$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: tMc6knQJZ9UoFV7J8CdSMM9yt73b+HkdTuYdppRuumg= Subject key identifier: E3:C6:CB:B0:DE:66:23:D8:EA:D7:6D:A6:8D:34:C0:63:B1:C7:E8:08 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 0100 Signing time: Wed 25 Mar 2026 05:22:27 +0000 Manifest this update: Wed 25 Mar 2026 05:22:27 +0000 Manifest next update: Wed 01 Apr 2026 05:22:27 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: xz7xA/YbzP/Oy9Hq2nut2Epn+pUPtcUdpDJWD9Ejw8I=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Mar 25 05:22:27 2026 GMT Not After : Apr 1 05:22:27 2026 GMT Subject: CN=69c37113-825a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:1c:79:8a:26:2d:7b:bf:76:03:23:d1:da: 6d:5c:06:fb:69:29:80:c4:98:99:7e:8b:8e:c7:85: d5:a1:9a:95:91:c2:c8:1a:e3:9d:28:93:64:c6:96: 45:d5:34:4b:e0:44:2a:ab:2c:cf:77:1c:82:9e:37: 13:d8:60:9c:df:09:e1:7a:4f:9b:88:2c:dc:92:56: 51:9f:6b:02:8d:ee:e5:66:86:21:b5:f3:2e:6f:d2: 64:c2:a7:88:ed:d7:5c:d3:46:57:d1:50:9e:07:a4: 00:d3:0a:bf:7d:82:ff:0f:99:ad:85:8e:84:2b:b3: a6:90:ce:38:e2:c2:73:78:f6:a6:43:52:58:17:10: 0f:80:bd:ea:1d:e9:dd:d7:23:e7:7e:02:cb:df:df: 12:9d:a9:d8:b8:30:e3:98:fb:7e:54:b4:73:1d:50: 66:5f:fd:17:80:7c:9f:54:de:7a:43:e7:44:bd:9a: 6e:98:ac:5e:53:7a:05:da:a5:c5:26:06:6d:6b:6a: c6:c9:fb:df:ee:2c:c9:ce:f0:53:6a:22:9a:af:ba: 1c:f9:57:5d:65:81:4f:f6:d5:a8:f7:33:49:23:8e: a6:9d:36:12:43:68:4b:3d:60:c2:43:0e:fd:86:7f: a9:82:29:78:f1:2b:8b:a4:27:ad:54:4b:05:97:1b: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C6:CB:B0:DE:66:23:D8:EA:D7:6D:A6:8D:34:C0:63:B1:C7:E8:08 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b1:d7:19:67:03:22:23:38:84:c3:21:13:32:a0:b4:6c:a6: ae:3e:c9:38:b4:b5:53:00:f7:da:90:52:4b:87:5f:b4:e7:47: f8:27:32:f0:a3:fd:74:36:e1:67:be:a2:49:27:7a:b8:c9:a1: af:7b:bd:24:c9:29:f0:47:ce:31:f1:f1:36:48:47:81:da:42: 8f:52:4e:61:ba:e5:5a:b0:dc:45:87:03:d8:43:ff:6b:06:f9: 03:66:74:c1:46:33:65:65:64:7e:c4:96:1b:f0:07:4e:11:8f: 45:65:84:a4:95:a6:80:40:c7:47:fc:6c:f8:64:b4:24:e7:b8: f1:37:ba:c4:16:55:1a:82:7d:d5:6c:dc:d0:5f:ce:48:f4:9b: c2:27:c4:ff:6e:14:f8:ee:3e:6c:cf:db:fa:76:85:f2:75:d2: c7:58:01:bc:c8:46:50:2c:a3:7c:5b:64:c0:43:f9:89:30:31: c6:67:42:06:45:7a:e3:46:5d:15:2a:23:5f:8c:8a:af:ea:19: 3d:b8:93:68:18:b8:e0:2a:d6:3f:e7:4f:9e:8b:c7:9e:ad:7f: 50:6e:bd:6a:e8:65:e1:b1:d7:47:c4:66:7e:a6:59:9f:af:01: aa:45:ad:de:d7:2b:5a:d3:27:8f:59:e5:6e:52:f9:92:e3:5d: 03:03:99:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjYwMzI1MDUyMjI3WhcNMjYwNDAxMDUyMjI3WjAYMRYwFAYD VQQDEw02OWMzNzExMy04MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutQceYomLXu/dgMj0dptXAb7aSmAxJiZfouOx4XVoZqVkcLIGuOdKJNkxpZF 1TRL4EQqqyzPdxyCnjcT2GCc3wnhek+biCzcklZRn2sCje7lZoYhtfMub9JkwqeI 7ddc00ZX0VCeB6QA0wq/fYL/D5mthY6EK7OmkM444sJzePamQ1JYFxAPgL3qHend 1yPnfgLL398SnanYuDDjmPt+VLRzHVBmX/0XgHyfVN56Q+dEvZpumKxeU3oF2qXF JgZta2rGyfvf7izJzvBTaiKar7oc+VddZYFP9tWo9zNJI46mnTYSQ2hLPWDCQw79 hn+pgil48SuLpCetVEsFlxu8ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPGy7De ZiPY6tdtpo00wGOxx+gIMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf7HXGWcDIiM4hMMhEzKgtGymrj7JOLS1UwD32pBSS4dftOdH+Ccy8KP9dDbh Z76iSSd6uMmhr3u9JMkp8EfOMfHxNkhHgdpCj1JOYbrlWrDcRYcD2EP/awb5A2Z0 wUYzZWVkfsSWG/AHThGPRWWEpJWmgEDHR/xs+GS0JOe48Te6xBZVGoJ91Wzc0F/O SPSbwifE/24U+O4+bM/b+naF8nXSx1gBvMhGUCyjfFtkwEP5iTAxxmdCBkV640Zd FSojX4yKr+oZPbiTaBi44CrWP+dPnovHnq1/UG69auhl4bHXR8RmfqZZn68BqkWt 3tcrWtMnj1nlblL5kuNdAwOZ0w== -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:27 2026 by rpki-client