVC1KJmrUacbbOlAMhCIk259iPpehxKejynbHhllSmZ I1wA7X3P0z9BhEuOYit9vvyRaEd6blwWsL7O11TkdbULaZPS3OEbtpLJiXuqr7Dr 9wgMWOzP5c1URykAvihM5lpDxplWjwMGN/NA56h75cKk4r/iPwcK/Tg5yLXv8EpF naHs2so5KJbTQ/564XXNO0rfQ980T47+CvGTg9P8rAq0CMBQNTt9u8DKpQ67qSzG +0XqZCm95gwyHPAeUn2yNvE6sonnFyNpTIHBnMHO26mwd6J1I6DdipvH54W1sBG5 a30bdy3Q8Bc4HdJgmOlN/3LPLA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:25 2026 by rpki-client