$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft File: OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json) Hash identifier: AxLle0aNE1BTIF8wZboRozSsmzTk9Tpv5kYp/bt/z74= Subject key identifier: 22:C4:77:67:85:92:D9:31:6D:12:0C:CE:32:87:90:8C:BA:7C:24:AF Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft Manifest number: 0D21 Signing time: Thu 26 Mar 2026 18:05:08 +0000 Manifest this update: Thu 26 Mar 2026 18:05:08 +0000 Manifest next update: Thu 02 Apr 2026 18:05:08 +0000 Files and hashes: 1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: Fui6iZBP1zbhXMq0U2LDiIeUm9c9gh5dKKxzxyFyKhg=) 2: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=) 3: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Mar 26 18:05:08 2026 GMT Not After : Apr 2 18:05:08 2026 GMT Subject: CN=69c57554-77d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:0e:1b:a1:93:63:6b:64:81:0e:8f:46:4d: 42:1e:79:89:b4:3f:67:92:46:bb:cb:fc:ce:81:d4: 69:c1:7f:b8:e7:56:16:66:58:4f:6c:cb:3b:dd:d0: 90:5f:e8:bf:d0:ea:19:b5:bf:d5:20:4a:76:ac:17: 98:97:4e:e8:2d:e2:81:e1:4c:90:d6:27:17:23:a2: c4:bc:8e:c6:e6:98:30:f0:48:8b:08:ae:0c:03:c2: 1e:52:db:27:cb:9e:20:98:9f:af:e5:10:6a:82:43: c8:a9:f7:85:7d:37:eb:39:ed:2b:21:be:a4:49:7f: c3:f4:12:e4:56:aa:1c:e8:55:cc:0f:44:35:37:26: 90:59:12:cc:08:cd:42:9a:dc:33:53:22:ac:47:a8: aa:8b:6a:fb:5e:70:95:d8:93:b4:28:52:eb:64:8a: 14:18:59:1d:4f:96:46:49:62:a6:1f:25:a9:12:60: 36:91:4e:99:6a:3f:8b:0b:f1:65:66:70:1a:93:c7: 02:58:42:9f:92:ff:46:ff:74:80:9d:96:5b:06:f5: 94:06:a1:e1:20:b9:4d:72:45:b8:31:6b:fb:a4:9d: ba:21:0a:c4:c3:d0:f7:30:01:92:9a:f8:19:13:00: 8c:9f:2b:3e:d1:c5:4e:70:36:6d:d3:2a:5b:1a:f9: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C4:77:67:85:92:D9:31:6D:12:0C:CE:32:87:90:8C:BA:7C:24:AF X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:83:61:e0:cd:fe:b0:ea:c7:62:39:56:95:1c:45:d3:c4:7d: 3f:71:f4:5a:96:36:2d:1c:5b:18:07:d0:11:93:20:d7:73:c0: 2a:d5:bf:db:9a:a7:32:9c:dd:3e:21:b0:2a:a4:e2:89:5d:d7: 5f:d2:7b:eb:a2:16:12:6b:51:86:b9:c1:30:f4:27:7f:ae:c0: 46:f4:ef:4e:70:13:35:31:da:f9:13:3f:e5:c7:87:6f:0a:bb: b8:96:ac:1e:81:a9:88:ef:78:20:ac:ff:65:0b:28:36:81:54: b8:33:d9:33:bb:c0:dd:a1:80:df:73:cb:60:fb:15:9d:03:ec: 46:51:8e:0c:2b:e5:51:5a:23:a0:4a:96:16:fa:67:15:c2:e3: c0:c2:0f:99:dd:16:2e:47:b4:1c:43:fd:64:34:cd:58:b4:c5: da:79:6e:3b:b1:cd:1d:b9:39:9f:19:07:bf:13:35:8e:38:4c: 88:ba:7d:64:21:50:6d:e3:6c:43:c3:a6:64:31:d8:ca:5e:3a: 86:84:4e:9e:17:34:b3:c2:bf:76:a1:81:b9:93:5b:09:59:3f: ef:df:62:60:63:be:00:3b:c6:be:f8:21:e7:4a:9b:12:eb:73: ce:17:48:82:e8:ec:e4:41:1e:a2:65:7c:d1:54:c9:62:5a:ce: ab:b3:57:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjYwMzI2MTgwNTA4WhcNMjYwNDAyMTgwNTA4WjAYMRYwFAYD VQQDEw02OWM1NzU1NC03N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X8OG6GTY2tkgQ6PRk1CHnmJtD9nkka7y/zOgdRpwX+451YWZlhPbMs73dCQ X+i/0OoZtb/VIEp2rBeYl07oLeKB4UyQ1icXI6LEvI7G5pgw8EiLCK4MA8IeUtsn y54gmJ+v5RBqgkPIqfeFfTfrOe0rIb6kSX/D9BLkVqoc6FXMD0Q1NyaQWRLMCM1C mtwzUyKsR6iqi2r7XnCV2JO0KFLrZIoUGFkdT5ZGSWKmHyWpEmA2kU6Zaj+LC/Fl ZnAak8cCWEKfkv9G/3SAnZZbBvWUBqHhILlNckW4MWv7pJ26IQrEw9D3MAGSmvgZ EwCMnys+0cVOcDZt0ypbGvmLMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLEd2eF ktkxbRIMzjKHkIy6fCSvMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDQ2Ri83REEyNEM3QTAwNjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlT UTZ1MEFfZ0RCa3YzaXkySUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ4Nh4M3+sOrHYjlWlRxF08R9P3H0WpY2LRxbGAfQEZMg13PAKtW/25qnMpzd PiGwKqTiiV3XX9J766IWEmtRhrnBMPQnf67ARvTvTnATNTHa+RM/5ceHbwq7uJas HoGpiO94IKz/ZQsoNoFUuDPZM7vA3aGA33PLYPsVnQPsRlGODCvlUVojoEqWFvpn FcLjwMIPmd0WLke0HEP9ZDTNWLTF2nluO7HNHbk5nxkHvxM1jjhMiLp9ZCFQbeNs Q8OmZDHYyl46hoROnhc0s8K/dqGBuZNbCVk/799iYGO+ADvGvvgh50qbEutzzhdI gujs5EEeomV80VTJYlrOq7NXCA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:11 2026 by rpki-client