$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: 9hRJjbCHVsXcyeLUJzBVoo0y2yvgeo4vsfk3kUdlYEo= Subject key identifier: 25:55:DE:6C:61:16:3A:B9:B9:02:67:20:5D:01:78:CA:31:07:83:54 Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 022A Signing time: Wed 25 Mar 2026 02:04:55 +0000 Manifest this update: Wed 25 Mar 2026 02:04:54 +0000 Manifest next update: Wed 01 Apr 2026 02:04:54 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: k4W41csUMly35QptkDEqnu0Zr39leRFft/AaT2EoDS8=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: HLxpBgf2BiS9RoMk9148N++nqSRKey+SFnFlfYeHOnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: Mar 25 02:04:54 2026 GMT Not After : Apr 1 02:04:54 2026 GMT Subject: CN=69c342c7-6582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:5b:ed:e0:d5:3b:e5:53:1e:cd:16:ce:69: 95:3d:43:bc:b7:d4:3d:54:d1:51:c3:71:46:ea:ee: 18:a7:78:a0:44:0d:c1:47:ef:ba:14:3e:c0:b3:2e: 41:2d:c9:ed:31:33:e6:dc:2d:8f:56:2e:18:3a:a9: 8d:96:5c:06:8c:8e:64:9a:14:25:10:b3:ae:a2:96: dc:65:d0:71:39:ba:93:10:fc:49:60:c5:07:ba:22: aa:b6:a5:c9:ba:a6:81:b2:a6:2a:6f:36:d5:b4:34: 26:43:01:a2:18:4b:3d:90:af:cd:c6:b5:27:01:a6: 85:c9:e3:92:61:d8:25:6e:1d:9b:dd:60:29:c5:42: 12:13:60:83:ab:c0:e4:0c:48:4e:61:0f:29:f9:c3: 49:9a:e6:7e:1d:87:96:80:79:02:75:05:c7:78:fa: 26:13:35:d9:fd:9c:d8:9e:23:e0:ac:d5:92:0c:4b: cb:d9:32:16:9c:01:22:58:f7:d0:37:4e:21:50:bd: 26:92:c8:c6:08:84:29:e3:99:22:ea:e9:55:b9:79: 15:ab:a1:a7:38:c7:26:9b:e5:c7:e3:a0:74:28:dc: 2d:f7:ec:20:9f:d9:be:3f:47:30:d4:7b:51:e9:5e: 76:8b:5b:bc:2f:32:10:18:9c:4a:c1:86:d2:a9:fc: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:55:DE:6C:61:16:3A:B9:B9:02:67:20:5D:01:78:CA:31:07:83:54 X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fe:b4:c0:11:e5:6f:fa:7e:e0:21:27:f7:7a:1b:2a:08:b7: 1d:17:9c:93:ed:da:f7:5e:b9:e6:40:58:16:74:0a:15:d2:b2: 5e:f2:82:50:a0:00:04:5f:b4:7e:c1:88:db:b2:6c:88:ea:a8: 7f:c1:f5:9b:7f:bc:b3:7b:8d:98:21:fa:fe:52:3c:56:c6:d9: 37:17:2a:f0:88:2d:78:10:51:33:0b:cc:e6:4f:a3:47:91:7d: ba:ff:db:9f:88:3f:39:3b:01:4d:a4:c0:9b:1b:5d:af:0a:81: fa:49:94:42:1f:c3:8c:59:f5:e5:4d:5d:cf:a8:cd:7a:7d:b3: df:82:dc:ba:54:70:de:9a:91:fd:db:13:07:5a:d5:64:be:94: 4e:ff:db:8a:0a:6d:b3:47:2f:ba:f9:5c:9e:a5:5a:47:67:d9: 80:d5:e4:63:03:30:47:9c:b9:4a:65:4a:72:40:ea:92:11:6e: e6:01:2b:34:46:a2:f8:26:c3:b2:1e:9f:c8:0f:b7:52:83:ac: af:4b:4e:a8:b7:30:82:c5:e6:c3:77:94:90:6a:18:8d:cb:1b: 3f:71:51:4f:f9:f3:bb:04:6a:5a:73:61:e8:a3:4a:a5:51:70: 1d:24:0e:5d:d2:61:d8:07:f9:0b:49:5b:0c:17:83:08:f1:52: 6b:45:24:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjYwMzI1MDIwNDU0WhcNMjYwNDAxMDIwNDU0WjAYMRYwFAYD VQQDEw02OWMzNDJjNy02NTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn5b7eDVO+VTHs0WzmmVPUO8t9Q9VNFRw3FG6u4Yp3igRA3BR++6FD7Asy5B LcntMTPm3C2PVi4YOqmNllwGjI5kmhQlELOuopbcZdBxObqTEPxJYMUHuiKqtqXJ uqaBsqYqbzbVtDQmQwGiGEs9kK/NxrUnAaaFyeOSYdglbh2b3WApxUISE2CDq8Dk DEhOYQ8p+cNJmuZ+HYeWgHkCdQXHePomEzXZ/ZzYniPgrNWSDEvL2TIWnAEiWPfQ N04hUL0mksjGCIQp45ki6ulVuXkVq6GnOMcmm+XH46B0KNwt9+wgn9m+P0cw1HtR 6V52i1u8LzIQGJxKwYbSqfywOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVV3mxh Fjq5uQJnIF0BeMoxB4NUMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX/60wBHlb/p+4CEn93obKgi3HReck+3a91655kBYFnQKFdKyXvKCUKAABF+0 fsGI27JsiOqof8H1m3+8s3uNmCH6/lI8VsbZNxcq8IgteBBRMwvM5k+jR5F9uv/b n4g/OTsBTaTAmxtdrwqB+kmUQh/DjFn15U1dz6jNen2z34LculRw3pqR/dsTB1rV ZL6UTv/bigpts0cvuvlcnqVaR2fZgNXkYwMwR5y5SmVKckDqkhFu5gErNEai+CbD sh6fyA+3UoOsr0tOqLcwgsXmw3eUkGoYjcsbP3FRT/nzuwRqWnNh6KNKpVFwHSQO XdJh2Af5C0lbDBeDCPFSa0Uk+A== -----END CERTIFICATE-----Generated at Thu Mar 26 09:56:04 2026 by rpki-client