$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json) Hash identifier: Fmp425LzEEH0D997G/5hEWrmY/Awc9WP0DcmWdkYAfk= Subject key identifier: 2D:A2:C9:AA:A1:81:0E:35:AC:E4:82:F0:E9:7E:4D:BD:EB:C9:5F:9D Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft Manifest number: 0769 Signing time: Tue 24 Mar 2026 21:24:54 +0000 Manifest this update: Tue 24 Mar 2026 21:24:54 +0000 Manifest next update: Tue 31 Mar 2026 21:24:54 +0000 Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: syg3KPwdpn5gTW4Ux/CXMp3GFnDQ2+PAD1Jx1J5vRzo=) 2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: Ex32OuK8cYYdQNaH5Et0DlGn+H8d2IBO5mMVFj93THg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913025C, serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Validity Not Before: Mar 24 21:24:54 2026 GMT Not After : Mar 31 21:24:54 2026 GMT Subject: CN=69c30126-ad73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:52:ab:01:be:9d:66:82:de:0d:ab:8a:27: 1f:12:e8:78:e9:86:94:73:b5:a6:f0:da:51:d8:95: 5c:65:94:0e:1a:3e:97:7f:35:91:22:eb:95:8a:05: 8f:b2:87:45:f4:06:04:a2:67:13:56:32:a6:89:65: 42:6b:44:d8:99:ad:fd:d8:b1:fa:c4:4c:ac:33:9f: ee:1b:ce:6b:92:c5:ea:c0:65:55:5b:b0:32:1b:24: 7d:19:3b:41:c6:45:64:85:c2:e1:fd:89:ca:c9:36: bc:ed:5b:dc:86:1b:a6:6f:15:5f:f7:5b:e1:11:ef: 32:6c:3e:45:a9:86:4a:01:97:48:70:ff:41:c3:d7: 66:69:7f:80:a3:a1:1b:67:22:f1:3b:89:87:79:4d: 12:24:9a:46:de:bd:1d:81:1f:a1:0a:26:27:7d:07: 61:bb:3a:fc:a2:61:2f:8c:72:97:4b:c7:b7:27:87: cc:d1:ac:0d:dd:33:f6:31:ea:3c:e0:48:b3:f2:55: 14:43:91:6d:2e:00:89:14:63:c5:f7:a0:d0:8d:8f: f0:5f:95:5a:e0:8b:2d:96:fd:dd:83:fe:74:f2:ab: 34:fa:20:75:dc:f0:4a:53:f7:8f:00:8c:b8:78:b6: be:e6:48:1b:61:81:0a:6a:48:03:46:84:eb:e7:07: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:C9:AA:A1:81:0E:35:AC:E4:82:F0:E9:7E:4D:BD:EB:C9:5F:9D X509v3 Authority Key Identifier: keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:16:a0:d2:3c:3c:78:c5:a9:5d:f1:0e:7a:6e:ad:33:be:7b: 4e:5e:52:25:5c:18:e7:5f:3f:e6:71:24:09:cf:38:46:e2:fb: 68:bd:10:0d:0f:da:54:89:0a:ce:64:02:7d:62:78:e8:c0:91: 6f:d4:00:57:5a:36:c7:64:e3:d4:82:fb:24:56:5c:fc:4e:02: 4b:83:66:19:a9:d3:b5:f8:b5:b5:a9:e3:67:99:32:62:d4:20: cb:d2:3f:fa:b4:f9:bc:0b:27:80:d8:be:46:96:0e:8a:58:8b: a8:bf:ca:b3:9b:7a:9c:62:44:4c:ca:f3:d3:be:c7:fc:88:ed: 9a:b5:2f:39:c1:6f:97:5e:38:ad:9e:27:2b:2f:5e:40:e7:48: f3:b9:5b:9d:68:f6:26:0f:4d:15:61:35:2b:e0:c7:19:fb:30: d1:a5:e8:99:42:d7:17:c9:e4:1a:c6:77:92:ec:62:29:98:9c: 5c:ef:70:00:67:1f:8f:9f:b8:ef:dc:41:37:5b:e6:5e:dd:69: 0b:8f:d6:d3:e9:42:c3:61:e9:e9:f0:45:4f:fc:ba:e5:16:c6: 07:b3:b5:5e:2a:77:00:37:15:82:02:f2:57:e7:3d:05:28:9c: b0:ec:41:2e:81:b5:6a:ef:24:2f:14:5a:ba:81:14:2a:81:af: 90:6d:2a:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyNUMxMTAvBgNVBAUTKDBDRUE2OEEwMkM1MjlGODg3NTJDNjQyREUwRDJGRUY5 RjVEN0ExNEEwHhcNMjYwMzI0MjEyNDU0WhcNMjYwMzMxMjEyNDU0WjAYMRYwFAYD VQQDEw02OWMzMDEyNi1hZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjWdSqwG+nWaC3g2riicfEuh46YaUc7Wm8NpR2JVcZZQOGj6XfzWRIuuVigWP sodF9AYEomcTVjKmiWVCa0TYma392LH6xEysM5/uG85rksXqwGVVW7AyGyR9GTtB xkVkhcLh/YnKyTa87VvchhumbxVf91vhEe8ybD5FqYZKAZdIcP9Bw9dmaX+Ao6Eb ZyLxO4mHeU0SJJpG3r0dgR+hCiYnfQdhuzr8omEvjHKXS8e3J4fM0awN3TP2Meo8 4Eiz8lUUQ5FtLgCJFGPF96DQjY/wX5Va4Istlv3dg/508qs0+iB13PBKU/ePAIy4 eLa+5kgbYYEKakgDRoTr5wf5vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2iyaqh gQ41rOSC8Ol+Tb3ryV+dMB8GA1UdIwQYMBaAFAzqaKAsUp+IdSxkLeDS/vn116FK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDI1Qy9BQzA1NTgyNjVF MjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240aDFMR1F0NE5MLS1mWFhv VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcG9vQ3hTbjRoMUxHUXQ0TkwtLWZYWG9Vby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDI1Qy9BQzA1NTgyNjVFMjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240 aDFMR1F0NE5MLS1mWFhvVW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWhag0jw8eMWpXfEOem6tM757Tl5SJVwY518/5nEkCc84RuL7aL0QDQ/aVIkK zmQCfWJ46MCRb9QAV1o2x2Tj1IL7JFZc/E4CS4NmGanTtfi1tanjZ5kyYtQgy9I/ +rT5vAsngNi+RpYOiliLqL/Ks5t6nGJETMrz077H/IjtmrUvOcFvl144rZ4nKy9e QOdI87lbnWj2Jg9NFWE1K+DHGfsw0aXomULXF8nkGsZ3kuxiKZicXO9wAGcfj5+4 79xBN1vmXt1pC4/W0+lCw2Hp6fBFT/y65RbGB7O1Xip3ADcVggLyV+c9BSicsOxB LoG1au8kLxRauoEUKoGvkG0qMg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:46 2026 by rpki-client