$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft File: OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json) Hash identifier: klqBNkerT9MoA1JfTbpQN7Iib5pnYJFyiBfYlO6xAJk= Subject key identifier: 52:6A:82:A0:0B:D1:3D:F3:F7:AC:CB:F5:BB:D6:85:8B:51:41:B2:0F Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 Certificate issuer: /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft Manifest number: 0B5D Signing time: Tue 24 Mar 2026 19:24:14 +0000 Manifest this update: Tue 24 Mar 2026 19:24:13 +0000 Manifest next update: Tue 31 Mar 2026 19:24:13 +0000 Files and hashes: 1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: 9RyjgHvWAUApPMJirDGpfOOmeI+LyJl5CT7nMpIGTPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0 Validity Not Before: Mar 24 19:24:13 2026 GMT Not After : Mar 31 19:24:13 2026 GMT Subject: CN=69c2e4de-3391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:4c:70:dc:0c:e2:89:66:de:73:d5:2a:09: bb:41:a1:0e:46:26:38:01:6e:7b:5d:86:48:e2:aa: db:25:fd:ca:92:f4:10:b1:35:8c:c4:26:73:ea:e1: 75:ef:3a:68:43:6f:06:d4:bd:5d:69:dd:d8:f2:ff: 36:ce:37:ee:d1:a2:7e:12:96:bb:35:af:04:ad:18: 33:31:25:f1:42:8d:2f:fc:e1:82:f0:86:7f:2b:ba: 5e:80:78:4f:80:d3:bc:70:99:ba:42:44:45:23:25: 22:41:16:cd:da:16:e4:a2:2f:4f:70:a4:e9:4d:b3: 96:7f:43:b1:20:ca:f9:dd:a9:8c:fc:fc:1f:b5:39: 91:99:02:49:9d:5b:e1:63:0e:f2:fa:ad:e0:75:3f: c1:ba:20:d6:b2:2e:3e:8a:9d:50:0e:3b:f3:d4:a2: 29:17:7d:7f:75:43:71:ea:46:f7:27:22:70:c9:2f: e7:ed:02:ec:cc:55:49:31:7d:08:99:dc:d2:bf:bb: b6:e2:31:e2:14:17:57:25:f9:f1:08:cb:6e:b9:f9: 0e:66:6c:a0:4c:ab:97:5f:c6:dd:eb:0c:b4:25:95: a2:5f:ab:3d:9c:ad:a5:0b:3a:12:aa:b8:80:b6:d5: c2:9e:65:80:8e:07:f4:a9:4f:7d:e0:d9:50:a8:9d: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6A:82:A0:0B:D1:3D:F3:F7:AC:CB:F5:BB:D6:85:8B:51:41:B2:0F X509v3 Authority Key Identifier: keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e8:83:22:8c:6d:85:6a:51:fd:20:d0:58:26:0d:b7:1f:f8: 35:81:9c:8d:69:66:de:1a:84:d7:42:bb:ff:f0:c0:d2:2f:e1: bd:53:c6:cc:01:0b:f4:d2:ee:f5:3d:68:1f:e5:58:15:f9:64: 0d:0c:f0:81:ee:b3:9c:92:5d:30:a2:dd:cb:98:35:97:2b:b3: 50:71:52:52:4b:4c:d9:eb:1e:7c:47:6f:3c:12:73:60:84:dc: 9a:60:31:2e:5b:e3:ea:b1:06:2a:b8:7c:e6:4c:1a:f4:db:3e: 1d:bd:26:e0:03:0d:6a:0f:9d:51:67:0c:9c:4c:eb:46:3c:c0: b8:39:a3:d1:1b:a4:46:f4:de:f6:f2:d3:38:aa:4f:dd:a0:e6: 52:be:94:e1:f2:fa:7c:2c:e8:72:ec:28:fc:e2:27:0c:12:6f: 36:23:41:2a:11:22:a5:65:df:bf:5f:36:9c:8e:1d:ec:6e:75: 8c:01:1d:0a:6b:43:b3:f2:ab:95:24:48:d0:91:78:76:9b:50: e7:14:dc:eb:db:fa:42:c3:38:54:84:56:3e:35:62:0e:11:63: 45:63:7b:34:b8:95:c4:5c:6f:76:de:71:05:c4:b7:ed:3c:5b: 21:1c:c4:7d:c9:a0:ba:76:44:25:d0:8b:19:9c:02:80:24:b5: 1b:c3:21:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1NjY0QjNENzlB MkQ0NjQ2RTAwHhcNMjYwMzI0MTkyNDEzWhcNMjYwMzMxMTkyNDEzWjAYMRYwFAYD VQQDEw02OWMyZTRkZS0zMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hNMcNwM4olm3nPVKgm7QaEORiY4AW57XYZI4qrbJf3KkvQQsTWMxCZz6uF1 7zpoQ28G1L1dad3Y8v82zjfu0aJ+Epa7Na8ErRgzMSXxQo0v/OGC8IZ/K7pegHhP gNO8cJm6QkRFIyUiQRbN2hbkoi9PcKTpTbOWf0OxIMr53amM/PwftTmRmQJJnVvh Yw7y+q3gdT/BuiDWsi4+ip1QDjvz1KIpF31/dUNx6kb3JyJwyS/n7QLszFVJMX0I mdzSv7u24jHiFBdXJfnxCMtuufkOZmygTKuXX8bd6wy0JZWiX6s9nK2lCzoSqriA ttXCnmWAjgf0qU994NlQqJ1t6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJqgqAL 0T3z96zL9bvWhYtRQbIPMB8GA1UdIwQYMBaAFDmJETABBNfFizJuVmSz15otRkbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4V0xNbTVXWkxQWG1pMUdS dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Za1JNQUVFMThXTE1tNVdaTFBYbWkxR1J1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFFRTE4 V0xNbTVXWkxQWG1pMUdSdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmuiDIoxthWpR/SDQWCYNtx/4NYGcjWlm3hqE10K7//DA0i/hvVPGzAEL9NLu 9T1oH+VYFflkDQzwge6znJJdMKLdy5g1lyuzUHFSUktM2esefEdvPBJzYITcmmAx Llvj6rEGKrh85kwa9Ns+Hb0m4AMNag+dUWcMnEzrRjzAuDmj0RukRvTe9vLTOKpP 3aDmUr6U4fL6fCzocuwo/OInDBJvNiNBKhEipWXfv182nI4d7G51jAEdCmtDs/Kr lSRI0JF4dptQ5xTc69v6QsM4VIRWPjViDhFjRWN7NLiVxFxvdt5xBcS37TxbIRzE fcmgunZEJdCLGZwCgCS1G8MhwQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:07 2026 by rpki-client