$ rpki-client -vvf rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft File: oNZvEXVTOiOoUulRUGXIWjOec4Y.mft (raw, json) Hash identifier: pWbfYfGBrY10WgC4DdWvolUTY9EiH4GnI+P8jttbRFU= Subject key identifier: 61:C3:36:18:70:69:33:F6:F6:67:73:48:5C:9E:7A:E8:BF:83:09:C2 Authority key identifier: A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 Certificate issuer: /CN=A9158547/serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft Manifest number: 01B2 Signing time: Fri 27 Mar 2026 03:28:35 +0000 Manifest this update: Fri 27 Mar 2026 03:28:35 +0000 Manifest next update: Fri 03 Apr 2026 03:28:35 +0000 Files and hashes: 1: oNZvEXVTOiOoUulRUGXIWjOec4Y.crl (hash: ibfVp3umjiFzvxW0n7PtiHtng9cX8TXnY2Ln+BX6oPI=) 2: 6E7BFE7092A611EEBD5D8720C4F9AE02.roa (hash: GM/TYAUFUCny0Saz92cbiRCqbmb1aqzepH4OiX/MKnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158547, serialNumber=A0D66F1175533A23A852E9515065C85A339E7386 Validity Not Before: Mar 27 03:28:35 2026 GMT Not After : Apr 3 03:28:35 2026 GMT Subject: CN=69c5f963-05f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:e4:03:e6:c6:dd:eb:07:95:31:a5:b3:82: fc:f1:b6:08:eb:23:96:a6:d6:69:e0:48:ac:e2:eb: ff:1e:4a:1a:9d:1e:54:69:d6:36:35:34:84:60:0e: 4a:27:9f:c5:44:31:be:09:b9:e5:3f:db:81:2b:6e: d7:63:ff:ee:88:e1:0d:48:4e:11:19:60:1f:a8:ef: 5d:8f:16:94:b4:45:e8:f2:58:02:3e:19:ca:e6:65: 3b:9a:92:45:0f:e1:df:5b:b6:ce:96:fa:c5:f9:d6: d7:08:19:f2:44:27:ea:70:27:be:a7:78:0d:8d:96: 76:08:1d:fd:b1:25:1b:19:fc:9e:26:24:50:19:6a: 23:cf:5c:76:e3:07:bd:51:9c:f4:02:1d:1e:8f:31: 40:42:7f:29:ea:26:62:48:da:17:e3:e0:40:71:ac: 7d:be:6b:fb:a4:a5:ca:ed:2b:10:0c:66:e1:a0:d4: e5:ab:4d:93:b2:a5:9c:93:9f:4e:df:a2:59:0e:2c: 0a:58:95:4f:44:12:09:7f:60:e9:f2:85:25:0c:cf: 7f:00:2d:6b:fc:d4:fa:4d:43:ec:57:2e:d7:e8:95: 62:7d:ea:cf:51:82:41:91:ac:47:1c:12:13:15:52: 5a:11:4b:1f:b4:56:32:a3:d3:f4:8c:be:df:b4:26: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C3:36:18:70:69:33:F6:F6:67:73:48:5C:9E:7A:E8:BF:83:09:C2 X509v3 Authority Key Identifier: keyid:A0:D6:6F:11:75:53:3A:23:A8:52:E9:51:50:65:C8:5A:33:9E:73:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNZvEXVTOiOoUulRUGXIWjOec4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158547/B38668E492A511EE8CD95B1EC4F9AE02/oNZvEXVTOiOoUulRUGXIWjOec4Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a6:f6:7a:3e:34:8d:d4:d0:51:9d:b2:f2:01:3a:48:ee:41: