$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft File: ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json) Hash identifier: 8mv2CD/XM2qTISpz8ddc1ulnrBm2F+x+DBKS9D5qn8g= Subject key identifier: 1B:4C:58:C1:BF:E8:8C:99:F6:15:82:16:39:A1:59:55:14:47:BF:17 Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 Certificate issuer: /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft Manifest number: 07F6 Signing time: Thu 26 Mar 2026 21:05:26 +0000 Manifest this update: Thu 26 Mar 2026 21:05:25 +0000 Manifest next update: Thu 02 Apr 2026 21:05:25 +0000 Files and hashes: 1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: 883+/EXsOz5HCf5I8DqV/K0M08BVYlZ13nRGQ4e+f+0=) 2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: xBMELOpqJ4lnqq47hcS7bDXF3hPxxlzBtOSvLVgcPrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693 Validity Not Before: Mar 26 21:05:25 2026 GMT Not After : Apr 2 21:05:25 2026 GMT Subject: CN=69c59f96-4f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:ef:fd:eb:a5:b4:6c:6e:43:bc:6f:55:32: 3a:97:e2:33:d6:3d:fc:1d:8c:d8:56:36:7a:f6:70: fd:ca:90:86:aa:6c:cb:1c:84:3f:40:a9:66:73:c1: 54:36:9b:85:6b:c3:d3:9d:27:7f:85:52:49:58:89: 06:57:01:dd:00:8b:90:9e:2c:03:24:8c:45:06:81: b0:05:d9:fb:56:3b:fc:04:75:e2:12:ec:4f:18:2c: 9b:e8:b4:97:82:b7:03:a8:df:af:51:bc:19:b7:55: b0:62:3d:20:5d:6c:3a:67:ce:de:eb:bc:ce:20:d5: 46:cb:8a:d0:cf:b8:a9:b8:53:04:53:62:f0:ba:96: da:97:d6:ef:f6:a0:3f:db:e4:ef:3b:95:53:34:5c: 35:41:28:11:51:e8:44:79:fd:aa:22:c8:2d:0f:07: cc:4a:b0:8f:5e:bb:c2:56:33:e2:af:8c:78:97:64: b0:0e:16:7e:02:7b:a1:be:e3:a6:09:7d:2a:18:99: 45:26:13:60:2a:12:6f:eb:71:6c:b6:ea:b8:42:45: fd:73:d3:9c:d5:e2:15:32:9e:f7:d3:b0:47:71:0b: 88:f7:4e:79:6f:20:21:a2:e8:ec:d9:33:e5:ba:53: fb:a3:1f:46:80:e2:9f:2b:1c:e4:5e:5b:16:63:e6: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4C:58:C1:BF:E8:8C:99:F6:15:82:16:39:A1:59:55:14:47:BF:17 X509v3 Authority Key Identifier: keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:c6:f9:c0:25:49:79:10:50:8c:d8:55:2e:37:03:a5:d5: 78:87:2e:49:8c:1f:39:27:bf:3a:d3:3f:87:ae:91:bf:55:68: 70:c1:73:ad:42:59:31:28:90:35:73:4f:87:40:c3:18:28:77: 87:e8:19:08:e3:f1:60:e4:75:a8:51:22:c0:48:3d:09:2a:61: 5f:1c:c0:33:0d:4a:29:c0:0f:fa:1d:88:a0:07:f6:ed:ac:48: e5:23:25:4f:57:bf:b0:fd:31:39:8b:a9:54:fd:06:5a:86:26: 5d:ed:18:43:ce:ee:5e:00:90:3a:66:19:a4:89:af:aa:79:ec: 35:b1:3a:4f:a6:ad:19:12:59:7e:cd:b7:ca:10:bc:da:aa:d6: b4:74:a3:e9:c7:d8:61:f6:33:62:0a:7f:b4:57:c7:54:5a:63: db:46:0e:88:46:c8:6d:67:41:d2:b9:8b:d2:50:b6:70:0a:02: 66:f0:5d:65:92:94:bd:85:c5:c2:5e:24:bf:c5:06:0e:23:d8: c8:02:a5:b8:76:91:10:62:1d:38:cd:ca:26:f0:db:0e:4b:8c: 3b:7a:2f:70:31:3b:17:30:ea:c3:34:a8:21:4a:90:1d:4a:98: 3a:6a:9d:bd:1e:ac:63:5a:48:0b:24:1c:98:40:11:74:be:8e: 3b:9a:f7:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDQzUxMTAvBgNVBAUTKDM5MTFFMUVGQjAyQjAzNkY4MzVCRjY1OEUxMzY2MDFB Njc0MjE2OTMwHhcNMjYwMzI2MjEwNTI1WhcNMjYwNDAyMjEwNTI1WjAYMRYwFAYD VQQDEw02OWM1OWY5Ni00ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWDv/eultGxuQ7xvVTI6l+Iz1j38HYzYVjZ69nD9ypCGqmzLHIQ/QKlmc8FU NpuFa8PTnSd/hVJJWIkGVwHdAIuQniwDJIxFBoGwBdn7Vjv8BHXiEuxPGCyb6LSX grcDqN+vUbwZt1WwYj0gXWw6Z87e67zOINVGy4rQz7ipuFMEU2Lwupbal9bv9qA/ 2+TvO5VTNFw1QSgRUehEef2qIsgtDwfMSrCPXrvCVjPir4x4l2SwDhZ+AnuhvuOm CX0qGJlFJhNgKhJv63Fstuq4QkX9c9Oc1eIVMp7307BHcQuI9055byAhoujs2TPl ulP7ox9GgOKfKxzkXlsWY+Y7xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtMWMG/ 6IyZ9hWCFjmhWVUUR78XMB8GA1UdIwQYMBaAFDkR4e+wKwNvg1v2WOE2YBpnQhaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NDNS80M0I1RUZEMDI0 MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEyLURXX1pZNFRaZ0dtZENG cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SSGg3N0FyQTItRFdfWlk0VFpnR21kQ0ZwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NDNS80M0I1RUZEMDI0MUMxMUVCQUIzMkQ1NDNDNEY5QUUwMi9PUkhoNzdBckEy LURXX1pZNFRaZ0dtZENGcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcYzG+cAlSXkQUIzYVS43A6XVeIcuSYwfOSe/OtM/h66Rv1VocMFzrUJZMSiQ NXNPh0DDGCh3h+gZCOPxYOR1qFEiwEg9CSphXxzAMw1KKcAP+h2IoAf27axI5SMl T1e/sP0xOYupVP0GWoYmXe0YQ87uXgCQOmYZpImvqnnsNbE6T6atGRJZfs23yhC8 2qrWtHSj6cfYYfYzYgp/tFfHVFpj20YOiEbIbWdB0rmL0lC2cAoCZvBdZZKUvYXF wl4kv8UGDiPYyAKluHaREGIdOM3KJvDbDkuMO3ovcDE7FzDqwzSoIUqQHUqYOmqd vR6sY1pICyQcmEARdL6OO5r3xQ== -----END CERTIFICATE-----Generated at Sat Mar 28 11:47:33 2026 by rpki-client