$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: yRPTuyGwBGa7WH/iryOWfj4zkTeyWw08AQ+smk1LcrE= Subject key identifier: 39:E7:E9:79:FA:06:E9:96:44:3B:34:79:D5:D3:CE:DC:02:5E:43:44 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: A4 Signing time: Wed 25 Mar 2026 06:32:10 +0000 Manifest this update: Wed 25 Mar 2026 06:32:09 +0000 Manifest next update: Wed 01 Apr 2026 06:32:09 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: s5lp3NDvDW4Ba3Hv84UX59dBgcdycRM8PWlJ5W9GUjc=) 2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Mar 25 06:32:09 2026 GMT Not After : Apr 1 06:32:09 2026 GMT Subject: CN=69c3816a-6d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:c3:97:1b:38:b2:64:c8:8b:62:1f:9c:f0: 8b:12:de:80:78:30:f6:91:76:5f:45:a3:7c:a1:e8: 4b:f7:b4:d6:e7:d7:f5:95:20:a1:ca:a0:82:7d:60: 77:c9:67:dd:27:0b:e7:92:30:e5:8c:92:5a:c8:96: d3:dc:ad:b9:ce:fb:34:0d:f3:0f:52:78:88:83:d9: 6d:f9:3b:94:ce:e8:f3:e3:a2:8f:d9:32:d7:65:5a: cf:2f:d0:cd:0e:3d:47:74:e1:32:a0:2b:e2:f9:72: e5:2b:db:f4:fe:30:48:05:3a:0b:e5:80:67:c8:83: 5a:41:39:2d:a0:b3:cd:6b:3b:06:91:74:a5:a5:5c: e9:d9:93:5f:53:c2:05:1d:f1:9c:68:0d:ef:74:2b: 09:53:85:9b:c0:d0:1e:72:6a:e1:9d:4e:f5:b0:e3: 48:6b:ff:7b:df:10:48:31:83:70:c7:96:ee:78:93: cc:83:f7:5b:e5:70:8c:ef:a4:eb:9f:d6:c0:ba:18: a4:cd:73:58:17:e5:da:e4:37:01:8f:7e:0d:50:de: 89:62:da:1a:5d:1f:8a:fa:a3:42:a1:7d:32:83:36: f2:bf:ff:4b:0e:20:0c:fd:4c:5b:ed:48:1c:34:79: 43:39:fc:e7:be:92:48:bd:45:09:48:4e:75:fa:5a: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E7:E9:79:FA:06:E9:96:44:3B:34:79:D5:D3:CE:DC:02:5E:43:44 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3f:8e:71:be:77:ba:e9:45:4a:ab:88:6c:cd:2f:8a:8a:ea: 87:ab:37:94:e5:37:2c:63:d5:6c:9b:d2:dc:65:04:f8:de:07: 2d:44:a6:48:a9:d6:fc:a4:fc:cd:14:15:8a:9b:b8:a7:86:d9: 27:d7:1d:c7:75:8d:19:4e:bd:f1:78:ec:15:04:c9:ed:d6:77: 5e:2e:91:db:7c:7d:ed:97:4e:b2:a8:d7:fa:82:ca:0d:09:a1: a7:48:f9:b1:12:f0:92:4a:6a:64:a1:6d:f8:ec:e1:6e:45:cd: 97:4f:00:13:2d:eb:fe:cc:a0:34:83:86:ce:b9:ce:99:a0:58: fd:30:53:67:92:0e:2a:dd:23:83:6f:85:79:b6:53:82:24:e4: a5:92:2e:18:fc:1b:62:c4:c5:8b:76:bd:ce:1e:04:22:ca:2f: c8:30:3c:c8:86:1f:5a:0b:fd:3c:1b:2a:09:25:03:96:74:4e: 96:88:45:72:8f:cd:55:11:09:3d:c9:eb:d6:45:db:12:9e:8e: 45:03:db:11:4e:68:32:99:15:88:f1:08:2c:92:15:c0:78:aa: 75:88:9c:52:c2:2c:28:bd:40:67:3e:d8:1b:fe:6a:62:1a:91: f4:c0:bb:46:f3:d1:b8:4e:44:bc:59:f6:a8:e0:de:c9:77:d7: 8d:17:0a:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQyQ0ExMTAvBgNVBAUTKERDRUI5QjZEODNGQjAyREM0NUU5MjAzNTM4QTVDOEFG NkY5NDFGQTkwHhcNMjYwMzI1MDYzMjA5WhcNMjYwNDAxMDYzMjA5WjAYMRYwFAYD VQQDEw02OWMzODE2YS02ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjl7Dlxs4smTIi2IfnPCLEt6AeDD2kXZfRaN8oehL97TW59f1lSChyqCCfWB3 yWfdJwvnkjDljJJayJbT3K25zvs0DfMPUniIg9lt+TuUzujz46KP2TLXZVrPL9DN Dj1HdOEyoCvi+XLlK9v0/jBIBToL5YBnyINaQTktoLPNazsGkXSlpVzp2ZNfU8IF HfGcaA3vdCsJU4WbwNAecmrhnU71sONIa/973xBIMYNwx5bueJPMg/db5XCM76Tr n9bAuhikzXNYF+Xa5DcBj34NUN6JYtoaXR+K+qNCoX0ygzbyv/9LDiAM/Uxb7Ugc NHlDOfznvpJIvUUJSE51+lrScQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnn6Xn6 BumWRDs0edXTztwCXkNEMB8GA1UdIwQYMBaAFNzrm22D+wLcRekgNTilyK9vlB+p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDJDQS8xMjM4NEFERTM1 NDcxMUYwODEwM0JFMjRDNEY5QUUwMi8zT3ViYllQN0F0eEY2U0ExT0tYSXIyLVVI NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDJDQS8xMjM4NEFERTM1NDcxMUYwODEwM0JFMjRDNEY5QUUwMi8zT3ViYllQN0F0 eEY2U0ExT0tYSXIyLVVINmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAID+Ocb53uulFSquIbM0viorqh6s3lOU3LGPVbJvS3GUE+N4HLUSmSKnW/KT8 zRQVipu4p4bZJ9cdx3WNGU698XjsFQTJ7dZ3Xi6R23x97ZdOsqjX+oLKDQmhp0j5 sRLwkkpqZKFt+OzhbkXNl08AEy3r/sygNIOGzrnOmaBY/TBTZ5IOKt0jg2+FebZT giTkpZIuGPwbYsTFi3a9zh4EIsovyDA8yIYfWgv9PBsqCSUDlnROlohFco/NVREJ Pcnr1kXbEp6ORQPbEU5oMpkViPEILJIVwHiqdYicUsIsKL1AZz7YG/5qYhqR9MC7 RvPRuE5EvFn2qODeyXfXjRcK9A== -----END CERTIFICATE-----Generated at Thu Mar 26 14:08:39 2026 by rpki-client