$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: u9laE17KCxZ5yy6cCrLRieT/ARw8D4gNfChQGGgBp0I= Subject key identifier: F5:DC:9A:E0:B1:B3:0C:27:04:AC:FA:89:A6:06:6D:44:36:53:14:E5 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0E62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0E47 Signing time: Tue 24 Mar 2026 17:39:53 +0000 Manifest this update: Tue 24 Mar 2026 17:39:53 +0000 Manifest next update: Tue 31 Mar 2026 17:39:53 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: xavoa7LMwtl6QZBZNsNUp0sXaFQHFO+ozW0jkqrGo3I=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: rCv4VZFxlM5Jq4C3j2l3PuKDpBe2qyl52Dmb9dWtw1M=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: 0lV+81b9RxF3wcx4IicrWRetZXK3VtJEDFXrSkR6osQ=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: Eedt5weKXhob6WahAhHqHEFNYr+gasvFvblJrgH9PEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3682 (0xe62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: Mar 24 17:39:53 2026 GMT Not After : Mar 31 17:39:53 2026 GMT Subject: CN=69c2cc69-d25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:8e:0c:f9:9f:87:a6:72:9a:b0:86:87:c0: 51:99:45:42:b9:d6:08:e0:7e:b1:c9:ef:39:c5:39: 21:ad:e6:b2:09:d2:d7:b2:b9:fa:a4:27:01:d0:0c: 7c:5b:81:12:14:66:0a:63:83:cb:a7:ba:ef:de:08: 1b:af:91:a3:39:68:32:8c:d1:48:c1:7b:c2:d9:e1: 03:06:19:1c:ea:cd:5a:d3:43:7a:3d:e1:6f:55:5b: f5:d2:dd:7c:67:a9:d8:73:c2:ad:7f:b7:dc:2e:5a: a8:fe:71:e5:df:a3:8f:34:10:a4:94:46:f6:44:25: e0:34:98:06:39:f8:64:f4:10:27:f2:d4:4a:0a:4c: 8e:9e:fb:09:b9:6f:43:06:88:87:7c:d8:ad:8a:1c: 2d:29:8c:6a:9d:7f:d3:5e:ee:3b:4a:7b:cc:0a:d0: ae:1a:54:3e:91:4f:29:29:b4:e6:1f:fe:a9:68:b8: b4:6c:bd:1c:88:68:eb:37:e4:7f:83:a2:be:5c:c3: 0c:ca:0c:bb:40:4b:a7:e5:9d:19:71:9e:42:18:da: f3:6b:4c:73:36:55:51:fb:be:52:c4:b3:87:6f:11: fb:5f:4e:d6:6c:e3:0e:a4:a3:fe:4b:2b:86:87:49: df:c0:29:d4:75:cf:c1:cf:f7:dc:c2:8f:14:ea:d8: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DC:9A:E0:B1:B3:0C:27:04:AC:FA:89:A6:06:6D:44:36:53:14:E5 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e0:83:ce:6c:d4:81:52:20:08:af:ab:ec:a2:a3:6e:34:ec: 00:9d:f0:6d:20:c0:0a:cc:73:d8:8a:e2:7a:13:59:32:65:49: 01:5a:41:68:f7:f8:b4:2a:2a:ae:95:d1:cf:3b:61:c5:b4:4d: 1c:7e:d4:23:3c:79:b8:ea:b4:5b:55:f4:f2:c5:7f:11:bb:f2: a1:fc:f9:1f:29:d4:63:26:0a:ce:49:33:26:83:5e:b5:27:ca: 79:19:37:1a:4c:e9:d6:4a:16:70:82:ba:c2:b6:c1:b6:8b:c7: 9e:22:64:c5:90:c3:4f:7c:a6:b4:41:36:0b:14:73:47:b1:6c: 2f:b7:2f:89:f7:bd:9a:93:d2:d0:5b:f7:a5:df:38:4e:77:46: d8:ed:77:c9:d7:38:96:2d:65:58:bd:9f:51:c3:98:61:e9:9b: 68:02:e1:f2:13:bc:45:f5:e3:b5:59:e4:d2:71:67:52:b5:63: 99:b4:80:53:d2:1b:6d:e7:99:ef:ef:47:29:d6:5d:39:05:a8: 76:1e:a7:c6:c1:26:94:33:d4:ee:6f:a8:51:2f:9a:e0:37:18: e1:2a:c7:75:91:e7:aa:82:21:0b:24:5c:5f:47:47:a8:75:ec: c8:9e:15:67:0c:12:9f:93:39:c1:f9:b3:ef:ee:18:05:2e:1a: 91:af:80:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjYwMzI0MTczOTUzWhcNMjYwMzMxMTczOTUzWjAYMRYwFAYD VQQDEw02OWMyY2M2OS1kMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1qODPmfh6ZymrCGh8BRmUVCudYI4H6xye85xTkhreayCdLXsrn6pCcB0Ax8 W4ESFGYKY4PLp7rv3ggbr5GjOWgyjNFIwXvC2eEDBhkc6s1a00N6PeFvVVv10t18 Z6nYc8Ktf7fcLlqo/nHl36OPNBCklEb2RCXgNJgGOfhk9BAn8tRKCkyOnvsJuW9D BoiHfNitihwtKYxqnX/TXu47SnvMCtCuGlQ+kU8pKbTmH/6paLi0bL0ciGjrN+R/ g6K+XMMMygy7QEun5Z0ZcZ5CGNrza0xzNlVR+75SxLOHbxH7X07WbOMOpKP+SyuG h0nfwCnUdc/Bz/fcwo8U6tjZewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXcmuCx swwnBKz6iaYGbUQ2UxTlMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKuCDzmzUgVIgCK+r7KKjbjTsAJ3wbSDACsxz2IriehNZMmVJAVpBaPf4tCoq rpXRzzthxbRNHH7UIzx5uOq0W1X08sV/Ebvyofz5HynUYyYKzkkzJoNetSfKeRk3 Gkzp1koWcIK6wrbBtovHniJkxZDDT3ymtEE2CxRzR7FsL7cvife9mpPS0Fv3pd84 TndG2O13ydc4li1lWL2fUcOYYembaALh8hO8RfXjtVnk0nFnUrVjmbSAU9IbbeeZ 7+9HKdZdOQWodh6nxsEmlDPU7m+oUS+a4DcY4SrHdZHnqoIhCyRcX0dHqHXsyJ4V ZwwSn5M5wfmz7+4YBS4aka+AQA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:10 2026 by rpki-client