$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft File: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json) Hash identifier: 6VI8D8UQUClfgZwRIfCrAHeGm4JHsaZbl7eU27NkbIA= Subject key identifier: 22:29:72:F7:75:E3:FC:9E:53:60:E7:33:3B:47:FE:18:5F:DF:BC:FF Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 Certificate issuer: /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft Manifest number: 0191 Signing time: Wed 25 Mar 2026 03:41:03 +0000 Manifest this update: Wed 25 Mar 2026 03:41:03 +0000 Manifest next update: Wed 01 Apr 2026 03:41:03 +0000 Files and hashes: 1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: kBfHecwZyDM2inpSUaYwT08qcYCW0DJDCQGWPfmUHXw=) 2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: k3TfFva0pazkCIRXdBLI4mn/25rKAlL7flbXoW+92L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Validity Not Before: Mar 25 03:41:03 2026 GMT Not After : Apr 1 03:41:03 2026 GMT Subject: CN=69c3594f-9709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:35:f6:dc:31:29:1b:30:eb:d5:be:11:94:cc: 7c:af:02:4d:bd:54:3b:e7:72:c8:d2:93:24:9f:f5: de:a5:05:ed:f6:ec:1d:48:34:d3:67:71:17:1f:11: 6a:ad:64:b4:2e:ac:e4:81:00:0b:53:47:e9:b1:21: 43:83:68:1e:d0:e9:f7:a7:03:2a:00:e7:b9:4d:a1: 5e:71:af:12:91:f6:de:7d:d8:b2:fa:eb:4c:20:8e: 48:24:74:24:ed:0a:f8:3d:25:08:ca:5b:e8:db:f2: f4:1e:50:5a:72:19:fd:2f:4b:3c:55:cd:21:4f:6e: 64:9e:7e:c7:a0:87:88:02:46:e1:e3:df:82:6f:d1: 61:35:63:c2:20:5f:08:bc:33:24:64:8e:c4:75:01: b7:28:6e:5e:4e:92:1c:50:49:bb:9e:e7:d4:f6:8c: 76:5b:d7:ba:17:b4:13:ee:88:17:ea:1a:ce:e1:b6: fa:23:10:3a:e0:ad:a2:1a:ad:8e:7c:69:92:dd:30: 1f:83:a8:a5:dc:37:cd:10:c1:3a:fb:da:38:0c:60: 10:af:84:62:2c:95:04:31:b0:80:a3:e7:cd:89:8e: 66:1c:a0:88:62:c0:8b:8e:9b:2f:ad:0d:06:2d:6d: e4:bf:03:f0:91:62:34:38:0f:f8:90:f1:95:b0:09: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:72:F7:75:E3:FC:9E:53:60:E7:33:3B:47:FE:18:5F:DF:BC:FF X509v3 Authority Key Identifier: keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:94:b8:1f:1a:d7:d4:89:ce:8c:d5:eb:49:38:da:e8:77:0b: 63:0b:07:b3:5c:9a:fc:61:6f:26:5b:35:c4:0f:eb:b8:b6:b2: 05:10:2f:72:42:14:7f:36:ea:e6:74:b4:1f:c6:13:20:2f:cf: ff:8c:2f:71:cc:80:3a:56:ce:dd:c4:2b:81:b7:ce:03:60:a6: 1b:0d:18:67:fb:ef:17:a1:76:34:9e:e5:6a:f5:79:da:cb:bd: 29:a1:21:a7:c7:a1:8c:ec:45:66:7c:a7:e1:2d:35:31:81:9d: cd:d9:6f:95:c6:4b:7f:b7:1e:86:78:62:79:85:c5:4e:80:9e: 40:47:91:5d:5b:6e:70:07:11:0b:fa:fd:9f:4f:91:4b:85:51: c8:d8:86:5e:a3:17:a3:b8:21:81:ee:1b:e5:d0:04:c3:98:43: d4:7d:0a:45:62:1b:60:2e:ff:a6:bf:83:e4:c4:59:0e:1a:13: 4e:c4:9d:2c:1f:88:32:48:34:4e:6f:ff:46:9b:19:18:d7:d4: bf:02:9b:36:da:cb:e1:9b:06:98:53:32:86:7f:2a:2c:d0:2e: b3:48:14:30:1d:cd:1f:65:d0:45:16:d8:a3:57:4e:a2:e5:f6: 8a:bb:d9:fb:dc:e3:fc:d6:cf:be:4d:15:72:f2:4f:bc:08:0f: 4c:58:bd:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDcwRTg4NTU3QjBDMDgyQzlCMDZFQ0Y1OUI4RjI4QTc3 MDNBNjM4MDEwHhcNMjYwMzI1MDM0MTAzWhcNMjYwNDAxMDM0MTAzWjAYMRYwFAYD VQQDEw02OWMzNTk0Zi05NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DX23DEpGzDr1b4RlMx8rwJNvVQ753LI0pMkn/XepQXt9uwdSDTTZ3EXHxFq rWS0LqzkgQALU0fpsSFDg2ge0On3pwMqAOe5TaFeca8Skfbefdiy+utMII5IJHQk 7Qr4PSUIylvo2/L0HlBachn9L0s8Vc0hT25knn7HoIeIAkbh49+Cb9FhNWPCIF8I vDMkZI7EdQG3KG5eTpIcUEm7nufU9ox2W9e6F7QT7ogX6hrO4bb6IxA64K2iGq2O fGmS3TAfg6il3DfNEME6+9o4DGAQr4RiLJUEMbCAo+fNiY5mHKCIYsCLjpsvrQ0G LW3kvwPwkWI0OA/4kPGVsAlI+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIpcvd1 4/yeU2DnMztH/hhf37z/MB8GA1UdIwQYMBaAFHDohVewwILJsG7PWbjyincDpjgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82MjMxQTAyRUM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdzbXdiczladVBLS2R3T21P QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NPaUZWN0RBZ3Ntd2JzOVp1UEtLZHdPbU9BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82MjMxQTAyRUM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdz bXdiczladVBLS2R3T21PQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJS4HxrX1InOjNXrSTja6HcLYwsHs1ya/GFvJls1xA/ruLayBRAvckIUfzbq 5nS0H8YTIC/P/4wvccyAOlbO3cQrgbfOA2CmGw0YZ/vvF6F2NJ7lavV52su9KaEh p8ehjOxFZnyn4S01MYGdzdlvlcZLf7cehnhieYXFToCeQEeRXVtucAcRC/r9n0+R S4VRyNiGXqMXo7ghge4b5dAEw5hD1H0KRWIbYC7/pr+D5MRZDhoTTsSdLB+IMkg0 Tm//RpsZGNfUvwKbNtrL4ZsGmFMyhn8qLNAus0gUMB3NH2XQRRbYo1dOouX2irvZ +9zj/NbPvk0VcvJPvAgPTFi9mw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:34 2026 by rpki-client