$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: HWUvPWcKOtEj3btNsaFK0X/aIMj8YlGzVcbkx+7beRE= Subject key identifier: AF:59:96:FE:F9:31:51:7E:C1:61:B2:93:1C:D7:F6:44:EE:A8:22:EF Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 086C Signing time: Tue 24 Mar 2026 20:29:18 +0000 Manifest this update: Tue 24 Mar 2026 20:29:17 +0000 Manifest next update: Tue 31 Mar 2026 20:29:17 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: 3eMzJb39JqDaQAgv0IwCqc6MaUR+ZRRxaFenUb2FZMQ=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Mar 24 20:29:17 2026 GMT Not After : Mar 31 20:29:17 2026 GMT Subject: CN=69c2f41e-2bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:6a:0f:54:51:cd:a8:1e:63:1e:7b:44:b4: 24:f3:47:3a:28:bb:27:06:fb:32:0b:6d:8c:ea:78: 9e:c1:ea:dd:c6:aa:07:69:e2:84:0b:9c:4e:e6:ed: cb:e0:0c:1e:b8:e5:65:f7:91:f2:c3:c6:31:cf:c5: c9:91:e8:c7:ff:1e:37:49:95:c3:70:f1:d9:12:f9: b9:c2:8b:ac:54:a7:85:3a:e7:33:30:ed:8d:7a:b1: 7f:92:2b:a6:59:e9:99:8b:f1:6d:63:b1:b8:f4:c5: 47:20:ab:18:21:7b:33:4b:8b:5c:1e:d7:d5:cb:12: 45:cb:46:d5:09:b4:7c:21:34:49:b7:1d:6d:c0:9d: 98:0e:4f:ae:8f:ca:b5:8b:07:44:a9:c0:90:22:8c: 02:0d:2c:91:c6:f1:e8:e5:7e:f0:f1:cd:13:48:c9: eb:31:b8:d0:c7:fa:8a:50:b1:cb:69:8e:54:d4:a7: 0b:00:3b:fa:47:b2:98:15:23:e3:d2:5e:7d:67:11: b8:21:77:94:55:32:f5:d9:6e:51:0c:6d:0b:d8:4f: 80:fb:7c:db:4f:f3:74:19:bc:66:7a:24:e8:46:f9: e4:59:43:0f:75:45:52:09:cb:62:16:4a:bf:38:c5: d6:cd:4f:f2:90:46:de:af:d7:dc:1a:c7:54:17:1f: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:59:96:FE:F9:31:51:7E:C1:61:B2:93:1C:D7:F6:44:EE:A8:22:EF X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:4d:da:18:90:24:e9:e4:1a:80:98:72:8c:b9:87:aa:8e:b5: 68:91:8e:96:0e:24:17:77:f4:bb:ce:2a:54:db:91:5e:cc:cd: 44:39:5b:a5:48:09:59:03:2f:95:f6:bc:58:66:fe:db:4f:8d: e7:a3:0e:54:f4:3e:3a:c6:56:24:61:df:68:e9:68:70:3a:7f: 1d:2f:4f:12:bd:c8:38:7b:6a:38:2f:05:74:63:c2:93:de:ea: d8:9c:10:2b:a9:7c:6e:65:39:e8:72:93:12:40:b4:e6:19:28: 4c:5a:a7:2c:3f:c6:5a:36:63:a3:c8:cc:80:c6:79:17:57:27: 6b:08:56:8b:c0:dc:d0:88:e9:18:da:b0:30:9c:fd:bb:4d:cb: c4:51:c2:6f:66:07:e0:bc:a5:29:42:92:f6:10:48:da:24:ee: 0a:d1:9e:6f:47:ed:ec:f3:1e:83:74:0a:d6:9a:d4:e4:29:97: 41:ef:7e:17:eb:9e:c1:57:25:23:7c:05:6c:88:6b:7b:10:35: 67:6d:b6:7e:71:a8:48:ec:80:59:6f:78:be:3c:03:bf:87:34: a7:98:bc:29:36:58:c0:f7:c6:4d:e5:a3:be:e5:2d:61:77:df: 9a:fd:2a:99:95:27:5a:cc:98:0f:55:ea:56:5c:57:04:80:1f: f9:65:fa:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjYwMzI0MjAyOTE3WhcNMjYwMzMxMjAyOTE3WjAYMRYwFAYD VQQDEw02OWMyZjQxZS0yYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul5qD1RRzageYx57RLQk80c6KLsnBvsyC22M6niewerdxqoHaeKEC5xO5u3L 4AweuOVl95Hyw8Yxz8XJkejH/x43SZXDcPHZEvm5wousVKeFOuczMO2NerF/kium WemZi/FtY7G49MVHIKsYIXszS4tcHtfVyxJFy0bVCbR8ITRJtx1twJ2YDk+uj8q1 iwdEqcCQIowCDSyRxvHo5X7w8c0TSMnrMbjQx/qKULHLaY5U1KcLADv6R7KYFSPj 0l59ZxG4IXeUVTL12W5RDG0L2E+A+3zbT/N0GbxmeiToRvnkWUMPdUVSCctiFkq/ OMXWzU/ykEber9fcGsdUFx82ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9Zlv75 MVF+wWGykxzX9kTuqCLvMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeU3aGJAk6eQagJhyjLmHqo61aJGOlg4kF3f0u84qVNuRXszNRDlbpUgJWQMv lfa8WGb+20+N56MOVPQ+OsZWJGHfaOlocDp/HS9PEr3IOHtqOC8FdGPCk97q2JwQ K6l8bmU56HKTEkC05hkoTFqnLD/GWjZjo8jMgMZ5F1cnawhWi8Dc0IjpGNqwMJz9 u03LxFHCb2YH4LylKUKS9hBI2iTuCtGeb0ft7PMeg3QK1prU5CmXQe9+F+uewVcl I3wFbIhrexA1Z222fnGoSOyAWW94vjwDv4c0p5i8KTZYwPfGTeWjvuUtYXffmv0q mZUnWsyYD1XqVlxXBIAf+WX6iw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:15 2026 by rpki-client