$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json) Hash identifier: 5Y5xw6zH76NQRlRj13xiPzhtmqNDroKSGBcVr1jimOc= Subject key identifier: C3:7B:F2:FE:09:C2:26:3C:45:42:C5:19:D6:34:5D:FE:B3:81:33:FC Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft Manifest number: 03C5 Signing time: Sat 21 Mar 2026 00:07:51 +0000 Manifest this update: Sat 21 Mar 2026 00:07:50 +0000 Manifest next update: Sat 28 Mar 2026 00:07:50 +0000 Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: II4eRRaFIMM2xYoB+h+260xsgoWvbPZjj2/gZdqFffk=) 2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=) 3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Mar 21 00:07:50 2026 GMT Not After : Mar 28 00:07:50 2026 GMT Subject: CN=69bde157-ab95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:51:8f:d5:1d:ea:64:ae:e2:3d:36:39:8a: 92:f6:c7:09:51:cb:e0:cc:40:89:2a:91:98:2c:b7: b6:76:34:36:74:dc:ee:82:4f:4b:95:fe:33:a5:e2: 27:8f:65:54:72:26:88:bb:35:01:dd:60:eb:7f:b6: 63:4c:6a:c2:90:67:df:bc:14:82:66:be:38:8d:f7: 7f:ba:7f:b6:22:55:40:0d:81:b4:ef:dd:bf:ab:dd: 0f:33:9a:5c:8d:0f:bf:6e:25:be:8d:62:7c:d0:30: 0a:cf:10:62:8c:d8:1f:d5:b7:0b:c4:32:27:2b:b7: 29:0d:17:78:37:ce:5d:76:9f:99:1a:99:39:94:84: a0:26:d9:a1:6b:61:86:63:56:fa:00:61:d9:d3:e4: ab:d6:34:e2:ce:43:ca:11:9d:d1:8e:d7:27:c0:93: 51:2a:92:4d:c2:a6:92:0f:60:2d:61:cb:c3:ce:92: 91:8e:97:88:14:f1:3a:d6:c8:12:ef:03:76:58:7d: 6d:76:5c:c0:4a:e7:90:be:d3:5a:a7:16:f1:6a:7d: 35:5a:0d:0e:ad:fc:7b:ca:27:3f:bc:1c:70:88:88: b3:59:8d:ba:d8:c1:20:a8:59:56:66:35:90:0a:ae: 52:4f:7b:76:10:9a:43:a2:a6:e0:6e:b9:5b:4d:65: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:F2:FE:09:C2:26:3C:45:42:C5:19:D6:34:5D:FE:B3:81:33:FC X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c4:c5:32:6e:7b:5f:21:ac:88:ec:18:6f:0d:59:da:1f:21: 9f:3f:20:9c:e3:af:9c:fa:92:cc:5f:4c:52:77:8b:0d:1e:ed: 5f:c5:9a:92:f7:02:75:71:eb:f4:56:01:be:70:74:76:df:e2: 04:32:13:c1:e4:bf:6b:13:dc:56:f9:fa:88:8e:23:07:f4:21: 24:21:d1:2e:29:cf:80:78:04:82:6d:cd:91:90:c0:50:43:00: bf:38:87:d3:28:94:69:45:5c:2a:69:89:6d:dd:5a:53:8b:a7: c3:cb:54:a5:4c:82:91:78:48:8f:c1:1e:45:84:ac:05:57:1f: 9c:d6:63:32:ea:c3:f9:e3:b7:96:52:f7:ac:e5:5d:f8:8a:2b: 4a:fc:4e:0c:28:af:4c:58:89:e4:4a:ef:1d:da:cb:7a:08:6b: 77:87:ee:7d:8d:84:fe:ec:8b:a9:69:93:19:0d:0f:f5:4f:6b: ee:85:10:4d:90:c6:ae:08:f7:81:75:1f:14:29:6d:e6:7b:1e: 17:50:0b:7b:0a:23:de:c6:5c:a5:7a:36:b8:76:62:d0:3d:61: ab:bd:ab:90:9b:43:7e:d1:a6:48:5d:77:b9:a6:b4:79:9e:ce: af:73:d6:bb:28:e7:dd:87:78:fc:af:fe:cd:b2:4f:d3:58:2e: a9:71:71:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjYwMzIxMDAwNzUwWhcNMjYwMzI4MDAwNzUwWjAYMRYwFAYD VQQDEw02OWJkZTE1Ny1hYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEtRj9Ud6mSu4j02OYqS9scJUcvgzECJKpGYLLe2djQ2dNzugk9Llf4zpeIn j2VUciaIuzUB3WDrf7ZjTGrCkGffvBSCZr44jfd/un+2IlVADYG0792/q90PM5pc jQ+/biW+jWJ80DAKzxBijNgf1bcLxDInK7cpDRd4N85ddp+ZGpk5lISgJtmha2GG Y1b6AGHZ0+Sr1jTizkPKEZ3RjtcnwJNRKpJNwqaSD2AtYcvDzpKRjpeIFPE61sgS 7wN2WH1tdlzASueQvtNapxbxan01Wg0Orfx7yic/vBxwiIizWY262MEgqFlWZjWQ Cq5ST3t2EJpDoqbgbrlbTWUs4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMN78v4J wiY8RULFGdY0Xf6zgTP8MB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO R19pa0NqS24zZU82QzdITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACsTFMm57XyGsiOwYbw1Z2h8hnz8gnOOvnPqSzF9MUneLDR7tX8WakvcCdXHr 9FYBvnB0dt/iBDITweS/axPcVvn6iI4jB/QhJCHRLinPgHgEgm3NkZDAUEMAvziH 0yiUaUVcKmmJbd1aU4unw8tUpUyCkXhIj8EeRYSsBVcfnNZjMurD+eO3llL3rOVd +IorSvxODCivTFiJ5ErvHdrLeghrd4fufY2E/uyLqWmTGQ0P9U9r7oUQTZDGrgj3 gXUfFClt5nseF1ALewoj3sZcpXo2uHZi0D1hq72rkJtDftGmSF13uaa0eZ7Or3PW uyjn3Yd4/K/+zbJP01guqXFxEQ== -----END CERTIFICATE-----Generated at Sun Mar 22 00:08:28 2026 by rpki-client