$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: uqQ6rdpe7PddMSQ9RYBKHcmw29DGONXWF0YcdAZL54s= Subject key identifier: 87:9A:E8:F3:22:45:6B:3F:0C:B4:18:37:5D:17:3F:B7:54:B5:4A:11 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 04F2 Signing time: Mon 02 Mar 2026 13:36:13 +0000 Manifest this update: Mon 02 Mar 2026 13:36:12 +0000 Manifest next update: Mon 09 Mar 2026 13:36:12 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: dX29wkNwXB6sNLgyeU3vv7kfqe+OtLJrpH7qyFulAlA=) 2: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) 3: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Mar 2 13:36:12 2026 GMT Not After : Mar 9 13:36:12 2026 GMT Subject: CN=69a5924d-c8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:d2:2e:d0:f3:f1:a1:c4:58:0c:d0:3f:d1: cb:23:50:fa:51:e9:7d:d2:fe:9b:50:52:32:22:e3: 0e:bd:83:d0:37:0f:9e:6b:58:aa:92:bb:10:c3:1d: 0c:dc:42:19:56:33:5c:c5:e3:11:07:9e:30:18:6f: 5b:c1:a0:af:ac:43:9d:2a:a0:b1:71:1b:72:58:b2: 06:d5:af:37:d5:fd:36:99:84:5a:1a:45:76:4d:1f: 46:10:eb:68:ab:6e:cf:2a:42:44:d3:92:96:48:f9: 62:1e:a6:3d:76:fa:c1:d5:7f:9e:65:ae:5f:de:58: 2e:82:9b:c6:55:1d:5f:32:55:54:b3:57:51:0e:d3: d5:b5:e1:59:45:d3:99:32:7a:8d:9a:d1:bc:7f:03: f7:c6:e4:e8:e1:c2:a4:4e:a9:34:0d:49:ee:75:50: 04:da:69:a5:f5:87:5a:6d:c4:ed:be:2b:88:b6:b4: ee:38:dc:fb:7b:59:b1:44:55:33:85:96:a1:b6:fa: 32:20:d3:46:2a:37:8e:83:b2:31:22:9a:71:10:69: 72:18:da:1f:b5:d1:ea:6b:4c:89:51:45:69:9b:bb: 73:9e:71:7f:ce:17:f5:dd:e8:a7:24:a3:90:cb:02: 12:67:a9:7b:8a:54:ba:15:0b:d9:8c:18:89:22:73: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:E8:F3:22:45:6B:3F:0C:B4:18:37:5D:17:3F:B7:54:B5:4A:11 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c7:3d:b3:07:21:07:4b:33:4e:53:05:05:a9:98:76:e9:3d: b4:14:06:8f:b7:3c:84:63:07:99:07:3d:43:a3:02:a8:9a:30: cd:be:97:fb:9d:3a:c8:42:56:9b:ba:28:8b:dd:db:8b:18:07: 85:b3:a3:e2:78:61:7f:45:c8:6a:cc:85:dd:ec:5d:99:9e:d7: 0f:0e:71:ef:4a:01:2d:c5:83:7f:60:8f:66:b2:c1:d1:9c:9e: 0d:3f:5b:e5:ac:8c:c5:29:a2:15:88:2b:33:f8:3d:a9:d9:2d: 87:ab:39:4a:a0:00:45:04:0c:21:af:0d:20:88:a4:95:0a:60: 46:7a:3e:de:a0:55:1f:0f:ad:59:4d:19:87:b9:4f:e3:e2:4f: 6c:00:55:e3:55:2e:c0:29:d3:5b:b8:85:c8:82:f6:3d:76:a6: 40:68:26:37:a0:86:25:25:82:00:5b:b4:2d:93:6e:2a:20:ca: 21:fb:a0:d7:e4:c3:55:9d:20:38:2d:dc:b3:3a:5c:ba:00:67: 3d:49:19:46:10:ff:9b:16:a6:a6:f3:8a:e1:a4:e7:18:c1:e9: 93:1e:46:bd:d3:bb:52:15:74:d5:d3:22:c4:64:d8:60:71:4a: b0:36:2f:2f:14:42:5d:f0:cc:82:19:25:ed:c0:53:be:f4:92: f6:2b:3f:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYwMzAyMTMzNjEyWhcNMjYwMzA5MTMzNjEyWjAYMRYwFAYD VQQDEw02OWE1OTI0ZC1jOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjJbSLtDz8aHEWAzQP9HLI1D6Uel90v6bUFIyIuMOvYPQNw+ea1iqkrsQwx0M 3EIZVjNcxeMRB54wGG9bwaCvrEOdKqCxcRtyWLIG1a831f02mYRaGkV2TR9GEOto q27PKkJE05KWSPliHqY9dvrB1X+eZa5f3lgugpvGVR1fMlVUs1dRDtPVteFZRdOZ MnqNmtG8fwP3xuTo4cKkTqk0DUnudVAE2mml9YdabcTtviuItrTuONz7e1mxRFUz hZahtvoyINNGKjeOg7IxIppxEGlyGNoftdHqa0yJUUVpm7tznnF/zhf13einJKOQ ywISZ6l7ilS6FQvZjBiJInNKDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIea6PMi RWs/DLQYN10XP7dUtUoRMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATcc9swchB0szTlMFBamYduk9tBQGj7c8hGMHmQc9Q6MCqJowzb6X+506yEJW m7ooi93bixgHhbOj4nhhf0XIasyF3exdmZ7XDw5x70oBLcWDf2CPZrLB0ZyeDT9b 5ayMxSmiFYgrM/g9qdkth6s5SqAARQQMIa8NIIiklQpgRno+3qBVHw+tWU0Zh7lP 4+JPbABV41UuwCnTW7iFyIL2PXamQGgmN6CGJSWCAFu0LZNuKiDKIfug1+TDVZ0g OC3cszpcugBnPUkZRhD/mxampvOK4aTnGMHpkx5GvdO7UhV01dMixGTYYHFKsDYv LxRCXfDMghkl7cBTvvSS9is/eQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:38 2026 by rpki-client