$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft File: oxnfTQtEZSzooFXCNSUBGLSUBYU.mft (raw, json) Hash identifier: aW//biarcA6LhneAFPDtJpEP1oSE+TQMJIBl+/iPH6c= Subject key identifier: 9D:58:D6:67:A7:9E:3F:7E:01:E4:D1:C4:37:54:9C:A5:65:C1:66:F0 Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft Manifest number: 07FD Signing time: Tue 24 Mar 2026 20:56:34 +0000 Manifest this update: Tue 24 Mar 2026 20:56:33 +0000 Manifest next update: Tue 31 Mar 2026 20:56:33 +0000 Files and hashes: 1: oxnfTQtEZSzooFXCNSUBGLSUBYU.crl (hash: ieBh1U4CxbrIAR1kKJQNXV4oky4LBCqcCAD4dIq+Qds=) 2: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (hash: eZnBeGRp/XjPgjBo8RzoLFHJq1ASGdJfGhbtwCwrNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881, serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Mar 24 20:56:33 2026 GMT Not After : Mar 31 20:56:33 2026 GMT Subject: CN=69c2fa82-3e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:6f:3b:2a:00:26:13:92:71:72:72:14:be: 3b:0a:da:0c:27:9c:81:d8:0b:2a:f2:35:50:12:ea: 28:24:89:3b:52:d2:f7:34:75:56:b3:de:9a:db:39: 07:c8:ed:db:d2:6f:74:72:67:eb:ea:68:2d:1a:fe: 79:06:eb:82:69:39:61:75:fd:9e:79:9c:20:b5:e1: db:9b:73:de:93:4f:65:f6:ce:8d:5d:4d:d9:3d:a6: a6:f3:a9:5e:7e:0b:2a:32:87:31:82:b2:9d:b1:df: a6:d2:da:90:55:67:a3:7b:fd:98:8f:23:79:ef:91: 3c:41:3d:87:c3:bd:8d:61:8d:17:6f:ad:98:91:8c: 91:f1:53:b1:a6:c7:f1:d9:3a:bb:ac:77:1c:cc:8d: 25:a1:0d:ec:06:fe:8b:43:7a:dc:03:6e:7b:b9:21: e1:0d:48:ab:f0:f6:65:8e:90:ec:14:c6:4c:de:ec: ed:4a:08:c8:51:3e:c3:0b:b9:c4:70:fb:10:e3:05: d1:09:e6:d4:04:49:0c:e7:59:57:14:f5:3c:8e:32: 40:c2:f7:19:46:b2:80:03:ea:3b:47:9a:3d:9c:77: 5e:8e:71:38:26:58:6b:13:a2:db:66:0d:9a:bd:69: 75:1a:64:a7:0e:55:13:be:d5:10:ab:02:b5:57:b3: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:58:D6:67:A7:9E:3F:7E:01:E4:D1:C4:37:54:9C:A5:65:C1:66:F0 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:93:bb:40:d6:27:b7:96:75:78:fd:4d:ec:bb:db:1c:f9:14: cf:2e:b7:6b:4a:91:5a:74:bd:6a:fb:66:66:b2:de:c7:95:ec: 39:41:e8:bd:3e:fd:b3:61:cf:a4:ba:88:01:9d:77:9b:7c:b2: ee:e9:82:7d:c2:53:52:0c:ff:1d:26:06:e6:e0:d2:c3:43:28: f0:fd:f7:97:0f:ea:c2:6a:58:ee:ca:7d:c1:7c:6f:cd:dd:db: d2:68:98:d0:0a:cc:16:9c:52:ef:81:1c:b2:93:9e:b2:03:e2: a1:4a:1c:86:98:88:3b:36:70:13:7d:0f:94:ac:3c:5f:18:bb: 1d:d2:fc:bc:35:46:95:8b:5f:6d:32:73:50:24:ed:7a:2e:67: cf:bd:25:27:ba:1f:42:fc:3d:1c:d2:d4:50:ad:fb:d5:d9:1e: b5:13:c0:bd:64:15:ab:96:db:0f:52:b9:36:26:4e:73:bd:aa: 0d:42:dd:04:ce:98:e6:72:87:42:fb:76:e1:ea:35:4f:4c:f3: 79:e6:43:50:2a:4f:8f:e8:cd:84:8d:b8:7f:e7:e3:4f:65:74: 68:85:ad:d5:66:70:b5:9e:31:4d:88:63:c4:8a:cf:58:ff:a4: 09:17:a8:ee:cf:e0:c1:64:c5:6b:ba:d6:d4:fa:07:31:85:40: 20:91:ad:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjYwMzI0MjA1NjMzWhcNMjYwMzMxMjA1NjMzWjAYMRYwFAYD VQQDEw02OWMyZmE4Mi0zZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRRvOyoAJhOScXJyFL47CtoMJ5yB2Asq8jVQEuooJIk7UtL3NHVWs96a2zkH yO3b0m90cmfr6mgtGv55BuuCaTlhdf2eeZwgteHbm3Pek09l9s6NXU3ZPaam86le fgsqMocxgrKdsd+m0tqQVWeje/2YjyN575E8QT2Hw72NYY0Xb62YkYyR8VOxpsfx 2Tq7rHcczI0loQ3sBv6LQ3rcA257uSHhDUir8PZljpDsFMZM3uztSgjIUT7DC7nE cPsQ4wXRCebUBEkM51lXFPU8jjJAwvcZRrKAA+o7R5o9nHdejnE4JlhrE6LbZg2a vWl1GmSnDlUTvtUQqwK1V7MuiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1Y1men nj9+AeTRxDdUnKVlwWbwMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg4MS8xRTY0MkVFNDFGRDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpT em9vRlhDTlNVQkdMU1VCWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZZO7QNYnt5Z1eP1N7LvbHPkUzy63a0qRWnS9avtmZrLex5XsOUHovT79s2HP pLqIAZ13m3yy7umCfcJTUgz/HSYG5uDSw0Mo8P33lw/qwmpY7sp9wXxvzd3b0miY 0ArMFpxS74EcspOesgPioUochpiIOzZwE30PlKw8Xxi7HdL8vDVGlYtfbTJzUCTt ei5nz70lJ7ofQvw9HNLUUK371dketRPAvWQVq5bbD1K5NiZOc72qDULdBM6Y5nKH Qvt24eo1T0zzeeZDUCpPj+jNhI24f+fjT2V0aIWt1WZwtZ4xTYhjxIrPWP+kCReo 7s/gwWTFa7rW1PoHMYVAIJGtFw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:33 2026 by rpki-client