$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: 2bj4dCSDiLsLwxfqzb7vOJLwvKtKBLlh6i3iN5iZ6sI= Subject key identifier: DA:7A:E5:B6:D6:1D:36:94:6D:8F:D0:5A:17:FE:7E:CF:DA:59:30:84 Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 0444 Signing time: Fri 06 Mar 2026 23:58:32 +0000 Manifest this update: Fri 06 Mar 2026 23:58:31 +0000 Manifest next update: Fri 13 Mar 2026 23:58:31 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: XvQtaG5JrzzryXq6Wt+ue8/uVUPgBFBti0/830JzuKQ=) 2: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=) 3: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=) 4: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Mar 6 23:58:31 2026 GMT Not After : Mar 13 23:58:31 2026 GMT Subject: CN=69ab6a27-d2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:ed:24:36:3a:e6:1c:9b:26:0b:25:4c:52: b0:21:25:20:97:09:30:7b:bd:8f:3e:f8:f1:5d:e9: 96:c8:e8:ee:76:5f:6e:b7:cf:c1:fd:f9:76:1c:9c: dc:82:79:6d:ba:61:10:45:e8:02:bf:3a:c8:26:ac: e8:8e:50:f4:4d:75:49:3e:41:4f:0b:cc:5e:67:85: f7:04:92:08:02:f8:c5:72:a6:a3:6b:d9:e0:07:d5: 84:a7:2a:06:e4:b2:d8:de:e7:30:39:78:d1:50:c4: 0e:53:bc:23:6c:8e:c7:dd:aa:57:4d:ae:62:30:60: 4b:ff:68:f8:4e:a7:5a:79:28:54:3c:f5:76:eb:ee: cd:2e:35:ea:77:1f:be:eb:37:2c:49:a6:c4:59:5e: 92:57:c6:23:80:c1:3b:dc:d9:dc:37:77:61:68:e2: b4:14:81:8d:65:23:8c:68:14:28:5b:2a:b9:0e:48: f8:4d:c2:4a:98:f0:60:e2:4f:94:df:fc:53:22:af: 53:c5:8f:8c:17:e5:03:30:b6:ed:c1:20:73:b5:2b: e7:5d:e8:d1:d7:19:d0:fa:be:38:48:b3:f0:7d:bc: 4c:81:be:d3:9e:19:60:cf:42:f8:96:9c:c1:52:29: 67:ff:15:10:6a:b8:0d:9c:44:c7:a2:a6:d3:91:ed: d8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:E5:B6:D6:1D:36:94:6D:8F:D0:5A:17:FE:7E:CF:DA:59:30:84 X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:dd:3d:5d:c9:8d:3f:a5:d8:ce:f3:19:cd:eb:3d:fa:a6:9d: 35:5c:66:93:86:05:40:7d:92:93:4e:3d:3d:36:e8:cb:93:ef: 33:ed:8c:09:ca:8e:cb:10:a4:ac:e2:19:77:8a:a3:39:ae:fb: 15:50:48:e9:2e:b9:b9:cf:32:e5:d5:36:f6:bc:58:61:da:bc: 78:07:56:89:97:21:ed:c3:02:82:25:82:c8:78:57:ec:d3:3c: 9c:9a:fd:ad:56:85:52:c0:d1:ba:0a:be:46:db:15:65:45:18: fa:07:69:67:bb:92:21:74:91:fc:ae:5f:5d:ad:e9:a7:9f:91: e1:dc:55:42:5a:7b:cb:8a:19:6d:f4:cc:7c:13:5b:59:0a:fe: 2d:ce:8f:2e:dd:e5:74:9a:54:15:91:e5:f3:f7:04:18:09:8b: b7:e7:c5:f0:c6:29:8b:4a:77:c5:8b:40:94:61:37:33:84:74: a8:e4:df:37:80:da:37:51:cc:94:9f:9c:40:dd:78:68:e4:6e: 23:ad:63:28:8a:0b:3f:c1:1d:3d:d3:7a:65:6c:28:d8:bf:11: e1:c3:3e:c3:34:03:91:c4:a0:d9:46:e4:7c:76:da:79:f6:4e: 76:ab:56:6a:1e:ee:f3:37:de:3b:ad:30:23:f5:65:d2:48:5d: 6e:2a:9d:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjYwMzA2MjM1ODMxWhcNMjYwMzEzMjM1ODMxWjAYMRYwFAYD VQQDEw02OWFiNmEyNy1kMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7btJDY65hybJgslTFKwISUglwkwe72PPvjxXemWyOjudl9ut8/B/fl2HJzc gnltumEQRegCvzrIJqzojlD0TXVJPkFPC8xeZ4X3BJIIAvjFcqaja9ngB9WEpyoG 5LLY3ucwOXjRUMQOU7wjbI7H3apXTa5iMGBL/2j4TqdaeShUPPV26+7NLjXqdx++ 6zcsSabEWV6SV8YjgME73NncN3dhaOK0FIGNZSOMaBQoWyq5Dkj4TcJKmPBg4k+U 3/xTIq9TxY+MF+UDMLbtwSBztSvnXejR1xnQ+r44SLPwfbxMgb7Tnhlgz0L4lpzB Uiln/xUQargNnETHoqbTke3YOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNp65bbW HTaUbY/QWhf+fs/aWTCEMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM909XcmNP6XYzvMZzes9+qadNVxmk4YFQH2Sk049PTboy5PvM+2MCcqOyxCk rOIZd4qjOa77FVBI6S65uc8y5dU29rxYYdq8eAdWiZch7cMCgiWCyHhX7NM8nJr9 rVaFUsDRugq+RtsVZUUY+gdpZ7uSIXSR/K5fXa3pp5+R4dxVQlp7y4oZbfTMfBNb WQr+Lc6PLt3ldJpUFZHl8/cEGAmLt+fF8MYpi0p3xYtAlGE3M4R0qOTfN4DaN1HM lJ+cQN14aORuI61jKIoLP8EdPdN6ZWwo2L8R4cM+wzQDkcSg2UbkfHbaefZOdqtW ah7u8zfeO60wI/Vl0khdbiqdXw== -----END CERTIFICATE-----Generated at Sat Mar 7 12:55:46 2026 by rpki-client