$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft File: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json) Hash identifier: F5OrBwreSGF0XFuwForQu4HcLl5CLEyN951kRunw6s4= Subject key identifier: C3:8B:1D:67:33:9C:D5:FC:46:97:48:F7:A0:24:6B:65:E7:1E:15:74 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft Manifest number: 0A5D Signing time: Tue 24 Mar 2026 21:14:49 +0000 Manifest this update: Tue 24 Mar 2026 21:14:49 +0000 Manifest next update: Tue 31 Mar 2026 21:14:49 +0000 Files and hashes: 1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: 4k722kzO0o5wdFenYxZ9SpwikA1pdSGY7W1le+lkuE8=) 2: 61EE2500936E11F091943583C4F9AE02.roa (hash: 8ckVb9qNZshEQ+HiBQT/0gq9CzwPXii/w1rZWO7m+Zw=) 3: 3CE7D21201A311F1A14FC5D2686F56BC.roa (hash: o8Efs0Zmsyf+yPslQE6u+yFKAm4P6NONEQAjk5sGm4c=) 4: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (hash: s77Ei8EC37Djt+pew6TOMR9zQCEM+rq8eyiOuZgQork=) 5: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: TZoK6id0rUzh56KPEUCZAm7vzhoQKcumpCyH1Z185+Y=) 6: E64DA5A0269911F1A9FC76A4BA833773.roa (hash: 9x0+6pLQay6ZzOIRs6X5Z7+RaMZ6h5meNr2Uv0SlIj4=) 7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: J0sAShMAS7TBXIrBTuQVLuuil+RzIlr22j/AeepAcBs=) 8: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: w6yzFziDeBAoUWZ59xaLHwBZh42R2pzo/qzXpmN8kyk=) 9: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: ye8jq88ep0wSruy1WtzE0bv/JRbtY6NOkRlK24kmsxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Mar 24 21:14:49 2026 GMT Not After : Mar 31 21:14:49 2026 GMT Subject: CN=69c2fec9-22cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:39:61:f5:0a:24:71:46:cc:8d:6e:89:05: 3f:26:56:16:e9:59:69:67:81:9d:99:92:4c:ad:e6: 33:0f:e9:06:21:91:e2:d7:c0:1a:34:73:86:e8:c3: df:43:db:44:de:21:ad:4e:47:23:31:56:f8:aa:f4: 4b:bf:16:36:ff:d1:c9:70:59:5d:7b:b3:d0:08:57: b3:44:ef:61:ed:06:4b:ec:ef:72:21:cc:e0:0a:25: db:b9:bf:d6:74:b7:81:ae:ae:65:8c:d4:90:09:da: 51:7a:9e:4b:7c:90:ec:1a:ee:60:cc:7f:bb:b9:99: 72:5a:86:f5:3b:4b:f2:20:c4:b4:d2:08:dc:99:ba: dc:66:b9:c6:40:96:c3:21:85:09:4c:4f:63:f7:76: bd:06:70:68:b7:36:66:e0:f5:51:e1:be:94:cb:a6: cd:9a:33:a5:cc:75:d0:9d:24:1e:4f:ef:cb:e9:cf: 19:52:94:df:ef:6d:74:89:a8:a1:7f:75:18:83:88: e6:20:8e:01:8f:48:75:71:0d:af:1f:e0:6a:d1:e9: 3b:b7:cf:fa:16:b0:54:27:46:00:ae:fe:62:64:13: 54:cb:a0:b7:68:d9:26:d1:92:49:c7:26:3f:b6:32: c1:4f:c6:f2:35:bb:2b:8b:d1:e6:90:48:70:b4:b5: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:1D:67:33:9C:D5:FC:46:97:48:F7:A0:24:6B:65:E7:1E:15:74 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:05:4c:ca:52:71:1d:a1:cf:6f:3f:ca:59:1c:fd:9e:f4:7d: 19:eb:4f:97:a7:3d:36:8a:04:fc:53:af:30:7f:cc:f6:df:15: e6:60:a3:9b:53:b4:a3:e1:94:96:f3:4f:8d:6e:a1:0a:8f:18: d2:ec:3e:68:4d:55:29:5c:de:fa:2e:53:f1:c2:03:85:d4:6c: 85:bd:a7:61:0b:8b:da:ed:77:5e:aa:8e:94:f4:51:a7:59:43: df:07:5e:1e:45:0e:56:7c:02:43:c4:72:01:be:85:0a:77:8d: 22:af:9e:36:51:28:c5:eb:61:5b:a2:69:10:e3:64:d8:ba:d3: b2:9c:c4:58:75:5e:d1:a9:c4:a6:c5:4e:04:7f:ec:2d:25:74: 71:24:6f:5c:23:1d:2c:4e:5c:6c:87:ad:59:87:3a:f3:d3:42: fe:3c:3f:41:00:18:57:2a:66:f4:0a:ef:34:4a:9a:2a:7a:5b: a9:cd:29:a2:ea:db:fc:59:d6:64:f2:d8:e3:17:f5:a3:62:66: 2a:53:a4:3a:e9:35:ff:92:d2:72:b1:c4:ba:bc:a1:79:30:8a: f2:9c:b5:21:35:4a:7c:52:4a:4e:7c:bf:fc:16:86:4d:60:ed: 4b:50:e0:6d:92:2f:6a:80:60:02:59:b3:b7:53:99:a6:72:43: e3:50:79:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwMzI0MjExNDQ5WhcNMjYwMzMxMjExNDQ5WjAYMRYwFAYD VQQDEw02OWMyZmVjOS0yMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls85YfUKJHFGzI1uiQU/JlYW6VlpZ4GdmZJMreYzD+kGIZHi18AaNHOG6MPf Q9tE3iGtTkcjMVb4qvRLvxY2/9HJcFlde7PQCFezRO9h7QZL7O9yIczgCiXbub/W dLeBrq5ljNSQCdpRep5LfJDsGu5gzH+7uZlyWob1O0vyIMS00gjcmbrcZrnGQJbD IYUJTE9j93a9BnBotzZm4PVR4b6Uy6bNmjOlzHXQnSQeT+/L6c8ZUpTf7210iaih f3UYg4jmII4Bj0h1cQ2vH+Bq0ek7t8/6FrBUJ0YArv5iZBNUy6C3aNkm0ZJJxyY/ tjLBT8byNbsri9HmkEhwtLWydQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOLHWcz nNX8RpdI96Aka2XnHhV0MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82OUU2QzE2QTQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhf V0Q1Q1dwX3B0cHVWQnFXYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFQVMylJxHaHPbz/KWRz9nvR9GetPl6c9NooE/FOvMH/M9t8V5mCjm1O0o+GU lvNPjW6hCo8Y0uw+aE1VKVze+i5T8cIDhdRshb2nYQuL2u13XqqOlPRRp1lD3wde HkUOVnwCQ8RyAb6FCneNIq+eNlEoxethW6JpEONk2LrTspzEWHVe0anEpsVOBH/s LSV0cSRvXCMdLE5cbIetWYc689NC/jw/QQAYVypm9ArvNEqaKnpbqc0pourb/FnW ZPLY4xf1o2JmKlOkOuk1/5LScrHEuryheTCK8py1ITVKfFJKTny//BaGTWDtS1Dg bZIvaoBgAlmzt1OZpnJD41B5ig== -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:22 2026 by rpki-client