$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json) Hash identifier: TCAbvQ1lNEA2ykJDV/cKGmCBgc8kVf9/gcpwIltJKJs= Subject key identifier: 08:9D:2B:A3:85:C9:6E:DE:39:B3:0D:1C:C6:72:52:EB:82:3B:06:23 Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft Manifest number: 0166 Signing time: Wed 25 Mar 2026 04:07:18 +0000 Manifest this update: Wed 25 Mar 2026 04:07:17 +0000 Manifest next update: Wed 01 Apr 2026 04:07:17 +0000 Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: z8wfYl55hvsONqA8da0Br9DU44ZT/nXDb67UTwJoqfM=) 2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F Validity Not Before: Mar 25 04:07:17 2026 GMT Not After : Apr 1 04:07:17 2026 GMT Subject: CN=69c35f75-57ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:e0:5c:9f:b5:0f:ee:4d:a8:1f:9d:19:7f: 6a:e4:1a:49:28:62:c8:64:20:5d:81:b5:59:41:3e: 8b:92:29:6e:bb:f4:01:e6:30:a9:0b:59:70:f5:e3: 1d:06:65:8e:56:0c:11:67:92:79:0e:db:1b:3d:83: c5:7b:8e:31:e8:b6:58:78:86:0c:d8:c9:0e:ad:62: a0:b6:62:65:77:99:eb:9d:35:c3:6b:22:a1:e3:56: 2e:f1:d0:4e:ab:51:b1:76:41:62:d9:06:31:04:30: de:3d:d3:ad:72:13:89:7c:5f:81:aa:d0:4e:71:c1: eb:b2:77:b7:9e:3a:bc:5f:37:f2:77:4f:b6:3d:f5: 01:a8:57:16:81:67:88:6b:1b:4e:d0:80:68:84:f5: 4b:ef:f1:1c:27:3c:52:c1:d5:aa:64:6e:eb:d2:22: d0:fe:7c:2d:29:77:db:32:d8:af:74:d6:8e:f0:86: b0:64:46:55:54:f0:84:3e:06:ef:7a:be:2a:4c:e1: 1f:f4:06:21:af:0c:07:06:dc:cc:6d:c2:6c:59:6f: bb:74:9f:0d:ad:e4:b4:5e:dc:7f:2e:08:e7:8f:a9: f3:f9:e3:f1:4f:41:3f:6a:96:e0:32:b1:a0:3a:5e: 0e:54:79:45:88:3f:b1:bd:7f:c6:f1:a1:87:b7:4a: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9D:2B:A3:85:C9:6E:DE:39:B3:0D:1C:C6:72:52:EB:82:3B:06:23 X509v3 Authority Key Identifier: keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:92:1f:4b:47:bb:f1:0b:e8:4c:80:05:c1:df:02:b9:19:87: 6e:3a:d4:78:77:81:19:50:ee:c4:58:97:6a:c6:22:5a:7a:1a: ab:e3:8c:40:8c:cf:05:ac:66:d5:0c:98:f0:1b:38:c8:cf:84: 24:57:73:42:2d:63:d6:08:7d:42:5d:7e:b9:c9:e4:ed:3c:79: 74:0b:17:56:3b:aa:8b:5a:1d:6e:69:74:0d:94:d8:e3:87:40: 24:83:80:79:2d:e0:46:ce:21:5a:20:f6:1a:e0:b5:92:ce:19: 2d:b6:ea:c4:c7:4a:0f:f1:33:3d:b0:c1:26:c4:84:3c:43:d5: 4d:82:ce:d2:03:d1:3a:46:11:54:c3:3e:89:9d:87:d2:08:f5: 38:c6:25:19:a1:e0:a4:99:47:63:d7:cb:34:fe:59:ca:47:71: ce:db:d9:f4:28:b0:6c:93:ed:20:9c:2f:17:0a:84:7c:ad:1a: 10:37:bb:ee:49:6e:e5:a5:49:09:b7:a2:75:6a:5b:42:c4:0d: 30:59:4b:68:28:1e:79:70:fc:7b:3d:d1:eb:a0:7c:68:b0:58: 88:11:e4:7a:c5:ba:d3:fa:e7:5f:8c:11:29:32:35:ac:11:55: d2:04:60:8d:2e:1e:45:f4:ce:91:2a:0f:e0:a1:cf:53:a0:f7: 52:d8:c6:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QzIxMTAvBgNVBAUTKDM4ODVGOUQyRkQwODYwMjgzQjU1MzgxRjFDNEY0QTVB M0ExRUVGM0YwHhcNMjYwMzI1MDQwNzE3WhcNMjYwNDAxMDQwNzE3WjAYMRYwFAYD VQQDEw02OWMzNWY3NS01N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGXgXJ+1D+5NqB+dGX9q5BpJKGLIZCBdgbVZQT6Lkiluu/QB5jCpC1lw9eMd BmWOVgwRZ5J5DtsbPYPFe44x6LZYeIYM2MkOrWKgtmJld5nrnTXDayKh41Yu8dBO q1GxdkFi2QYxBDDePdOtchOJfF+BqtBOccHrsne3njq8Xzfyd0+2PfUBqFcWgWeI axtO0IBohPVL7/EcJzxSwdWqZG7r0iLQ/nwtKXfbMtivdNaO8IawZEZVVPCEPgbv er4qTOEf9AYhrwwHBtzMbcJsWW+7dJ8NreS0Xtx/Lgjnj6nz+ePxT0E/apbgMrGg Ol4OVHlFiD+xvX/G8aGHt0oGfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAidK6OF yW7eObMNHMZyUuuCOwYjMB8GA1UdIwQYMBaAFDiF+dL9CGAoO1U4HxxPSlo6Hu8/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdDMi9COTJCRkFENDA1 RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlDZzdWVGdmSEU5S1dqb2U3 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JWDUwdjBJWUNnN1ZUZ2ZIRTlLV2pvZTd6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdDMi9COTJCRkFENDA1RUIxMUVGOTU2QkQ2NDNDNEY5QUUwMi9PSVg1MHYwSVlD ZzdWVGdmSEU5S1dqb2U3ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABpIfS0e78QvoTIAFwd8CuRmHbjrUeHeBGVDuxFiXasYiWnoaq+OMQIzPBaxm 1QyY8Bs4yM+EJFdzQi1j1gh9Ql1+ucnk7Tx5dAsXVjuqi1odbml0DZTY44dAJIOA eS3gRs4hWiD2GuC1ks4ZLbbqxMdKD/EzPbDBJsSEPEPVTYLO0gPROkYRVMM+iZ2H 0gj1OMYlGaHgpJlHY9fLNP5ZykdxztvZ9CiwbJPtIJwvFwqEfK0aEDe77klu5aVJ CbeidWpbQsQNMFlLaCgeeXD8ez3R66B8aLBYiBHkesW60/rnX4wRKTI1rBFV0gRg jS4eRfTOkSoP4KHPU6D3UtjGGw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:05 2026 by rpki-client