$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft File: O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json) Hash identifier: MGhQPoGJ68taebhooAbH9sBXsy6ttgzRX82jXybsRRg= Subject key identifier: D1:B1:FF:4A:49:E5:B0:1E:83:3C:25:63:78:E6:0F:17:F3:66:FD:2F Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Certificate serial: 091F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft Manifest number: 0916 Signing time: Tue 24 Mar 2026 20:02:17 +0000 Manifest this update: Tue 24 Mar 2026 20:02:16 +0000 Manifest next update: Tue 31 Mar 2026 20:02:16 +0000 Files and hashes: 1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: qGrEDwGXMRUnoWm+uneKYo2dgf/INVAnuCEKWZFyKlc=) 2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7 Validity Not Before: Mar 24 20:02:16 2026 GMT Not After : Mar 31 20:02:16 2026 GMT Subject: CN=69c2edc9-0bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:e4:32:d7:4a:21:cf:fe:63:ae:3e:47:a1: 23:e0:a8:1c:38:3e:35:1c:5f:45:98:9a:9f:90:14: a6:8f:5a:4a:2d:34:11:51:c4:ed:60:bd:9b:d9:9a: 57:45:81:b7:0e:46:a1:dd:bd:67:bc:a4:b8:56:87: e1:9f:29:6c:8e:2f:2e:78:e6:12:25:6b:82:02:8c: 6f:c9:12:ed:56:60:c0:61:71:2f:2b:e9:ee:24:80: 94:b6:09:c4:99:d5:39:00:a6:b9:8a:cb:2f:8a:73: d6:8b:55:38:5e:98:f6:87:39:88:11:bf:7e:06:bd: 9b:54:61:93:48:9d:64:e6:c9:78:be:4d:0d:22:01: 44:64:14:98:90:ed:05:9c:b2:40:60:00:1e:25:be: 73:d5:de:a9:a6:5a:ce:2b:cf:2e:0b:98:87:2d:0b: ff:dd:f2:44:b0:7c:c1:c5:0a:20:64:48:06:fd:a0: 6f:44:46:41:bd:bd:07:56:69:00:11:8c:59:a1:9a: 4c:e7:8c:eb:9d:a0:2e:de:58:1c:6b:e1:aa:7d:bc: 07:66:29:ec:b3:05:73:88:06:e1:e4:26:06:02:79: d0:7e:18:d4:0e:be:b1:0d:51:6f:ae:39:8b:73:ea: 8f:47:c7:f2:83:ff:db:7f:23:94:5b:1c:37:30:c0: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:FF:4A:49:E5:B0:1E:83:3C:25:63:78:E6:0F:17:F3:66:FD:2F X509v3 Authority Key Identifier: keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:58:17:f6:bb:a5:0b:f5:95:f4:ee:65:e2:73:d6:4c:db: 50:6a:4c:a6:d9:56:d2:d9:0c:cc:08:66:e6:33:07:4e:fe:7d: ff:25:f8:fc:b3:b7:8e:83:3c:98:03:0c:8d:04:d4:6c:39:ea: 96:e6:fc:55:9b:4a:15:c0:d7:fc:46:83:18:4b:6d:95:ab:98: 6d:70:26:2e:17:73:66:5a:78:57:9f:d3:1a:94:98:92:a5:63: e8:97:b0:9f:5a:73:c3:06:4c:4e:bb:e5:32:08:89:81:e3:72: 66:93:f6:79:59:03:c1:99:81:79:4a:15:82:3b:e3:5a:ba:8a: f6:74:d2:08:d0:6c:e5:0f:89:2a:76:61:a6:db:be:00:94:3f: 8a:ff:77:d2:d1:48:12:e1:37:6d:df:9c:bb:01:51:46:0a:7b: 18:d9:38:8a:3b:89:c9:0a:10:a7:5d:10:69:bc:a2:50:17:75: 63:e3:19:5f:09:7c:5f:b5:29:92:5d:42:0c:d8:22:f5:7b:56: 4b:7e:6a:4c:7f:37:f4:b6:c0:c3:8d:5b:0e:91:55:6f:0c:a9: bf:7d:af:cd:44:a2:cf:1a:6a:99:1a:f4:bf:55:20:bb:91:84: 4b:5e:79:d3:d6:78:7e:d1:f1:ce:15:c8:cf:8d:12:17:8c:db: d6:07:cd:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw QzEwQkUzRTcwHhcNMjYwMzI0MjAwMjE2WhcNMjYwMzMxMjAwMjE2WjAYMRYwFAYD VQQDEw02OWMyZWRjOS0wYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4vkMtdKIc/+Y64+R6Ej4KgcOD41HF9FmJqfkBSmj1pKLTQRUcTtYL2b2ZpX RYG3Dkah3b1nvKS4Vofhnylsji8ueOYSJWuCAoxvyRLtVmDAYXEvK+nuJICUtgnE mdU5AKa5issvinPWi1U4Xpj2hzmIEb9+Br2bVGGTSJ1k5sl4vk0NIgFEZBSYkO0F nLJAYAAeJb5z1d6pplrOK88uC5iHLQv/3fJEsHzBxQogZEgG/aBvREZBvb0HVmkA EYxZoZpM54zrnaAu3lgca+GqfbwHZinsswVziAbh5CYGAnnQfhjUDr6xDVFvrjmL c+qPR8fyg//bfyOUWxw3MMC/rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGx/0pJ 5bAegzwlY3jmDxfzZv0vMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1 dG1YdmN1a21RRjhNRUw0LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANR1YF/a7pQv1lfTuZeJz1kzbUGpMptlW0tkMzAhm5jMHTv59/yX4/LO3joM8 mAMMjQTUbDnqlub8VZtKFcDX/EaDGEttlauYbXAmLhdzZlp4V5/TGpSYkqVj6Jew n1pzwwZMTrvlMgiJgeNyZpP2eVkDwZmBeUoVgjvjWrqK9nTSCNBs5Q+JKnZhptu+ AJQ/iv930tFIEuE3bd+cuwFRRgp7GNk4ijuJyQoQp10QabyiUBd1Y+MZXwl8X7Up kl1CDNgi9XtWS35qTH839LbAw41bDpFVbwypv32vzUSizxpqmRr0v1Ugu5GES155 09Z4ftHxzhXIz40SF4zb1gfN4A== -----END CERTIFICATE-----Generated at Thu Mar 26 10:25:21 2026 by rpki-client