$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: 9gcBe3f3auSZWpB3dZe670/w5s6bIjKGOwySvr4KdDc= Subject key identifier: C1:F6:A0:BE:C8:CC:C9:27:EF:8C:44:E2:89:BE:A7:ED:7D:C9:17:AD Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1DCF Signing time: Tue 24 Mar 2026 16:01:42 +0000 Manifest this update: Tue 24 Mar 2026 16:01:42 +0000 Manifest next update: Tue 31 Mar 2026 16:01:42 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: oVNh3uxtQaLWAzNTZYF1ydgLe/SrTovZ0UAWbXly9ME=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: x37ecenCy3jbXj6Gv2z3koAXtHNV/RyDae1qY9A2y4M=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: k6CtfEJwOIjqwI8wE1ffbbr6dcu91HX2CafEBgOBGsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7648 (0x1de0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Mar 24 16:01:42 2026 GMT Not After : Mar 31 16:01:42 2026 GMT Subject: CN=69c2b566-cdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:44:3e:c1:12:46:98:f0:58:9b:ec:e3:9a: 50:1a:80:fe:80:36:01:00:d5:a6:67:72:c9:71:04: 5a:ba:c5:b4:2e:da:4a:34:55:8f:cf:b8:db:24:ac: 63:45:7d:f6:c0:54:96:38:d9:c4:95:95:ce:8e:0c: 86:a5:12:c2:4b:58:74:14:06:4d:e3:0f:99:28:84: 0d:5d:7c:3a:9e:17:f8:44:5d:bc:a1:a3:ae:5c:05: 25:25:1a:be:d3:7c:8b:15:18:f8:6d:f9:c2:5f:c0: 77:ed:96:a2:20:8a:1e:32:e6:1c:d0:58:88:a0:9c: 27:c4:b0:7c:28:d5:61:25:9a:83:42:35:9d:0a:72: b6:78:94:6d:6e:ac:a6:cb:cb:b0:08:10:5b:4f:6f: 07:78:1d:09:04:67:5a:d3:3c:7c:ce:de:8f:72:91: 61:4f:6e:f2:b3:c9:e2:1d:1b:05:1a:b3:f8:1f:b8: 69:ea:a0:13:5e:11:97:81:0a:7f:17:2d:63:be:ac: 25:c0:b9:9a:65:5a:bf:54:5d:e2:e7:6e:ff:ea:f0: ce:40:35:a6:f0:63:0b:83:32:6a:01:33:d1:8e:b0: 2c:3e:2c:e0:3a:c4:66:de:d9:f8:28:99:b1:61:78: f1:7d:bd:8d:5e:fa:09:c2:30:3b:d4:71:df:c1:9a: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F6:A0:BE:C8:CC:C9:27:EF:8C:44:E2:89:BE:A7:ED:7D:C9:17:AD X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:96:13:f8:5f:a1:7b:33:3d:80:bc:e3:e3:f4:41:bc:10: b7:47:5e:6d:2e:4c:12:9b:21:80:28:cb:99:09:9f:ac:ab:01: 1d:e9:b0:37:45:52:d5:61:66:e6:d5:af:c7:20:a1:80:a6:a2: d2:42:18:b7:f4:28:fb:4f:a5:fc:b8:57:f7:19:ed:f0:7c:3e: 6f:1b:57:2f:7f:b2:3d:8f:62:04:2d:34:10:5e:e7:9a:7a:a3: 1d:bb:6b:8d:cf:4a:9e:9f:4c:fb:e5:30:83:11:c8:28:56:7a: db:62:4a:61:37:94:35:88:16:51:d5:cd:f6:16:67:51:81:22: 8a:63:f1:d1:01:f7:c1:ae:03:d5:e2:05:b5:93:54:57:f9:b0: 1e:30:29:6e:52:95:ac:36:1d:0f:22:8b:9f:5b:38:be:b6:32: f5:fc:ac:3e:b6:c0:c6:22:91:46:00:c9:f5:b4:c9:a7:3d:b3: 8a:37:55:d3:79:f5:ec:c4:05:9d:45:f5:dc:f8:a5:0b:a8:58: d8:c0:1d:76:4a:57:ef:02:96:23:24:8b:35:53:77:8a:dd:df: 89:ef:09:2f:aa:88:b5:09:09:91:5a:57:80:a3:d9:21:3a:5a: 0b:25:a8:27:22:ca:a3:de:c9:16:87:4e:d3:0f:a9:48:64:8c: 32:76:56:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjYwMzI0MTYwMTQyWhcNMjYwMzMxMTYwMTQyWjAYMRYwFAYD VQQDEw02OWMyYjU2Ni1jZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAidVEPsESRpjwWJvs45pQGoD+gDYBANWmZ3LJcQRausW0LtpKNFWPz7jbJKxj RX32wFSWONnElZXOjgyGpRLCS1h0FAZN4w+ZKIQNXXw6nhf4RF28oaOuXAUlJRq+ 03yLFRj4bfnCX8B37ZaiIIoeMuYc0FiIoJwnxLB8KNVhJZqDQjWdCnK2eJRtbqym y8uwCBBbT28HeB0JBGda0zx8zt6PcpFhT27ys8niHRsFGrP4H7hp6qATXhGXgQp/ Fy1jvqwlwLmaZVq/VF3i527/6vDOQDWm8GMLgzJqATPRjrAsPizgOsRm3tn4KJmx YXjxfb2NXvoJwjA71HHfwZpjiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMH2oL7I zMkn74xE4om+p+19yRetMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaUmWE/hfoXszPYC84+P0QbwQt0debS5MEpshgCjLmQmfrKsBHemwN0VS1WFm 5tWvxyChgKai0kIYt/Qo+0+l/LhX9xnt8Hw+bxtXL3+yPY9iBC00EF7nmnqjHbtr jc9Knp9M++UwgxHIKFZ622JKYTeUNYgWUdXN9hZnUYEiimPx0QH3wa4D1eIFtZNU V/mwHjApblKVrDYdDyKLn1s4vrYy9fysPrbAxiKRRgDJ9bTJpz2zijdV03n17MQF nUX13PilC6hY2MAddkpX7wKWIySLNVN3it3fie8JL6qItQkJkVpXgKPZITpaCyWo JyLKo97JFodO0w+pSGSMMnZWNg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:59 2026 by rpki-client