$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: +VLJhZm5Pr425rg9RS710AK2C+x+eyzYh49jkr/An7k= Subject key identifier: 75:C8:B2:E3:9A:D9:8D:4A:91:85:94:F5:13:3C:96:FC:C9:F1:1C:DB Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: DA Signing time: Wed 25 Mar 2026 05:51:26 +0000 Manifest this update: Wed 25 Mar 2026 05:51:25 +0000 Manifest next update: Wed 01 Apr 2026 05:51:25 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: Qn/VBEXzoQPx3+qRcW9kp0PA8YlzKLT6SqolmaYL+D8=) 2: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=) 3: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Mar 25 05:51:25 2026 GMT Not After : Apr 1 05:51:25 2026 GMT Subject: CN=69c377de-2b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:a6:5b:b4:af:5b:60:15:3f:a4:43:2c:cc: 51:e5:f8:b5:dd:a6:c3:57:2c:3b:91:e2:1d:ed:13: ea:2a:36:27:3b:82:50:11:8f:80:98:7e:c8:82:15: b7:53:5d:93:06:34:ef:91:6f:2a:23:b6:bd:60:23: d1:1c:e1:31:b5:bf:29:27:ed:b1:5b:fc:59:a9:af: b5:a9:ab:b1:f4:aa:48:f8:fe:75:db:b0:9e:7a:f2: 31:61:8b:29:e7:d3:e5:1e:ca:c5:bd:f8:3d:f6:79: 70:90:81:7f:26:65:df:98:32:bd:6c:48:1b:ca:c8: 69:29:f8:f0:f6:23:ca:ae:2b:5c:fe:1e:16:ec:f8: e2:94:79:ac:d4:2f:a1:46:84:bf:0a:f0:a7:b7:ea: d5:5a:96:34:86:98:7b:50:85:a2:37:ee:5a:b7:99: 3d:f4:d8:18:77:47:16:f5:51:38:a9:cd:da:5d:4c: 6d:3c:d8:cb:bb:e3:23:4e:b0:9e:74:e3:86:94:15: 2b:88:b7:e3:67:48:9e:dc:c8:f6:82:de:62:76:75: c1:5e:de:84:99:ee:3a:62:12:83:d0:d1:b9:d7:55: 7d:84:a9:5c:24:5c:fc:ec:83:2d:80:1a:a8:a5:c3: 24:da:68:5c:56:85:01:9c:8e:bd:63:66:e9:08:60: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C8:B2:E3:9A:D9:8D:4A:91:85:94:F5:13:3C:96:FC:C9:F1:1C:DB X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:90:51:55:d6:1e:6c:80:60:c3:8d:89:05:ff:3e:53:98:db: f6:94:fb:2c:dd:32:a6:e0:ba:69:77:ae:be:7a:17:01:ec:f0: d3:b8:a6:0f:7b:33:e7:0c:f5:69:62:07:9e:84:c8:3f:1d:1c: a7:4b:02:49:32:9e:42:ad:9d:b9:ae:db:d7:31:60:5f:87:16: 2b:aa:96:33:3c:45:e8:8b:3a:65:3a:21:7c:06:b3:54:e2:53: fe:73:e7:f1:33:a1:0b:f7:de:78:c2:0d:dd:94:63:ad:bd:01: 87:09:93:df:78:cc:85:5d:2a:d4:e5:2a:59:fe:e9:c1:69:59: 6e:3f:e4:7d:ab:bf:fb:c5:ac:d5:29:af:1b:cb:72:db:04:69: c7:9f:e7:13:d3:84:ee:7d:ce:6d:98:d6:e3:3e:5c:8c:14:89: ac:f8:1c:d4:55:74:1f:1a:82:9a:b1:b1:d3:75:51:e8:35:d9: 95:d4:08:47:28:2d:4c:0e:8f:50:86:da:9f:36:7e:e3:a5:82: 8e:a9:6c:7b:a6:66:58:32:4d:f3:77:99:02:17:42:70:d0:9f: a7:61:8a:57:b7:62:28:21:78:8a:5d:70:9c:a5:0e:c0:93:0a: e2:8c:c0:4c:83:6c:cd:dd:3c:73:6b:25:13:e3:75:70:ec:b1: f9:f6:2d:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjYwMzI1MDU1MTI1WhcNMjYwNDAxMDU1MTI1WjAYMRYwFAYD VQQDEw02OWMzNzdkZS0yYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleimW7SvW2AVP6RDLMxR5fi13abDVyw7keId7RPqKjYnO4JQEY+AmH7IghW3 U12TBjTvkW8qI7a9YCPRHOExtb8pJ+2xW/xZqa+1qaux9KpI+P5127CeevIxYYsp 59PlHsrFvfg99nlwkIF/JmXfmDK9bEgbyshpKfjw9iPKritc/h4W7PjilHms1C+h RoS/CvCnt+rVWpY0hph7UIWiN+5at5k99NgYd0cW9VE4qc3aXUxtPNjLu+MjTrCe dOOGlBUriLfjZ0ie3Mj2gt5idnXBXt6Eme46YhKD0NG511V9hKlcJFz87IMtgBqo pcMk2mhcVoUBnI69Y2bpCGAeAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXIsuOa 2Y1KkYWU9RM8lvzJ8RzbMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm akFpNGtsWDNsWlFhTWNHQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACZBRVdYebIBgw42JBf8+U5jb9pT7LN0ypuC6aXeuvnoXAezw07imD3sz5wz1 aWIHnoTIPx0cp0sCSTKeQq2dua7b1zFgX4cWK6qWMzxF6Is6ZTohfAazVOJT/nPn 8TOhC/feeMIN3ZRjrb0BhwmT33jMhV0q1OUqWf7pwWlZbj/kfau/+8Ws1SmvG8ty 2wRpx5/nE9OE7n3ObZjW4z5cjBSJrPgc1FV0HxqCmrGx03VR6DXZldQIRygtTA6P UIbanzZ+46WCjqlse6ZmWDJN83eZAhdCcNCfp2GKV7diKCF4il1wnKUOwJMK4ozA TINszd08c2slE+N1cOyx+fYtJA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:40 2026 by rpki-client