$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft File: ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json) Hash identifier: ub6IDC9sfgTFdaIRPbknT0utB+vDXOq80FGzAb/n55I= Subject key identifier: 30:89:2C:4D:73:60:15:11:A5:C0:84:42:54:A3:20:C6:02:67:03:BE Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft Manifest number: 0C4F Signing time: Tue 24 Mar 2026 18:34:15 +0000 Manifest this update: Tue 24 Mar 2026 18:34:14 +0000 Manifest next update: Tue 31 Mar 2026 18:34:14 +0000 Files and hashes: 1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: cKCZ93dAhI0GWFHYw/XZcUfxl51s/F31sS5qq6ELPNw=) 2: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=) 3: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD Validity Not Before: Mar 24 18:34:14 2026 GMT Not After : Mar 31 18:34:14 2026 GMT Subject: CN=69c2d927-d04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:14:75:5d:b9:cf:66:48:de:94:3d:56:93: 25:17:6f:5c:17:b0:e7:a0:3a:ce:89:5f:43:70:ff: 25:ad:86:9c:2b:08:e1:d3:67:54:5e:7f:4d:8f:f6: 8f:b8:81:a2:ac:8b:04:52:54:03:a0:32:89:28:47: 08:cd:49:06:6a:35:b7:4e:68:f7:d3:8c:45:99:e7: 62:0c:d9:56:63:f4:7d:4f:ed:58:be:75:0c:cd:8a: b1:20:a1:5b:40:6a:7e:16:eb:82:ed:66:6c:b4:ae: 1e:7d:f8:a4:92:65:77:1e:fa:38:28:a2:f6:c2:80: 71:4d:68:45:10:44:83:88:ce:11:e5:75:b4:7d:f4: e3:ef:e3:ba:9b:6a:7c:ce:65:b5:e4:34:f3:ad:54: f6:12:92:37:23:1c:04:b3:6e:2a:27:b1:cc:3c:4e: ea:87:17:a5:6c:2e:f1:1f:dc:24:68:dc:a6:5b:9c: 2f:e4:51:9c:07:69:6f:11:75:ad:71:2e:e1:06:a7: 70:9d:a4:d6:f5:ae:0f:22:bd:2c:ba:55:bf:3a:50: c4:5f:b8:d7:c1:b3:61:3d:ab:ac:b1:ad:c0:cc:c2: ea:07:85:45:64:2c:3a:74:da:f8:f1:64:5f:2a:b0: 82:9b:00:72:da:30:55:cb:99:48:b1:1e:f6:0e:0b: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:2C:4D:73:60:15:11:A5:C0:84:42:54:A3:20:C6:02:67:03:BE X509v3 Authority Key Identifier: keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b1:e5:77:82:55:4c:b7:c3:d1:ff:41:51:a4:3b:c1:ab:08: 37:c9:63:b5:96:25:68:b6:a9:41:4a:75:ad:d7:04:2a:a2:f5: 5d:35:4d:de:e9:54:7d:72:67:a8:e6:bb:15:73:0f:25:f8:a5: d0:ed:c5:4e:0d:45:c7:a1:e6:90:07:4a:6b:fb:6d:04:2d:d4: 66:b3:5b:94:7d:4f:08:72:8b:32:2a:f0:97:9d:18:4e:65:5a: 4e:9d:80:fd:b5:4e:f7:68:ce:ea:4f:35:ff:a1:a8:1c:e3:9b: 3f:82:28:a7:06:ce:94:40:e3:aa:be:23:86:9e:df:1d:19:1e: 91:3e:f7:49:65:4e:67:0f:9e:1f:2f:21:bd:3c:7b:10:ef:cd: 19:fb:ab:d5:ca:ed:ad:18:29:c1:7f:82:24:01:8c:b3:42:d1: 7e:2a:8b:36:a9:53:b6:64:6c:02:10:02:fb:b6:11:b9:2f:dc: e5:c0:5a:16:b7:33:8f:ec:d4:f1:f3:ff:49:e3:91:02:ab:24: 1f:fe:66:f5:32:89:b7:25:b2:d9:9c:d7:98:77:3a:91:32:33: b8:4d:d9:63:67:ad:c2:07:54:33:1e:d5:78:b2:97:40:8c:08: c0:ef:40:df:29:05:b6:e6:5e:eb:b6:ae:0f:22:bf:01:c3:dd: 7c:06:bd:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExMzkxMTAvBgNVBAUTKEEyNUVEOEExNDI3QUU5M0IyNEQzMERDQ0RGQTgzMjUz OEI1MDA4QUQwHhcNMjYwMzI0MTgzNDE0WhcNMjYwMzMxMTgzNDE0WjAYMRYwFAYD VQQDEw02OWMyZDkyNy1kMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6MUdV25z2ZI3pQ9VpMlF29cF7DnoDrOiV9DcP8lrYacKwjh02dUXn9Nj/aP uIGirIsEUlQDoDKJKEcIzUkGajW3Tmj304xFmediDNlWY/R9T+1YvnUMzYqxIKFb QGp+FuuC7WZstK4effikkmV3Hvo4KKL2woBxTWhFEESDiM4R5XW0ffTj7+O6m2p8 zmW15DTzrVT2EpI3IxwEs24qJ7HMPE7qhxelbC7xH9wkaNymW5wv5FGcB2lvEXWt cS7hBqdwnaTW9a4PIr0sulW/OlDEX7jXwbNhPaussa3AzMLqB4VFZCw6dNr48WRf KrCCmwBy2jBVy5lIsR72DgthRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCJLE1z YBURpcCEQlSjIMYCZwO+MB8GA1UdIwQYMBaAFKJe2KFCeuk7JNMNzN+oMlOLUAit MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTEzOS9FQkI5RUM2MDI0 Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZUc2swdzNNMzZneVU0dFFD SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sN1lvVUo2NlRzazB3M00zNmd5VTR0UUNLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTEzOS9FQkI5RUM2MDI0Q0ExMUVBQUMyQUU1ODZDNEY5QUUwMi9vbDdZb1VKNjZU c2swdzNNMzZneVU0dFFDSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp7Hld4JVTLfD0f9BUaQ7wasIN8ljtZYlaLapQUp1rdcEKqL1XTVN3ulUfXJn qOa7FXMPJfil0O3FTg1Fx6HmkAdKa/ttBC3UZrNblH1PCHKLMirwl50YTmVaTp2A /bVO92jO6k81/6GoHOObP4IopwbOlEDjqr4jhp7fHRkekT73SWVOZw+eHy8hvTx7 EO/NGfur1crtrRgpwX+CJAGMs0LRfiqLNqlTtmRsAhAC+7YRuS/c5cBaFrczj+zU 8fP/SeORAqskH/5m9TKJtyWy2ZzXmHc6kTIzuE3ZY2etwgdUMx7VeLKXQIwIwO9A 3ykFtuZe67auDyK/AcPdfAa9og== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:28 2026 by rpki-client