$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: oDvxT2YGR62yIBxd6ISHd42MUteBCTSIZV9HrEFCA84= Subject key identifier: 5E:D6:DC:24:5E:94:75:99:32:29:A5:10:38:7C:50:85:A3:EF:D4:CF Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 04FB Signing time: Wed 18 Mar 2026 23:22:06 +0000 Manifest this update: Wed 18 Mar 2026 23:22:05 +0000 Manifest next update: Wed 25 Mar 2026 23:22:05 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: Hl2ENtiiTmLVNTMdPfdW2wovESefY5SImqHd0YPccW0=) 2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) 3: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 23:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1300 (0x514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Mar 18 23:22:05 2026 GMT Not After : Mar 25 23:22:05 2026 GMT Subject: CN=69bb339d-c0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:2d:3a:ab:cc:45:e6:3a:9d:59:24:31:10: 6b:66:a8:b5:0b:a0:46:cc:2c:ca:a1:98:27:2d:2e: ae:4a:55:bf:2a:c1:c5:f9:a0:13:7a:92:3a:27:90: 65:e6:9b:8f:5c:8a:7c:ae:13:bd:59:32:c1:c4:27: 1c:c4:33:3a:16:24:08:e6:4c:c8:93:db:c0:da:85: 04:dd:c3:bb:80:ed:4d:79:04:d5:13:57:6c:48:c8: 20:7d:66:93:a5:bf:ea:71:ee:fb:57:d1:b5:62:a7: 40:04:c0:c1:52:0a:87:5b:93:96:b7:c4:44:43:e0: 66:56:69:f1:1c:5f:a0:ef:d6:3d:02:12:2c:fc:2c: e8:8d:e9:32:c8:15:46:73:fb:68:04:70:a8:90:31: 02:bb:07:96:02:9c:c3:73:c8:1b:5f:76:7a:45:d8: de:85:9b:c2:79:16:19:5d:1b:68:a1:34:b7:dc:89: c9:7b:9f:f4:40:98:23:10:c0:0c:a3:e8:25:b0:5e: 4a:ef:8d:43:b6:f1:0e:7b:6f:3d:fa:ba:ad:e5:4b: e5:bc:65:c6:19:b0:eb:28:20:3c:f5:7e:a6:8a:38: 0b:7f:a8:6b:2e:56:fd:26:b3:20:e0:51:59:53:4f: bf:78:63:e1:4f:66:f0:12:8a:de:b9:db:7d:d1:c8: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D6:DC:24:5E:94:75:99:32:29:A5:10:38:7C:50:85:A3:EF:D4:CF X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3f:22:44:0e:71:91:e5:bd:15:ca:99:de:84:69:b7:c7:5b: cb:97:ad:2d:f3:74:e9:82:2c:90:b5:e7:7b:cd:68:87:41:f8: aa:f3:58:2f:ec:93:cf:b6:bd:07:2a:cf:e0:f7:b9:30:aa:87: 9e:c2:d4:a0:ae:f8:d3:bf:3c:8a:cd:0d:c7:39:55:04:3a:b3: d7:f8:08:25:48:bc:5e:62:53:8a:e1:2a:19:49:cc:4e:64:c8: 2f:58:b9:ce:15:32:06:34:98:1e:08:b4:1a:ce:c9:1f:29:19: 03:04:91:21:31:eb:16:6f:9c:86:59:56:b9:3a:d9:8d:bb:fc: 2f:f0:e5:d3:cd:ad:1e:46:d4:61:59:00:c0:89:5b:7a:7f:5a: 15:be:24:78:4e:fd:5b:e5:dd:fb:35:ec:f2:fc:69:80:36:87: 23:94:e8:59:69:b0:d6:7d:f1:bf:b0:1d:25:63:7d:a1:16:43: 8f:ad:7f:e5:87:f8:f7:33:82:4b:81:0e:7a:b6:c3:6a:94:a7: 15:40:b2:21:01:d4:cc:87:4b:ed:ce:c5:94:4e:8f:0b:52:b4: 8e:21:a7:10:7b:3b:a5:92:a0:29:2c:26:22:e6:7c:18:82:5b: dd:04:98:2a:07:1e:a8:db:e7:27:4b:2b:b0:a2:97:3c:6b:ab: 82:f4:fa:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYwMzE4MjMyMjA1WhcNMjYwMzI1MjMyMjA1WjAYMRYwFAYD VQQDEw02OWJiMzM5ZC1jMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlItOqvMReY6nVkkMRBrZqi1C6BGzCzKoZgnLS6uSlW/KsHF+aATepI6J5Bl 5puPXIp8rhO9WTLBxCccxDM6FiQI5kzIk9vA2oUE3cO7gO1NeQTVE1dsSMggfWaT pb/qce77V9G1YqdABMDBUgqHW5OWt8REQ+BmVmnxHF+g79Y9AhIs/CzojekyyBVG c/toBHCokDECuweWApzDc8gbX3Z6RdjehZvCeRYZXRtooTS33InJe5/0QJgjEMAM o+glsF5K741DtvEOe289+rqt5UvlvGXGGbDrKCA89X6mijgLf6hrLlb9JrMg4FFZ U0+/eGPhT2bwEoreudt90cg5GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7W3CRe lHWZMimlEDh8UIWj79TPMB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALj8iRA5xkeW9FcqZ3oRpt8dby5etLfN06YIskLXne81oh0H4qvNYL+yTz7a9 ByrP4Pe5MKqHnsLUoK740788is0NxzlVBDqz1/gIJUi8XmJTiuEqGUnMTmTIL1i5 zhUyBjSYHgi0Gs7JHykZAwSRITHrFm+chllWuTrZjbv8L/Dl082tHkbUYVkAwIlb en9aFb4keE79W+Xd+zXs8vxpgDaHI5ToWWmw1n3xv7AdJWN9oRZDj61/5Yf49zOC S4EOerbDapSnFUCyIQHUzIdL7c7FlE6PC1K0jiGnEHs7pZKgKSwmIuZ8GIJb3QSY KgceqNvnJ0srsKKXPGurgvT6Pg== -----END CERTIFICATE-----Generated at Fri Mar 20 03:56:12 2026 by rpki-client