$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json) Hash identifier: O+sZ9B5if2N2UdvJkwwha1sHScJ6br753f5nLZa73KE= Subject key identifier: 2E:75:43:D3:D7:06:D8:C2:BE:D7:6B:20:77:80:D0:9C:8B:AF:F7:9A Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Certificate serial: 3786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft Manifest number: 366C Signing time: Thu 26 Mar 2026 14:24:08 +0000 Manifest this update: Thu 26 Mar 2026 14:24:07 +0000 Manifest next update: Thu 02 Apr 2026 14:24:07 +0000 Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: zFt0R3GXsBcEtCPI36AnRxZJqNR0s8o6xu70358HQdY=) 2: CBD7334E244611F1B0E42AFABC833773.roa (hash: 6ovdfI0hGMzPgI5hb5h5nj3tMVrHJBrl47DgO64TNdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14214 (0x3786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61 Validity Not Before: Mar 26 14:24:07 2026 GMT Not After : Apr 2 14:24:07 2026 GMT Subject: CN=69c54188-3b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:d4:31:86:42:a7:cc:99:f9:64:31:0a:fb: e3:71:41:46:13:8b:a4:57:2c:f3:85:bb:b8:c5:15: bc:a7:22:d7:70:59:20:ab:41:90:7a:13:5a:5c:9a: ff:a2:24:ef:44:28:51:1b:07:38:13:85:2e:41:70: 9d:d2:a3:3b:ac:66:ea:2f:61:03:c6:cd:f1:2a:28: d0:81:45:d6:a4:0e:ac:e6:e5:82:b7:5d:00:72:22: 68:7b:9f:0d:d6:d3:75:5f:0a:2e:b0:bf:b1:43:b1: c3:cb:cc:25:6c:f3:0d:bd:63:b6:aa:05:7c:cd:bb: 91:12:04:cc:5d:df:7d:1d:d5:44:24:d0:ee:45:2f: b8:f1:bc:18:cf:d4:68:a1:1b:0e:73:e1:4b:d9:41: f8:b9:8d:17:7d:39:c7:ff:9f:5d:9b:c7:63:85:37: 2b:04:50:8b:e5:96:1c:09:78:07:8b:ee:c2:49:c7: ba:87:f5:7f:5b:07:44:de:13:cf:4e:6d:ac:d3:cd: 53:d7:74:0f:17:55:1e:05:1b:9d:c0:4c:98:50:76: dc:52:c9:4e:02:da:77:72:c8:aa:b6:4e:c9:a1:38: 44:28:8f:a4:1b:70:1e:9a:0e:90:af:0c:04:8a:de: 0d:75:88:36:d8:55:22:cd:e7:0f:77:a6:ba:e0:b1: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:75:43:D3:D7:06:D8:C2:BE:D7:6B:20:77:80:D0:9C:8B:AF:F7:9A X509v3 Authority Key Identifier: keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:92:ec:58:ab:b2:ec:d1:61:fd:c3:51:05:72:b2:44:21:cd: d7:e8:52:a8:23:39:82:f4:5e:22:8a:cf:04:96:7a:02:a9:68: d5:5a:a1:ac:b2:19:2a:63:af:70:7b:0a:f3:20:d9:fd:df:59: 9a:56:6e:d8:36:27:41:b9:0f:1c:42:02:41:2e:6c:86:e5:50: c5:ca:92:f6:66:c3:fd:43:02:5c:25:f6:fd:4d:22:94:74:b2: 40:e7:63:51:a5:de:5d:9d:3a:ad:2b:ee:f1:7b:f5:58:d3:ad: 5f:e6:f3:f4:3e:0e:c6:5e:08:a4:cf:b8:36:95:01:6b:81:31: 80:f6:8b:98:54:99:29:31:ae:99:a2:f6:82:f1:a5:c5:72:14: 61:51:42:ab:11:25:32:f8:3d:e3:bd:4e:19:7e:f7:09:5c:a9: 10:7d:e1:5b:a5:23:be:3f:3b:06:c3:1e:d6:95:0d:e1:e8:5c: b3:99:08:c5:75:3d:95:f3:bd:8c:14:cb:c8:74:87:0b:54:10: 24:af:df:05:a6:88:cd:c0:6a:17:55:fb:92:85:99:c3:d7:79: c6:62:fb:a9:b9:88:0a:54:61:2d:1f:fc:4d:58:11:19:36:97: df:b6:1b:b4:63:1f:94:f5:14:39:5a:a2:0c:88:d2:ca:f9:47: 0d:ac:77:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICN4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDRUQxMTAvBgNVBAUTKDNBOUUwODQxNjg1N0U1NzQ1N0MzOEY1MzZFMEQ2RUIy MzZERkZCNjEwHhcNMjYwMzI2MTQyNDA3WhcNMjYwNDAyMTQyNDA3WjAYMRYwFAYD VQQDEw02OWM1NDE4OC0zYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNPUMYZCp8yZ+WQxCvvjcUFGE4ukVyzzhbu4xRW8pyLXcFkgq0GQehNaXJr/ oiTvRChRGwc4E4UuQXCd0qM7rGbqL2EDxs3xKijQgUXWpA6s5uWCt10AciJoe58N 1tN1XwousL+xQ7HDy8wlbPMNvWO2qgV8zbuREgTMXd99HdVEJNDuRS+48bwYz9Ro oRsOc+FL2UH4uY0XfTnH/59dm8djhTcrBFCL5ZYcCXgHi+7CSce6h/V/WwdE3hPP Tm2s081T13QPF1UeBRudwEyYUHbcUslOAtp3csiqtk7JoThEKI+kG3Aemg6QrwwE it4NdYg22FUizecPd6a64LHNKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC51Q9PX BtjCvtdrIHeA0JyLr/eaMB8GA1UdIwQYMBaAFDqeCEFoV+V0V8OPU24NbrI23/th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NFRC84M0Y1NkRBQzFE ODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVYUlh3NDlUYmcxdXNqYmYt MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09wNElRV2hYNVhSWHc0OVRiZzF1c2piZi0yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NFRC84M0Y1NkRBQzFEODQxMUUyOTEwNjg5REEwOEIwMkNEMi9PcDRJUVdoWDVY Ulh3NDlUYmcxdXNqYmYtMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ5LsWKuy7NFh/cNRBXKyRCHN1+hSqCM5gvReIorPBJZ6Aqlo1VqhrLIZKmOv cHsK8yDZ/d9ZmlZu2DYnQbkPHEICQS5shuVQxcqS9mbD/UMCXCX2/U0ilHSyQOdj UaXeXZ06rSvu8Xv1WNOtX+bz9D4Oxl4IpM+4NpUBa4ExgPaLmFSZKTGumaL2gvGl xXIUYVFCqxElMvg9471OGX73CVypEH3hW6Ujvj87BsMe1pUN4ehcs5kIxXU9lfO9 jBTLyHSHC1QQJK/fBaaIzcBqF1X7koWZw9d5xmL7qbmIClRhLR/8TVgRGTaX37Yb tGMflPUUOVqiDIjSyvlHDax3Zw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:24:05 2026 by rpki-client