$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft File: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json) Hash identifier: afI+jifi4uGp/ymWhtFrDJdT3LMXwibJgVILT8GMk/8= Subject key identifier: 33:EA:F2:C7:F4:1E:B9:73:6E:B7:32:6E:66:2A:CF:3E:39:DD:B4:35 Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED Certificate issuer: /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft Manifest number: 01BB Signing time: Tue 24 Mar 2026 17:32:52 +0000 Manifest this update: Tue 24 Mar 2026 17:32:52 +0000 Manifest next update: Tue 31 Mar 2026 17:32:52 +0000 Files and hashes: 1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: u5nLt21XIUavyy7YoSrP+OEPaVoBzsDP+R4QBn9I8BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED Validity Not Before: Mar 24 17:32:52 2026 GMT Not After : Mar 31 17:32:52 2026 GMT Subject: CN=69c2cac4-cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:c3:c0:b1:29:a6:03:43:ad:5b:88:08:dd: cd:ff:95:7f:9f:f5:10:c0:87:ed:24:99:49:b2:5b: 87:19:ea:30:96:2f:03:a0:19:56:1f:d1:7b:63:fc: d1:a1:e1:e4:d3:76:60:2e:d1:a6:82:6b:a5:08:b4: 27:6f:79:a1:07:e7:4c:16:25:a4:73:0e:82:32:b6: 8b:70:51:03:f9:f2:68:87:57:65:61:a2:5b:52:83: 46:fb:70:2c:35:c2:f5:33:c3:18:5f:36:bb:ce:4a: a9:ea:6a:ca:60:36:74:59:d9:03:03:87:4b:67:7a: 95:34:28:7b:c5:c8:c4:9e:fd:14:b1:9f:79:5d:00: 50:22:b8:d9:d6:7b:94:ce:d1:6c:79:dc:55:32:d1: f4:b9:7f:5c:d0:47:85:1f:93:99:70:e8:41:b7:04: a5:a1:3c:64:d9:65:da:18:31:fe:15:73:8a:9d:45: e9:38:be:b5:bb:50:7b:5b:b0:d0:f5:6f:ce:bb:25: f7:35:1b:a4:de:18:f0:0c:ca:26:a1:14:71:34:41: 7e:fc:79:ae:6d:b5:04:ef:14:dc:c7:18:1f:10:3a: b2:a7:10:fd:42:5f:98:2f:6d:25:e7:c9:34:65:03: 8f:f6:0d:bc:f8:88:29:98:e6:c2:1e:b2:a5:a6:d6: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:F2:C7:F4:1E:B9:73:6E:B7:32:6E:66:2A:CF:3E:39:DD:B4:35 X509v3 Authority Key Identifier: keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b7:74:18:a4:5a:17:eb:42:1b:8d:82:9d:44:10:4f:11:5f: 29:e5:6b:0e:6b:bd:ef:eb:bf:18:40:20:76:46:09:93:79:82: f9:a1:aa:50:cb:9c:35:eb:0e:7c:21:da:e8:79:de:2f:d3:fc: 6e:a9:72:a5:21:24:6e:31:3a:73:83:3a:58:44:21:d2:3c:94: f8:4b:a8:a2:39:5b:82:59:0e:65:71:00:2d:83:74:95:05:9d: 52:50:96:a1:79:c3:d4:3e:a6:87:8b:fa:fc:bb:ed:bb:84:29: 76:13:f8:3a:62:45:83:94:6f:28:f3:13:8b:83:bd:97:5d:96: 8a:5d:b7:c9:fb:17:66:3c:09:6a:7d:2d:4b:4b:6c:4b:b4:53: 66:58:18:df:4b:7f:61:93:28:ef:9f:5a:54:6e:d6:36:06:47: 3d:45:84:ed:62:39:fb:0e:1d:4f:06:9d:97:f6:b8:71:fc:e8: 43:2f:07:1e:7a:81:3f:66:40:6b:5b:11:e3:b5:c5:47:89:be: f5:84:ed:76:f9:2b:aa:1a:9f:56:4e:02:d9:9b:06:16:a8:ea: 12:3e:2d:54:97:61:7f:f8:19:74:24:dd:80:bf:db:f4:03:77: 6e:f9:db:b6:5c:e0:64:87:18:3c:30:c5:c4:f6:40:c5:16:c7: ae:68:4c:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEExRTRGMDlEMkY0NzA3ODY3Q0ZBRTI3RThGMTMyMzY5 RkI5N0QwRUQwHhcNMjYwMzI0MTczMjUyWhcNMjYwMzMxMTczMjUyWjAYMRYwFAYD VQQDEw02OWMyY2FjNC1jZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16fDwLEppgNDrVuICN3N/5V/n/UQwIftJJlJsluHGeowli8DoBlWH9F7Y/zR oeHk03ZgLtGmgmulCLQnb3mhB+dMFiWkcw6CMraLcFED+fJoh1dlYaJbUoNG+3As NcL1M8MYXza7zkqp6mrKYDZ0WdkDA4dLZ3qVNCh7xcjEnv0UsZ95XQBQIrjZ1nuU ztFsedxVMtH0uX9c0EeFH5OZcOhBtwSloTxk2WXaGDH+FXOKnUXpOL61u1B7W7DQ 9W/OuyX3NRuk3hjwDMomoRRxNEF+/HmubbUE7xTcxxgfEDqypxD9Ql+YL20l58k0 ZQOP9g28+IgpmObCHrKlptbIWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPq8sf0 HrlzbrcybmYqzz453bQ1MB8GA1UdIwQYMBaAFKHk8J0vRweGfPrifo8TI2n7l9Dt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81MDI5NTU0QzhB NzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0WjgtdUotanhNamFmdVgw TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29lVHduUzlIQjRaOC11Si1qeE1qYWZ1WDBPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81MDI5NTU0QzhBNzkxMUVFODU0NDE5MThDNEY5QUUwMi9vZVR3blM5SEI0 WjgtdUotanhNamFmdVgwTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS7d0GKRaF+tCG42CnUQQTxFfKeVrDmu97+u/GEAgdkYJk3mC+aGqUMucNesO fCHa6HneL9P8bqlypSEkbjE6c4M6WEQh0jyU+EuoojlbglkOZXEALYN0lQWdUlCW oXnD1D6mh4v6/Lvtu4QpdhP4OmJFg5RvKPMTi4O9l12Wil23yfsXZjwJan0tS0ts S7RTZlgY30t/YZMo759aVG7WNgZHPUWE7WI5+w4dTwadl/a4cfzoQy8HHnqBP2ZA a1sR47XFR4m+9YTtdvkrqhqfVk4C2ZsGFqjqEj4tVJdhf/gZdCTdgL/b9AN3bvnb tlzgZIcYPDDFxPZAxRbHrmhMYA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:05 2026 by rpki-client