$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json) Hash identifier: NOmmyN/53FfoQdy459Mp66eMR8lBqgv7jMSESN6BNqc= Subject key identifier: B5:7D:83:51:60:7E:3B:B5:28:79:87:AC:17:7C:44:77:EA:71:F9:9B Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft Manifest number: 027D Signing time: Wed 25 Mar 2026 01:26:35 +0000 Manifest this update: Wed 25 Mar 2026 01:26:35 +0000 Manifest next update: Wed 01 Apr 2026 01:26:35 +0000 Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: fstmmvueDoqxgHqx9O9YygttVTxnT8Z8mW62P4GEhYc=) 2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=) 3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Validity Not Before: Mar 25 01:26:35 2026 GMT Not After : Apr 1 01:26:35 2026 GMT Subject: CN=69c339cb-d695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:30:5f:42:b3:f9:cf:cd:b4:0f:38:92:27: 14:76:da:ba:ec:f3:1e:a5:b9:9c:40:6e:33:de:fd: 49:ea:51:05:3f:db:7e:62:b0:43:a3:af:f2:f6:58: 4f:15:90:17:c1:d8:62:e8:48:bb:7f:d3:98:0f:5f: 09:a2:d0:06:08:65:2e:52:ca:22:be:96:b7:8e:4d: 93:1e:ad:6e:51:b4:79:d0:1a:2a:d4:c5:33:d5:6f: fa:d9:21:8e:ab:1b:f6:88:f4:99:72:49:3b:ad:85: 8e:2b:5f:96:2e:5f:42:3b:63:6e:8b:03:8d:dd:17: ee:b3:c7:00:06:89:b0:55:fe:65:3a:5a:e7:b2:f3: 30:91:96:35:97:4d:16:32:ff:00:72:37:e4:ce:b3: fd:df:69:be:4f:8d:a8:d4:0c:15:22:8a:6f:f4:56: ca:d3:80:ee:64:a2:ca:94:67:81:b5:a0:6b:e8:5d: b4:a2:54:7a:84:63:63:04:ed:86:e3:11:43:72:fb: 1a:57:a5:9c:ba:7f:d8:4b:60:8d:fb:9a:eb:10:ad: 39:4f:bf:28:e5:89:d0:3f:1f:30:39:39:a1:6d:b3: 5f:7e:eb:24:37:e2:97:7b:7e:8a:5d:32:5e:d4:04: e6:a3:ca:1c:4d:24:7b:3b:e3:55:d2:ce:57:4f:af: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:83:51:60:7E:3B:B5:28:79:87:AC:17:7C:44:77:EA:71:F9:9B X509v3 Authority Key Identifier: keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:16:9f:fa:be:40:6f:86:27:3f:91:42:4d:60:26:89:35: 51:6f:07:ee:b0:22:b9:8b:ab:85:08:f6:7b:04:ec:3d:bb:3c: c1:0c:f3:78:c8:16:a2:9f:c7:1b:82:a4:06:21:66:00:38:ef: c3:05:a7:2b:fe:1f:e5:70:61:04:82:6e:07:de:b9:b2:c2:1b: 23:39:5a:af:b9:3c:e1:40:a9:15:e0:71:c7:f8:4a:9c:77:d4: 85:95:03:1a:79:ac:3a:65:2c:2b:83:8d:56:26:4d:49:86:76: dd:97:3d:92:39:47:a9:71:47:fd:8c:b2:85:eb:88:d3:80:e2: 46:7b:6a:eb:cc:e9:b6:4e:b1:e1:09:b6:93:bc:5c:d3:91:7b: a1:04:d1:cd:31:7c:45:a8:a8:03:66:3c:ad:47:37:eb:c1:34: db:52:46:c5:62:15:af:fe:5a:1b:97:21:83:1b:34:6f:23:1d: a9:c8:1d:a2:5b:bf:0a:d7:bb:cb:ca:0f:7e:23:70:cc:5e:60: 0f:03:6d:3f:63:89:70:d8:13:e3:dc:de:f8:66:41:06:35:69: 82:5b:4c:de:25:83:0e:ab:e1:24:99:d4:21:fc:69:ec:19:57: 55:1f:89:6f:44:08:13:f7:36:74:fa:60:1e:f6:e3:fc:bf:e4: 48:55:9e:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5RjU5OTRFNEU3 RjAxQUY4MzgwHhcNMjYwMzI1MDEyNjM1WhcNMjYwNDAxMDEyNjM1WjAYMRYwFAYD VQQDEw02OWMzMzljYi1kNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9QwX0Kz+c/NtA84kicUdtq67PMepbmcQG4z3v1J6lEFP9t+YrBDo6/y9lhP FZAXwdhi6Ei7f9OYD18JotAGCGUuUsoivpa3jk2THq1uUbR50Boq1MUz1W/62SGO qxv2iPSZckk7rYWOK1+WLl9CO2NuiwON3Rfus8cABomwVf5lOlrnsvMwkZY1l00W Mv8AcjfkzrP932m+T42o1AwVIopv9FbK04DuZKLKlGeBtaBr6F20olR6hGNjBO2G 4xFDcvsaV6Wcun/YS2CN+5rrEK05T78o5YnQPx8wOTmhbbNffuskN+KXe36KXTJe 1ATmo8ocTSR7O+NV0s5XT6/5eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLV9g1Fg fju1KHmHrBd8RHfqcfmbMB8GA1UdIwQYMBaAFDkBr0qT/vquuHnMn1mU5OfwGvg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTNBQi85Q0Y3RUNEQTZG OEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1xNjRlY3lmV1pUazVfQWEt RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09RR3ZTcFAtLXE2NGVjeWZXWlRrNV9BYS1EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQLS1x NjRlY3lmV1pUazVfQWEtRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFt8Wn/q+QG+GJz+RQk1gJok1UW8H7rAiuYurhQj2ewTsPbs8wQzzeMgWop/H G4KkBiFmADjvwwWnK/4f5XBhBIJuB965ssIbIzlar7k84UCpFeBxx/hKnHfUhZUD GnmsOmUsK4ONViZNSYZ23Zc9kjlHqXFH/YyyheuI04DiRntq68zptk6x4Qm2k7xc 05F7oQTRzTF8RaioA2Y8rUc368E021JGxWIVr/5aG5chgxs0byMdqcgdolu/Cte7 y8oPfiNwzF5gDwNtP2OJcNgT49ze+GZBBjVpgltM3iWDDqvhJJnUIfxp7BlXVR+J b0QIE/c2dPpgHvbj/L/kSFWePA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:27 2026 by rpki-client