$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: WY8+103Nn7UrFHdnU1WEichEWld7I98/JPdTGRbry4k= Subject key identifier: A0:A9:A9:A2:BF:21:0E:AC:DC:64:A9:98:27:12:02:29:2E:B9:E1:11 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 080F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 0803 Signing time: Sat 04 Apr 2026 20:58:45 +0000 Manifest this update: Sat 04 Apr 2026 20:58:44 +0000 Manifest next update: Sat 11 Apr 2026 20:58:44 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: Z8wUM1hVV0msQEqGj9htP3pAaEzA4fGMwyJ0dtisCJo=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: eZnBeGRp/XjPgjBo8RzoLFHJq1ASGdJfGhbtwCwrNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2063 (0x80f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Apr 4 20:58:44 2026 GMT Not After : Apr 11 20:58:44 2026 GMT Subject: CN=69d17b85-44d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:58:67:a5:5e:63:64:f4:fc:d3:f3:24:08: 90:9a:f9:58:08:7c:31:5f:e1:9c:15:79:f5:0e:63: db:16:c4:f0:53:4c:dc:f6:71:09:5b:16:79:4e:19: 07:81:a1:76:2b:e4:95:a2:e7:f6:71:42:df:15:39: 97:64:22:80:b5:cb:3b:0b:b2:ec:bc:ef:17:40:54: ff:15:3d:c6:d1:6f:94:4b:43:cc:27:b1:6f:1f:98: f7:6e:10:f8:fd:b8:ae:27:b9:16:77:32:35:17:a4: 7a:76:63:d3:07:76:0e:c4:ca:f0:a7:0a:e7:d0:25: b6:55:db:90:3b:d1:13:06:a6:83:a6:df:c8:bb:d5: d4:cb:39:ee:e6:f5:08:6e:c9:0c:99:dc:be:6e:92: 52:0b:90:f7:43:58:b0:a8:8b:33:e7:ee:d4:11:c4: 4f:8a:d6:9e:78:0d:e3:12:e7:78:42:03:67:60:45: 0f:45:7b:2e:b8:31:c5:68:19:b4:70:91:c0:e1:6b: 30:9d:46:2c:37:41:56:02:39:4a:24:c7:87:13:3a: 44:82:03:0d:b8:3b:16:d0:a6:d9:5e:d6:93:b1:c8: d3:28:d7:4b:a7:75:a2:51:5d:b7:d0:8a:6d:e9:6d: 98:3a:91:f8:43:ce:2c:e9:c0:b9:b8:8e:e6:af:0e: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:A9:A2:BF:21:0E:AC:DC:64:A9:98:27:12:02:29:2E:B9:E1:11 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:73:bd:64:9a:ee:67:39:78:47:a7:44:c7:60:88:99:44:69: 3c:b9:09:02:bf:79:be:77:04:61:ca:2a:6f:11:82:35:cc:74: 98:43:da:39:44:1b:c8:24:81:60:a0:7c:a9:6a:c2:24:d3:c8: b2:ce:1e:e6:96:40:0b:bf:5b:d6:0b:17:f0:c9:3d:97:e8:51: 5a:93:1a:84:57:47:9d:31:73:de:69:6c:3a:09:ba:9c:fd:7d: fe:50:cd:fb:e2:b9:f8:87:86:d6:93:bb:c5:86:8e:ba:1f:4b: 59:ec:d4:62:8c:62:f5:9b:e8:14:d3:79:cd:07:eb:0a:f4:40: 3d:92:57:ef:fa:70:ac:aa:33:9d:d3:65:48:4a:16:62:40:ca: e6:72:71:d0:b6:32:37:92:3e:9a:86:ac:32:d9:91:41:6d:47: 35:d4:3b:5c:1d:d7:5a:ae:f7:16:f7:d1:b3:39:29:e1:75:0b: 04:03:fd:f1:10:f1:96:e6:6c:0b:26:db:a2:9f:1d:51:0a:46: 06:50:c1:f1:e5:08:8e:a1:17:f0:c0:96:5f:9a:93:bd:1a:06: 97:09:e4:fd:27:bd:63:52:ea:2e:81:25:a4:69:9f:75:99:7f: a9:41:7f:2e:a6:03:c7:01:fc:6a:dd:30:f7:21:83:87:20:4b: d2:ca:06:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjYwNDA0MjA1ODQ0WhcNMjYwNDExMjA1ODQ0WjAYMRYwFAYD VQQDEw02OWQxN2I4NS00NGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyRYZ6VeY2T0/NPzJAiQmvlYCHwxX+GcFXn1DmPbFsTwU0zc9nEJWxZ5ThkH gaF2K+SVouf2cULfFTmXZCKAtcs7C7LsvO8XQFT/FT3G0W+US0PMJ7FvH5j3bhD4 /biuJ7kWdzI1F6R6dmPTB3YOxMrwpwrn0CW2VduQO9ETBqaDpt/Iu9XUyznu5vUI bskMmdy+bpJSC5D3Q1iwqIsz5+7UEcRPitaeeA3jEud4QgNnYEUPRXsuuDHFaBm0 cJHA4WswnUYsN0FWAjlKJMeHEzpEggMNuDsW0KbZXtaTscjTKNdLp3WiUV230Ipt 6W2YOpH4Q84s6cC5uI7mrw7QCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCpqaK/ IQ6s3GSpmCcSAikuueERMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnXO9ZJruZzl4R6dEx2CImURpPLkJAr95vncEYcoqbxGCNcx0mEPaOUQbyCSB YKB8qWrCJNPIss4e5pZAC79b1gsX8Mk9l+hRWpMahFdHnTFz3mlsOgm6nP19/lDN ++K5+IeG1pO7xYaOuh9LWezUYoxi9ZvoFNN5zQfrCvRAPZJX7/pwrKozndNlSEoW YkDK5nJx0LYyN5I+moasMtmRQW1HNdQ7XB3XWq73FvfRszkp4XULBAP98RDxluZs Cybbop8dUQpGBlDB8eUIjqEX8MCWX5qTvRoGlwnk/Se9Y1LqLoElpGmfdZl/qUF/ LqYDxwH8at0w9yGDhyBL0soGJg== -----END CERTIFICATE-----Generated at Mon Apr 6 10:10:12 2026 by rpki-client