$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft File: oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json) Hash identifier: Oasg0RunrlHucNtVsiCRExRkSslBqKNd51GQDiZ3Jxs= Subject key identifier: 5B:BC:37:8A:53:23:46:60:4C:31:03:DB:B2:F6:E2:CB:58:59:BC:A0 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft Manifest number: 038F Signing time: Thu 05 Mar 2026 00:33:27 +0000 Manifest this update: Thu 05 Mar 2026 00:33:27 +0000 Manifest next update: Thu 12 Mar 2026 00:33:27 +0000 Files and hashes: 1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: d9TNH6aGhv9U/iddO9mCDFTlBHgLN2KjrsVYYmAQ9NE=) 2: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=) 3: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=) 4: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=) 5: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=) 6: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=) 7: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=) 8: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=) 9: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=) 10: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=) 11: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=) 12: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=) 13: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=) 14: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 00:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Mar 5 00:33:27 2026 GMT Not After : Mar 12 00:33:27 2026 GMT Subject: CN=69a8cf57-9dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7b:38:10:d9:13:fe:76:c2:0a:b3:c3:fb:a7: e2:1a:0f:26:8d:fb:67:38:df:c1:65:70:3f:6f:fa: 44:85:d2:36:0f:85:03:4d:83:0f:de:2c:7f:8a:78: 7e:e8:c6:cc:29:9b:4e:88:4d:df:8a:7c:88:85:2b: 0e:c7:ae:0a:8d:72:14:ab:05:8c:f9:c4:30:d5:d3: 84:5b:51:ab:d8:d2:11:cc:58:ea:20:4b:41:51:a6: fb:50:9f:9e:60:b2:82:c5:ee:db:a4:7a:5b:af:5a: 91:44:f9:f2:6a:11:30:c9:a5:2b:a4:7e:37:15:a1: c9:80:8a:96:87:29:d2:40:f4:b2:7d:14:b7:f2:79: f6:25:d8:bb:a5:96:36:2d:a8:31:1a:3e:32:06:78: f0:40:07:36:6e:b4:d1:e7:b9:91:6c:67:5e:8c:7c: 75:61:72:a9:30:67:67:c2:17:d8:2f:c2:bf:8a:7c: 42:77:bf:d0:ca:af:b6:65:5a:91:cc:50:13:18:11: 98:6b:12:11:7e:95:a8:b7:c6:71:dd:6f:04:01:65: bf:95:39:fb:c9:98:a2:30:23:20:ff:75:0f:f6:81: 60:37:ef:e7:40:3e:9f:6b:94:1c:9a:1c:3f:db:2a: 5a:3b:34:aa:6e:1e:1e:a1:b1:be:42:54:1a:b0:27: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:37:8A:53:23:46:60:4C:31:03:DB:B2:F6:E2:CB:58:59:BC:A0 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:71:95:75:57:d3:fd:13:28:40:8d:e4:34:a2:b9:b2:40:4b: db:51:65:81:3e:ed:68:9a:c8:2e:9d:07:04:d8:17:9c:b4:fc: 9a:6d:6c:94:66:b4:ab:83:f3:c1:21:f9:84:36:c4:78:88:16: c9:94:4a:96:24:c7:b0:f4:f2:2d:79:09:0d:b9:17:6e:f8:ee: 67:cb:c6:66:dd:db:fd:78:13:50:28:76:77:d9:b6:8e:58:eb: f7:e0:75:18:90:81:a1:94:d5:0e:fa:58:44:ec:84:21:e0:0c: 4f:1a:cb:d9:bc:20:53:33:cf:bd:62:22:03:aa:70:0e:e1:8f: 23:a0:62:09:a3:a4:60:48:98:1c:10:7a:a6:9f:f9:b7:d5:b4: c4:fe:be:b2:07:ad:09:92:99:5b:90:e5:c7:65:3f:41:43:33: a8:20:89:ce:d8:10:2d:c1:a2:f1:fe:b0:fc:0d:54:09:80:4b: 5f:8f:52:a6:9c:b7:f6:89:1f:89:f4:5f:09:aa:13:0d:c9:87: d6:e2:83:95:3c:be:d1:55:e9:98:11:60:20:7c:93:f2:65:7a: fb:c8:29:61:49:44:2f:69:33:99:74:37:f0:60:a8:3b:9b:5f: 11:db:e7:0c:ce:04:87:2a:6c:1a:24:ee:79:35:22:90:06:6e: b8:80:e0:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjYwMzA1MDAzMzI3WhcNMjYwMzEyMDAzMzI3WjAYMRYwFAYD VQQDEw02OWE4Y2Y1Ny05ZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Xs4ENkT/nbCCrPD+6fiGg8mjftnON/BZXA/b/pEhdI2D4UDTYMP3ix/inh+ 6MbMKZtOiE3finyIhSsOx64KjXIUqwWM+cQw1dOEW1Gr2NIRzFjqIEtBUab7UJ+e YLKCxe7bpHpbr1qRRPnyahEwyaUrpH43FaHJgIqWhynSQPSyfRS38nn2Jdi7pZY2 LagxGj4yBnjwQAc2brTR57mRbGdejHx1YXKpMGdnwhfYL8K/inxCd7/Qyq+2ZVqR zFATGBGYaxIRfpWot8Zx3W8EAWW/lTn7yZiiMCMg/3UP9oFgN+/nQD6fa5Qcmhw/ 2ypaOzSqbh4eobG+QlQasCeAAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu8N4pT I0ZgTDED27L24stYWbygMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEUzMi83MjA5NTlGQzAxQzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25G X05jVVJVU2VVMHphNzBFNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtnGVdVfT/RMoQI3kNKK5skBL21FlgT7taJrILp0HBNgXnLT8mm1slGa0q4Pz wSH5hDbEeIgWyZRKliTHsPTyLXkJDbkXbvjuZ8vGZt3b/XgTUCh2d9m2jljr9+B1 GJCBoZTVDvpYROyEIeAMTxrL2bwgUzPPvWIiA6pwDuGPI6BiCaOkYEiYHBB6pp/5 t9W0xP6+sgetCZKZW5Dlx2U/QUMzqCCJztgQLcGi8f6w/A1UCYBLX49Sppy39okf ifRfCaoTDcmH1uKDlTy+0VXpmBFgIHyT8mV6+8gpYUlEL2kzmXQ38GCoO5tfEdvn DM4EhypsGiTueTUikAZuuIDgdg== -----END CERTIFICATE-----Generated at Thu Mar 5 17:32:21 2026 by rpki-client