$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft File: oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json) Hash identifier: fEuD6xntVzNwgSulhy1JCj+3umHN/eX0vM8pY/Wdrsg= Subject key identifier: 06:03:33:91:85:08:D4:5B:2C:A4:07:BB:63:49:E9:4C:45:29:98:E5 Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft Manifest number: A3 Signing time: Wed 25 Mar 2026 06:28:48 +0000 Manifest this update: Wed 25 Mar 2026 06:28:47 +0000 Manifest next update: Wed 01 Apr 2026 06:28:47 +0000 Files and hashes: 1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: kGXxqZLs+hQhuod3mWhcC1kTQLuw5UtYmzNwyA7N+nM=) 2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: VGC3s72kCEqeNjrQgkhJsVpMANzKAnqf/Eot+fUvV1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: Mar 25 06:28:47 2026 GMT Not After : Apr 1 06:28:47 2026 GMT Subject: CN=69c380a0-6b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:a0:4c:cc:fe:98:e0:7b:14:8c:2f:17:9b: 46:72:17:7d:4f:81:8f:e8:01:b7:f8:68:bf:82:48: fd:71:75:38:74:ae:fd:c0:39:60:23:2c:f5:a0:4a: 57:ef:0f:b7:2d:6a:d3:1c:14:71:c4:c9:b4:21:6d: 8f:1a:62:df:db:5f:6a:e8:c7:8b:1e:db:84:c2:7f: 1e:ce:08:e7:87:97:f3:63:76:89:69:e1:c6:9e:89: 65:3d:68:fd:57:da:34:d2:d7:ad:7b:b4:d1:c7:c6: 2a:60:bc:e2:10:40:1e:93:f0:8a:b4:f2:44:8d:14: 19:3e:90:c3:55:4c:84:75:7d:2b:e7:f3:03:28:bc: 01:9c:5d:cb:dc:85:20:a3:17:56:f3:dd:8b:a4:1e: 5a:74:76:aa:ef:09:58:a2:5f:b4:0a:a2:1c:08:7f: fb:35:2a:e7:57:e7:29:c1:66:15:0b:38:4c:63:55: b2:62:e0:50:6e:f9:f2:f7:c2:dd:80:df:dd:89:58: 0d:7a:a5:3d:c4:f9:06:bf:5d:18:60:8b:40:92:9b: 11:e1:90:e9:fe:df:c4:ff:a6:9d:dd:4b:3a:55:13: 85:71:30:29:e9:c4:f8:06:68:4a:8b:11:3c:94:5e: fe:b4:1f:3a:7e:65:a7:da:60:34:42:e3:22:d1:47: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:03:33:91:85:08:D4:5B:2C:A4:07:BB:63:49:E9:4C:45:29:98:E5 X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f1:c8:58:b7:db:d9:3e:b1:bf:83:5c:b7:83:99:32:e7:fa: 52:a8:9c:57:8a:33:13:c7:f4:f9:e1:0e:f1:0f:f3:ab:c9:24: a6:15:f4:7b:08:9d:f1:14:96:f5:5f:81:6e:0b:b5:cb:84:9c: dc:fc:24:e8:02:68:36:46:a1:f9:66:03:87:d1:da:ca:17:33: d6:40:6f:74:1b:ab:ce:5f:67:46:2d:aa:f4:90:b7:9d:eb:f1: 80:1f:ed:03:74:92:22:48:c9:9f:2f:86:60:f3:35:3d:03:30: 6a:f5:2d:33:cd:28:38:a6:73:15:8a:39:f9:7e:a3:ed:d8:5b: cb:7f:f9:a9:20:72:7b:c0:fd:61:b8:39:6e:eb:0c:85:2b:09: 2f:64:d9:ba:68:a0:72:f5:8c:d8:67:c3:0a:83:56:66:e3:9f: 3a:f2:0e:64:e4:9d:68:d6:45:20:4c:80:b4:9e:7d:4b:13:ee: f1:20:64:00:d4:f1:c4:b4:2e:fb:b1:96:00:42:5a:f2:70:8c: a9:bd:f4:4e:87:13:47:af:1f:64:bb:e5:55:29:17:5b:d6:0f: 81:3b:b6:4a:17:b6:f6:ec:68:80:99:60:8f:bc:0d:21:a1:9f: 19:d0:94:53:19:2c:27:b9:d8:d5:6a:d1:1c:ab:f3:85:7a:d8: 32:73:a5:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA1QTAxMTAvBgNVBAUTKEEwRjlFQjY5ODFEQzcyQTI3OEIxODUyODk5MDZDMUUx MUMwQjM1RjEwHhcNMjYwMzI1MDYyODQ3WhcNMjYwNDAxMDYyODQ3WjAYMRYwFAYD VQQDEw02OWMzODBhMC02YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUigTMz+mOB7FIwvF5tGchd9T4GP6AG3+Gi/gkj9cXU4dK79wDlgIyz1oEpX 7w+3LWrTHBRxxMm0IW2PGmLf219q6MeLHtuEwn8ezgjnh5fzY3aJaeHGnollPWj9 V9o00tete7TRx8YqYLziEEAek/CKtPJEjRQZPpDDVUyEdX0r5/MDKLwBnF3L3IUg oxdW892LpB5adHaq7wlYol+0CqIcCH/7NSrnV+cpwWYVCzhMY1WyYuBQbvny98Ld gN/diVgNeqU9xPkGv10YYItAkpsR4ZDp/t/E/6ad3Us6VROFcTAp6cT4BmhKixE8 lF7+tB86fmWn2mA0QuMi0UcUXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYDM5GF CNRbLKQHu2NJ6UxFKZjlMB8GA1UdIwQYMBaAFKD562mB3HKieLGFKJkGweEcCzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDVBMC85QzUzNzE3ODJG NjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2NxSjRzWVVvbVFiQjRSd0xO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDVBMC85QzUzNzE3ODJGNjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2Nx SjRzWVVvbVFiQjRSd0xOZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnfHIWLfb2T6xv4Nct4OZMuf6UqicV4ozE8f0+eEO8Q/zq8kkphX0ewid8RSW 9V+Bbgu1y4Sc3Pwk6AJoNkah+WYDh9Hayhcz1kBvdBurzl9nRi2q9JC3nevxgB/t A3SSIkjJny+GYPM1PQMwavUtM80oOKZzFYo5+X6j7dhby3/5qSBye8D9Ybg5busM hSsJL2TZumigcvWM2GfDCoNWZuOfOvIOZOSdaNZFIEyAtJ59SxPu8SBkANTxxLQu +7GWAEJa8nCMqb30TocTR68fZLvlVSkXW9YPgTu2She29uxogJlgj7wNIaGfGdCU UxksJ7nY1WrRHKvzhXrYMnOlnA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:39 2026 by rpki-client