$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft File: oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json) Hash identifier: lwhUYKpuD4F+mUHNA4F9g9RimwQbUrUf2cWerW4GLGA= Subject key identifier: DE:6E:7F:66:A6:27:87:82:79:3A:B7:12:37:74:B2:7A:E0:B2:B1:3D Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft Manifest number: 23 Signing time: Tue 03 Mar 2026 08:29:49 +0000 Manifest this update: Tue 03 Mar 2026 08:29:48 +0000 Manifest next update: Tue 10 Mar 2026 08:29:48 +0000 Files and hashes: 1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: kEzo54kQvA5Sap6JpWkCjHuJM7XKEPSQX40U7qrw09g=) 2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Mar 3 08:29:48 2026 GMT Not After : Mar 10 08:29:48 2026 GMT Subject: CN=69a69bfd-568a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d1:ee:24:59:7b:c1:92:af:c0:c5:fb:42:5a: 49:fa:4f:69:ce:5b:8d:60:e8:e5:04:54:18:18:45: 1c:e6:fd:4e:7e:30:89:fb:fa:a0:2a:2b:43:25:ea: 51:f9:56:00:a3:66:3a:b0:d1:e3:73:28:26:0f:b7: 17:55:e1:c5:9c:86:da:cc:d8:f5:1b:2a:4f:bf:a7: b3:c5:2f:1a:5e:ab:da:38:fc:47:8c:cb:ba:c5:19: 74:36:ec:65:fe:42:2d:12:15:49:e6:43:3e:6b:3d: 79:1b:22:da:95:8d:bf:3a:cd:1b:3f:5b:62:1b:aa: 6a:e3:07:7e:a8:e6:b8:c2:b8:1f:7d:f8:75:b0:10: 57:cf:37:a8:28:3a:5d:74:8d:82:e4:2d:97:a1:ec: 56:5a:d3:e2:86:36:b5:c7:74:7f:f7:3b:b0:69:da: ae:4b:7c:6d:86:5a:ed:03:4c:6e:12:a8:c9:84:0e: ea:b8:2e:e6:a6:76:74:cb:06:17:db:73:0e:39:03: 11:b8:10:3a:05:82:a3:49:9f:dc:94:2a:32:fc:8d: 46:46:f6:42:f9:57:95:bf:c3:bb:ab:fb:76:75:b7: 47:a7:16:7f:73:71:2d:0f:25:94:84:44:00:a8:2f: 7b:17:98:b7:1d:75:45:fd:ae:67:fc:a2:f1:2f:db: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6E:7F:66:A6:27:87:82:79:3A:B7:12:37:74:B2:7A:E0:B2:B1:3D X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e6:67:c5:71:19:7e:c0:06:0b:4c:a7:d2:83:50:f0:e1:b0: c4:53:44:c7:19:1e:73:f6:35:22:b6:06:de:b2:70:f6:40:c5: 77:4e:30:f7:cb:fc:c6:93:22:f5:b5:e3:e8:a4:5d:d5:e8:a0: e4:33:50:85:91:46:14:44:77:09:88:8c:d1:38:93:bf:47:ae: 22:a2:00:9e:c1:5f:41:87:96:34:84:e0:d8:bc:96:2d:01:28: 50:b7:9a:38:9f:c6:8d:cd:30:c0:b3:44:16:65:3a:52:b7:d3: eb:3d:74:da:0e:87:6f:e9:bf:a8:4b:b2:d2:a4:b2:75:ae:1d: a7:21:41:70:6b:6b:e3:30:49:22:de:80:42:fe:9c:61:06:9c: 2e:aa:00:be:0c:b9:86:be:f0:74:ad:74:5d:d9:24:45:98:17: db:de:e4:e0:a5:d1:05:9d:2b:56:fe:7b:85:4b:e8:1e:93:d5: a3:f5:97:6d:c4:9b:f4:31:f4:13:34:cc:55:ec:39:c5:a3:6e: 73:5a:cd:40:64:84:7a:2e:9f:03:ca:a0:91:76:d9:1e:46:6f: 06:37:e8:37:94:40:0b:81:98:7b:a2:24:f2:ae:d1:9a:6b:c6: 90:09:20:75:ce:64:34:55:59:42:7c:e2:75:b0:e3:d9:ca:4b: d0:88:ed:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RThGNjExMC8GA1UEBRMoQTFBQTJBMkM1NkU2NEE5RDlCQkFBMzM3QjZENkFCMzYx NzJEMzY4RjAeFw0yNjAzMDMwODI5NDhaFw0yNjAzMTAwODI5NDhaMBgxFjAUBgNV BAMTDTY5YTY5YmZkLTU2OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCS0e4kWXvBkq/AxftCWkn6T2nOW41g6OUEVBgYRRzm/U5+MIn7+qAqK0Ml6lH5 VgCjZjqw0eNzKCYPtxdV4cWchtrM2PUbKk+/p7PFLxpeq9o4/EeMy7rFGXQ27GX+ Qi0SFUnmQz5rPXkbItqVjb86zRs/W2IbqmrjB36o5rjCuB99+HWwEFfPN6goOl10 jYLkLZeh7FZa0+KGNrXHdH/3O7Bp2q5LfG2GWu0DTG4SqMmEDuq4LuamdnTLBhfb cw45AxG4EDoFgqNJn9yUKjL8jUZG9kL5V5W/w7ur+3Z1t0enFn9zcS0PJZSERACo L3sXmLcddUX9rmf8ovEv26QfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3m5/ZqYn h4J5OrcSN3SyeuCysT0wHwYDVR0jBBgwFoAUoaoqLFbmSp2buqM3ttarNhctNo8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFOEY2LzNENkQ4RkYwRTdB RjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5v OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2FvcUxGYm1TcDJidXFNM3R0YXJOaGN0Tm84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF OEY2LzNENkQ4RkYwRTdBRjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3Ay YnVxTTN0dGFyTmhjdE5vOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAd5mfFcRl+wAYLTKfSg1Dw4bDEU0THGR5z9jUitgbesnD2QMV3TjD3y/zGkyL1 tePopF3V6KDkM1CFkUYURHcJiIzROJO/R64iogCewV9Bh5Y0hODYvJYtAShQt5o4 n8aNzTDAs0QWZTpSt9PrPXTaDodv6b+oS7LSpLJ1rh2nIUFwa2vjMEki3oBC/pxh BpwuqgC+DLmGvvB0rXRd2SRFmBfb3uTgpdEFnStW/nuFS+gek9Wj9ZdtxJv0MfQT NMxV7DnFo25zWs1AZIR6Lp8DyqCRdtkeRm8GN+g3lEALgZh7oiTyrtGaa8aQCSB1 zmQ0VVlCfOJ1sOPZykvQiO2Y -----END CERTIFICATE-----Generated at Wed Mar 4 08:39:59 2026 by rpki-client