$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft File: OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json) Hash identifier: XLmsUowXNLPVWlpiO5mRpvQQnlkEwaTi8qusQO5b1eE= Subject key identifier: 4B:FB:CA:45:4A:DC:EB:79:C8:B8:17:F2:3F:1B:AB:C9:3B:75:97:02 Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA Certificate issuer: /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft Manifest number: 59 Signing time: Wed 25 Mar 2026 07:19:09 +0000 Manifest this update: Wed 25 Mar 2026 07:19:08 +0000 Manifest next update: Wed 01 Apr 2026 07:19:08 +0000 Files and hashes: 1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: UKirusvlYMapkzhzAgyrO5EpE3eWK0OGFXViNm2wdK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA Validity Not Before: Mar 25 07:19:08 2026 GMT Not After : Apr 1 07:19:08 2026 GMT Subject: CN=69c38c6c-3332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:fa:fc:77:9a:5e:87:99:fc:b3:36:9f:cd: 0d:84:3a:94:eb:10:dc:6e:91:58:d6:9e:0f:d6:02: fb:6a:15:e4:b4:ba:a0:26:dd:87:9b:9c:6f:21:ef: 77:70:a4:6a:f2:04:4c:16:0a:35:10:34:79:e1:aa: 97:d6:1c:77:bb:4c:3c:d1:9d:11:81:61:1e:ae:c7: 5a:53:5a:74:87:9d:0e:35:ad:c5:86:14:ec:54:53: ad:0e:07:f8:ab:b0:6b:e1:8f:66:ee:98:bf:12:0c: f0:82:d6:e8:3c:17:e7:e6:78:b6:75:f2:98:0a:f5: 00:13:2d:45:5b:1c:73:82:e5:ba:c6:5a:10:44:83: d4:5a:41:8a:de:cf:91:12:87:65:5f:c0:c8:d4:b1: ba:6f:05:9d:fd:dd:68:ad:fa:bb:a9:62:4d:b0:d6: 13:6a:09:1e:3c:5a:ff:8f:2b:70:13:62:57:4c:d5: f4:ff:1e:e0:f2:df:23:91:41:59:44:41:da:dc:d4: 10:b0:db:d0:66:90:c9:c6:1b:64:1b:3f:5e:67:2d: e9:fe:4a:74:77:ae:53:13:d5:66:57:9f:b6:20:f8: 0d:94:2b:29:22:59:67:66:e9:ae:5f:62:a5:93:e4: 3b:c8:83:9b:a7:a9:de:1a:0b:f7:01:9d:53:51:79: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:CA:45:4A:DC:EB:79:C8:B8:17:F2:3F:1B:AB:C9:3B:75:97:02 X509v3 Authority Key Identifier: keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:79:e8:cf:3e:85:fe:e0:fc:83:14:36:82:c2:cb:95:b5:cb: 19:b7:5e:7e:a6:1b:e0:f1:94:11:de:4a:b9:54:76:e6:96:27: 3e:59:ad:3c:8f:7b:09:e0:46:18:ed:5c:2c:43:4e:99:4d:4b: cc:3b:ad:07:81:2b:4c:bd:f4:65:2c:0d:ab:a8:7e:6c:66:61: 9a:62:ed:5c:72:8d:08:c3:13:ba:4a:1d:05:be:92:f1:a7:d0: af:ed:ba:02:34:96:a8:65:ba:fc:29:61:ba:b7:85:d1:3f:0f: 2d:a6:6b:4b:8a:58:24:d8:0f:53:21:76:2c:19:a1:bb:fd:34: cc:ff:11:4d:fd:dc:75:b2:95:9d:63:c0:f5:25:21:75:bb:bd: 71:cc:09:21:da:91:0b:3b:77:f7:f5:88:bf:04:58:46:80:6b: d5:eb:8e:4e:4a:71:fd:8a:83:73:39:17:4a:27:3b:5c:b1:32: 42:0d:ee:45:42:97:23:7b:98:31:59:3a:8a:01:0d:77:e5:ea: 66:f7:53:7e:08:a7:3b:0f:fe:cd:83:2b:f0:30:27:78:50:24: c7:7b:f1:c2:c6:56:52:91:17:c1:c4:1c:46:af:4a:fb:f2:56: a2:dd:81:e2:09:49:b2:0c:a0:21:83:0e:14:27:17:1a:55:98: 3e:bc:8f:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoM0E5NzFGNDJGRkIwNkIyQTA2Qzk3OTJGRDRGMDg1MTM2 RDE0MkJFQTAeFw0yNjAzMjUwNzE5MDhaFw0yNjA0MDEwNzE5MDhaMBgxFjAUBgNV BAMTDTY5YzM4YzZjLTMzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCMPfr8d5peh5n8szafzQ2EOpTrENxukVjWng/WAvtqFeS0uqAm3YebnG8h73dw pGryBEwWCjUQNHnhqpfWHHe7TDzRnRGBYR6ux1pTWnSHnQ41rcWGFOxUU60OB/ir sGvhj2bumL8SDPCC1ug8F+fmeLZ18pgK9QATLUVbHHOC5brGWhBEg9RaQYrez5ES h2VfwMjUsbpvBZ393Wit+rupYk2w1hNqCR48Wv+PK3ATYldM1fT/HuDy3yORQVlE Qdrc1BCw29BmkMnGG2QbP15nLen+SnR3rlMT1WZXn7Yg+A2UKykiWWdm6a5fYqWT 5DvIg5unqd4aC/cBnVNReQcPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS/vKRUrc 63nIuBfyPxuryTt1lwIwHwYDVR0jBBgwFoAUOpcfQv+wayoGyXkv1PCFE20UK+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzIxRTNGMzY2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlvR3lYa3YxUENGRTIwVUst by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3BjZlF2LXdheW9HeVhrdjFQQ0ZFMjBVSy1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzIxRTNGMzY2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL09wY2ZRdi13YXlv R3lYa3YxUENGRTIwVUstby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASeejPPoX+4PyDFDaCwsuVtcsZt15+phvg8ZQR3kq5VHbmlic+Wa08j3sJ4EYY 7VwsQ06ZTUvMO60HgStMvfRlLA2rqH5sZmGaYu1cco0IwxO6Sh0FvpLxp9Cv7boC NJaoZbr8KWG6t4XRPw8tpmtLilgk2A9TIXYsGaG7/TTM/xFN/dx1spWdY8D1JSF1 u71xzAkh2pELO3f39Yi/BFhGgGvV645OSnH9ioNzORdKJztcsTJCDe5FQpcje5gx WTqKAQ135epm91N+CKc7D/7NgyvwMCd4UCTHe/HCxlZSkRfBxBxGr0r78lai3YHi CUmyDKAhgw4UJxcaVZg+vI/Y -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:38 2026 by rpki-client