$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft File: oPy-m8tDKKnovMofXhSWrMLOLtk.mft (raw, json) Hash identifier: ytkaQSB0UzLeSBPsVzSstS/hzeBWZd1JowJibNTi1wY= Subject key identifier: B2:6C:13:90:01:2F:54:02:EA:61:BA:8A:5C:43:10:D5:E7:D0:A0:69 Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 Certificate issuer: /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft Manifest number: 2D Signing time: Tue 03 Mar 2026 04:01:27 +0000 Manifest this update: Tue 03 Mar 2026 04:01:27 +0000 Manifest next update: Tue 10 Mar 2026 04:01:27 +0000 Files and hashes: 1: oPy-m8tDKKnovMofXhSWrMLOLtk.crl (hash: PXcKuVBMiBZPh3FDyN2Njv3vlKHaI3vvJ48Ev3EV7jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9 Validity Not Before: Mar 3 04:01:27 2026 GMT Not After : Mar 10 04:01:27 2026 GMT Subject: CN=69a65d17-4dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:61:10:84:d2:46:78:f4:6e:ea:fd:e9:21: 46:69:8a:64:49:93:f1:3a:f1:13:66:ad:04:60:75: 4d:96:60:45:ef:6d:12:fd:5d:91:78:7d:f2:bd:c4: 02:86:95:01:aa:96:06:d5:a3:05:58:d9:88:6a:79: 31:45:9e:45:10:f7:6c:86:2d:d8:59:71:93:88:93: 14:f1:78:a8:54:d8:e9:c9:01:e0:92:92:f9:15:9e: 93:c9:e8:57:48:7e:9a:27:7f:4c:6a:f2:01:58:78: 2a:55:f5:98:b7:e7:f2:d5:d8:87:34:b3:b0:50:7c: c7:9c:5f:f2:d7:03:c0:e6:fb:28:08:a4:f7:cd:d3: dd:74:0a:ac:e3:ba:6d:d3:7a:f3:ec:75:0b:5a:d7: ec:f3:5a:4a:1a:0c:03:98:67:e2:4b:e4:95:56:a0: d9:e3:3c:cb:5a:5d:3b:ad:51:20:c3:1a:71:5e:af: f6:2d:12:8c:69:4e:b2:44:e5:ec:f6:12:8b:93:92: 46:a8:26:09:cf:74:ae:8d:18:79:44:09:57:65:87: b7:f7:0e:53:b5:e1:32:cf:99:94:9f:0f:9f:fb:bc: 68:8c:fc:0b:df:2e:a0:26:7a:ff:d2:94:94:f3:24: 4a:a0:81:07:fc:d6:6f:58:32:79:01:ce:9a:19:70: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6C:13:90:01:2F:54:02:EA:61:BA:8A:5C:43:10:D5:E7:D0:A0:69 X509v3 Authority Key Identifier: keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:54:f3:f1:84:3f:23:77:4a:63:17:4f:c2:a4:a4:5c:05:15: 75:9d:ff:a4:ad:51:6e:47:f5:a4:03:ed:e9:76:e9:00:f4:43: 89:4c:0e:9f:a5:69:2e:6b:f8:91:fb:99:c0:fd:fe:d4:d5:90: 70:a1:74:3e:e6:92:21:3d:fc:f7:0e:c6:bf:da:e5:07:22:d6: a7:07:fe:83:f0:58:c4:ba:69:89:36:50:57:97:ef:d3:19:e5: a3:0f:fe:34:d7:a1:3f:47:e2:c9:90:e1:d2:bf:39:78:fd:66: 44:9c:a4:15:dd:0d:7f:8e:b5:d5:57:ef:0f:58:88:26:b3:a0: b7:0c:3c:2b:37:76:b2:42:ce:c8:74:2b:35:e6:5f:db:d5:80: ae:28:59:c4:77:01:7f:e3:f8:ba:00:25:2b:e9:0f:e8:83:54: e4:e4:57:02:08:4e:f9:4d:31:44:55:ec:48:c3:99:b8:5e:13: 65:d4:f3:56:71:10:a5:87:de:89:e1:d7:b1:12:52:88:47:31: e9:c8:de:ca:15:72:cc:af:f0:05:24:b6:1a:b5:6a:cc:7c:ea: fc:06:18:82:a3:aa:ff:70:cd:9a:48:9e:13:d7:49:3d:69:79: 4e:fe:b7:e5:62:76:92:f6:fa:c9:09:76:3c:09:45:f3:13:bd: d9:a9:8c:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjI5NzExMC8GA1UEBRMoQTBGQ0JFOUJDQjQzMjhBOUU4QkNDQTFGNUUxNDk2QUND MkNFMkVEOTAeFw0yNjAzMDMwNDAxMjdaFw0yNjAzMTAwNDAxMjdaMBgxFjAUBgNV BAMTDTY5YTY1ZDE3LTRkY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhlmEQhNJGePRu6v3pIUZpimRJk/E68RNmrQRgdU2WYEXvbRL9XZF4ffK9xAKG lQGqlgbVowVY2YhqeTFFnkUQ92yGLdhZcZOIkxTxeKhU2OnJAeCSkvkVnpPJ6FdI fponf0xq8gFYeCpV9Zi35/LV2Ic0s7BQfMecX/LXA8Dm+ygIpPfN0910Cqzjum3T evPsdQta1+zzWkoaDAOYZ+JL5JVWoNnjPMtaXTutUSDDGnFer/YtEoxpTrJE5ez2 EouTkkaoJgnPdK6NGHlECVdlh7f3DlO14TLPmZSfD5/7vGiM/AvfLqAmev/SlJTz JEqggQf81m9YMnkBzpoZcNFXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsmwTkAEv VALqYbqKXEMQ1efQoGkwHwYDVR0jBBgwFoAUoPy+m8tDKKnovMofXhSWrMLOLtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCMjk3L0JCRjI4RERBRDk5 NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tub3ZNb2ZYaFNXck1MT0x0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb1B5LW04dERLS25vdk1vZlhoU1dyTUxPTHRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Mjk3L0JCRjI4RERBRDk5NTExRjA5QTE4NjIzQjY0RDM2NDFEL29QeS1tOHRES0tu b3ZNb2ZYaFNXck1MT0x0ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpVPPxhD8jd0pjF0/CpKRcBRV1nf+krVFuR/WkA+3pdukA9EOJTA6fpWkua/iR +5nA/f7U1ZBwoXQ+5pIhPfz3Dsa/2uUHItanB/6D8FjEummJNlBXl+/TGeWjD/40 16E/R+LJkOHSvzl4/WZEnKQV3Q1/jrXVV+8PWIgms6C3DDwrN3ayQs7IdCs15l/b 1YCuKFnEdwF/4/i6ACUr6Q/og1Tk5FcCCE75TTFEVexIw5m4XhNl1PNWcRClh96J 4dexElKIRzHpyN7KFXLMr/AFJLYatWrMfOr8BhiCo6r/cM2aSJ4T10k9aXlO/rfl YnaS9vrJCXY8CUXzE73ZqYxK -----END CERTIFICATE-----Generated at Wed Mar 4 08:36:06 2026 by rpki-client