d1:ad:b7:30:86:11:d2:22:9f:be:30:0f:95:2a:53:27:bb:55: f4:99:a3:1a:11:53:7c:4b:7e:51:ba:fa:58:ba:8c:1c:25:16: 3a:c9:d0:1b:76:e0:8d:1c:22:3e:3e:0a:5e:3b:2b:ab:83:e9: 07:d5:73:c4:f1:d6:3b:a4:cd:10:9e:37:8a:77:ec:bb:57:b5: d2:65:1d:b0:dc:50:50:fb:73:19:ba:ff:f2:96:39:4a:a2:11: a0:63:27:78:e0:40:bf:60:46:35:75:d4:45:71:e0:b8:3f:80: 92:8f:ea:f0:31:fe:fc:a0:a5:7e:d8:90:fc:e6:73:df:1f:98: 6a:13:dd:b2:fb:a9:95:22:d8:c8:8c:1d:9f:2d:65:64:74:43: e2:bf:b5:59:a3:2d:e0:7d:e6:b7:cc:f1:b2:9b:c1:17:29:41: eb:08:5b:23:dc:29:ff:c4:55:e3:4b:ad:43:7b:8c:10:77:2b: 02:21:9b:95:d7:10:1c:03:df:ce:e1:c8:92:56:bf:fd:3d:60: 9e:ed:bf:d5:34:0b:0c:21:f4:48:39:c0:09:c7:30:ba:fa:4a: 98:a2:96:85:56:6c:f2:1e:a1:9d:50:a5:fc:89:24:ba:b9:63: 97:7a:b2:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NDcxMTAvBgNVBAUTKEEwRDY2RjExNzU1MzNBMjNBODUyRTk1MTUwNjVDODVB MzM5RTczODYwHhcNMjYwMzI3MDMyODM1WhcNMjYwNDAzMDMyODM1WjAYMRYwFAYD VQQDEw02OWM1Zjk2My0wNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTvkA+bG3esHlTGls4L88bYI6yOWptZp4Eis4uv/HkoanR5UadY2NTSEYA5K J5/FRDG+CbnlP9uBK27XY//uiOENSE4RGWAfqO9djxaUtEXo8lgCPhnK5mU7mpJF D+HfW7bOlvrF+dbXCBnyRCfqcCe+p3gNjZZ2CB39sSUbGfyeJiRQGWojz1x24we9 UZz0Ah0ejzFAQn8p6iZiSNoX4+BAcax9vmv7pKXK7SsQDGbhoNTlq02TsqWck59O 36JZDiwKWJVPRBIJf2Dp8oUlDM9/AC1r/NT6TUPsVy7X6JViferPUYJBkaxHHBIT FVJaEUsftFYyo9P0jL7ftCY6FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHDNhhw aTP29mdzSFyeeui/gwnCMB8GA1UdIwQYMBaAFKDWbxF1UzojqFLpUVBlyFoznnOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU0Ny9CMzg2NjhFNDky QTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9pT29VdWxSVUdYSVdqT2Vj NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OWnZFWFZUT2lPb1V1bFJVR1hJV2pPZWM0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU0Ny9CMzg2NjhFNDkyQTUxMUVFOENEOTVCMUVDNEY5QUUwMi9vTlp2RVhWVE9p T29VdWxSVUdYSVdqT2VjNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUab2ej40jdTQUZ2y8gE6SO5B0a23MIYR0iKfvjAPlSpTJ7tV9JmjGhFTfEt+ Ubr6WLqMHCUWOsnQG3bgjRwiPj4KXjsrq4PpB9VzxPHWO6TNEJ43infsu1e10mUd sNxQUPtzGbr/8pY5SqIRoGMneOBAv2BGNXXURXHguD+Ako/q8DH+/KClftiQ/OZz 3x+YahPdsvuplSLYyIwdny1lZHRD4r+1WaMt4H3mt8zxspvBFylB6whbI9wp/8RV 40utQ3uMEHcrAiGbldcQHAPfzuHIkla//T1gnu2/1TQLDCH0SDnACccwuvpKmKKW hVZs8h6hnVCl/Ikkurljl3qydQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:19 2026 by rpki-client