$ rpki-client -vvf rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft File: OhNw-SlQCbrO8HHvmlT91w_RV1o.mft (raw, json) Hash identifier: TvgHQ0k5tm0xY0zU9QmK/XodEaXFeONjTucQahkcFdA= Subject key identifier: 12:1E:2A:15:D5:04:8C:F0:D5:DF:79:83:9D:2E:EC:D7:0D:65:13:F1 Authority key identifier: 3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A Certificate issuer: /CN=A916B889/serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft Manifest number: 03 Signing time: Wed 25 Mar 2026 08:26:34 +0000 Manifest this update: Wed 25 Mar 2026 08:26:34 +0000 Manifest next update: Wed 01 Apr 2026 08:26:34 +0000 Files and hashes: 1: OhNw-SlQCbrO8HHvmlT91w_RV1o.crl (hash: adYCY+AvUI0Z6MgptC5Qkkq8ALDxLi0rCS7loGSy1aQ=) 2: DD9D275A272A11F1AB1203E5AA833773.roa (hash: anG8mjPCe+gcYm3kp5C5iVeJAFEjW4WqpjQcSNgoVCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B889, serialNumber=3A1370F9295009BACEF071EF9A54FDD70FD1575A Validity Not Before: Mar 25 08:26:34 2026 GMT Not After : Apr 1 08:26:34 2026 GMT Subject: CN=69c39c3a-2087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:c1:1e:a1:16:e1:8c:69:74:a5:e3:d1:3e: e2:74:cd:de:e9:ae:63:aa:15:34:a7:d6:d9:99:5e: 49:7a:4c:8e:a5:41:34:4a:92:23:ab:d7:a3:d7:f8: b7:97:e1:4c:4c:5d:e6:98:98:2b:06:f6:ed:39:3d: eb:9e:77:a7:cf:d1:3e:16:52:03:28:15:1e:8d:dc: 66:b0:07:f8:63:db:ef:82:6a:9d:cc:a6:02:49:ad: 2d:9c:88:d1:ef:e8:0a:53:66:95:68:66:94:e4:cd: c6:e9:7c:9f:68:11:7b:26:50:8c:ba:31:de:e1:e4: 04:41:48:15:51:7e:e5:b3:83:cd:43:e1:0e:82:a4: 24:d0:cd:d3:54:87:ec:f9:05:42:e7:29:08:f4:72: 44:6e:19:fe:97:76:23:e4:6e:20:13:70:fe:03:e5: 08:ab:b1:a7:bf:16:6c:67:38:af:f1:69:ef:9c:58: 54:db:93:31:1d:39:0c:7b:e2:ea:f1:43:0e:c0:84: 72:78:05:09:72:8e:13:60:76:1e:47:59:f5:f5:bb: c5:a3:53:58:71:66:c3:09:ad:1c:f3:de:52:0a:81: 8b:27:f0:07:a7:48:10:19:c6:77:a2:02:bf:43:3f: 90:07:77:ab:ee:7a:73:2b:26:61:4b:8d:5d:75:d6: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1E:2A:15:D5:04:8C:F0:D5:DF:79:83:9D:2E:EC:D7:0D:65:13:F1 X509v3 Authority Key Identifier: keyid:3A:13:70:F9:29:50:09:BA:CE:F0:71:EF:9A:54:FD:D7:0F:D1:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhNw-SlQCbrO8HHvmlT91w_RV1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B889/9AB07A3A272711F1923B397EA8833773/OhNw-SlQCbrO8HHvmlT91w_RV1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5b:6e:2d:da:39:53:8d:40:ee:dd:d0:95:f2:22:00:e9:bf: 