$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json) Hash identifier: H2DPmhBt0VsbidAdlf3n9HlgTfWTV1nDGjgdtBPorAI= Subject key identifier: 5C:B7:E9:E9:B2:8B:7F:2C:A8:CC:60:8C:67:47:17:B1:F7:A0:3D:E7 Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft Manifest number: 0CDB Signing time: Tue 24 Mar 2026 18:16:24 +0000 Manifest this update: Tue 24 Mar 2026 18:16:23 +0000 Manifest next update: Tue 31 Mar 2026 18:16:23 +0000 Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: 66uZwjVuTyH0sZmL6Jm4JQWtt8zteIYxKE7ueM8xxL0=) 2: 6309B36EEC3911EFB3A92E86C4F9AE02.roa (hash: uDALbi3bHpJkhVaUzcr/Tw4YI8CkGrOux57g2vncok0=) 3: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: vL3KqpEU4oZPQpi3CDZrgp/2H+64KoJ+VsBp1hjYpms=) 4: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: yOQ8UIyyxIlEPpq76DQLIko3L4pNxhHHewxA/jv0uaQ=) 5: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: SIlYeSC6URo5Fl5Bgj3ErhZlHkdnw2xsHdMY3oYb6Ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840 Validity Not Before: Mar 24 18:16:23 2026 GMT Not After : Mar 31 18:16:23 2026 GMT Subject: CN=69c2d4f8-412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:9b:11:c7:83:a4:1c:5b:3a:b3:cb:69:d8: 72:a3:46:56:66:69:df:44:ea:03:14:8a:40:4d:79: c6:69:85:94:88:fc:21:0a:b5:d8:96:67:16:9c:5c: 60:46:26:34:f6:fc:01:e5:aa:d5:23:9d:b3:e8:14: dd:50:4c:9f:b1:4b:82:bf:3b:d9:a8:ad:2f:b9:d2: b9:b2:3f:69:33:9f:f1:96:9f:61:b5:9d:95:a8:75: cc:19:76:36:0f:3d:74:18:e5:32:97:4f:86:e6:57: 63:bb:a0:0b:ed:15:c9:a1:bc:3a:fe:ae:db:d6:85: df:29:f9:8e:b9:79:2f:4b:9c:48:6d:46:7d:d5:a8: 85:14:58:96:2a:7a:a7:9d:33:0d:b5:a2:dc:d2:81: 65:23:aa:68:b5:7a:41:bb:e8:92:00:a0:25:67:88: 39:0b:fe:36:9f:3a:7c:09:83:84:18:83:51:56:c0: 2b:ac:41:59:4e:e0:59:2e:f0:8f:23:ce:96:bb:c1: 3d:67:27:30:2a:53:3a:91:fa:fb:a8:de:58:28:2e: ca:72:93:ed:b4:48:6a:f9:a1:3b:b8:a7:6f:e2:88: 15:76:e7:06:29:ef:65:57:a7:a0:b6:1d:49:5f:43: a9:be:5f:36:cf:0d:ed:55:89:3e:5c:a3:86:de:a8: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:E9:E9:B2:8B:7F:2C:A8:CC:60:8C:67:47:17:B1:F7:A0:3D:E7 X509v3 Authority Key Identifier: keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:50:ee:40:7a:09:24:8b:5a:da:56:14:f7:52:88:19:b1:99: b4:34:b7:31:89:6d:b4:9a:d4:1d:7e:0d:59:9e:61:48:59:3a: 3a:e8:d7:13:76:0e:ef:14:e2:26:0d:e4:fe:9a:8d:57:ca:67: 00:35:e2:54:3b:0a:7e:60:79:41:72:1d:77:9e:fb:fb:b6:b0: 9c:a0:51:fe:23:e5:1b:fa:f1:0a:35:1e:e3:ab:9e:cc:79:a6: ec:da:a8:ab:6a:64:fe:35:02:a7:d8:c4:24:1c:a5:4d:48:44: aa:3a:94:55:a7:d1:2f:bf:23:f2:76:5d:6d:21:99:9e:73:d0: 1d:a3:1a:19:e4:f6:d6:ff:d0:fe:8c:db:20:dd:15:7f:b9:d3: 12:3c:08:af:0a:a6:01:4d:98:dc:aa:5d:07:ed:c1:83:46:35: 6f:7c:79:b6:0e:5c:d1:c4:9f:68:7f:21:d4:a9:6f:14:1d:1e: e4:51:39:c1:b7:40:f1:72:7a:eb:54:3f:4f:0d:24:c2:8b:5b: d5:45:30:01:38:c0:f1:cc:d2:54:11:71:39:b6:ac:fb:29:9d: 78:9b:db:e9:d2:65:1a:70:68:83:ec:4d:ba:9d:5a:aa:cb:25: fb:ac:a1:2d:83:fc:01:c7:e3:dd:71:74:6b:cb:dc:69:28:19: c6:ea:6c:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz QjJEOUY4NDAwHhcNMjYwMzI0MTgxNjIzWhcNMjYwMzMxMTgxNjIzWjAYMRYwFAYD VQQDEw02OWMyZDRmOC00MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32+bEceDpBxbOrPLadhyo0ZWZmnfROoDFIpATXnGaYWUiPwhCrXYlmcWnFxg RiY09vwB5arVI52z6BTdUEyfsUuCvzvZqK0vudK5sj9pM5/xlp9htZ2VqHXMGXY2 Dz10GOUyl0+G5ldju6AL7RXJobw6/q7b1oXfKfmOuXkvS5xIbUZ91aiFFFiWKnqn nTMNtaLc0oFlI6potXpBu+iSAKAlZ4g5C/42nzp8CYOEGINRVsArrEFZTuBZLvCP I86Wu8E9ZycwKlM6kfr7qN5YKC7KcpPttEhq+aE7uKdv4ogVducGKe9lV6egth1J X0Opvl82zw3tVYk+XKOG3qhm5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFy36emy i38sqMxgjGdHF7H3oD3nMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2 Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoVDuQHoJJIta2lYU91KIGbGZtDS3MYlttJrUHX4NWZ5hSFk6OujXE3YO7xTi Jg3k/pqNV8pnADXiVDsKfmB5QXIdd577+7awnKBR/iPlG/rxCjUe46uezHmm7Nqo q2pk/jUCp9jEJBylTUhEqjqUVafRL78j8nZdbSGZnnPQHaMaGeT21v/Q/ozbIN0V f7nTEjwIrwqmAU2Y3KpdB+3Bg0Y1b3x5tg5c0cSfaH8h1KlvFB0e5FE5wbdA8XJ6 61Q/Tw0kwotb1UUwATjA8czSVBFxObas+ymdeJvb6dJlGnBog+xNup1aqssl+6yh LYP8Acfj3XF0a8vcaSgZxupsuw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:49:55 2026 by rpki-client