$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft File: OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json) Hash identifier: Np0tU/RUEDw9AU8/rFzJAIlc5CQbbtVSmsLnbnfAyew= Subject key identifier: BA:65:29:BC:30:E5:64:7E:80:4A:20:76:79:CD:21:E4:7A:CA:B7:CB Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 Certificate issuer: /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft Manifest number: 08A1 Signing time: Wed 18 Mar 2026 20:12:47 +0000 Manifest this update: Wed 18 Mar 2026 20:12:46 +0000 Manifest next update: Wed 25 Mar 2026 20:12:46 +0000 Files and hashes: 1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: DFgRo4dsxxp07NVDYQiGYxX/9bP/DsimlRXrhgPMs1I=) 2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: IYSmLvKDDFybIzJE/k0J2LFQgVw7pM2NwhpUrLtH0AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 20:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2 Validity Not Before: Mar 18 20:12:46 2026 GMT Not After : Mar 25 20:12:46 2026 GMT Subject: CN=69bb073e-3f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:f5:5c:13:35:bf:de:22:fa:20:51:09:37: c0:94:1a:e7:a4:d8:44:b8:ce:40:05:fe:f5:bc:1f: 71:8e:81:f7:30:12:34:6a:89:8a:23:2b:ef:80:99: 1a:ab:f3:3b:b9:f0:d0:be:cc:7c:7e:33:7e:da:6b: 49:0e:42:3a:41:0e:3e:18:86:b6:68:fd:c2:a0:19: ea:94:0a:9c:1d:47:34:cd:62:2e:40:fa:18:48:ac: 42:f7:ad:f4:ee:6d:c2:01:f5:8e:03:c3:c4:1d:80: 59:c7:d8:c7:43:16:c2:b5:04:17:66:8a:6b:cf:d3: 8e:40:99:19:40:8d:f6:0e:ef:2f:58:19:47:fd:7a: 06:d9:db:fb:b3:c4:f3:be:ed:8a:b4:cd:86:a2:74: 7a:13:a5:34:da:76:ad:c3:f2:c1:19:16:4e:eb:07: 96:3d:84:fc:16:88:8c:9e:90:15:c5:83:28:26:13: 05:a6:fa:80:12:d9:60:7e:50:26:65:2a:33:5c:9c: 9f:b7:c6:3b:3e:dd:3d:2c:65:de:74:09:5c:cb:d3: 43:21:ac:9b:2d:56:e7:e9:07:4c:97:be:cd:9a:3c: 84:c5:a6:43:0c:65:74:7e:ab:f7:27:df:ee:74:e8: 5c:73:ae:1e:5c:e8:76:12:23:ed:8b:97:dc:b4:10: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:65:29:BC:30:E5:64:7E:80:4A:20:76:79:CD:21:E4:7A:CA:B7:CB X509v3 Authority Key Identifier: keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9b:f3:2a:e5:c5:16:a5:1d:2d:b0:85:58:6f:7e:38:7f:54: 7c:58:76:49:f3:39:fd:e4:57:d7:3d:ec:7e:7f:e6:96:4c:f9: 60:6c:dc:ab:97:8f:f0:e3:a9:c6:05:eb:de:44:e2:e9:9e:97: ed:23:8e:05:36:02:97:5f:27:9b:96:72:84:e8:0a:b9:dd:4b: 73:68:a3:ec:64:3e:2d:a0:db:ee:b0:24:bb:c4:39:f8:10:05: 90:95:f9:fa:5f:ed:7f:ff:36:4a:45:c6:ea:e4:a5:c2:45:05: 55:ea:d6:7d:8a:a2:45:a3:f1:94:1e:49:39:c9:61:25:01:91: 43:c3:1a:a4:66:e8:f0:c3:9b:f9:7d:b3:c6:46:86:fd:70:d5: 37:a0:fa:cf:44:e7:ef:13:c3:17:88:ae:a8:77:96:5b:9f:86: b3:f1:fa:fc:ca:86:75:38:94:f6:64:41:bd:c8:8f:fe:0f:d1: ff:11:da:47:6e:be:db:04:5b:93:b2:74:2e:c3:44:46:78:75: 48:ab:07:fe:ae:23:9a:05:ae:3b:01:55:8e:bb:40:7f:a0:fe: 79:a2:41:1c:f0:67:e6:1f:0b:45:19:1e:ae:44:7f:0d:f2:69: 53:10:d2:52:41:35:fb:3c:09:ce:d8:28:80:c8:28:e2:0d:df: d2:86:eb:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4M0IxMTAvBgNVBAUTKDM4MDFFMzYxNEY3RDQwNDcwMkFFNDIyQ0IyNzlFNTFE QzlEMTRDQTIwHhcNMjYwMzE4MjAxMjQ2WhcNMjYwMzI1MjAxMjQ2WjAYMRYwFAYD VQQDEw02OWJiMDczZS0zZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NX1XBM1v94i+iBRCTfAlBrnpNhEuM5ABf71vB9xjoH3MBI0aomKIyvvgJka q/M7ufDQvsx8fjN+2mtJDkI6QQ4+GIa2aP3CoBnqlAqcHUc0zWIuQPoYSKxC9630 7m3CAfWOA8PEHYBZx9jHQxbCtQQXZoprz9OOQJkZQI32Du8vWBlH/XoG2dv7s8Tz vu2KtM2GonR6E6U02natw/LBGRZO6weWPYT8FoiMnpAVxYMoJhMFpvqAEtlgflAm ZSozXJyft8Y7Pt09LGXedAlcy9NDIaybLVbn6QdMl77NmjyExaZDDGV0fqv3J9/u dOhcc64eXOh2EiPti5fctBDOzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLplKbww 5WR+gEogdnnNIeR6yrfLMB8GA1UdIwQYMBaAFDgB42FPfUBHAq5CLLJ55R3J0Uyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GQkJBOUU5Q0Uw MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFFY0Nya0lzc25ubEhjblJU S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09BSGpZVTk5UUVjQ3JrSXNzbm5sSGNuUlRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgzQi9GQkJBOUU5Q0UwMjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9PQUhqWVU5OVFF Y0Nya0lzc25ubEhjblJUS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhZvzKuXFFqUdLbCFWG9+OH9UfFh2SfM5/eRX1z3sfn/mlkz5YGzcq5eP8OOp xgXr3kTi6Z6X7SOOBTYCl18nm5ZyhOgKud1Lc2ij7GQ+LaDb7rAku8Q5+BAFkJX5 +l/tf/82SkXG6uSlwkUFVerWfYqiRaPxlB5JOclhJQGRQ8MapGbo8MOb+X2zxkaG /XDVN6D6z0Tn7xPDF4iuqHeWW5+Gs/H6/MqGdTiU9mRBvciP/g/R/xHaR26+2wRb k7J0LsNERnh1SKsH/q4jmgWuOwFVjrtAf6D+eaJBHPBn5h8LRRkerkR/DfJpUxDS UkE1+zwJztgogMgo4g3f0obrtQ== -----END CERTIFICATE-----Generated at Thu Mar 19 22:12:05 2026 by rpki-client