9e:2a:bf:86:c4:e6:35:36:f6:93:6f:03:4a:40:8d:5b:9f:59: 34:22:16:ad:21:7f:24:49:32:d3:71:c4:e7:6b:24:0d:5b:4e: 3a:78:94:af:3b:c1:d4:95:5d:bc:ef:d9:d9:0c:4f:2a:cd:a1: 44:51:52:b0:46:3e:75:e7:f8:0b:52:d2:db:4d:db:d1:7f:75: 4f:78:43:58:15:80:5c:bb:84:93:09:ae:52:bc:26:90:0e:4c: a3:d6:4c:3b:4d:c2:e5:82:20:68:9c:32:d1:e4:2b:06:f3:b9: 86:30:36:0b:fb:14:4f:fe:de:42:de:27:f5:c0:41:48:7a:af: a5:f3:c0:56:57:ef:bd:18:f8:13:38:d6:20:18:52:80:b5:5d: e4:1a:eb:7d:31:64:7b:7d:18:ef:08:16:f5:58:3c:60:f1:32: 4a:38:cb:fc:85:dc:87:0c:aa:37:91:e1:61:7a:d7:bf:07:f1: d8:fd:c6:fb:a1:da:34:6a:12:bc:ab:62:c9:cd:79:73:f2:0c: d3:19:aa:48:5f:a2:f3:b6:11:ff:65:20:f8:a1:27:86:60:7d: 34:17:2e:6e:54:b9:be:2f:bc:02:f3:e6:10:81:07:9b:6d:95: 26:76:bb:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjg4OTExMC8GA1UEBRMoM0ExMzcwRjkyOTUwMDlCQUNFRjA3MUVGOUE1NEZERDcw RkQxNTc1QTAeFw0yNjAzMjUwODI2MzRaFw0yNjA0MDEwODI2MzRaMBgxFjAUBgNV BAMTDTY5YzM5YzNhLTIwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAS8EeoRbhjGl0pePRPuJ0zd7prmOqFTSn1tmZXkl6TI6lQTRKkiOr16PX+LeX 4UxMXeaYmCsG9u05Peued6fP0T4WUgMoFR6N3GawB/hj2++Cap3MpgJJrS2ciNHv 6ApTZpVoZpTkzcbpfJ9oEXsmUIy6Md7h5ARBSBVRfuWzg81D4Q6CpCTQzdNUh+z5 BULnKQj0ckRuGf6XdiPkbiATcP4D5Qirsae/FmxnOK/xae+cWFTbkzEdOQx74urx Qw7AhHJ4BQlyjhNgdh5HWfX1u8WjU1hxZsMJrRzz3lIKgYsn8AenSBAZxneiAr9D P5AHd6vuenMrJmFLjV111iAVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEh4qFdUE jPDV33mDnS7s1w1lE/EwHwYDVR0jBBgwFoAUOhNw+SlQCbrO8HHvmlT91w/RV1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODg5LzlBQjA3QTNBMjcy NzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2JyTzhISHZtbFQ5MXdfUlYx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2hOdy1TbFFDYnJPOEhIdm1sVDkxd19SVjFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC ODg5LzlBQjA3QTNBMjcyNzExRjE5MjNCMzk3RUE4ODMzNzczL09oTnctU2xRQ2Jy TzhISHZtbFQ5MXdfUlYxby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnW24t2jlTjUDu3dCV8iIA6b+eKr+GxOY1NvaTbwNKQI1bn1k0IhatIX8kSTLT ccTnayQNW046eJSvO8HUlV2879nZDE8qzaFEUVKwRj515/gLUtLbTdvRf3VPeENY FYBcu4STCa5SvCaQDkyj1kw7TcLlgiBonDLR5CsG87mGMDYL+xRP/t5C3if1wEFI eq+l88BWV++9GPgTONYgGFKAtV3kGut9MWR7fRjvCBb1WDxg8TJKOMv8hdyHDKo3 keFhete/B/HY/cb7odo0ahK8q2LJzXlz8gzTGapIX6LzthH/ZSD4oSeGYH00Fy5u VLm+L7wC8+YQgQebbZUmdruL -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:30 2026 by rpki-client